last executing test programs: 27m3.930845319s ago: executing program 32 (id=208): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5) recvmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 26m43.097781192s ago: executing program 33 (id=668): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/76, 0x4c}, 0x3}], 0x1, 0x40000030, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 26m42.309942108s ago: executing program 34 (id=686): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 26m35.415727172s ago: executing program 35 (id=810): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x3}, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) 26m34.490167257s ago: executing program 36 (id=821): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x2750, &(0x7f0000000680)={0x0, 0x6e2, 0x10300, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x4, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 25m41.943832051s ago: executing program 37 (id=1802): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/29, 0x9}, 0x2}], 0x1, 0x12141, 0x0) 24m11.524528237s ago: executing program 38 (id=4460): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 23m50.596330205s ago: executing program 39 (id=4985): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 23m46.675549155s ago: executing program 40 (id=5056): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 23m16.174224635s ago: executing program 41 (id=5685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r1}) 22m4.657651332s ago: executing program 42 (id=7373): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x3) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd13381600000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r0, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) 20m59.762605561s ago: executing program 43 (id=9217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 20m46.226809086s ago: executing program 44 (id=9505): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000005700)=[{{&(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001300)="0000000035fdca249bf6ffffffffffffff556eab", 0x14}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) 6m15.135023399s ago: executing program 45 (id=25075): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TCFLSH(r5, 0x800455ca, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r5, 0x540a, 0x3) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 6m3.981098729s ago: executing program 46 (id=25130): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TCFLSH(r5, 0x800455ca, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r5, 0x540a, 0x3) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 5m33.032479413s ago: executing program 47 (id=25251): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TCFLSH(r5, 0x800455ca, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 5m23.165615208s ago: executing program 48 (id=25281): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TCFLSH(r5, 0x800455ca, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r5, 0x540a, 0x3) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 5m19.677381621s ago: executing program 49 (id=25290): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r5, 0x540a, 0x3) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 5m16.177789165s ago: executing program 50 (id=25299): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0xf) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TCFLSH(r4, 0x800455ca, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r5, 0x107, 0xb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r4, 0x540a, 0x3) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 3m51.305280391s ago: executing program 2 (id=26109): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYRES16=r1], 0x310) 3m51.224331996s ago: executing program 2 (id=26111): socket$inet6(0xa, 0x2, 0x0) open(&(0x7f0000000280)='.\x00', 0x80, 0x122) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) pipe2(&(0x7f0000001cc0), 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='status\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 3m51.138678321s ago: executing program 2 (id=26112): r0 = socket$kcm(0xa, 0x3, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1006}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x440b0) read$msr(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0xffffffffffffff93) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000006800010002000000fcffff7f000000000000000008000500"/40, @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) socket$netlink(0x10, 0x3, 0xb) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) read(r4, &(0x7f0000000240)=""/84, 0x54) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100100008004500003c000000000006907800000000ffffffff00004e22da720682b78e4a30f67b395bad86e6a7a7255c741a04875c845816828deedaba1b373133d11cc29457980f3ddd3624e4e45d45e7789f80a36a6f72021a175a206de935f20c496f764c71e41232e7255295b967ecfdebdadcd392c79ce2224c2c51987eca2ccbb16b6ec827e531c14765910618f3418bb739bd67f04e593d260c913dfd2ea152d795eaa2a2414d120aff3ce6dc16dcaf3cde5a2635239fdbfc255a5d53988b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0110000907800001e0c8f7f0000000000000001fe06e2d4c3d90000"], 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fsetxattr$system_posix_acl(r10, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)={{}, {0x1, 0xeb74a2f70adfd318}, [], {0x4, 0x7}, [], {0x10, 0xb}, {0x20, 0x3}}, 0x24, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) 3m50.830350779s ago: executing program 2 (id=26116): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000140)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00') pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 3m50.763796682s ago: executing program 2 (id=26117): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYBLOB="0000000000000000000000dddf8fb2d8474a81611f20253b5733937450fa14c2e54772d082cc4f36bd435b6a5c352ad11ebaf4bcdf713a16a60f15fbf451463b7867444a9baa42d6edebdbaead5e03d53248aa6cb6dbec3334594f3e998b17c6885c8f6bf6a79bc1f67debf5e1a9fc785b3e01e176751ef4721ae905e53ba029fc51040831ab57407fc7b9774fadf32ff04ed4811c3571f067ed54e53a36"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd6, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, @perf_config_ext={0x6, 0x5}, 0x14ce7, 0x100004, 0x0, 0x0, 0x400099, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1, 0xfc039, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x547b7e, 0x1, @perf_config_ext={0x80000000000006, 0xf60e}, 0x8810, 0x0, 0x43a1bd66, 0x4, 0x9, 0x1, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) pselect6(0x40, &(0x7f0000000100)={0x4, 0x4, 0x3, 0x0, 0x800, 0x0, 0x1}, 0x0, &(0x7f0000001200)={0x1f, 0x100000000, 0x0, 0x7, 0x1, 0x0, 0x0, 0x2000000000000000}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x4080) 3m50.614563351s ago: executing program 2 (id=26123): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x300c006, &(0x7f0000000400)={[{@subsystem='freezer'}, {@none}]}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) close(r2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 3m50.614327722s ago: executing program 51 (id=26123): mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x300c006, &(0x7f0000000400)={[{@subsystem='freezer'}, {@none}]}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) (async) close(r2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 3m24.310722314s ago: executing program 8 (id=26622): r0 = socket(0x26, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7ff, 0x6, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x60}}, 0x0) 3m24.141946564s ago: executing program 8 (id=26626): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TCFLSH(r5, 0x800455ca, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r5, 0x540a, 0x3) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 3m21.938706652s ago: executing program 8 (id=26672): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x3e, 0x23, 0x300}, {0x6, 0x44, 0xe, 0x86}]}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x1, &(0x7f00000018c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) unshare(0x22020600) r3 = socket(0x2d, 0x2, 0x0) bind$qrtr(r3, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newtfilter={0x50c, 0x2c, 0x800, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xffe0, 0xc}, {0x3, 0x6}, {0xfff7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_CT_ZONE_MASK={0x6, 0x5e, 0x4}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x24}, @TCA_FLOWER_KEY_UDP_SRC={0x6}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffff00, 0xffffffff, 0xff]}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x420, 0x2, [@TCA_CGROUP_POLICE={0x41c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xc5b}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0xe, 0x5, 0x5, 0x5, 0x0, 0xc, 0x7, 0xa4b8, 0xf4, 0x93d6, 0x7, 0x40, 0xf, 0x8, 0x7, 0x9, 0x6, 0x9, 0x5, 0x4, 0x5123df6d, 0x59300, 0x4, 0x6, 0x8, 0x401, 0xffffff48, 0x8, 0x542a, 0x7, 0x8, 0x1, 0x3, 0x0, 0x6, 0x4, 0xdc9a, 0x800003, 0x10000, 0xbe, 0x2, 0x5, 0x8, 0x3, 0x3, 0xffffff7f, 0xe96, 0x4e, 0x2000, 0x5, 0x6, 0x9, 0x10000, 0x7f, 0x7ff, 0x9, 0x4, 0x5, 0x1000, 0x6, 0x6, 0x100, 0xfffffff8, 0x8, 0x2, 0xa, 0xfffffff9, 0x6, 0x6, 0x7f, 0x9, 0x0, 0xd, 0x0, 0x4, 0x2, 0x8, 0x1, 0x6, 0x1ff, 0x3, 0x8, 0xffffff74, 0x6, 0x0, 0x80000001, 0x1ff, 0x1, 0x8000, 0x2, 0x6, 0x80000000, 0x0, 0x12000000, 0x1a, 0x8, 0x6, 0x1, 0x1, 0x1, 0x3, 0x5, 0x954, 0x7, 0xfff, 0x5, 0x6, 0xbc, 0x3, 0x8, 0x6, 0xe46e, 0x1000, 0x3, 0x9, 0xffffffff, 0x0, 0x7, 0x9, 0xf, 0xffffffff, 0x9, 0xd6bf, 0x8000, 0x0, 0xc4e, 0x9, 0x200, 0x3, 0x1, 0x0, 0xfffffff9, 0xffffff71, 0x8000, 0x7, 0x1ff, 0x101, 0x65cd1b62, 0xd, 0x3, 0x70, 0x6, 0x0, 0x2, 0x1, 0x7fff, 0x60, 0x5, 0x0, 0x7a, 0x7, 0x10000, 0xc, 0x1000, 0x200, 0x9, 0x8, 0xff, 0x3, 0x9, 0x408, 0x5, 0xfffffff9, 0x0, 0x1ff, 0x4a1, 0x8, 0x10001, 0x4, 0x4, 0x2, 0x0, 0xfffffff6, 0x1, 0x5e, 0x8, 0x9, 0x200, 0x40, 0xbe, 0x92, 0x8cf, 0x3, 0x8, 0xe64, 0x6, 0x5, 0x3, 0x9, 0xffffff92, 0x5, 0x7, 0x6, 0x38f0, 0x8, 0x9, 0xfffffff4, 0x6e1, 0x6, 0x7fffffff, 0x3, 0xffffffff, 0x2, 0x4, 0x6, 0x10, 0x7fff, 0x40, 0x7, 0x6, 0x0, 0x3ff, 0x8, 0x69a, 0x41, 0x1, 0x7, 0x73f9, 0x7ff, 0x7, 0x10000, 0x0, 0x10000, 0x8000, 0x6cd2, 0x3, 0x7, 0x9, 0x6, 0x80, 0xa, 0xffffffff, 0xa, 0x2, 0x1, 0x6, 0xbd, 0x5, 0x7, 0x7e, 0x6, 0x2, 0x80000000, 0x1, 0x3, 0x5, 0x6, 0x0, 0xff, 0xb, 0x4, 0x5, 0xfffffffb, 0x7fff]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffb}, @filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1c69c}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xfc63}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x1c9}, @TCA_FLOW_PERTURB={0x8}, @TCA_FLOW_PERTURB={0x8, 0xc, 0xcb}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0xc}}]}, 0x50c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xffe8}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c005}, 0x4041080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061112c0000000000180007000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) unlink(&(0x7f0000000000)='./file0/file0\x00') 3m21.80409719s ago: executing program 8 (id=26673): set_mempolicy(0x4005, 0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x31}, 0x80, 0x2, 0x0, 0x2, 0x0, 0xa5b5}, 0x20) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(0x0, 0x102) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b940000061ee", 0x6}], 0x1}}], 0x1, 0x20008000) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x1c, 0x48, 0x301, 0x70bd2a, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) r6 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$FIOCLEX(r4, 0x5451) r7 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) write$UHID_INPUT2(r6, 0x0, 0x90) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "60000100", "9de66ebc3914c06f0f109088d190e700", '\x00', "f8dde5bf3eba23db"}, 0x28) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'none\x00', 0x2c, 0xfffffff8, 0x17}, 0x2c) 3m21.200110775s ago: executing program 9 (id=26681): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) close(r0) 3m21.081069342s ago: executing program 9 (id=26682): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) close(0x3) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bc2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x12, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xffffffffffffffcd}}, @qdisc_kind_options=@q_red={{}, {0x0, 0x2, [@TCA_RED_PARMS={0x0, 0x1, {0x6, 0x8000, 0x9, 0xbf, 0x1c, 0x1a, 0x4}}]}}, @TCA_RATE={0x0, 0x5, {0x10}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x4) 3m20.95038122s ago: executing program 9 (id=26684): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @empty, 0x10000bff}, @ib={0x1b, 0xc, 0x100fff, {"4a0200000000000000facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) close_range(r0, r0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x108) 3m20.824918717s ago: executing program 9 (id=26685): r0 = socket(0x10, 0x803, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17ffffe, 0x13, 0xffffffffffffffff, 0x9996e000) syz_emit_ethernet(0x86, &(0x7f0000000380)={@broadcast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @empty}, @redirect={0x3, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@multicast2}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) r1 = syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$eJzs3V9Ls3UYB/BLH/doM83+WXrSjzqpk5v0oKNOJBSiQZGuqCC4xVljaxu7d7BJkNBZR72O6LCzIHoDvotOQoKoE49a6ExTDDPSPeDnc7JrfO+LXReDwT32Y4evf/1ZY7fIdvNeTE5MxFSnFOkoRYrJeBAj+/HKlxu/f7X58PR5ShtrWyuvpZTmX/jho8+/ffHH3ux7381/Px0HCx8f/rr608HiwdLhH1uf1otUL1Kr3Ut52m63e/l2s5Z26kUjS+mdZi0vaqneKmrdC/lus93pDFLe2pkrd7q1okh5a5AatUHqtVOvO0j5J3m9lbIsS3Pl4LLhcDj84l9eW/3maDgcHveU4uFJ52NRjtl4POZiPp6IhXgynoqn45l4NhbjuXg+lk6uuuUVAAAAAAAAAAAAAAAAAAAA4J5x/h8AAAAAAAAAAAAAAAAAAADG70bn/0vHHc7/AwAAAAAAAAAAAAAAAAAAwP/N//8DAAAAAAAAAAAAAAAAAADA+G1+8OFba5XK+rspzUT8st+v9qujx1G+8WZl/dV0YuG867d+v/rgLF8Z5eliPh3l03z1ynwmXn5plB9nb7xduZQvx87trw8AAAD3QpbOXHl/n2X/lI+qv30/cOn+fSqWp656xZnbWoX/oBjsNfJms9YtBqW/ir2xFROnU415DIXi+uLn9yNu3jX5aAx/fTHmDybuxPmbPu5JAAAAAAAAAAAAuIm7+DnhuHcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVwUAAP//GASTNA==") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x5, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20008800}, 0x4008070) syz_emit_ethernet(0x97, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6151be0000612f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be00060001bf3f030b7d27010088a80090000b003e000086dd000986dd", @ANYBLOB="36ed"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000000004000b0000000500000088b89453e9553bee1476370b19cdc124a38a8943f38705bc7bfc908671d65f254ee59a22b8244888b8c07e4590d7dc35213c70b0a278f4ef3d97f211c17b7a4fa577c69d314bc1bb37c89a0ed254c72810d6186e5cb442e85625ea52caea6f77eec52d3124699e9162905d7d8253485a30"], 0x0) ioprio_set$pid(0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000007380)=ANY=[], 0x6) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010101010000000000000000020000000c00198008000100a8050000100001800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16=r9, @ANYRESOCT=r0], 0x1b0) setresuid(0x0, 0x0, 0xee00) r10 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r10, r10, 0x0) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r11, &(0x7f0000001740)=""/132, 0x84) 3m20.578293112s ago: executing program 8 (id=26692): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) 3m20.015139064s ago: executing program 8 (id=26698): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff, 0x86f, 0x9d, 0x500, 0x5, 0x800008}) 3m19.978170107s ago: executing program 52 (id=26698): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @loopback}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7ff, 0x86f, 0x9d, 0x500, 0x5, 0x800008}) 3m19.859956294s ago: executing program 9 (id=26700): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0xf) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x109040, 0x0) ioctl$TCFLSH(r5, 0x800455ca, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$TCXONC(r5, 0x540a, 0x3) sendmsg$nl_route(r2, 0x0, 0x8000002) io_getevents(0x0, 0x7, 0x0, 0x0, 0x0) 3m19.546662452s ago: executing program 9 (id=26702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x291, {{0xa, 0x4e23, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x88) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000000206030000000000f7ff00000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a10000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) 3m19.546421442s ago: executing program 53 (id=26702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x291, {{0xa, 0x4e23, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}}, 0x88) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000000206030000000000f7ff00000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a10000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) 2m6.549039176s ago: executing program 5 (id=28116): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000010000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB], 0x5c, 0x0) 2m6.47055798s ago: executing program 5 (id=28117): r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x4, r2}, 0x38) 2m5.686376736s ago: executing program 5 (id=28133): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0xb, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000140)={0x80, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000020601010000000600000000000000000e0003006269746d61703a697000000005de0300000000000900020073797a3100000000240007800c00028008000140640101010c0001800800014080ffffff050014000200000005000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300af51823c3567", @ANYRES32=0x0], 0x3c}}, 0x4000054) getpid() syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1, 0x250, &(0x7f0000000b80)="$eJzs2k9rHHUYB/BnYqUxJd2I/2hB+kMP6mVocvIgkiAtiAFFG6EK0qmZ6JJxN2SWwIrYeNGLB1+CZ/HoTZCKFy+5+Ao8eMslxx7EkXbTNhtWyKJxS/P5XPZhn/0uz/AMw+8wu69888n6Wp2vFb2YyrKYWoztuJXFXEzFXdvx0gtXf332navvvbG0vHzp7ZQuL12ZX0gpnb3w0/ufff/czd6Zd384++Pp2Jn7YHfviz92nt45t/vXlY/bdWrXqdPtpSJd73Z7xfWqTKvtej1P6a2qLOoytTt1uTnUX6u6Gxv9VHRWZ2c2Nsu6TkWnn9bLfup1U2+zn4qPinYn5XmeZmeCf2Plu1tNE3vNo9ciu/vd7O/RiuzxlD2xmD11LXtmOzu31zStyQ7KMbm3/6ZpHvs2zty0/xPlwEN9OqL6amtla2XwOegvrUU7qijjYrTiz7h9m+wb1JdfX750Md0xF19WN/bzN7ZWHhnOz0cr5kbn5wf5NJw/HTMH8wvRiidH5xdG5qfjxecP5PNoxW8fRjeqWI3b2fv5z+dTeu3N5UP583d+BwDwsMnTPSPPb3n+T/1Bfozz4aHz1ak4f2qy105E3f90vaiqclMxTnFh3NT05GeeeHH8N1uTRTwIV3qk4pefX335ARhjv1g8vJ1JP5n4P9xf+lET08c7EAAAAAAAAAAAAEfy371F+PX+Pw61snHeLAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6mvwMAAP//cOvMBw==") truncate(&(0x7f0000002540)='./file2\x00', 0xe) umount2(&(0x7f00000003c0)='./file3\x00', 0xb) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1024020, &(0x7f00000000c0)={[{@favordynmods}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x4) 2m4.720869972s ago: executing program 5 (id=28140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000000440)="$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") r1 = inotify_init() r2 = inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x1070000d6) inotify_rm_watch(r1, r2) (async, rerun: 64) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) waitid(0x0, r3, 0x0, 0x4, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0xc4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x40047211, &(0x7f0000000400)) unshare(0x2040600) (async) r5 = syz_io_uring_setup(0x10ca, &(0x7f00000000c0)={0x0, 0xba82, 0x10000, 0x2, 0x3c9}, &(0x7f0000000000), &(0x7f0000000140)) syz_io_uring_setup(0x1454, &(0x7f00000001c0)={0x0, 0x183e, 0x20, 0x3, 0x30e, 0x0, r5}, &(0x7f0000000240), &(0x7f0000000280)) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x40, r6, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r7) (async) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) r12 = pidfd_getfd(r11, r9, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r12}}) (async) waitid$P_PIDFD(0x3, r7, 0x0, 0x8, &(0x7f0000000300)) 2m4.356183834s ago: executing