last executing test programs: 22m57.066253121s ago: executing program 32 (id=27): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00010601ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 22m20.392088874s ago: executing program 33 (id=408): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) 22m18.24543785s ago: executing program 34 (id=423): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x802, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}, 0xd000000}], 0x1, 0x0) 21m59.465789642s ago: executing program 35 (id=571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x9, 0x28000, 0x2, 0x6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) unshare(0x22020400) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)={0xe000202b}) 21m57.079023265s ago: executing program 36 (id=597): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a6c645f736f5f7420704a122f7362696e2f6468636c69656e742030"], 0x41) 21m55.506835092s ago: executing program 37 (id=604): socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x1000, 0x0, {0x0, 0x1}, {0x47, 0x2}, @period={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xb, 0x1}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0x0, &(0x7f0000000540)) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xa7, 0x90000000, 0x7, 0xfff, 0x8, 0x1, 0x14, 0x80000000, 0x9, 0x100, 0x6ba, 0x5, 0x14, 0x800, 0x7, 0xffffff5d, 0x16a, 0x6f, 0x6, 0x6, 0xfffff801, 0x7, 0x1, 0x7, 0xffff7fff, 0x9, 0x6, 0x194, 0x1000, 0x312, 0x0, 0x7f, 0x4, 0x1, 0xffff, 0x3e, 0x7, 0x101, 0x10000, 0x4eb16aea, 0x3, 0x526, 0x5, 0x4, 0x0, 0xfffffffb, 0x1ff, 0x1, 0x160, 0x6, 0x19ce, 0x9, 0x2d, 0x8, 0x0, 0x0, 0x8, 0x0, 0x2, 0x3, 0x557, 0x91, 0x3, 0xfffffffe, 0x7f, 0x7fffffff, 0xfffffffc, 0x3, 0x7, 0x7, 0x1000, 0x7ff, 0xff, 0xfff, 0x2, 0x7c, 0x7fff, 0x4, 0x1, 0x2, 0x1, 0x6, 0x9, 0x8, 0x8ebf, 0x979, 0x5, 0x7, 0x4, 0xff, 0x9, 0x8, 0x800, 0x3, 0x26f81526, 0x2, 0x7f, 0x4, 0x6, 0x8, 0x5, 0x18000, 0xa, 0x5, 0x6, 0x7, 0x101, 0x4, 0x5, 0xba1d, 0x6, 0x1, 0x7fff, 0x81, 0x3, 0x4, 0x0, 0xfff, 0x3, 0x3, 0x9, 0x3, 0xff, 0x0, 0x691, 0xe8de, 0x101, 0xd145]}}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYBLOB="9cf9ad258963981511d9de699a75f5d71cb604eabc48fd892b4dc3737520bd5bda32268404ab99a848bf77fb6a5725f795bbb1f2dfdf284e7f82f6668ecefa6a85a7cc434bd34e91014dabf203309be1bf6999d8f59d0dd567ecf9a87c680dd467a682cb262e4d90b57237e3cdf84c85df4749a4ef6a67dc6556b6ff4ae8f5026f865e4075efa250a02a670d48851a6cf97522e52300c7ef213ef50de6979ee12e2ecb9f5068e3e68e8d06c5ad68570a9e9e1fec5bcfedf4b7f56b0fa96f8b4cdb9f5178efb59d90367e10da96bd6b57ac82f23fd4d18692fe381bc4f2cc390a5056cccee185