program 5 (id=28150): pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) listen(r0, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], &(0x7f0000000580)=""/5, 0x37, 0x5, 0x1, 0x7fffffff}, 0x28) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6020400) sendfile(r1, r1, 0x0, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x15, "47b487731284879cc3f112c15ac8"}}]}, 0x30}}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'nq\x00', 0x2c, 0xfffffff8, 0x17}, 0x2c) 2m4.148028596s ago: executing program 5 (id=28159): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xfffffffffffffe21) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000b80), 0x20602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 2m4.114566928s ago: executing program 54 (id=28159): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xfffffffffffffe21) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000b80), 0x20602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1m54.544485425s ago: executing program 0 (id=28292): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x71) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x40000000}) io_uring_enter(0xffffffffffffffff, 0x421f, 0x1fde, 0x44, &(0x7f0000000040)={[0xb47]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) shutdown(0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 1m53.274258659s ago: executing program 0 (id=28297): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1}) 1m52.22997104s ago: executing program 0 (id=28305): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x40, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001800010000000000000000000a000000ff03fd0900000000040008809c86ee3f19a2def36f1f6fae10a70594a1244827584b451e2e17f828761485ab815854bde46c8ce632d98c33cc1bd80d2ab7adc7ae3f62932da646fc93f4e6749d96cea44e70856d2c196300e6527b42c7a2d8464718c28a0f7c66e0b1de62a5a5f4d7d1cfba85c400fc7efcf53b16444997"], 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) close(r1) 1m52.010022253s ago: executing program 0 (id=28307): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000080)='./file0\x00', 0x100000, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f00000008c0)="$eJzs3U9rI2UYAPBn8mcS9ZAcPInggB48Lbt79ZIiuyD25JKDetDidkGaILRQWAVHT169ePAzCIIfxIvfQPAqeLNCYWT+pEnamDalqWh/v0Pz9J33mfeZN0M7LfTpx69OD55m8awbv0a/n0RrFKM4SWIYrZj5KpaMvg0A4L/spCjij6K2SV4SEf3tlQUAbNHVvv935uFP9Utr+6UBAFvy5P0P3t3Z3X30Xpb14/H0m+Nx+ZN9+Vof33kWn8Yk9uN+DOI0onpQ6Eb1tFCGj4uiyDtZaRhvTPPjcZk5/ejn5vw7vze/LCgNq49nTxtV/ju7jx5ktYX8vKzjxWb9Ubn+wxjEy2fJS/kPV+THOI03X1+o/14M4pdP4rOYxNOqiHn+lw+y7O3iuz+/+LAsr8xP8uNxr5o3V7Rv8W0BAAAAAAAAAAAAAAAAAAAAAOB/7l7TO6cXVf+ecqjpv9M+LT/pRjYzXO7PU+fPWvss9QcqiiKv2uXU/XXuZ1lWNBPn+Z14pbPYWBAAAAAAAAAAAAAAAAAAAADurqPnnx/sTSb7hzcSzLoBdCLirycR1z3PqAp6EbF/+Fqsn9xr1tybTFpNuDynszgS7dmcJGJtGeVF3NC2XBa8cKHmJvjhx01P2L98Tnf1WkfP29d9v/LzI7O762AvWb2HvZiN9JtFv08j5nPSuOLq6T8dKmKT2y9deWiw8W6kL1VBvmZOJOsKe+u3eueakeT8VaTVrq5M7zbBQvq5e+NK93P06/SLXysS3ToAAAAAAAAAAAAAAAAAAGCr5n/9u+Lg12tTW0Vva2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK2a////DYI8IrrNCS6ZnMbh0b98iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANwBfwcAAP//Dn5Tyg==") bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000a000000020000000800000002000000", @ANYRES32=0x0], 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x406, &(0x7f0000000300)='trans=rdma,') 1m51.808525195s ago: executing program 0 (id=28309): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x7, 0xffffffff, 0xfffffffd, 0x7, 0xbb, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000009c0)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0xb2, 0x0) 1m51.699014891s ago: executing program 0 (id=28311): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0xa, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ptrace$poke(0x4, 0x0, 0x0, 0xfffffffffffffffe) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) sendmmsg(r0, 0x0, 0x0, 0x0) 1m36.388277923s ago: executing program 55 (id=28311): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x10000, 0x8, 0x1, 0xa, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ptrace$poke(0x4, 0x0, 0x0, 0xfffffffffffffffe) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2], 0x15) sendmmsg(r0, 0x0, 0x0, 0x0) 3.995186467s ago: executing program 6 (id=29116): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x8, 0x39b, 0x8, 0x1}, 0xb4a9, 0x1, 0x2, 0x40, 0x80, 0xb, 0x5, 0x11, 0x4, 0xf5, {0x0, 0xc2dd, 0x8, 0x2, 0x3, 0xf1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.553214203s ago: executing program 6 (id=29126): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@random={'osx.', ')\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.617758868s ago: executing program 3 (id=29139): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x5}, {0x8, 0x1}], {0x10, 0x6}, {0x20, 0x2}}, 0x34, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r2}, &(0x7f0000000140)=0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) setresuid(0x0, 0xee00, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f0000000000)=""/59, 0xffffffffffffffe6) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) 2.563649661s ago: executing program 6 (id=29142): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7c8def13, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x6, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"30f98f88819e9593db02b03239e78290", 0x0, 0x0, {0x2, 0xb3}, {0x1, 0x7}, 0x100000000, [0x3986bbbc, 0x1, 0xfffffffffffffff7, 0x5, 0x7, 0x2, 0x80000000, 0x8000000000000000, 0x3, 0x1da, 0x101, 0x6, 0x7ff, 0x6, 0x8, 0xe]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000200)=r7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0xa9525000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0x0, 0xee01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x7ffc0001}]}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000018000100000000000000000080"], 0x28}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mprotect(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000001c0)={0x176, 0x9, 0x81, 0x8000, 0xd, "be648b522b6a7263"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) r10 = socket$netlink(0x10, 0x3, 0x0) syz_socket_connect_nvme_tcp() tee(r10, r2, 0x3, 0x6) 2.40578284s ago: executing program 3 (id=29144): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x44050) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff01000000000000b405000000000000ff07000000000000b100000000000000ff07000000000000000000000000000000000000000000000000000000000000030000000b0000000300000000000000010001000000000008000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009724e622b2"]) r0 = syz_open_procfs(0x0, &(0x7f0000000840)='fdinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) r1 = socket(0x4000000000c, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtfilter={0x850, 0x2c, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0xfff1}, {0x8, 0xffe0}, {0xe, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0x355853b}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @filter_kind_options=@f_route={{0xa}, {0x810, 0x2, [@TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xf24, 0x7, 0xfffffffe, 0x1, 0x9, 0x2, 0x8, 0x9, 0xc5, 0xaab, 0x2ab0, 0x8, 0x8, 0x3ff, 0x7, 0x95, 0x2, 0xfffffe00, 0xa, 0x7f, 0xc, 0x6, 0x5, 0xffffffff, 0x1, 0x1000, 0xd, 0x0, 0x8, 0x1ff, 0x10001, 0x93, 0x1, 0x2e50, 0xffff, 0x6, 0x5, 0x1, 0xbe25, 0xffff, 0xf, 0x6, 0x7, 0x8, 0x0, 0x7215, 0x1, 0x0, 0x9e, 0x5, 0x4, 0x1000, 0xff, 0x80, 0xfff, 0x400, 0x401, 0x4, 0x9, 0x2d56, 0x5, 0xe7c, 0x9, 0x2, 0x8, 0xdd59, 0x3c, 0x6, 0x81, 0x5, 0x341, 0xaa0b, 0x0, 0xfffffff4, 0x7, 0x5, 0x0, 0x80, 0x6, 0x100, 0xd221, 0x1, 0x3, 0xffffff0c, 0xf, 0x1, 0x3, 0x7, 0x401, 0x35, 0x9, 0xdf, 0x7, 0xf42, 0x83, 0xfff, 0x3, 0x200, 0x0, 0x2, 0x40, 0x4, 0x200, 0x4, 0x964c, 0x57fc, 0xe2d, 0x1, 0x3ff, 0x0, 0x9, 0x81, 0x275b, 0x6, 0xfd3, 0xb, 0x6c73, 0xfff, 0x6, 0xb1, 0x0, 0xffffffff, 0x3, 0x0, 0x96, 0x3, 0xb3, 0x8, 0xfff, 0x0, 0x5, 0x6052, 0x600, 0xb4e, 0xffff, 0x5, 0x2, 0x3, 0x100, 0x0, 0x100, 0x0, 0x6, 0x7fffffff, 0x6, 0xfffffe01, 0x6, 0x4, 0x6, 0xc, 0x8, 0x8, 0x4, 0x7, 0x6, 0x101, 0x0, 0x635, 0x8120, 0x76b, 0xd, 0x5, 0x80000001, 0x6, 0x8b7, 0x8b, 0x9e, 0x7, 0x400, 0x9, 0x0, 0x3, 0x6, 0x4, 0xffff, 0x2, 0x2, 0x0, 0x2, 0x2, 0xf2e, 0x8, 0x7fffffff, 0x5, 0xf, 0x0, 0xffffff2d, 0x10, 0x3, 0x8e9, 0x0, 0x6, 0x6122, 0x1, 0x5, 0x9ba, 0xffffffff, 0xa, 0x7, 0x8, 0x4, 0x7f, 0x0, 0x8, 0x6, 0x3, 0xfffffffb, 0x800, 0x15, 0x1, 0x0, 0x5e6, 0x3, 0xa, 0x5ce, 0x3, 0x31ee, 0x58, 0x400, 0x7, 0x2, 0x9, 0x7, 0x10, 0x2, 0xccb, 0x8, 0x6, 0xd, 0x3, 0x8001, 0xd, 0xff, 0x101, 0x401, 0x80, 0x6, 0x895, 0x0, 0x8001, 0x5ebb, 0x4, 0xced, 0x5, 0x5, 0x72, 0x0, 0x8, 0x2686, 0x7, 0x1, 0x4, 0x7, 0x1ff, 0x4]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x70000, 0x5, 0x6, 0xffff, 0x100, 0x2, 0xffffffff, 0x7, 0x9, 0x8, 0x5, 0x9d4, 0x6, 0x50, 0x3d5, 0x7, 0x0, 0x9, 0xfff, 0x80, 0x1ee8, 0x5f71, 0x8000, 0xed83, 0xf, 0xa07, 0x4, 0x8, 0x6, 0x3, 0xfffffff9, 0x2, 0x80000000, 0x0, 0x5, 0x1, 0x8, 0x7, 0x400, 0x6, 0x3, 0x5, 0x6, 0x2, 0x8, 0xd2, 0xc368, 0x8, 0x4, 0xfff, 0x7, 0x8, 0x38000000, 0x400, 0x2, 0xc0d, 0x7ff, 0x8, 0x9, 0x25ce, 0xed41, 0x0, 0xf, 0x3, 0x0, 0xb66, 0x0, 0x0, 0x0, 0x7, 0x101, 0x7, 0xfffffffd, 0x9, 0x8, 0x1, 0x8000, 0x1, 0x1c0, 0x7fff, 0x82b, 0x2, 0xce, 0x4, 0x4, 0x1ff, 0x4, 0x1ff, 0x7fff, 0xfffffffa, 0xe, 0x8, 0x1f35, 0x4, 0x4, 0xfffffc4a, 0xa, 0x1, 0x200, 0x0, 0x5e1fbfc, 0x8000, 0x7, 0x9, 0x7, 0xe, 0x3, 0x3, 0x229, 0x9a4, 0x4, 0xfffffff7, 0x6, 0x1, 0x3, 0x5, 0xc3f2, 0x9, 0xfffffffd, 0xb, 0x2, 0x6, 0x3340, 0x8, 0x2, 0x96, 0x4, 0x0, 0x1, 0x1, 0x8, 0x7fff, 0xfe, 0x8, 0xff, 0x0, 0x800, 0x7, 0x5, 0x1, 0xffffffff, 0x9, 0xceb4, 0x79, 0xfffffff3, 0x5, 0xd2d2, 0x2, 0xfffffee7, 0x200, 0x5, 0x5, 0x9, 0xfff, 0xe, 0x7, 0x5, 0xfffffffd, 0x7d0, 0x2, 0x8, 0x4, 0x9, 0x0, 0x8e9, 0x800, 0x7, 0x1, 0x9, 0x1, 0x7ff, 0xd6b8, 0x6, 0x1, 0x1, 0xfffffff9, 0x2, 0xc8000000, 0x1, 0xfff, 0x7, 0x3d, 0x4, 0xffff, 0x6, 0x100, 0x5, 0x7, 0x8, 0x4d, 0x3, 0x2, 0x6, 0x0, 0x3, 0x9, 0xd, 0xc5b, 0x8, 0x8, 0xa, 0xb9, 0x7, 0xc014, 0x0, 0xfffffffc, 0x6, 0x40, 0x21b9, 0x3, 0x0, 0x7f, 0xff, 0x6, 0x8001, 0x8, 0xd, 0x7, 0x4, 0x4, 0x1, 0x3, 0x7, 0xfb, 0x4, 0xb10, 0x5, 0x7, 0x6, 0x401, 0x8, 0x27f, 0xfffffffd, 0x400, 0x700000, 0x7fffffff, 0x10, 0x8, 0x5, 0x401, 0xfffffff9, 0x3, 0x5, 0x9, 0xa0, 0x0, 0x1ff, 0x1004000, 0x7, 0x0, 0x200, 0x2, 0x4, 0x48, 0x4]}]}]}}]}, 0x850}, 0x1, 0x0, 0x0, 0x50}, 0x801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x4, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) lseek(r0, 0x7, 0x1) getdents(r0, 0x0, 0x51) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x2, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0x2, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x1004, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7ffd, 0x7, 0x5, 0xa, 0x1, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x800, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffa, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x2, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x10000, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0x80, 0x3c6e, 0x3, 0x4007, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x404fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0x100, 0x9, 0x0, 0x6, 0x2, 0xffffff87, 0xe, 0xa0, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0xfffffff5, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0x4133, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0x63, 0x4, 0x18000, 0x10, 0x1000, 0x288a, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x5, 0x8, 0x200006, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x8, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x40000, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0xc, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x4, 0xc, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x2, 0x4, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x6, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x209, 0x100, 0x1, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x1000, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0x6, 0x6, 0x1, 0xffffff02, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0x0, 0x9, 0x8, 0x1, 0xc2e6, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0xa937, 0x10000, 0xffff0000, 0xf, 0x1, 0x2, 0xffffa9b4, 0x1, 0x4, 0x5, 0xd58, 0x0, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x14, 0xc, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x2, 0xabb4, 0x0, 0x21000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x8, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20000000, 0x2, 0x44291943, 0x0, 0x0, 0x1000, 0x4000b, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xe, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x109, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x2b990b29, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x80000000, 0xb66d, 0x800003, 0x1000, 0x1eb4bce2, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0xfffc, 0x80000001, 0x5, 0x1, 0x9, 0x3, 0xb7, 0x3, 0xff, 0x20009, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x193, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x109, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0x6, 0x2, 0x3f, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0x3, 0x9, 0x1, 0x80000000, 0x9, 0x0, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x3, 0x9, 0x2, 0x1000009, 0x1, 0x9, 0x9, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x2, 0x3, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x1ff, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x80000000, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xfffffffc, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827787, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x3, 0x81, 0x8, 0x14, 0xa, 0x5, 0x80, 0xffff, 0xf28c, 0x669306b, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x7, 0x5, 0x2, 0x5, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x202, 0x51, 0x7, 0xefb, 0xb8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0x3, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0xfff, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0x1a2, 0x1, 0x3, 0x40, 0x1000, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x3, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd1b, 0x3, 0x800, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xb, 0x83, 0x3ff, 0x5, 0xffffffff, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x2, 0x633, 0xf08, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x4, 0x0, 0x5, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x480, 0x1, 0x0, 0x200, 0xe9ab, 0x6, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x401, 0x6, 0x7, 0xa, 0xf, 0x8, 0x2, 0xfff, 0x5, 0x9]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8c2b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030532bd7000fddbdf25021f00ff", @ANYRES32=r6, @ANYBLOB="080000fa941300"/18], 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000015c0)={'team0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x4, {0x0, 0x0, 0x0, r11, {}, {0xfff1}, {0x0, 0x9}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10de}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001680)={'syztnl0\x00', &(0x7f0000001600)={'ip6gre0\x00', 0x0, 0x2f, 0x4f, 0x5, 0x1000, 0x20, @private0, @private2, 0x7, 0x8000, 0x7ec5, 0xe00000}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001c40)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c00)={&(0x7f0000001c80)=ANY=[@ANYBLOB="79fc38bae3a9335c1128c39e30f7902805000009ac5df5d3a86c39e6c969a67c68c417ea915cb1b65e8e7024002295fa251d10e41764fe5d21a5d3064e0fbfdc97fcbf647b7ae9efe81a65affaaa2a0999a79f57eac72407ba598c08f5bace8f5c82af726cd2286005cce6b8bfb62a227642905b36297e72f35d1746a62cc2f4bac71cf691a150314dd50f0f32eaf6a01c587f5a8cb2e479954f97dc6f3200ab2a51d35bdd4225f8a260e2137d0fd1", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="d801028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ea00000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000b00000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff07000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400d8080000080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004006136000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0400028008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r8, @ANYBLOB="cc01028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100008038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ee5500003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400020000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400f8ff027507000000faff0605020000000700fb5605000000030004010000000005000b9409000000ff07030f02000000080004060100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB], 0x528}, 0x1, 0x0, 0x0, 0x4000081}, 0x44040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.169075344s ago: executing program 3 (id=29148): personality(0x8) uname(&(0x7f0000002280)=""/4096) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000380)={0x2, {0x2, 0x0, 0x15, 0x219, 0x401}}) 2.113004327s ago: executing program 3 (id=29149): r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa}]}, 0x34}}, 0x0) 2.084501219s ago: executing program 3 (id=29150): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x8, 0x39b, 0x8, 0x1}, 0xb4a9, 0x1, 0x2, 0x40, 0x80, 0xb, 0x5, 0x11, 0x4, 0xf5, {0x0, 0xc2dd, 0x8, 0x2, 0x3, 0xf1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24000840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.053531061s ago: executing program 3 (id=29152): r0 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200812, &(0x7f0000000180)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@grpid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@euid_eq}, {@uid_gt}, {@appraise_type}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000100)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/230, 0xe6}], 0x1}, 0x40000001) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, 0x0, 0x0) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 1.809757765s ago: executing program 7 (id=29157): mlockall(0x2) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$sock_int(r3, 0x1, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) 1.735845179s ago: executing program 7 (id=29158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) close(0xffffffffffffffff) r4 = dup(r3) writev(r4, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001040)="f6", 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 1.680008102s ago: executing program 7 (id=29159): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'erspan0\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62000, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x200, 0xee0e}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x2, 0x7, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) io_destroy(0x0) io_setup(0x4, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x65325c423a5f332b) io_submit(r3, 0x2325, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x7, 0x3, r4, &(0x7f0000000000)="ff", 0x1}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.629698165s ago: executing program 6 (id=29160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x18000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 1.309345004s ago: executing program 1 (id=29170): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x7c8def13, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x6, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x300, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"30f98f88819e9593db02b03239e78290", 0x0, 0x0, {0x2, 0xb3}, {0x1, 0x7}, 0x100000000, [0x3986bbbc, 0x1, 0xfffffffffffffff7, 0x5, 0x7, 0x2, 0x80000000, 0x8000000000000000, 0x3, 0x1da, 0x101, 0x6, 0x7ff, 0x6, 0x8, 0xe]}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000200)=r7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r6, 0xa9525000) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r8, 0x0, 0xee01) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x7, 0x7ffc0001}]}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000018000100000000000000000080"], 0x28}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mprotect(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000001c0)={0x176, 0x9, 0x81, 0x8000, 0xd, "be648b522b6a7263"}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) r10 = socket$netlink(0x10, 0x3, 0x0) syz_socket_connect_nvme_tcp() tee(r10, r2, 0x3, 0x6) 757.322266ms ago: executing program 6 (id=29175): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x111, 0x4b4, 0x0, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'vlan0\x00', 'veth1_to_team\x00', {}, {}, 0x84, 0x3, 0x0, 0x4}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffff], [], 0xfe}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'snmp\x00', 'syz1\x00'}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff000000, 0x0, 0xff, 0xff000000], [0xff], 'geneve1\x00', 'hsr0\x00', {}, {}, 0x73}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x0, 0x2, 0x80000000}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x800}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x41b) r2 = socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000000)=0xe, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) accept$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000140)) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 756.590046ms ago: executing program 4 (id=29176): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1d34e7f65c44ad173e835f65c2347e008c9289f3e39612f28495ad51bc23c63ae4ffdfeb6f905d5d7b86058f246f05740e2adf845", 0xd2}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26", 0x34}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7", 0x22}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9", 0x58}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed4fe1e6cbbc50610040843bc946", 0x6a}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x80}}, {{&(0x7f00000006c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)}, {&(0x7f0000000740)="4ea50911e68114722d3e4e1eb834348a", 0x10}, {&(0x7f0000000780)="a56bfec4ef6447ca814da2fe35c32b250f099f43e0684cfbae62d8cca721a5abfc47181675e8a0ee07805974ed8dff73afcdcaef6b627b55d5cb76dd8ad4308a80967a9415a3171a9533f594c78fe19fe7b769f891c72c7d50610ce7d7f7794087b1faaac88b0d874324b6e79b7642ac4e906469fa21303773d75ea66c983db1ec548940288483875a8072bddb1c4acd28f1057621ce78", 0x97}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ec9a5fb8d6d9bbd4404f23615f87296b2e930fae517366a6a95f7fab3120d39b8d214e57a700997abc"], 0x0, 0x20044041}}], 0x2, 0x0) 700.692089ms ago: executing program 7 (id=29177): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x1170, 0x1398, 0x130, 0x1170, 0x270, 0x1398, 0x1398, 0x270, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xff, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0xfffffffe, 0x3, 0x0, 0xf}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x243, 0x29}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x2000, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) close(0x3) unshare(0x400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) alarm(0xf) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475d68411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x111002, 0x3a, 0x4}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet(0x2, 0x3, 0x8d) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r5, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000280)="f4000900062b3325fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000", 0x24}, {&(0x7f0000000100)="42e9462c9bfb", 0x6}], 0x2}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x48800) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x0) 664.531542ms ago: executing program 4 (id=29178): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff00080003400000"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) 636.143433ms ago: executing program 4 (id=29179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000200)='sockfs\x00', 0x0) close(0xffffffffffffffff) r4 = dup(r3) writev(r4, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000001040)="f6", 0x1}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) 505.915341ms ago: executing program 4 (id=29180): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'erspan0\x00', 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62000, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x50, 0x7fff7ffc}]}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x200, 0xee0e}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x2, 0x7, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) io_destroy(0x0) io_setup(0x4, &(0x7f0000000600)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000240), 0x65325c423a5f332b) io_submit(r3, 0x2325, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x7, 0x3, r4, &(0x7f0000000000)="ff", 0x1}]) clock_gettime(0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000001280)={r5, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e444000000200000000000000000000000fbf3fb7000", [0xe0]}}) 439.822805ms ago: executing program 7 (id=29181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r3 = shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x10451, 0x40040}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x139, 0x139, 0x4, [@enum64={0x2, 0x3, 0x0, 0x13, 0x0, 0x2, [{0xb, 0x9, 0x8}, {0xc, 0x401, 0x1}, {0xf, 0x7, 0xffe}]}, @volatile={0x2, 0x0, 0x0, 0x9, 0x1}, @struct={0x3, 0x4, 0x0, 0x4, 0x1, 0x6, [{0xb}, {0x9, 0x0, 0x38}, {0x10, 0x5, 0x9}, {0x2, 0x5, 0x80000000}]}, @float={0x8, 0x0, 0x0, 0x10, 0xc}, @typedef={0xe, 0x0, 0x0, 0x8, 0x3}, @const={0xe}, @func={0x3, 0x0, 0x0, 0xc, 0x2}, @volatile={0xb}, @datasec={0x5, 0x9, 0x0, 0xf, 0x1, [{0x2, 0x14, 0x2}, {0x2, 0x7ff, 0x7}, {0x2, 0x2, 0x7}, {0x1, 0x7, 0x100}, {0x4, 0x6, 0x2}, {0x1, 0x991, 0x614e}, {0x3, 0x81, 0x7}, {0x1, 0x985c, 0xc3f2}, {0x2, 0x81, 0x2}], '.'}, @volatile={0xe}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000080)=""/150, 0x158, 0x96, 0x0, 0x7}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x5, '\x00', r5, r6, 0x0, 0x4}, 0x50) 388.466168ms ago: executing program 1 (id=29182): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x300}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x64}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 326.338041ms ago: executing program 4 (id=29183): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x5, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x220, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)=@random={'osx.', ')\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x8) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 296.887553ms ago: executing program 1 (id=29184): prlimit64(0x0, 0xe, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RSTAT(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x62, 0x8, 0x6, 0x3, 0x0, 0x1, 0xfffffff8, 0x5}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x3, [{0x10, 0x2}, {0xf, 0x2}, {0x10, 0x3}, {0x9, 0x2}]}]}}, 0x0, 0x46, 0x0, 0x8}, 0x28) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r1, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff", 0x9}], 0x1}}], 0x2, 0x0) syz_io_uring_setup(0x666f, &(0x7f0000000200)={0x0, 0x6a19, 0x10000, 0x0, 0x223, 0x0, r0}, &(0x7f0000000280)=0x0, &(0x7f0000000300)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x10000000) syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_STATX={0x15, 0x65, 0x0, r2, &(0x7f0000000340), &(0x7f0000000440)='./file1\x00', 0x400, 0x1000, 0x3}) r5 = dup(r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, r6, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 260.646635ms ago: executing program 6 (id=29185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x18000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) 178.19956ms ago: executing program 1 (id=29186): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "00e9bf0d0000000000000000"}, {0x0, 0x1, "e30000000000"}]}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x64}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffff53, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 177.5257ms ago: executing program 7 (id=29187): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000000)={[{@size={'size', 0x3d, [0x74, 0x31, 0x60, 0x25, 0x67]}}]}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e60, 0x2, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2800008c"], 0x40}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200060000000000", @ANYRESDEC=r0, @ANYRES32=0xee00, @ANYBLOB, @ANYRES32=0xee00, @ANYRESOCT=r0, @ANYBLOB], 0x5c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000340), 0x3) unshare(0xa000400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) r5 = io_uring_setup(0x5884, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) write$UHID_INPUT(r6, &(0x7f0000002300)={0x7, {"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", 0x1000}}, 0x1006) ioctl$EXT4_IOC_MOVE_EXT(r6, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x1, 0x973f, 0x3, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000640)={0x2, 0x1, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000540)=""/240, 0xf0}], &(0x7f00000003c0)=[0xe]}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r4, 0x0, &(0x7f0000001780)=""/4096}, 0x20) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x20, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x14, 0x9, 0x0, 0x0, 0x0, 0x4, 0x13}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x200}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e23}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20044085}, 0x40010) 83.706486ms ago: executing program 1 (id=29188): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000940)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1d34e7f65c44ad173e835f65c2347e008c9289f3e39612f28495ad51bc23c63ae4ffdfeb6f905d5d7b86058f246f05740e2adf845", 0xd2}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26", 0x34}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7", 0x22}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9", 0x58}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed4fe1e6cbbc50610040843bc946", 0x6a}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x80}}, {{&(0x7f00000006c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f00000005c0)}, {&(0x7f0000000740)="4ea50911e68114722d3e4e1eb834348a", 0x10}, {&(0x7f0000000780)="a56bfec4ef6447ca814da2fe35c32b250f099f43e0684cfbae62d8cca721a5abfc47181675e8a0ee07805974ed8dff73afcdcaef6b627b55d5cb76dd8ad4308a80967a9415a3171a9533f594c78fe19fe7b769f891c72c7d50610ce7d7f7794087b1faaac88b0d874324b6e79b7642ac4e906469fa21303773d75ea66c983db1ec548940288483875a8072bddb1c4acd28f1057621ce78", 0x97}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ec9a5fb8d6d9bbd4404f23615f87296b2e930fae517366a6a95f7fab3120d39b8d214e57a700997abc"], 0x0, 0x20044041}}], 0x2, 0x0) 53.457977ms ago: executing program 1 (id=29189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0xe4ff, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000, 0x0, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x40}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 0s ago: executing program 4 (id=29190): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd27, 0x3fffff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x4}, {}, {0x1, 0xfff1}}}, 0x24}}, 0x20040054) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0xffff, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x9ac, 0xfffffc, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x800}}, 0xb8}}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) syz_pidfd_open(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048010}, 0x404c800) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20001081}, 0x24000000) kernel console output (not intermixed with test programs): 156][ T29] audit: type=1326 audit(2000000502.390:89343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.3.28464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1567.739787][ T29] audit: type=1326 audit(2000000502.390:89344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.3.28464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1567.764233][ T29] audit: type=1326 audit(2000000502.390:89345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21727 comm="syz.3.28464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1567.912180][T21739] set_capacity_and_notify: 4 callbacks suppressed [ 1567.912195][T21739] loop3: detected capacity change from 0 to 128 [ 1567.928168][T21739] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1567.945219][T21739] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1568.006055][T20639] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1568.059969][T21746] cgroup: Unknown subsys name 'Ź§@ćěŚ4*oäÂŇŁhÓîşoţüíUÜ' [ 1568.129416][T21750] loop4: detected capacity change from 0 to 164 [ 1568.142309][T21748] SET target dimension over the limit! [ 1568.175183][T21749] cgroup2: Unknown parameter 'f`vordynmods' [ 1568.205715][T21752] loop4: detected capacity change from 0 to 128 [ 1568.213805][T21752] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1568.229685][T21752] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1568.942109][ T3924] Bluetooth: hci0: command 0x1003 tx timeout [ 1568.942109][T10407] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1568.980904][T21767] loop6: detected capacity change from 0 to 136 [ 1568.991502][T21767] Attempt to read inode for relocated directory [ 1569.004519][T21767] __nla_validate_parse: 6 callbacks suppressed [ 1569.004612][T21767] netlink: 56 bytes leftover after parsing attributes in process `syz.6.28477'. [ 1569.020089][T21767] netlink: 40 bytes leftover after parsing attributes in process `syz.6.28477'. [ 1569.064256][T21769] loop4: detected capacity change from 0 to 136 [ 1569.084844][T21769] Attempt to read inode for relocated directory [ 1569.120995][T21769] FAULT_INJECTION: forcing a failure. [ 1569.120995][T21769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1569.134233][T21769] CPU: 0 UID: 0 PID: 21769 Comm: syz.4.28478 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1569.134273][T21769] Tainted: [W]=WARN [ 1569.134281][T21769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1569.134294][T21769] Call Trace: [ 1569.134301][T21769] [ 1569.134310][T21769] __dump_stack+0x1d/0x30 [ 1569.134409][T21769] dump_stack_lvl+0x95/0xd0 [ 1569.134435][T21769] dump_stack+0x15/0x1b [ 1569.134530][T21769] should_fail_ex+0x263/0x280 [ 1569.134635][T21769] should_fail+0xb/0x20 [ 1569.134674][T21769] should_fail_usercopy+0x1a/0x20 [ 1569.134714][T21769] _copy_from_user+0x1c/0xb0 [ 1569.134804][T21769] ___sys_sendmsg+0xc1/0x1e0 [ 1569.134852][T21769] __x64_sys_sendmsg+0xd4/0x160 [ 1569.134891][T21769] x64_sys_call+0x17ba/0x3000 [ 1569.134926][T21769] do_syscall_64+0xc0/0x2a0 [ 1569.134965][T21769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.134990][T21769] RIP: 0033:0x7f6b0dccaeb9 [ 1569.135079][T21769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.135104][T21769] RSP: 002b:00007f6b0c71f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1569.135164][T21769] RAX: ffffffffffffffda RBX: 00007f6b0df45fa0 RCX: 00007f6b0dccaeb9 [ 1569.135184][T21769] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 1569.135203][T21769] RBP: 00007f6b0c71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1569.135220][T21769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1569.135236][T21769] R13: 00007f6b0df46038 R14: 00007f6b0df45fa0 R15: 00007ffea3ba32c8 [ 1569.135327][T21769] [ 1569.148357][T21775] loop6: detected capacity change from 0 to 128 [ 1569.362594][T21779] netlink: 28 bytes leftover after parsing attributes in process `syz.6.28483'. [ 1569.419315][T21781] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28480'. [ 1569.457490][T21781] !yz!: rxe_newlink: already configured on team_slave_0 [ 1569.887339][T21791] loop6: detected capacity change from 0 to 8192 [ 1569.928984][T21795] netlink: 72 bytes leftover after parsing attributes in process `syz.3.28487'. [ 1569.939240][T21795] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28487'. [ 1569.968489][T21795] loop3: detected capacity change from 0 to 128 [ 1569.975006][T21795] vfat: Unknown parameter '' [ 1569.981084][T21795] option changes via remount are deprecated (pid=21794 comm=syz.3.28487) [ 1569.989670][T21795] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1569.997447][T21795] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1570.105939][T21813] loop6: detected capacity change from 0 to 128 [ 1570.316901][T21830] loop4: detected capacity change from 0 to 128 [ 1570.323673][T21830] vfat: Unknown parameter '' [ 1570.652239][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2104.tmp-b7:3' failed: Read-only file system [ 1570.669394][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 1570.682783][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-uuid/8AF3-70F1.tmp-b7:3' failed: Read-only file system [ 1570.827303][T16174] udevd[16174]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 1570.873932][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2104.tmp-b7:3' failed: Read-only file system [ 1570.885871][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2101.tmp-b7:6' failed: Read-only file system [ 1570.902526][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2104.tmp-b7:3' failed: Read-only file system [ 1570.926374][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2105.tmp-b7:3' failed: Read-only file system [ 1570.948115][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2101.tmp-b7:6' failed: Read-only file system [ 1571.000690][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2101.tmp-b7:6' failed: Read-only file system [ 1571.033919][T21848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1571.035963][T21847] Unsupported NM flag settings (240) [ 1571.058521][T21848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1571.072348][T21848] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1571.096458][T21848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1571.168345][T21856] netlink: 444 bytes leftover after parsing attributes in process `syz.4.28512'. [ 1571.184134][T21857] validate_nla: 2 callbacks suppressed [ 1571.189812][T21857] netlink: 'syz.6.28511': attribute type 1 has an invalid length. [ 1571.203243][T21856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28512'. [ 1571.226043][T21856] cgroup: Need name or subsystem set [ 1571.492312][T21866] netlink: 72 bytes leftover after parsing attributes in process `syz.4.28516'. [ 1571.595343][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.905875][T21930] batadv_slave_1: entered promiscuous mode [ 1571.916611][T21931] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.28528' resets device [ 1571.935383][T21930] ------------[ cut here ]------------ [ 1571.940975][T21930] EA inode 11 i_nlink=2 [ 1571.941122][T21930] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.3.28527/21930 [ 1571.956360][T21930] Modules linked in: [ 1571.960450][T21930] CPU: 1 UID: 0 PID: 21930 Comm: syz.3.28527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1571.972038][T21930] Tainted: [W]=WARN [ 1571.975875][T21930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1571.986080][T21930] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 1571.992804][T21930] Code: 64 e4 9a ff 4c 8d 2d bd 1f 3e 05 49 8d 7e 40 e8 74 ce b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 c9 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 4f de d0 03 66 66 66 66 66 66 2e [ 1572.012670][T21930] RSP: 0018:ffffc9000404b778 EFLAGS: 00010246 [ 1572.018836][T21930] RAX: ffff8881d7ff4c90 RBX: ffff8881712fc1a8 RCX: ffffffff81be1d78 [ 1572.026879][T21930] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc3d20 [ 1572.034951][T21930] RBP: 000000000000000b R08: 00018881712fc15b R09: 0000000000000000 [ 1572.043013][T21930] R10: 0001c90003cb3738 R11: 0001c9000404b6a8 R12: ffff8881712fc158 [ 1572.051072][T21930] R13: ffffffff86fc3d20 R14: ffff8881712fc110 R15: 0000000000000001 [ 1572.059114][T21930] FS: 00007f5b518e76c0(0000) GS:ffff8882aec57000(0000) knlGS:0000000000000000 [ 1572.068090][T21930] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1572.074753][T21930] CR2: 00007f7f4e6f3000 CR3: 000000010460c000 CR4: 00000000003506f0 [ 1572.082784][T21930] DR0: 0000000000000008 DR1: 0000000000000000 DR2: 0000000000000000 [ 1572.090810][T21930] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1572.098822][T21930] Call Trace: [ 1572.102158][T21930] [ 1572.105096][T21930] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 1572.111086][T21930] ? errseq_check+0x2c/0x50 [ 1572.115639][T21930] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 1572.121246][T21930] ? ext4_truncate+0x92b/0xad0 [ 1572.126125][T21930] ext4_evict_inode+0xa1f/0xd40 [ 1572.131086][T21930] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1572.136513][T21930] evict+0x2af/0x510 [ 1572.140485][T21930] ? __dquot_initialize+0x146/0x7c0 [ 1572.145802][T21930] iput+0x4b9/0x650 [ 1572.149750][T21930] ext4_process_orphan+0x1a9/0x1c0 [ 1572.154918][T21930] ext4_orphan_cleanup+0x6a8/0xa00 [ 1572.160260][T21930] ext4_fill_super+0x3476/0x3800 [ 1572.165248][T21930] ? set_blocksize+0x1a3/0x310 [ 1572.170117][T21930] ? setup_bdev_super+0x30e/0x370 [ 1572.175188][T21930] ? __pfx_ext4_fill_super+0x10/0x10 [ 1572.180603][T21930] get_tree_bdev_flags+0x291/0x300 [ 1572.185753][T21930] ? __pfx_ext4_fill_super+0x10/0x10 [ 1572.191119][T21930] get_tree_bdev+0x1f/0x30 [ 1572.195579][T21930] ext4_get_tree+0x1c/0x30 [ 1572.200113][T21930] vfs_get_tree+0x57/0x1d0 [ 1572.204646][T21930] do_new_mount+0x288/0x700 [ 1572.209249][T21930] path_mount+0x4d0/0xbc0 [ 1572.213705][T21930] ? user_path_at+0xbf/0x130 [ 1572.218387][T21930] __se_sys_mount+0x28c/0x2e0 [ 1572.223198][T21930] __x64_sys_mount+0x67/0x80 [ 1572.227835][T21930] x64_sys_call+0x2cca/0x3000 [ 1572.232583][T21930] do_syscall_64+0xc0/0x2a0 [ 1572.237139][T21930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.243211][T21930] RIP: 0033:0x7f5b52e8c14a [ 1572.247671][T21930] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.267433][T21930] RSP: 002b:00007f5b518e6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1572.275900][T21930] RAX: ffffffffffffffda RBX: 00007f5b518e6ee0 RCX: 00007f5b52e8c14a [ 1572.283987][T21930] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f5b518e6ea0 [ 1572.292607][T21930] RBP: 00002000000009c0 R08: 00007f5b518e6ee0 R09: 0000000000800718 [ 1572.300654][T21930] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 1572.308690][T21930] R13: 00007f5b518e6ea0 R14: 000000000000048d R15: 0000200000000200 [ 1572.316756][T21930] [ 1572.319802][T21930] ---[ end trace 0000000000000000 ]--- [ 1572.329577][T21930] EXT4-fs (loop3): 1 orphan inode deleted [ 1572.339054][T21930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1572.419588][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 1572.419645][ T29] audit: type=1326 audit(2000000507.194:89431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.450293][ T29] audit: type=1326 audit(2000000507.194:89432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.486107][ T29] audit: type=1326 audit(2000000507.204:89433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6b0dc873ac code=0x7ffc0000 [ 1572.510578][ T29] audit: type=1326 audit(2000000507.204:89434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6b0dc8740e code=0x7ffc0000 [ 1572.534976][ T29] audit: type=1326 audit(2000000507.204:89435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.535048][ T29] audit: type=1326 audit(2000000507.204:89436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.535082][ T29] audit: type=1326 audit(2000000507.204:89437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.582678][T21952] ISOFS: unable to read i-node block [ 1572.582700][T21952] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1572.621923][ T29] audit: type=1326 audit(2000000507.254:89438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.646187][ T29] audit: type=1326 audit(2000000507.254:89439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.669952][ T29] audit: type=1326 audit(2000000507.254:89440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21945 comm="syz.4.28531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1572.696202][T21927] batadv_slave_1: left promiscuous mode [ 1572.776946][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.812182][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28535'. [ 1572.831797][T21961] netlink: 'syz.4.28535': attribute type 1 has an invalid length. [ 1572.840475][T21961] netlink: 'syz.4.28535': attribute type 2 has an invalid length. [ 1572.952469][T21972] FAULT_INJECTION: forcing a failure. [ 1572.952469][T21972] name failslab, interval 1, probability 0, space 0, times 0 [ 1572.965270][T21972] CPU: 1 UID: 0 PID: 21972 Comm: syz.6.28539 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1572.965348][T21972] Tainted: [W]=WARN [ 1572.965355][T21972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1572.965443][T21972] Call Trace: [ 1572.965452][T21972] [ 1572.965461][T21972] __dump_stack+0x1d/0x30 [ 1572.965556][T21972] dump_stack_lvl+0x95/0xd0 [ 1572.965586][T21972] dump_stack+0x15/0x1b [ 1572.965612][T21972] should_fail_ex+0x263/0x280 [ 1572.965647][T21972] should_failslab+0x8c/0xb0 [ 1572.965743][T21972] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 1572.965779][T21972] ? __alloc_skb+0x2f0/0x4b0 [ 1572.965820][T21972] __alloc_skb+0x2f0/0x4b0 [ 1572.965902][T21972] ? __alloc_skb+0x219/0x4b0 [ 1572.965937][T21972] netlink_alloc_large_skb+0xbf/0xf0 [ 1572.966016][T21972] netlink_sendmsg+0x40c/0x6f0 [ 1572.966040][T21972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1572.966064][T21972] ____sys_sendmsg+0x5af/0x600 [ 1572.966094][T21972] ___sys_sendmsg+0x195/0x1e0 [ 1572.966137][T21972] __x64_sys_sendmsg+0xd4/0x160 [ 1572.966270][T21972] x64_sys_call+0x17ba/0x3000 [ 1572.966297][T21972] do_syscall_64+0xc0/0x2a0 [ 1572.966332][T21972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1572.966354][T21972] RIP: 0033:0x7fa317f6aeb9 [ 1572.966446][T21972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.966504][T21972] RSP: 002b:00007fa3169bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1572.966531][T21972] RAX: ffffffffffffffda RBX: 00007fa3181e5fa0 RCX: 00007fa317f6aeb9 [ 1572.966547][T21972] RDX: 000000000004c080 RSI: 0000200000000780 RDI: 0000000000000003 [ 1572.966561][T21972] RBP: 00007fa3169bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1572.966579][T21972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1572.966596][T21972] R13: 00007fa3181e6038 R14: 00007fa3181e5fa0 R15: 00007fff2a508618 [ 1572.966643][T21972] [ 1573.311077][T21991] team0: Port device gtp2 added [ 1573.355118][T21993] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1573.408918][T21995] set_capacity_and_notify: 8 callbacks suppressed [ 1573.408942][T21995] loop6: detected capacity change from 0 to 164 [ 1573.806021][T22021] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1573.818130][T22021] bond1 (unregistering): Released all slaves [ 1573.912169][T22033] loop3: detected capacity change from 0 to 512 [ 1573.930342][T22033] SELinux: security_context_str_to_sid () failed with errno=-22 [ 1573.944050][T22033] vlan3: entered allmulticast mode [ 1573.949344][T22033] vlan0: entered allmulticast mode [ 1573.954514][T22033] veth0_vlan: entered allmulticast mode [ 1574.084380][T22046] loop3: detected capacity change from 0 to 512 [ 1574.092289][T22046] EXT4-fs: Ignoring removed nobh option [ 1574.105029][T22046] EXT4-fs: Ignoring removed oldalloc option [ 1574.138566][T22046] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.28568: Parent and EA inode have the same ino 15 [ 1574.189115][T22046] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.28568: Parent and EA inode have the same ino 15 [ 1574.223156][T22046] EXT4-fs (loop3): 1 orphan inode deleted [ 1574.229996][T22046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.332852][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.610811][T22063] loop3: detected capacity change from 0 to 512 [ 1574.643029][T22063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=22063 comm=syz.3.28573 [ 1574.656747][T22063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=22063 comm=syz.3.28573 [ 1574.688095][T22063] loop3: detected capacity change from 0 to 512 [ 1574.716286][T22063] EXT4-fs (loop3): 1 orphan inode deleted [ 1574.722611][T22063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.736122][T13734] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:35: Failed to release dquot type 1 [ 1574.747954][T22063] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1574.762973][T22063] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.28573: iget: bad i_size value: 360287970189639690 [ 1574.807324][T22063] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.28573: iget: bad i_size value: 360287970189639690 [ 1574.839960][T22063] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.28573: iget: bad i_size value: 360287970189639690 [ 1574.878369][T22064] lo speed is unknown, defaulting to 1000 [ 1574.908114][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.026105][T22064] chnl_net:caif_netlink_parms(): no params data found [ 1575.116802][T22064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.124016][T22064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.129081][T22110] xt_hashlimit: size too large, truncated to 1048576 [ 1575.132600][T22064] bridge_slave_0: entered allmulticast mode [ 1575.235179][T22112] loop4: detected capacity change from 0 to 128 [ 1575.242104][T22112] vfat: Unknown parameter '' [ 1575.620256][T22064] bridge_slave_0: entered promiscuous mode [ 1575.628205][T22064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.635348][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1575.642667][T22064] bridge_slave_1: entered allmulticast mode [ 1575.649764][T22064] bridge_slave_1: entered promiscuous mode [ 1575.671206][T22064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.682261][T22064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.705991][T22064] team0: Port device team_slave_0 added [ 1575.713868][T22064] team0: Port device team_slave_1 added [ 1575.733309][T22064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.740378][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.767213][T22064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.780823][T22064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.787825][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.814580][T22064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.850392][T22064] hsr_slave_0: entered promiscuous mode [ 1575.856671][T22064] hsr_slave_1: entered promiscuous mode [ 1575.863061][T22064] debugfs: 'hsr0' already exists in 'hsr' [ 1575.869524][T22064] Cannot create hsr debugfs directory [ 1575.956140][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2131.tmp-b7:4' failed: Read-only file system [ 1576.020742][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2131.tmp-b7:4' failed: Read-only file system [ 1576.108075][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2131.tmp-b7:4' failed: Read-only file system [ 1576.131730][T22138] loop4: detected capacity change from 0 to 128 [ 1576.162829][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2132.tmp-b7:4' failed: Read-only file system [ 1576.203403][T22138] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1576.210018][T22138] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1576.218293][T22138] vhci_hcd vhci_hcd.0: Device attached [ 1576.224148][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 1576.241443][T22064] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1576.250523][T22145] vhci_hcd: connection closed [ 1576.250806][T13727] vhci_hcd vhci_hcd.4: stop threads [ 1576.260937][T13727] vhci_hcd vhci_hcd.4: release socket [ 1576.262979][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:4' failed: Read-only file system [ 1576.266358][T13727] vhci_hcd vhci_hcd.4: disconnect device [ 1576.292488][T22064] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1576.308314][T22064] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1576.318927][T22064] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1576.354664][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2121.tmp-b7:6' failed: Read-only file system [ 1576.384283][T22153] loop6: detected capacity change from 0 to 128 [ 1576.406370][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2133.tmp-b7:6' failed: Read-only file system [ 1576.435067][T22064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.447322][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-uuid/8AF2-7630.tmp-b7:6' failed: Read-only file system [ 1576.475313][T22064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.489469][T22162] __nla_validate_parse: 6 callbacks suppressed [ 1576.489488][T22162] netlink: 72 bytes leftover after parsing attributes in process `syz.6.28591'. [ 1576.505889][T22162] netlink: 32 bytes leftover after parsing attributes in process `syz.6.28591'. [ 1576.509300][T13734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.522182][T13734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.549389][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.556637][T13748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.566636][T22164] loop6: detected capacity change from 0 to 128 [ 1576.573980][T22164] vfat: Unknown parameter '' [ 1576.579636][T22164] option changes via remount are deprecated (pid=22161 comm=syz.6.28591) [ 1576.588335][T22164] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1576.596363][T22164] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1576.646243][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2133.tmp-b7:6' failed: Read-only file system [ 1576.856325][T22064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1577.221626][T22232] netlink: 72 bytes leftover after parsing attributes in process `syz.1.28602'. [ 1577.231116][T22232] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28602'. [ 1577.267252][T22232] !yz!: rxe_newlink: already configured on team_slave_0 [ 1577.277539][T22064] veth0_vlan: entered promiscuous mode [ 1577.306622][T22064] veth1_vlan: entered promiscuous mode [ 1577.363495][T22064] veth0_macvtap: entered promiscuous mode [ 1577.384549][T22064] veth1_macvtap: entered promiscuous mode [ 1577.416276][T22064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1577.448790][T22064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1577.488088][T13734] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.519867][T13734] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.552703][T13734] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.599990][T13734] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1577.758088][T22260] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1577.847441][T22271] loop4: detected capacity change from 0 to 1024 [ 1577.888451][T22271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1577.925753][T22271] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.28610: missing EA_INODE flag [ 1577.960073][T22271] EXT4-fs (loop4): Remounting filesystem read-only [ 1577.987456][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 1577.987473][ T29] audit: type=1400 audit(2000000512.726:89612): avc: denied { shutdown } for pid=22270 comm="syz.4.28610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1578.042234][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.073580][T22282] lo speed is unknown, defaulting to 1000 [ 1578.245012][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28606'. [ 1578.273537][ T29] audit: type=1326 audit(2000000513.015:89613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.297564][ T29] audit: type=1326 audit(2000000513.015:89614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.322045][ T29] audit: type=1326 audit(2000000513.015:89615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.345814][ T29] audit: type=1326 audit(2000000513.015:89616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.370513][ T29] audit: type=1326 audit(2000000513.015:89617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.395762][T22309] netlink: 'syz.7.28618': attribute type 13 has an invalid length. [ 1578.420529][ T29] audit: type=1326 audit(2000000513.015:89618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.445246][ T29] audit: type=1326 audit(2000000513.015:89619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.469119][ T29] audit: type=1326 audit(2000000513.015:89620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.493409][ T29] audit: type=1326 audit(2000000513.015:89621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22303 comm="syz.4.28617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1578.528349][T22309] gretap0: refused to change device tx_queue_len [ 1578.536021][T22307] 9p: Bad value for 'rfdno' [ 1578.541383][T22309] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1578.651075][T22319] SET target dimension over the limit! [ 1578.669155][T22322] SET target dimension over the limit! [ 1578.700315][T22326] set_capacity_and_notify: 1 callbacks suppressed [ 1578.700408][T22326] loop7: detected capacity change from 0 to 512 [ 1578.787418][T22326] EXT4-fs (loop7): 1 orphan inode deleted [ 1578.803648][T22326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1578.837944][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.856236][T22336] Unsupported ieee802154 address type: 0 [ 1578.875866][T22340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22340 comm=syz.3.28625 [ 1578.931514][ T6320] IPVS: starting estimator thread 0... [ 1578.974847][T22341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28626'. [ 1579.024524][T22349] IPVS: using max 2160 ests per chain, 108000 per kthread [ 1579.101088][T22356] loop7: detected capacity change from 0 to 512 [ 1579.120012][T22341] loop4: detected capacity change from 0 to 512 [ 1579.139019][T22362] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.28630'. [ 1579.149542][T22356] EXT4-fs (loop7): 1 orphan inode deleted [ 1579.174150][T22356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.176288][T22341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.240830][T22341] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.256145][T13748] IPVS: stop unused estimator thread 0... [ 1579.266857][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.290511][T22371] bridge0: entered allmulticast mode [ 1579.324822][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.341779][T22377] loop7: detected capacity change from 0 to 1024 [ 1579.351807][T22377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1579.377580][T22377] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1579.388341][T22377] System zones: 0-1, 3-36 [ 1579.394139][T22377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.422908][T22377] bond0: option all_slaves_active: invalid value (5) [ 1579.432713][T22377] netlink: 4 bytes leftover after parsing attributes in process `syz.7.28633'. [ 1579.487216][T22391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22391 comm=syz.7.28633 [ 1579.684715][T22405] SET target dimension over the limit! [ 1579.788858][T22413] lo speed is unknown, defaulting to 1000 [ 1579.893299][T22423] loop6: detected capacity change from 0 to 164 [ 1579.923771][T22423] Unsupported NM flag settings (240) [ 1580.054709][T22390] loop4: detected capacity change from 0 to 65536 [ 1580.467428][T22459] loop4: detected capacity change from 0 to 128 [ 1580.474384][T22459] vfat: Unknown parameter '' [ 1580.480968][T22459] netlink: 28 bytes leftover after parsing attributes in process `syz.4.28646'. [ 1580.787457][T22466] SET target dimension over the limit! [ 1580.913824][T22470] loop6: detected capacity change from 0 to 128 [ 1580.984071][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2155.tmp-b7:6' failed: Read-only file system [ 1580.999380][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2151.tmp-b7:4' failed: Read-only file system [ 1581.016699][T10592] udevd[10592]: symlink '../../loop3' '/dev/disk/by-diskseq/2129.tmp-b7:3' failed: Read-only file system [ 1581.034416][T22476] loop3: detected capacity change from 0 to 128 [ 1581.052760][T22479] netlink: 40 bytes leftover after parsing attributes in process `syz.6.28654'. [ 1581.061340][T10592] udevd[10592]: symlink '../../loop3' '/dev/disk/by-diskseq/2157.tmp-b7:3' failed: Read-only file system [ 1581.074604][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2152.tmp-b7:4' failed: Read-only file system [ 1581.105821][T10592] udevd[10592]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system [ 1581.111424][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2152.tmp-b7:4' failed: Read-only file system [ 1581.123307][T10592] udevd[10592]: symlink '../../loop3' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:3' failed: Read-only file system [ 1581.138830][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2156.tmp-b7:6' failed: Read-only file system [ 1581.170428][T22484] loop6: detected capacity change from 0 to 512 [ 1581.188427][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.240576][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2158.tmp-b7:6' failed: Read-only file system [ 1581.307347][T22488] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1581.322968][T22488] bond18 (unregistering): Released all slaves [ 1581.358548][T22509] 9p: Bad value for 'dfltuid' [ 1581.363306][T22509] 9p: Bad value for 'dfltuid' [ 1581.398912][T22488] netlink: 'syz.1.28657': attribute type 1 has an invalid length. [ 1581.439801][T22488] netlink: 'syz.1.28657': attribute type 1 has an invalid length. [ 1581.556506][T22534] __nla_validate_parse: 2 callbacks suppressed [ 1581.556529][T22534] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28666'. [ 1581.659831][T22544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1581.677249][T22544] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1581.986841][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.642433][T22580] xt_hashlimit: size too large, truncated to 1048576 [ 1582.668051][T22582] netlink: 40 bytes leftover after parsing attributes in process `syz.6.28679'. [ 1582.773524][T22586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28680'. [ 1582.848322][T22586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.917613][T22586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.979646][T22586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.028386][T22595] netlink: 48 bytes leftover after parsing attributes in process `syz.6.28684'. [ 1583.055838][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 1583.055859][ T29] audit: type=1326 audit(2000000517.782:89902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22579 comm="syz.4.28678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6b0dccaeb9 code=0x7ffc0000 [ 1583.103171][T22586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.118086][ T29] audit: type=1326 audit(2000000517.822:89903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.141918][ T29] audit: type=1326 audit(2000000517.822:89904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.166446][ T29] audit: type=1326 audit(2000000517.822:89905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.190360][ T29] audit: type=1326 audit(2000000517.822:89906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.214880][ T29] audit: type=1326 audit(2000000517.822:89907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.238956][ T29] audit: type=1326 audit(2000000517.822:89908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.263337][ T29] audit: type=1326 audit(2000000517.822:89909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.287951][ T29] audit: type=1326 audit(2000000517.822:89910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.311945][ T29] audit: type=1326 audit(2000000517.822:89911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22592 comm="syz.1.28683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1583.382592][T13742] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.395314][T22619] netlink: 72 bytes leftover after parsing attributes in process `syz.6.28689'. [ 1583.405274][T22619] netlink: 32 bytes leftover after parsing attributes in process `syz.6.28689'. [ 1583.433992][T13734] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.434709][T22619] vfat: Unknown parameter '' [ 1583.443200][T13734] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.457468][T22619] option changes via remount are deprecated (pid=22611 comm=syz.6.28689) [ 1583.466089][T22619] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1583.473831][T22619] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1583.476275][T13734] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.542117][T22626] batadv_slave_1: entered promiscuous mode [ 1583.603422][T22629] vfat: Unknown parameter '' [ 1583.786618][T22621] IPVS: stopping master sync thread 22633 ... [ 1583.792954][T22633] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 1583.812533][T22628] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=22628 comm=syz.7.28693 [ 1583.830342][T22626] EXT4-fs (loop3): 1 orphan inode deleted [ 1583.839322][T22626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.910605][T22625] batadv_slave_1: left promiscuous mode [ 1584.097617][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.312263][T22666] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28707'. [ 1584.324002][T22668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.28703'. [ 1584.393032][T22672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28710'. [ 1584.433132][T22672] netlink: 'syz.4.28710': attribute type 10 has an invalid length. [ 1584.442789][T22672] team0: Failed to send options change via netlink (err -105) [ 1584.451063][T22672] team0: Port device dummy0 added [ 1585.050823][T22704] set_capacity_and_notify: 5 callbacks suppressed [ 1585.050840][T22704] loop6: detected capacity change from 0 to 128 [ 1585.196733][T22708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1585.215424][T22708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1585.367375][T22712] xt_CONNSECMARK: invalid mode: 4 [ 1585.592326][T22729] usb usb7: usbfs: process 22729 (syz.7.28733) did not claim interface 0 before use [ 1585.635975][T22730] loop7: detected capacity change from 0 to 512 [ 1585.659200][T22730] /dev/loop7: Can't open blockdev [ 1585.672230][T18191] IPVS: starting estimator thread 0... [ 1585.765380][T22734] IPVS: using max 2208 ests per chain, 110400 per kthread [ 1585.792553][T22743] batadv_slave_1: entered promiscuous mode [ 1585.829604][T22743] loop4: detected capacity change from 0 to 512 [ 1585.866023][T22743] EXT4-fs (loop4): 1 orphan inode deleted [ 1585.885426][T22743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1585.935617][T22749] batadv_slave_1: entered promiscuous mode [ 1585.941869][T22741] batadv_slave_1: left promiscuous mode [ 1585.952004][T22748] batadv_slave_1: left promiscuous mode [ 1585.993011][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1586.053602][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2176.tmp-b7:4' failed: Read-only file system [ 1586.070768][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2173.tmp-b7:6' failed: Read-only file system [ 1586.109928][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2176.tmp-b7:4' failed: Read-only file system [ 1586.138651][T22755] SET target dimension over the limit! [ 1586.179130][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2176.tmp-b7:4' failed: Read-only file system [ 1586.215218][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2177.tmp-b7:4' failed: Read-only file system [ 1586.219955][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2173.tmp-b7:6' failed: Read-only file system [ 1586.357113][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2173.tmp-b7:6' failed: Read-only file system [ 1586.394106][T10508] udevd[10508]: symlink '../../loop4' '/dev/disk/by-diskseq/2177.tmp-b7:4' failed: Read-only file system [ 1586.445529][T22769] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28748'. [ 1586.470583][T22770] loop6: detected capacity change from 0 to 512 [ 1586.515925][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2178.tmp-b7:6' failed: Read-only file system [ 1586.540633][T22765] netlink: 'syz.6.28746': attribute type 2 has an invalid length. [ 1586.561222][T10508] udevd[10508]: symlink '../../loop4' '/dev/disk/by-diskseq/2177.tmp-b7:4' failed: Read-only file system [ 1586.669975][T22782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.28753'. [ 1586.696315][T22778] lo speed is unknown, defaulting to 1000 [ 1586.704348][T22782] bond0: entered promiscuous mode [ 1586.704352][T22784] Cannot find del_set index 0 as target [ 1586.704371][T22782] bond_slave_0: entered promiscuous mode [ 1586.721518][T22782] bond_slave_1: entered promiscuous mode [ 1586.774861][T22782] bond0: left promiscuous mode [ 1586.779756][T22782] bond_slave_0: left promiscuous mode [ 1586.785292][T22782] bond_slave_1: left promiscuous mode [ 1586.807099][T22789] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1586.955714][T22797] loop4: detected capacity change from 0 to 512 [ 1586.975643][T22797] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1587.011247][T22803] FAULT_INJECTION: forcing a failure. [ 1587.011247][T22803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.024412][T22803] CPU: 0 UID: 0 PID: 22803 Comm: syz.7.28761 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1587.024456][T22803] Tainted: [W]=WARN [ 1587.024486][T22803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1587.024504][T22803] Call Trace: [ 1587.024514][T22803] [ 1587.024525][T22803] __dump_stack+0x1d/0x30 [ 1587.024559][T22803] dump_stack_lvl+0x95/0xd0 [ 1587.024588][T22803] dump_stack+0x15/0x1b [ 1587.024621][T22803] should_fail_ex+0x263/0x280 [ 1587.024680][T22803] should_fail+0xb/0x20 [ 1587.024716][T22803] should_fail_usercopy+0x1a/0x20 [ 1587.024760][T22803] strncpy_from_user+0x27/0x250 [ 1587.024844][T22803] path_setxattrat+0xeb/0x310 [ 1587.024890][T22803] __x64_sys_lsetxattr+0x71/0x90 [ 1587.025001][T22803] x64_sys_call+0x2ef0/0x3000 [ 1587.025034][T22803] do_syscall_64+0xc0/0x2a0 [ 1587.025103][T22803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.025193][T22803] RIP: 0033:0x7ff97c1aaeb9 [ 1587.025214][T22803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.025295][T22803] RSP: 002b:00007ff97ac07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 1587.025319][T22803] RAX: ffffffffffffffda RBX: 00007ff97c425fa0 RCX: 00007ff97c1aaeb9 [ 1587.025334][T22803] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 0000200000000400 [ 1587.025372][T22803] RBP: 00007ff97ac07090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.025390][T22803] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001 [ 1587.025407][T22803] R13: 00007ff97c426038 R14: 00007ff97c425fa0 R15: 00007ffc53ecb6c8 [ 1587.025492][T22803] [ 1587.064256][T22797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.28758: bg 0: block 104: invalid block bitmap [ 1587.222376][T22797] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1587.231717][T22797] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.28758: invalid indirect mapped block 1 (level 1) [ 1587.262371][T22797] EXT4-fs (loop4): 1 truncate cleaned up [ 1587.273755][T22797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1587.322834][T22809] FAULT_INJECTION: forcing a failure. [ 1587.322834][T22809] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.336426][T22809] CPU: 0 UID: 0 PID: 22809 Comm: syz.7.28764 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1587.336470][T22809] Tainted: [W]=WARN [ 1587.336479][T22809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1587.336492][T22809] Call Trace: [ 1587.336499][T22809] [ 1587.336507][T22809] __dump_stack+0x1d/0x30 [ 1587.336541][T22809] dump_stack_lvl+0x95/0xd0 [ 1587.336638][T22809] dump_stack+0x15/0x1b [ 1587.336664][T22809] should_fail_ex+0x263/0x280 [ 1587.336697][T22809] ? __pfx_cgroup_show_path+0x10/0x10 [ 1587.336727][T22809] should_failslab+0x8c/0xb0 [ 1587.336810][T22809] __kmalloc_cache_noprof+0x64/0x4a0 [ 1587.336841][T22809] ? cgroup_show_path+0x6a/0x2b0 [ 1587.336868][T22809] ? __pfx_cgroup_show_path+0x10/0x10 [ 1587.336948][T22809] cgroup_show_path+0x6a/0x2b0 [ 1587.337111][T22809] ? kernfs_sop_show_path+0xa4/0xf0 [ 1587.337141][T22809] ? __pfx_cgroup_show_path+0x10/0x10 [ 1587.337186][T22809] kernfs_sop_show_path+0xb6/0xf0 [ 1587.337215][T22809] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 1587.337242][T22809] show_path+0x5a/0x80 [ 1587.337347][T22809] show_mountinfo+0xe5/0x6a0 [ 1587.337390][T22809] m_show+0x3e/0x50 [ 1587.337427][T22809] traverse+0x149/0x3a0 [ 1587.337472][T22809] seq_read_iter+0x85f/0x940 [ 1587.337650][T22809] ? proc_fail_nth_write+0x13b/0x160 [ 1587.337691][T22809] vfs_read+0x6c0/0x7f0 [ 1587.337716][T22809] ? __pfx_seq_read_iter+0x10/0x10 [ 1587.337764][T22809] __x64_sys_pread64+0xfd/0x150 [ 1587.337821][T22809] x64_sys_call+0x281b/0x3000 [ 1587.337856][T22809] do_syscall_64+0xc0/0x2a0 [ 1587.337959][T22809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.337983][T22809] RIP: 0033:0x7ff97c1aaeb9 [ 1587.338002][T22809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1587.338028][T22809] RSP: 002b:00007ff97ac07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1587.338100][T22809] RAX: ffffffffffffffda RBX: 00007ff97c425fa0 RCX: 00007ff97c1aaeb9 [ 1587.338119][T22809] RDX: 0000000000001000 RSI: 0000200000002280 RDI: 0000000000000003 [ 1587.338137][T22809] RBP: 00007ff97ac07090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.338155][T22809] R10: 0000000000000d37 R11: 0000000000000246 R12: 0000000000000001 [ 1587.338179][T22809] R13: 00007ff97c426038 R14: 00007ff97c425fa0 R15: 00007ffc53ecb6c8 [ 1587.338201][T22809] [ 1587.600130][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.679088][T22830] netlink: 72 bytes leftover after parsing attributes in process `syz.6.28767'. [ 1587.688625][T22830] netlink: 32 bytes leftover after parsing attributes in process `syz.6.28767'. [ 1587.722735][T22830] loop6: detected capacity change from 0 to 128 [ 1587.729402][T22830] vfat: Unknown parameter '' [ 1587.737575][T22830] option changes via remount are deprecated (pid=22815 comm=syz.6.28767) [ 1587.746059][T22830] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1587.753791][T22830] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1588.016150][T22839] bond18: entered promiscuous mode [ 1588.029669][T22839] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1588.278702][T22855] netlink: 87 bytes leftover after parsing attributes in process `syz.6.28779'. [ 1588.368924][T22868] batadv_slave_1: entered promiscuous mode [ 1588.380195][T22868] loop7: detected capacity change from 0 to 512 [ 1588.413681][T22868] EXT4-fs (loop7): 1 orphan inode deleted [ 1588.434946][T22868] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1588.606484][T22886] netlink: 72 bytes leftover after parsing attributes in process `syz.3.28790'. [ 1588.615993][T22886] netlink: 32 bytes leftover after parsing attributes in process `syz.3.28790'. [ 1588.651787][T22886] loop3: detected capacity change from 0 to 128 [ 1588.659209][T22886] vfat: Unknown parameter '' [ 1588.666371][T22886] option changes via remount are deprecated (pid=22882 comm=syz.3.28790) [ 1588.674911][T22886] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1588.683093][T22886] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1588.692069][T22867] batadv_slave_1: left promiscuous mode [ 1588.871186][T22884] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1588.908332][T22888] netlink: 564 bytes leftover after parsing attributes in process `syz.6.28791'. [ 1588.917533][T22888] netlink: 564 bytes leftover after parsing attributes in process `syz.6.28791'. [ 1589.014924][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.6.28793'. [ 1589.041209][T22892] loop6: detected capacity change from 0 to 1024 [ 1589.094277][T22892] netlink: 16 bytes leftover after parsing attributes in process `syz.6.28793'. [ 1589.150262][ T29] kauditd_printk_skb: 841 callbacks suppressed [ 1589.150321][ T29] audit: type=1400 audit(2000000523.786:90753): avc: denied { write } for pid=22891 comm="syz.6.28793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1589.194979][T22894] loop6: detected capacity change from 0 to 512 [ 1589.202552][T22894] EXT4-fs: Ignoring removed nobh option [ 1589.214715][T22894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=95 sclass=netlink_tcpdiag_socket pid=22894 comm=syz.6.28794 [ 1589.286111][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1589.320829][T22899] !yz!: rxe_newlink: already configured on team_slave_0 [ 1589.396217][ T29] audit: type=1326 audit(2000000524.085:90754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.420028][ T29] audit: type=1326 audit(2000000524.085:90755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.444550][ T29] audit: type=1326 audit(2000000524.085:90756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.468342][ T29] audit: type=1326 audit(2000000524.085:90757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.515675][ T29] audit: type=1326 audit(2000000524.125:90758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.529103][T22913] FAULT_INJECTION: forcing a failure. [ 1589.529103][T22913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1589.540105][ T29] audit: type=1326 audit(2000000524.125:90759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.553245][T22913] CPU: 0 UID: 0 PID: 22913 Comm: syz.6.28804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1589.553432][T22913] Tainted: [W]=WARN [ 1589.553447][T22913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1589.553497][T22913] Call Trace: [ 1589.553526][T22913] [ 1589.553557][T22913] __dump_stack+0x1d/0x30 [ 1589.553642][T22913] dump_stack_lvl+0x95/0xd0 [ 1589.553716][T22913] dump_stack+0x15/0x1b [ 1589.553856][T22913] should_fail_ex+0x263/0x280 [ 1589.553962][T22913] should_fail+0xb/0x20 [ 1589.554075][T22913] should_fail_usercopy+0x1a/0x20 [ 1589.554257][T22913] _copy_from_user+0x1c/0xb0 [ 1589.554337][T22913] kstrtouint_from_user+0x69/0xf0 [ 1589.554583][T22913] proc_fail_nth_write+0x50/0x160 [ 1589.554694][T22913] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1589.554881][T22913] vfs_write+0x269/0x9f0 [ 1589.554945][T22913] ? __rcu_read_unlock+0x4e/0x70 [ 1589.555083][T22913] ? __fget_files+0x184/0x1c0 [ 1589.555221][T22913] ? mutex_lock+0x57/0x90 [ 1589.555403][T22913] ksys_write+0xdc/0x1a0 [ 1589.555476][T22913] __x64_sys_write+0x40/0x50 [ 1589.555618][T22913] x64_sys_call+0x2847/0x3000 [ 1589.555705][T22913] do_syscall_64+0xc0/0x2a0 [ 1589.555851][T22913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.555975][T22913] RIP: 0033:0x7fa317f2b78e [ 1589.556079][T22913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1589.556144][T22913] RSP: 002b:00007fa3169befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1589.556245][T22913] RAX: ffffffffffffffda RBX: 00007fa3169bf6c0 RCX: 00007fa317f2b78e [ 1589.556297][T22913] RDX: 0000000000000001 RSI: 00007fa3169bf0a0 RDI: 0000000000000003 [ 1589.556340][T22913] RBP: 00007fa3169bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1589.556398][T22913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1589.556442][T22913] R13: 00007fa3181e6038 R14: 00007fa3181e5fa0 R15: 00007fff2a508618 [ 1589.556516][T22913] [ 1589.778891][ T29] audit: type=1326 audit(2000000524.125:90760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.803315][ T29] audit: type=1326 audit(2000000524.195:90761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.827168][ T29] audit: type=1326 audit(2000000524.195:90762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22906 comm="syz.3.28801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1589.910811][T22924] Unsupported ieee802154 address type: 0 [ 1589.991411][T22938] Unsupported ieee802154 address type: 0 [ 1590.052448][T22931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1590.065202][T22931] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1590.087171][T22927] set_capacity_and_notify: 2 callbacks suppressed [ 1590.087189][T22927] loop6: detected capacity change from 0 to 512 [ 1590.146107][T22951] IPv6: NLM_F_CREATE should be specified when creating new route [ 1590.148151][T22950] loop3: detected capacity change from 0 to 128 [ 1590.219710][T22955] SET target dimension over the limit! [ 1590.719336][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.057493][T22981] loop7: detected capacity change from 0 to 128 [ 1591.068224][T22980] batadv_slave_1: entered promiscuous mode [ 1591.083890][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-diskseq/2200.tmp-b7:7' failed: Read-only file system [ 1591.102775][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 1591.117448][T10508] udevd[10508]: symlink '../../loop3' '/dev/disk/by-diskseq/2199.tmp-b7:3' failed: Read-only file system [ 1591.131761][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:7' failed: Read-only file system [ 1591.162877][T22980] loop4: detected capacity change from 0 to 512 [ 1591.181682][T13748] Bluetooth: hci0: Frame reassembly failed (-84) [ 1591.191828][T22980] EXT4-fs (loop4): 1 orphan inode deleted [ 1591.198681][T10508] udevd[10508]: symlink '../../loop4' '/dev/disk/by-diskseq/2201.tmp-b7:4' failed: Read-only file system [ 1591.216617][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-diskseq/2200.tmp-b7:7' failed: Read-only file system [ 1591.225645][T22980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.235259][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 1591.252499][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-uuid/1DC8-5927.tmp-b7:7' failed: Read-only file system [ 1591.270370][T10508] udevd[10508]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1591.296724][T16174] udevd[16174]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:7' failed: Read-only file system [ 1591.344149][T22978] batadv_slave_1: left promiscuous mode [ 1591.388734][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.416142][T23003] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23003 comm=syz.3.28838 [ 1591.443616][T23000] Unsupported ieee802154 address type: 0 [ 1591.510679][T23014] netlink: 'syz.4.28837': attribute type 21 has an invalid length. [ 1591.523385][T23006] loop7: detected capacity change from 0 to 512 [ 1591.542164][T23006] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1591.555694][T23006] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.586921][T23019] loop3: detected capacity change from 0 to 128 [ 1591.638373][T23023] batadv_slave_1: entered promiscuous mode [ 1591.649710][T23023] loop3: detected capacity change from 0 to 512 [ 1591.665186][T23023] EXT4-fs (loop3): 1 orphan inode deleted [ 1591.672785][T23023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1591.730328][T23022] batadv_slave_1: left promiscuous mode [ 1591.780133][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.088202][T23047] loop3: detected capacity change from 0 to 512 [ 1592.096083][T23047] EXT4-fs: Ignoring removed nobh option [ 1592.113453][T23047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1592.127218][T23047] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.138852][T23047] FAULT_INJECTION: forcing a failure. [ 1592.138852][T23047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1592.152759][T23047] CPU: 0 UID: 0 PID: 23047 Comm: syz.3.28854 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1592.152790][T23047] Tainted: [W]=WARN [ 1592.152802][T23047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1592.152814][T23047] Call Trace: [ 1592.152821][T23047] [ 1592.152846][T23047] __dump_stack+0x1d/0x30 [ 1592.152886][T23047] dump_stack_lvl+0x95/0xd0 [ 1592.152971][T23047] dump_stack+0x15/0x1b [ 1592.153000][T23047] should_fail_ex+0x263/0x280 [ 1592.153029][T23047] should_fail+0xb/0x20 [ 1592.153098][T23047] should_fail_usercopy+0x1a/0x20 [ 1592.153154][T23047] _copy_from_user+0x1c/0xb0 [ 1592.153181][T23047] ___sys_sendmsg+0xc1/0x1e0 [ 1592.153223][T23047] __x64_sys_sendmsg+0xd4/0x160 [ 1592.153310][T23047] x64_sys_call+0x17ba/0x3000 [ 1592.153333][T23047] do_syscall_64+0xc0/0x2a0 [ 1592.153363][T23047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.153383][T23047] RIP: 0033:0x7f5b52e8aeb9 [ 1592.153408][T23047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.153424][T23047] RSP: 002b:00007f5b518e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.153442][T23047] RAX: ffffffffffffffda RBX: 00007f5b53105fa0 RCX: 00007f5b52e8aeb9 [ 1592.153502][T23047] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1592.153584][T23047] RBP: 00007f5b518e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1592.153623][T23047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.153634][T23047] R13: 00007f5b53106038 R14: 00007f5b53105fa0 R15: 00007ffd69bb0e58 [ 1592.153653][T23047] [ 1592.342312][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.362263][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.385906][T23053] xt_hashlimit: size too large, truncated to 1048576 [ 1592.395988][T23051] tmpfs: Bad value for 'mpol' [ 1592.481554][T23057] __nla_validate_parse: 14 callbacks suppressed [ 1592.481653][T23057] netlink: 72 bytes leftover after parsing attributes in process `syz.3.28858'. [ 1592.669570][T23071] loop3: detected capacity change from 0 to 256 [ 1592.692856][T23071] vfat: Bad value for 'uni_xlate' [ 1592.706256][T23073] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1592.728110][T23073] random: crng reseeded on system resumption [ 1592.742347][T23073] Unrecognized hibernate image header format! [ 1592.749298][T23073] PM: hibernation: Image mismatch: architecture specific data [ 1592.895503][T23080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28866'. [ 1593.049111][T23082] loop7: detected capacity change from 0 to 128 [ 1593.072328][T23082] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1593.099661][T23082] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1593.161822][T22064] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1593.194858][T23087] vhci_hcd vhci_hcd.0: invalid port number 0 [ 1593.216269][T10407] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1593.311027][T23092] netlink: 24 bytes leftover after parsing attributes in process `syz.6.28871'. [ 1593.337265][T23096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23096 comm=syz.4.28873 [ 1593.395184][T23100] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1593.485575][T23100] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 1593.508200][T23106] batadv_slave_1: entered promiscuous mode [ 1593.518510][T23108] tmpfs: Bad value for 'mpol' [ 1593.545620][T23104] batadv_slave_1: left promiscuous mode [ 1593.577952][T23100] IPv6: NLM_F_CREATE should be specified when creating new route [ 1593.712301][T23114] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙˙˙˙˙˙˙' [ 1593.807124][T23119] netlink: 72 bytes leftover after parsing attributes in process `syz.4.28880'. [ 1593.816739][T23119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.28880'. [ 1593.853314][T23119] vfat: Unknown parameter '' [ 1593.860343][T23119] option changes via remount are deprecated (pid=23111 comm=syz.4.28880) [ 1593.869056][T23119] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1593.877184][T23119] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1594.370784][T23122] FAULT_INJECTION: forcing a failure. [ 1594.370784][T23122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.384195][T23122] CPU: 0 UID: 0 PID: 23122 Comm: syz.7.28881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1594.384306][T23122] Tainted: [W]=WARN [ 1594.384316][T23122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1594.384333][T23122] Call Trace: [ 1594.384340][T23122] [ 1594.384348][T23122] __dump_stack+0x1d/0x30 [ 1594.384373][T23122] dump_stack_lvl+0x95/0xd0 [ 1594.384434][T23122] dump_stack+0x15/0x1b [ 1594.384462][T23122] should_fail_ex+0x263/0x280 [ 1594.384605][T23122] should_fail+0xb/0x20 [ 1594.384643][T23122] should_fail_usercopy+0x1a/0x20 [ 1594.384690][T23122] _copy_from_user+0x1c/0xb0 [ 1594.384720][T23122] autofs_dev_ioctl+0xdd/0x6a0 [ 1594.384828][T23122] ? mutex_lock+0x57/0x90 [ 1594.384873][T23122] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 1594.384919][T23122] __se_sys_ioctl+0xce/0x140 [ 1594.385040][T23122] __x64_sys_ioctl+0x43/0x50 [ 1594.385084][T23122] x64_sys_call+0x14b0/0x3000 [ 1594.385192][T23122] do_syscall_64+0xc0/0x2a0 [ 1594.385236][T23122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.385267][T23122] RIP: 0033:0x7ff97c1aaeb9 [ 1594.385289][T23122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.385342][T23122] RSP: 002b:00007ff97ac07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1594.385370][T23122] RAX: ffffffffffffffda RBX: 00007ff97c425fa0 RCX: 00007ff97c1aaeb9 [ 1594.385390][T23122] RDX: 00002000000000c0 RSI: 00000000c0189376 RDI: 0000000000000004 [ 1594.385409][T23122] RBP: 00007ff97ac07090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.385428][T23122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.385445][T23122] R13: 00007ff97c426038 R14: 00007ff97c425fa0 R15: 00007ffc53ecb6c8 [ 1594.385473][T23122] [ 1594.685692][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 1594.691990][ T29] audit: type=1400 audit(2000000529.364:90991): avc: denied { map } for pid=23126 comm="syz.6.28884" path="socket:[315039]" dev="sockfs" ino=315039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1594.744497][T23133] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1594.823775][T23133] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 1594.920949][T23133] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1594.963350][T23133] IPv6: NLM_F_CREATE should be specified when creating new route [ 1594.989244][T23144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28890'. [ 1594.998777][T23144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.28890'. [ 1595.161410][T23151] netlink: 292 bytes leftover after parsing attributes in process `syz.4.28893'. [ 1595.234839][T23160] netlink: 72 bytes leftover after parsing attributes in process `syz.7.28894'. [ 1595.244425][T23160] netlink: 32 bytes leftover after parsing attributes in process `syz.7.28894'. [ 1595.278424][T23160] set_capacity_and_notify: 8 callbacks suppressed [ 1595.278517][T23160] loop7: detected capacity change from 0 to 128 [ 1595.292329][T23160] vfat: Unknown parameter '' [ 1595.299358][T23160] option changes via remount are deprecated (pid=23150 comm=syz.7.28894) [ 1595.307843][T23160] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1595.316722][T23160] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1595.342009][T23161] loop4: detected capacity change from 0 to 512 [ 1595.513222][T23161] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.28893: error while reading EA inode 32 err=-116 [ 1595.693476][T23161] EXT4-fs (loop4): Remounting filesystem read-only [ 1595.708133][T23163] loop3: detected capacity change from 0 to 4096 [ 1595.714723][T23161] EXT4-fs (loop4): 1 orphan inode deleted [ 1595.726194][T23163] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1595.764370][T23161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1595.836066][T23163] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.28897: bg 0: block 363: padding at end of block bitmap is not set [ 1595.866846][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1595.904145][ T29] audit: type=1400 audit(2000000530.569:90992): avc: denied { connect } for pid=23176 comm="syz.4.28901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1595.971854][T23183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=23183 comm=syz.6.28903 [ 1595.984718][T23183] netlink: 'syz.6.28903': attribute type 9 has an invalid length. [ 1595.997350][T23183] netlink: 'syz.6.28903': attribute type 9 has an invalid length. [ 1596.010927][T13748] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.023934][T23185] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1596.031219][T23185] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.036661][T13748] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.038473][T23185] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.038484][T23185] IPv6: NLM_F_CREATE should be set when creating new route [ 1596.062310][T13748] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.083779][T13748] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.093433][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1596.131057][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2235.tmp-b7:3' failed: Read-only file system [ 1596.151780][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2229.tmp-b7:6' failed: Read-only file system [ 1596.165746][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2235.tmp-b7:3' failed: Read-only file system [ 1596.182225][T23195] Unsupported ieee802154 address type: 0 [ 1596.189535][T16174] udevd[16174]: symlink '../../loop3' '/dev/disk/by-diskseq/2237.tmp-b7:3' failed: Read-only file system [ 1596.213122][T10508] udevd[10508]: symlink '../../loop7' '/dev/disk/by-diskseq/2233.tmp-b7:7' failed: Read-only file system [ 1596.235149][ T29] audit: type=1326 audit(2000000530.898:90993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.259721][ T29] audit: type=1326 audit(2000000530.898:90994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.283593][ T29] audit: type=1326 audit(2000000530.898:90995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.295625][T23195] loop6: detected capacity change from 0 to 512 [ 1596.308113][ T29] audit: type=1326 audit(2000000530.898:90996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.308153][ T29] audit: type=1326 audit(2000000530.898:90997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.362965][ T29] audit: type=1326 audit(2000000530.898:90998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.387639][ T29] audit: type=1326 audit(2000000530.898:90999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.411546][ T29] audit: type=1326 audit(2000000530.898:91000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23197 comm="syz.7.28909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1596.422940][T10508] udevd[10508]: symlink '../../loop4' '/dev/disk/by-diskseq/2236.tmp-b7:4' failed: Read-only file system [ 1596.450596][T23205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1596.471022][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2238.tmp-b7:6' failed: Read-only file system [ 1596.485394][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 1596.505530][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2238.tmp-b7:6' failed: Read-only file system [ 1596.520720][T10508] udevd[10508]: symlink '../../loop7' '/dev/disk/by-diskseq/2233.tmp-b7:7' failed: Read-only file system [ 1596.534926][T23210] netlink: 'syz.7.28912': attribute type 32 has an invalid length. [ 1596.715792][T23227] loop4: detected capacity change from 0 to 128 [ 1596.722585][T23227] vfat: Unknown parameter '' [ 1596.730811][T23227] option changes via remount are deprecated (pid=23217 comm=syz.4.28914) [ 1596.739322][T23227] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1596.747702][T23227] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1597.264694][T23237] loop6: detected capacity change from 0 to 512 [ 1597.350840][T23242] SET target dimension over the limit! [ 1597.356961][T23242] lo speed is unknown, defaulting to 1000 [ 1597.364295][T23242] lo speed is unknown, defaulting to 1000 [ 1597.370311][T23242] lo speed is unknown, defaulting to 1000 [ 1597.378619][T23242] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1597.399632][T23242] lo speed is unknown, defaulting to 1000 [ 1597.406693][T23242] lo speed is unknown, defaulting to 1000 [ 1597.413392][T23242] lo speed is unknown, defaulting to 1000 [ 1597.431023][T23242] lo speed is unknown, defaulting to 1000 [ 1597.444009][T23242] lo speed is unknown, defaulting to 1000 [ 1597.481751][T23242] lo speed is unknown, defaulting to 1000 [ 1597.488150][T23242] lo speed is unknown, defaulting to 1000 [ 1597.492921][T23247] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1597.497384][T23242] lo speed is unknown, defaulting to 1000 [ 1597.511344][T23252] random: crng reseeded on system resumption [ 1597.595115][T23261] __nla_validate_parse: 8 callbacks suppressed [ 1597.595133][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28929'. [ 1597.611238][T23260] lo speed is unknown, defaulting to 1000 [ 1597.611958][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28929'. [ 1597.669095][T23263] 9p: Bad value for 'wfdno' [ 1597.678312][T23266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.698350][T23269] xt_hashlimit: size too large, truncated to 1048576 [ 1597.711023][T23266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.738466][T23260] lo speed is unknown, defaulting to 1000 [ 1598.072540][T23286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1598.343244][T23297] batadv_slave_1: entered promiscuous mode [ 1598.354227][T23297] loop4: detected capacity change from 0 to 512 [ 1598.370579][T23297] EXT4-fs (loop4): 1 orphan inode deleted [ 1598.377442][T23297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.436077][T23296] batadv_slave_1: left promiscuous mode [ 1598.453431][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.479327][T23300] batadv_slave_1: entered promiscuous mode [ 1598.490546][T23300] loop4: detected capacity change from 0 to 512 [ 1598.508256][T23300] EXT4-fs (loop4): 1 orphan inode deleted [ 1598.525074][T23300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1598.555687][T23299] batadv_slave_1: left promiscuous mode [ 1598.573324][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1598.593321][T23303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28943'. [ 1598.671664][T23307] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1598.683601][T23307] netlink: 'syz.7.28945': attribute type 4 has an invalid length. [ 1598.700851][T23308] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1598.724814][T23311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=23311 comm=syz.4.28944 [ 1599.074518][T23335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=23335 comm=syz.7.28956 [ 1599.100034][T23335] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=23335 comm=syz.7.28956 [ 1599.688439][T23354] batadv_slave_1: entered promiscuous mode [ 1599.696542][T23353] batadv_slave_1: left promiscuous mode [ 1599.724961][T23356] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1599.737047][T23356] random: crng reseeded on system resumption [ 1600.086966][T23366] loop7: detected capacity change from 0 to 128 [ 1600.093722][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 1600.093805][ T29] audit: type=1326 audit(2000000534.744:91142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.105172][T23368] xt_hashlimit: size too large, truncated to 1048576 [ 1600.124473][ T29] audit: type=1326 audit(2000000534.744:91143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.124518][ T29] audit: type=1326 audit(2000000534.754:91144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.179431][ T29] audit: type=1326 audit(2000000534.754:91146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.203781][ T29] audit: type=1326 audit(2000000534.754:91145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.239762][ T29] audit: type=1326 audit(2000000534.754:91147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.264196][ T29] audit: type=1326 audit(2000000534.754:91148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.287891][ T29] audit: type=1326 audit(2000000534.754:91149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.312609][ T29] audit: type=1326 audit(2000000534.754:91150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.336604][ T29] audit: type=1326 audit(2000000534.754:91151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23367 comm="syz.1.28971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1600.446400][T23366] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1600.519756][T23366] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1600.714659][T22064] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1600.743493][T23389] gre0: entered promiscuous mode [ 1600.756931][T23391] netlink: 32 bytes leftover after parsing attributes in process `syz.6.28976'. [ 1600.787009][T23391] loop6: detected capacity change from 0 to 128 [ 1600.794294][T23391] vfat: Unknown parameter '' [ 1600.800360][T23391] option changes via remount are deprecated (pid=23384 comm=syz.6.28976) [ 1600.808977][T23391] cgroup: option or name mismatch, new: 0x10 "", old: 0x0 "" [ 1600.816925][T23391] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1600.830412][T23394] netlink: 20 bytes leftover after parsing attributes in process `syz.7.28977'. [ 1600.857291][T23394] netlink: 39 bytes leftover after parsing attributes in process `syz.7.28977'. [ 1600.959629][T23405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1600.960815][T23411] loop4: detected capacity change from 0 to 128 [ 1600.971714][T23405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1600.987532][T23411] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1601.000524][T23411] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1601.052515][T16166] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1601.161099][T16174] udevd[16174]: symlink '../../loop4' '/dev/disk/by-diskseq/2255.tmp-b7:4' failed: Read-only file system [ 1601.537827][T16174] udevd[16174]: symlink '../../loop7' '/dev/disk/by-diskseq/2251.tmp-b7:7' failed: Read-only file system [ 1601.553825][T10508] udevd[10508]: symlink '../../loop6' '/dev/disk/by-diskseq/2253.tmp-b7:6' failed: Read-only file system [ 1601.574610][T23423] batadv_slave_1: entered promiscuous mode [ 1601.582445][T23422] batadv_slave_1: left promiscuous mode [ 1601.653517][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2253.tmp-b7:6' failed: Read-only file system [ 1601.669078][T23425] loop6: detected capacity change from 0 to 512 [ 1601.683889][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2256.tmp-b7:6' failed: Read-only file system [ 1601.699335][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-label/\x86\x5b.tmp-b7:6' failed: Read-only file system [ 1601.714443][T23425] IPv6: NLM_F_CREATE should be specified when creating new route [ 1601.722815][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2256.tmp-b7:6' failed: Read-only file system [ 1601.741052][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2256.tmp-b7:6' failed: Read-only file system [ 1601.756688][T16174] udevd[16174]: symlink '../../loop6' '/dev/disk/by-diskseq/2256.tmp-b7:6' failed: Read-only file system [ 1601.784536][T10508] udevd[10508]: symlink '../../loop3' '/dev/disk/by-diskseq/2249.tmp-b7:3' failed: Read-only file system [ 1601.796554][T23429] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1601.863446][T23435] xt_hashlimit: size too large, truncated to 1048576 [ 1601.913734][T23437] loop3: detected capacity change from 0 to 1024 [ 1602.442254][T23455] netlink: 60 bytes leftover after parsing attributes in process `syz.7.29001'. [ 1602.453001][T23455] netlink: 20 bytes leftover after parsing attributes in process `syz.7.29001'. [ 1602.470199][T23456] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1602.915223][T23470] random: crng reseeded on system resumption [ 1602.933959][T23470] Unrecognized hibernate image header format! [ 1602.940094][T23470] PM: hibernation: Image mismatch: architecture specific data [ 1602.949013][T23442] loop3: detected capacity change from 0 to 512 [ 1602.957791][T23472] loop4: detected capacity change from 0 to 512 [ 1602.967882][T23442] EXT4-fs: Ignoring removed nobh option [ 1602.978445][T23472] EXT4-fs: dax option not supported [ 1603.006784][T23442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1603.034881][T23442] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1603.046663][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.7.29009'. [ 1603.094777][T23477] lo speed is unknown, defaulting to 1000 [ 1603.102962][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1603.141198][T23481] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1603.153518][T23481] random: crng reseeded on system resumption [ 1603.162490][T23481] Unrecognized hibernate image header format! [ 1603.168607][T23481] PM: hibernation: Image mismatch: architecture specific data [ 1603.171082][T23477] lo speed is unknown, defaulting to 1000 [ 1603.353408][T23494] loop3: detected capacity change from 0 to 512 [ 1603.361933][T23494] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1603.410636][T23494] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 1603.439610][T23500] netlink: 60 bytes leftover after parsing attributes in process `syz.7.29017'. [ 1603.449266][T23500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.29017'. [ 1603.486908][T23494] IPv6: NLM_F_CREATE should be specified when creating new route [ 1603.522229][T23504] batadv_slave_1: entered promiscuous mode [ 1603.529610][T23503] batadv_slave_1: left promiscuous mode [ 1603.585082][T23510] loop7: detected capacity change from 0 to 512 [ 1603.634936][T23517] netlink: 'syz.1.29024': attribute type 30 has an invalid length. [ 1662.543955][T23540] netlink: 20 bytes leftover after parsing attributes in process `syz.7.29033'. [ 1662.543966][T23539] batadv_slave_1: entered promiscuous mode [ 1662.548491][T23538] batadv_slave_1: left promiscuous mode [ 1662.554814][T23540] netlink: 16 bytes leftover after parsing attributes in process `syz.7.29033'. [ 1662.584735][ T29] kauditd_printk_skb: 1075 callbacks suppressed [ 1662.584754][ T29] audit: type=1326 audit(2000000597.090:92227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.625563][T23542] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 1662.637856][T23546] udevd[23546]: symlink '../../loop3' '/dev/disk/by-diskseq/2270.tmp-b7:3' failed: Read-only file system [ 1662.658975][ T29] audit: type=1326 audit(2000000597.120:92228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.682743][ T29] audit: type=1326 audit(2000000597.120:92229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.707110][ T29] audit: type=1326 audit(2000000597.120:92230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.708031][T23546] udevd[23546]: symlink '../../loop3' '/dev/disk/by-diskseq/2270.tmp-b7:3' failed: Read-only file system [ 1662.730801][ T29] audit: type=1326 audit(2000000597.120:92231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.730840][ T29] audit: type=1326 audit(2000000597.120:92232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.730874][ T29] audit: type=1326 audit(2000000597.120:92233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.731067][ T29] audit: type=1326 audit(2000000597.120:92234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.731102][ T29] audit: type=1326 audit(2000000597.120:92235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.731137][ T29] audit: type=1326 audit(2000000597.120:92236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23537 comm="syz.7.29033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff97c1aaeb9 code=0x7ffc0000 [ 1662.847809][T23548] udevd[23548]: symlink '../../loop4' '/dev/disk/by-diskseq/2262.tmp-b7:4' failed: Read-only file system [ 1662.901047][T23546] udevd[23546]: symlink '../../loop3' '/dev/disk/by-diskseq/2270.tmp-b7:3' failed: Read-only file system [ 1662.929544][T23548] udevd[23548]: symlink '../../loop7' '/dev/disk/by-diskseq/2269.tmp-b7:7' failed: Read-only file system [ 1662.952905][T23548] udevd[23548]: symlink '../../loop6' '/dev/disk/by-diskseq/2257.tmp-b7:6' failed: Read-only file system [ 1662.981723][T23546] udevd[23546]: symlink '../../loop4' '/dev/disk/by-diskseq/2262.tmp-b7:4' failed: Read-only file system [ 1663.004650][T23548] udevd[23548]: symlink '../../loop7' '/dev/disk/by-diskseq/2269.tmp-b7:7' failed: Read-only file system [ 1663.039702][T23548] udevd[23548]: symlink '../../loop4' '/dev/disk/by-diskseq/2262.tmp-b7:4' failed: Read-only file system [ 1663.069796][T23548] udevd[23548]: symlink '../../loop7' '/dev/disk/by-diskseq/2269.tmp-b7:7' failed: Read-only file system [ 1663.074133][T23567] FAULT_INJECTION: forcing a failure. [ 1663.074133][T23567] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.094408][T23567] CPU: 0 UID: 0 PID: 23567 Comm: syz.7.29044 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1663.094466][T23567] Tainted: [W]=WARN [ 1663.094527][T23567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1663.094544][T23567] Call Trace: [ 1663.094554][T23567] [ 1663.094565][T23567] __dump_stack+0x1d/0x30 [ 1663.094599][T23567] dump_stack_lvl+0x95/0xd0 [ 1663.094637][T23567] dump_stack+0x15/0x1b [ 1663.094664][T23567] should_fail_ex+0x263/0x280 [ 1663.094765][T23567] should_failslab+0x8c/0xb0 [ 1663.094796][T23567] kmem_cache_alloc_noprof+0x68/0x490 [ 1663.094846][T23567] ? audit_log_start+0x34c/0x730 [ 1663.094915][T23567] audit_log_start+0x34c/0x730 [ 1663.094954][T23567] ? kstrtouint+0x76/0xc0 [ 1663.095009][T23567] audit_seccomp+0x47/0x100 [ 1663.095041][T23567] ? __seccomp_filter+0x8db/0x1350 [ 1663.095069][T23567] __seccomp_filter+0x8ec/0x1350 [ 1663.095098][T23567] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1663.095191][T23567] ? vfs_write+0x86e/0x9f0 [ 1663.095217][T23567] ? __rcu_read_unlock+0x4e/0x70 [ 1663.095257][T23567] ? __fget_files+0x184/0x1c0 [ 1663.095323][T23567] __secure_computing+0x81/0x150 [ 1663.095350][T23567] syscall_trace_enter+0xce/0x1e0 [ 1663.095397][T23567] do_syscall_64+0x9a/0x2a0 [ 1663.095443][T23567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.095535][T23567] RIP: 0033:0x7ff97c1aaeb9 [ 1663.095556][T23567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.095580][T23567] RSP: 002b:00007ff97ac07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 1663.095604][T23567] RAX: ffffffffffffffda RBX: 00007ff97c425fa0 RCX: 00007ff97c1aaeb9 [ 1663.095757][T23567] RDX: 0000000000000008 RSI: 0000200000000140 RDI: ffffffffffffffff [ 1663.095772][T23567] RBP: 00007ff97ac07090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.095786][T23567] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 1663.095801][T23567] R13: 00007ff97c426038 R14: 00007ff97c425fa0 R15: 00007ffc53ecb6c8 [ 1663.095826][T23567] [ 1663.370836][T23565] loop4: detected capacity change from 0 to 4096 [ 1663.388603][T23565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1663.404368][T23565] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.29043: bg 0: block 363: padding at end of block bitmap is not set [ 1663.511730][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.538811][T23582] FAULT_INJECTION: forcing a failure. [ 1663.538811][T23582] name failslab, interval 1, probability 0, space 0, times 0 [ 1663.551539][T23582] CPU: 0 UID: 0 PID: 23582 Comm: syz.4.29049 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1663.551579][T23582] Tainted: [W]=WARN [ 1663.551588][T23582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1663.551661][T23582] Call Trace: [ 1663.551672][T23582] [ 1663.551683][T23582] __dump_stack+0x1d/0x30 [ 1663.551729][T23582] dump_stack_lvl+0x95/0xd0 [ 1663.551752][T23582] dump_stack+0x15/0x1b [ 1663.551772][T23582] should_fail_ex+0x263/0x280 [ 1663.551852][T23582] should_failslab+0x8c/0xb0 [ 1663.551877][T23582] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 1663.551929][T23582] ? __d_alloc+0x37/0x340 [ 1663.551965][T23582] __d_alloc+0x37/0x340 [ 1663.551994][T23582] d_alloc_parallel+0x54/0xce0 [ 1663.552090][T23582] ? lockref_get_not_dead+0x120/0x1c0 [ 1663.552120][T23582] ? __rcu_read_unlock+0x4e/0x70 [ 1663.552271][T23582] ? try_to_unlazy+0x3c0/0x5b0 [ 1663.552304][T23582] __lookup_slow+0x96/0x260 [ 1663.552418][T23582] lookup_slow+0x3c/0x60 [ 1663.552454][T23582] path_lookupat+0x2f7/0x500 [ 1663.552486][T23582] filename_lookup+0x190/0x390 [ 1663.552587][T23582] user_path_at+0x3e/0x130 [ 1663.552624][T23582] __se_sys_mount+0x25b/0x2e0 [ 1663.552649][T23582] ? fput+0x8f/0xc0 [ 1663.552788][T23582] __x64_sys_mount+0x67/0x80 [ 1663.552815][T23582] x64_sys_call+0x2cca/0x3000 [ 1663.552843][T23582] do_syscall_64+0xc0/0x2a0 [ 1663.552875][T23582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1663.552917][T23582] RIP: 0033:0x7f6b0dccaeb9 [ 1663.552939][T23582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1663.553018][T23582] RSP: 002b:00007f6b0c71f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1663.553039][T23582] RAX: ffffffffffffffda RBX: 00007f6b0df45fa0 RCX: 00007f6b0dccaeb9 [ 1663.553056][T23582] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 1663.553073][T23582] RBP: 00007f6b0c71f090 R08: 0000000000000000 R09: 0000000000000000 [ 1663.553136][T23582] R10: 0000000000018421 R11: 0000000000000246 R12: 0000000000000001 [ 1663.553150][T23582] R13: 00007f6b0df46038 R14: 00007f6b0df45fa0 R15: 00007ffea3ba32c8 [ 1663.553178][T23582] [ 1663.868263][T23595] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1663.892185][T23592] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1663.903562][T23592] random: crng reseeded on system resumption [ 1663.924680][T23592] Unrecognized hibernate image header format! [ 1663.931525][T23592] PM: hibernation: Image mismatch: architecture specific data [ 1663.952795][T23598] netlink: 'syz.3.29057': attribute type 2 has an invalid length. [ 1664.071409][T23616] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1664.094787][T23616] random: crng reseeded on system resumption [ 1664.112251][T23618] SET target dimension over the limit! [ 1664.119892][T23616] Unrecognized hibernate image header format! [ 1664.126029][T23616] PM: hibernation: Image mismatch: architecture specific data [ 1664.189027][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29065'. [ 1664.235194][T23629] FAULT_INJECTION: forcing a failure. [ 1664.235194][T23629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.249093][T23629] CPU: 0 UID: 0 PID: 23629 Comm: syz.3.29066 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1664.249152][T23629] Tainted: [W]=WARN [ 1664.249160][T23629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1664.249173][T23629] Call Trace: [ 1664.249180][T23629] [ 1664.249187][T23629] __dump_stack+0x1d/0x30 [ 1664.249219][T23629] dump_stack_lvl+0x95/0xd0 [ 1664.249254][T23629] dump_stack+0x15/0x1b [ 1664.249320][T23629] should_fail_ex+0x263/0x280 [ 1664.249359][T23629] should_fail+0xb/0x20 [ 1664.249392][T23629] should_fail_usercopy+0x1a/0x20 [ 1664.249431][T23629] _copy_from_user+0x1c/0xb0 [ 1664.249453][T23629] copy_from_sockptr_offset+0x66/0xa0 [ 1664.249496][T23629] do_ipt_set_ctl+0x612/0x8e0 [ 1664.249549][T23629] nf_setsockopt+0x199/0x1b0 [ 1664.249650][T23629] ip_setsockopt+0x102/0x110 [ 1664.249686][T23629] udp_setsockopt+0x99/0xb0 [ 1664.249716][T23629] sock_common_setsockopt+0x69/0x80 [ 1664.249750][T23629] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1664.249801][T23629] __sys_setsockopt+0x184/0x200 [ 1664.249956][T23629] __x64_sys_setsockopt+0x64/0x80 [ 1664.250002][T23629] x64_sys_call+0x21d5/0x3000 [ 1664.250036][T23629] do_syscall_64+0xc0/0x2a0 [ 1664.250126][T23629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.250149][T23629] RIP: 0033:0x7f5b52e8aeb9 [ 1664.250166][T23629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.250189][T23629] RSP: 002b:00007f5b518e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1664.250215][T23629] RAX: ffffffffffffffda RBX: 00007f5b53105fa0 RCX: 00007f5b52e8aeb9 [ 1664.250307][T23629] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 1664.250324][T23629] RBP: 00007f5b518e7090 R08: 0000000000000488 R09: 0000000000000000 [ 1664.250342][T23629] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.250356][T23629] R13: 00007f5b53106038 R14: 00007f5b53105fa0 R15: 00007ffd69bb0e58 [ 1664.250481][T23629] [ 1664.572320][T13742] Bluetooth: hci0: Frame reassembly failed (-84) [ 1664.658884][T23644] tmpfs: Bad value for 'mpol' [ 1664.670336][T23644] netlink: 10 bytes leftover after parsing attributes in process `syz.7.29071'. [ 1664.745816][T23651] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1664.806471][T23655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.29077'. [ 1664.901898][T23643] tmpfs: Unknown parameter 'mÁil' [ 1664.928022][T23664] FAULT_INJECTION: forcing a failure. [ 1664.928022][T23664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.941933][T23664] CPU: 1 UID: 0 PID: 23664 Comm: syz.6.29081 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1664.941975][T23664] Tainted: [W]=WARN [ 1664.941985][T23664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1664.942002][T23664] Call Trace: [ 1664.942011][T23664] [ 1664.942024][T23664] __dump_stack+0x1d/0x30 [ 1664.942056][T23664] dump_stack_lvl+0x95/0xd0 [ 1664.942336][T23664] dump_stack+0x15/0x1b [ 1664.942436][T23664] should_fail_ex+0x263/0x280 [ 1664.942559][T23664] should_fail+0xb/0x20 [ 1664.942592][T23664] should_fail_usercopy+0x1a/0x20 [ 1664.942632][T23664] _copy_to_user+0x20/0xa0 [ 1664.942707][T23664] simple_read_from_buffer+0xb5/0x130 [ 1664.942837][T23664] proc_fail_nth_read+0x10e/0x150 [ 1664.942870][T23664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1664.942906][T23664] vfs_read+0x1ab/0x7f0 [ 1664.942930][T23664] ? __rcu_read_unlock+0x4e/0x70 [ 1664.942977][T23664] ? __fget_files+0x184/0x1c0 [ 1664.943043][T23664] ? mutex_lock+0x57/0x90 [ 1664.943075][T23664] ksys_read+0xdc/0x1a0 [ 1664.943103][T23664] __x64_sys_read+0x40/0x50 [ 1664.943123][T23664] x64_sys_call+0x2889/0x3000 [ 1664.943153][T23664] do_syscall_64+0xc0/0x2a0 [ 1664.943197][T23664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.943281][T23664] RIP: 0033:0x7fa317f2b78e [ 1664.943298][T23664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1664.943321][T23664] RSP: 002b:00007fa3169befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1664.943428][T23664] RAX: ffffffffffffffda RBX: 00007fa3169bf6c0 RCX: 00007fa317f2b78e [ 1664.943447][T23664] RDX: 000000000000000f RSI: 00007fa3169bf0a0 RDI: 0000000000000004 [ 1664.943463][T23664] RBP: 00007fa3169bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.943477][T23664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.943524][T23664] R13: 00007fa3181e6038 R14: 00007fa3181e5fa0 R15: 00007fff2a508618 [ 1664.943551][T23664] [ 1665.218275][T23672] loop6: detected capacity change from 0 to 512 [ 1665.295722][T23674] loop6: detected capacity change from 0 to 136 [ 1665.312127][T23674] Attempt to read inode for relocated directory [ 1665.381790][T23675] netlink: 56 bytes leftover after parsing attributes in process `syz.6.29085'. [ 1665.391016][T23675] netlink: 40 bytes leftover after parsing attributes in process `syz.6.29085'. [ 1665.429991][T23678] sctp: [Deprecated]: syz.1.29086 (pid 23678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1665.429991][T23678] Use struct sctp_sack_info instead [ 1665.451643][T13742] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.460817][T13742] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.469210][T13742] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.478348][T13742] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.489515][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1665.630698][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.29087'. [ 1665.687278][T23684] netlink: 12 bytes leftover after parsing attributes in process `syz.7.29089'. [ 1665.744028][T23688] IPv6: NLM_F_CREATE should be specified when creating new route [ 1665.843091][T23690] loop4: detected capacity change from 0 to 512 [ 1665.853898][T23690] EXT4-fs: Ignoring removed nobh option [ 1665.878922][T23690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1665.892841][T23690] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1665.911769][T23690] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.29092: iget: bad i_size value: 2533274857506816 [ 1665.928239][T23690] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.29092: iget: bad i_size value: 2533274857506816 [ 1665.940554][ T3393] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1665.953953][T23690] netlink: 'syz.4.29092': attribute type 1 has an invalid length. [ 1665.984101][T23700] loop7: detected capacity change from 0 to 1024 [ 1665.985096][T23690] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1665.993956][T23700] EXT4-fs: Ignoring removed orlov option [ 1666.007233][T23700] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1666.014786][T23690] bond2: (slave bond3): making interface the new active one [ 1666.028052][T23690] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1666.041990][T23700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.082029][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.133012][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29097'. [ 1666.173103][T23708] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1666.185303][T23708] bond4 (unregistering): Released all slaves [ 1666.200735][T13739] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1666.256354][T23716] lo speed is unknown, defaulting to 1000 [ 1666.321954][T23716] lo speed is unknown, defaulting to 1000 [ 1666.441838][T23723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1666.467573][T23728] SET target dimension over the limit! [ 1666.498673][T23734] netlink: 'syz.4.29105': attribute type 2 has an invalid length. [ 1666.531704][T23738] loop4: detected capacity change from 0 to 512 [ 1666.538487][T23738] EXT4-fs: Ignoring removed nobh option [ 1666.547247][T23732] loop6: detected capacity change from 0 to 512 [ 1666.574981][T23738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1666.593406][T23738] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1666.607260][T10407] Bluetooth: hci0: command 0x1003 tx timeout [ 1666.613343][ T3924] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1666.636054][T23738] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.29107: iget: bad i_size value: 2533274857506816 [ 1666.638487][T23743] loop6: detected capacity change from 0 to 1024 [ 1666.666863][T23738] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.29107: iget: bad i_size value: 2533274857506816 [ 1666.718065][T23738] netlink: 'syz.4.29107': attribute type 1 has an invalid length. [ 1666.755527][T23748] IPv6: NLM_F_CREATE should be specified when creating new route [ 1666.771607][T23738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1666.779991][T23738] bond4: (slave bond5): making interface the new active one [ 1666.788231][T23738] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1666.798866][T23743] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 1666.819598][T23743] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1666.830835][T23743] EXT4-fs (loop6): invalid journal inode [ 1666.837356][T23743] EXT4-fs (loop6): can't get journal size [ 1666.843958][T23743] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 17104912: comm syz.6.29108: lblock 2 mapped to illegal pblock 17104912 (length 1) [ 1666.859403][T23743] EXT4-fs (loop6): Remounting filesystem read-only [ 1666.867103][T23743] EXT4-fs (loop6): failed to initialize system zone (-117) [ 1666.874396][T23743] EXT4-fs (loop6): mount failed [ 1666.904474][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1666.958437][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1667.025334][T23761] lo speed is unknown, defaulting to 1000 [ 1667.049442][T23766] xt_hashlimit: size too large, truncated to 1048576 [ 1667.080231][T23768] loop3: detected capacity change from 0 to 256 [ 1667.142499][T23761] lo speed is unknown, defaulting to 1000 [ 1667.155581][T23768] autofs4:pid:23768:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 1667.177279][T23768] syz.3.29119: attempt to access beyond end of device [ 1667.177279][T23768] loop3: rw=8388608, sector=272, nr_sectors = 4 limit=256 [ 1667.207578][T23768] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 1667.233335][T23768] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198) [ 1667.248333][T13748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1667.259306][T13748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1667.425753][T23790] loop6: detected capacity change from 0 to 512 [ 1667.435477][T23790] EXT4-fs: Ignoring removed nobh option [ 1667.453091][T23792] sctp: [Deprecated]: syz.3.29127 (pid 23792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1667.453091][T23792] Use struct sctp_sack_info instead [ 1667.487822][T23790] netlink: 'syz.6.29126': attribute type 1 has an invalid length. [ 1667.561490][T23800] netlink: 'syz.7.29130': attribute type 2 has an invalid length. [ 1667.573588][T23797] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.29129: error while reading EA inode 32 err=-116 [ 1667.598026][T23808] xt_hashlimit: size too large, truncated to 1048576 [ 1667.632184][T23797] EXT4-fs (loop4): Remounting filesystem read-only [ 1667.639954][T23797] EXT4-fs (loop4): 1 orphan inode deleted [ 1667.650474][T23797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1667.681649][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 1667.681687][ T29] audit: type=1326 audit(2000000602.162:92739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1667.712725][ T29] audit: type=1326 audit(2000000602.162:92740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3beeddac22 code=0x7ffc0000 [ 1667.719079][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1667.737975][ T29] audit: type=1326 audit(2000000602.162:92741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f3beeddacb7 code=0x7ffc0000 [ 1667.761648][T23795] udevd[23795]: symlink '../../loop7' '/dev/disk/by-diskseq/2286.tmp-b7:7' failed: Read-only file system [ 1667.772390][ T29] audit: type=1326 audit(2000000602.162:92742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3beed97c51 code=0x7ffc0000 [ 1667.806346][ T29] audit: type=1326 audit(2000000602.162:92743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f3beeddbcc9 code=0x7ffc0000 [ 1667.830200][ T29] audit: type=1326 audit(2000000602.162:92744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3beed97cbb code=0x7ffc0000 [ 1667.860980][ T29] audit: type=1326 audit(2000000602.162:92745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1667.865035][T23803] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1667.895598][ T29] audit: type=1326 audit(2000000602.162:92746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23807 comm="syz.1.29132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3beeddaeb9 code=0x7ffc0000 [ 1667.897343][T23803] bond4: (slave bond5): making interface the new active one [ 1667.928703][T23803] bond4: (slave bond5): Enslaving as an active interface with an up link [ 1667.936625][ T29] audit: type=1326 audit(2000000602.172:92747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23804 comm="syz.3.29131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1667.966286][ T29] audit: type=1326 audit(2000000602.172:92748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23804 comm="syz.3.29131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b52e8aeb9 code=0x7ffc0000 [ 1668.037102][T23795] udevd[23795]: symlink '../../loop7' '/dev/disk/by-diskseq/2286.tmp-b7:7' failed: Read-only file system [ 1668.045710][ T23] hid_parser_main: 76 callbacks suppressed [ 1668.045773][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.068914][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.081757][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.094238][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.101738][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.113365][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.121176][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.128649][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.136093][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.144170][ T23] hid-generic F5A2:0000:0003.0009: unknown main item tag 0x0 [ 1668.162857][ T23] hid-generic F5A2:0000:0003.0009: hidraw0: HID v1400.00 Device [syz1] on syz0 [ 1668.173320][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.224530][T23823] fido_id[23823]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1668.239134][T23548] udevd[23548]: symlink '../../loop4' '/dev/disk/by-diskseq/2292.tmp-b7:4' failed: Read-only file system [ 1668.260077][T23546] udevd[23546]: symlink '../../loop7' '/dev/disk/by-diskseq/2286.tmp-b7:7' failed: Read-only file system [ 1668.263553][T23548] udevd[23548]: symlink '../../loop4' '/dev/disk/by-diskseq/2292.tmp-b7:4' failed: Read-only file system [ 1668.299127][T23827] netlink: 'syz.4.29135': attribute type 2 has an invalid length. [ 1668.308955][T23831] IPv6: NLM_F_CREATE should be specified when creating new route [ 1668.337561][T23795] udevd[23795]: symlink '../../loop3' '/dev/disk/by-diskseq/2289.tmp-b7:3' failed: Read-only file system [ 1668.355889][T23548] udevd[23548]: symlink '../../loop4' '/dev/disk/by-diskseq/2293.tmp-b7:4' failed: Read-only file system [ 1668.407914][T23795] udevd[23795]: symlink '../../loop6' '/dev/disk/by-diskseq/2291.tmp-b7:6' failed: Read-only file system [ 1668.442593][T23795] udevd[23795]: symlink '../../loop4' '/dev/disk/by-diskseq/2293.tmp-b7:4' failed: Read-only file system [ 1668.570159][T23795] udevd[23795]: symlink '../../loop3' '/dev/disk/by-diskseq/2289.tmp-b7:3' failed: Read-only file system [ 1668.620594][T23848] set_capacity_and_notify: 1 callbacks suppressed [ 1668.620690][T23848] loop3: detected capacity change from 0 to 1024 [ 1668.658420][T23848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1668.688026][T23848] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1668.713952][T23848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.29144: bg 0: block 112: padding at end of block bitmap is not set [ 1668.729044][T23848] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 21 with max blocks 4 with error 117 [ 1668.742118][T23848] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1668.742118][T23848] [ 1668.796496][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1668.927521][T23870] loop3: detected capacity change from 0 to 1024 [ 1668.941699][T23871] __nla_validate_parse: 7 callbacks suppressed [ 1668.941718][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.6.29142'. [ 1668.967465][T23870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1668.991411][T23870] geneve3: entered promiscuous mode [ 1669.002867][T13744] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 38460 - 0 [ 1669.023831][T23870] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.042496][T23878] netlink: 'syz.7.29154': attribute type 1 has an invalid length. [ 1669.051169][T13744] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 38460 - 0 [ 1669.065758][T23878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1669.075399][T13744] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 38460 - 0 [ 1669.166584][T23886] netlink: 7 bytes leftover after parsing attributes in process `syz.7.29157'. [ 1669.436802][T23900] loop4: detected capacity change from 0 to 512 [ 1669.447829][T23900] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.29163: error while reading EA inode 32 err=-116 [ 1669.463221][T23900] EXT4-fs (loop4): Remounting filesystem read-only [ 1669.470546][T23900] EXT4-fs (loop4): 1 orphan inode deleted [ 1669.478474][T23900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.504225][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.565575][T23910] netlink: 'syz.4.29166': attribute type 1 has an invalid length. [ 1669.580884][T23910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1669.810687][T23921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.29170'. [ 1669.881447][T23925] loop4: detected capacity change from 0 to 512 [ 1669.890977][T23925] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.29172: error while reading EA inode 32 err=-116 [ 1669.905389][T23925] EXT4-fs (loop4): Remounting filesystem read-only [ 1669.912468][T23925] EXT4-fs (loop4): 1 orphan inode deleted [ 1669.919214][T23925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1669.945500][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1669.968603][T23930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.29173'. [ 1670.002294][T23932] loop4: detected capacity change from 0 to 1024 [ 1670.009313][T23932] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1670.029141][T23932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.211406][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.274928][T23940] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1670.348962][T23945] random: crng reseeded on system resumption [ 1670.367436][T23945] Unrecognized hibernate image header format! [ 1670.373622][T23945] PM: hibernation: Image mismatch: architecture specific data [ 1670.536343][T23953] xt_hashlimit: size too large, truncated to 1048576 [ 1670.606737][T23956] loop4: detected capacity change from 0 to 512 [ 1670.614658][T23956] EXT4-fs: Ignoring removed nobh option [ 1670.645486][T23870] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.655940][T23870] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 38460 - 0 [ 1670.714141][T23956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1670.729295][T23956] ext4 filesystem being mounted at /476/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1670.754266][T23870] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.764172][T23870] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 38460 - 0 [ 1670.779383][T23956] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.29183: iget: bad i_size value: 2533274857506816 [ 1670.798441][T23956] EXT4-fs error (device loop4): ext4_lookup:1785: inode #12: comm syz.4.29183: iget: bad i_size value: 2533274857506816 [ 1670.812094][T23971] tmpfs: Bad value for 'size' [ 1670.816462][T23956] netlink: 'syz.4.29183': attribute type 1 has an invalid length. [ 1670.842762][T23956] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1670.852026][T23956] bond7: (slave bond8): making interface the new active one [ 1670.860146][T23956] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1670.869946][T23870] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.879891][T23870] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 38460 - 0 [ 1670.890659][T23971] loop7: detected capacity change from 0 to 2048 [ 1670.914116][T23971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1670.927887][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1670.949547][T23971] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1670.966360][T16166] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.978732][T13748] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 38460 - 0 [ 1670.987046][T13748] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1670.995319][T23971] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 1670.995409][T23971] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1670.995409][T23971] [ 1670.995426][T23971] EXT4-fs (loop7): Total free blocks count 0 [ 1670.995442][T23971] EXT4-fs (loop7): Free/Dirty block details [ 1670.995450][T13748] ================================================================== [ 1670.995458][T23971] EXT4-fs (loop7): free_blocks=4096 [ 1670.995476][T23971] EXT4-fs (loop7): dirty_blocks=16 [ 1670.995492][T23971] EXT4-fs (loop7): Block reservation details [ 1670.995487][T13748] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 1670.995524][T13748] [ 1670.995531][T13748] write to 0xffffffff86a68748 of 8 bytes by task 23971 on cpu 1: [ 1670.995547][T13748] data_alloc+0x310/0x390 [ 1670.995559][T23971] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1670.995571][T13748] prb_reserve+0x8d7/0xae0 [ 1670.995598][T13748] vprintk_store+0x54a/0x910 [ 1670.995627][T13748] vprintk_emit+0x1a4/0x600 [ 1670.995658][T13748] vprintk_default+0x26/0x30 [ 1670.995707][T13748] vprintk+0x1d/0x30 [ 1670.995729][T13748] _printk+0x79/0xa0 [ 1670.995750][T13748] __ext4_msg+0x1aa/0x1c0 [ 1670.995775][T13748] ext4_do_writepages+0x1d64/0x2800 [ 1670.995804][T13748] ext4_writepages+0x18f/0x320 [ 1670.995822][T13748] do_writepages+0x1c6/0x310 [ 1670.995851][T13748] file_write_and_wait_range+0x178/0x2f0 [ 1670.995873][T13748] generic_buffers_fsync_noflush+0x45/0x130 [ 1670.995900][T13748] ext4_sync_file+0x1aa/0x680 [ 1670.995915][T13748] vfs_fsync_range+0x10d/0x130 [ 1670.995935][T13748] ext4_buffered_write_iter+0x34f/0x3c0 [ 1670.995966][T13748] ext4_file_write_iter+0x380/0xf70 [ 1670.995995][T13748] vfs_write+0x5a6/0x9f0 [ 1670.996011][T13748] ksys_write+0xdc/0x1a0 [ 1670.996027][T13748] __x64_sys_write+0x40/0x50 [ 1670.996044][T13748] x64_sys_call+0x2847/0x3000 [ 1670.996067][T13748] do_syscall_64+0xc0/0x2a0 [ 1670.996093][T13748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.996113][T13748] [ 1670.996118][T13748] read to 0xffffffff86a68748 of 16 bytes by task 13748 on cpu 0: [ 1670.996136][T13748] _prb_read_valid+0x1bc/0x950 [ 1670.996157][T13748] prb_read_valid+0x3c/0x60 [ 1670.996177][T13748] printk_get_next_message+0xea/0x560 [ 1670.996204][T13748] console_flush_all+0x2cd/0x6c0 [ 1670.996230][T13748] console_unlock+0xa1/0x280 [ 1670.996264][T13748] vprintk_emit+0x3e4/0x600 [ 1670.996287][T13748] dev_vprintk_emit+0x242/0x2a0 [ 1670.996310][T13748] dev_printk_emit+0x84/0xb0 [ 1670.996332][T13748] __netdev_printk+0x34b/0x370 [ 1670.996375][T13748] netdev_info+0xa6/0xd0 [ 1670.996413][T13748] nsim_udp_tunnel_set_port+0x135/0x150 [ 1670.996436][T13748] __udp_tunnel_nic_device_sync+0x575/0x9b0 [ 1670.996481][T13748] udp_tunnel_nic_device_sync_work+0x5d/0x580 [ 1670.996512][T13748] process_scheduled_works+0x4cd/0x9d0 [ 1670.996531][T13748] worker_thread+0x6bc/0x8b0 [ 1670.996550][T13748] kthread+0x488/0x510 [ 1670.996574][T13748] ret_from_fork+0x148/0x280 [ 1670.996596][T13748] ret_from_fork_asm+0x1a/0x30 [ 1670.996619][T13748] [ 1670.996623][T13748] Reported by Kernel Concurrency Sanitizer on: [ 1670.996636][T13748] CPU: 0 UID: 0 PID: 13748 Comm: kworker/u8:46 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1670.996663][T13748] Tainted: [W]=WARN [ 1670.996670][T13748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1670.996683][T13748] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1670.996715][T13748] ================================================================== [ 1671.164014][T23985] sctp: [Deprecated]: syz.1.29191 (pid 23985) Use of int in max_burst socket option. [ 1671.164014][T23985] Use struct sctp_assoc_value instead [ 1671.264447][T23989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=23989 comm=syz.4.29190 [ 1671.373458][T22064] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.390440][T13748] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 38460 - 0 [ 1671.396827][T20639] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1671.398845][T13748] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1671.421237][T13731] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 38460 - 0 [ 1671.429698][T13731] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1671.449588][T13731] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 38460 - 0 [ 1671.457934][T13731] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1678.459595][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration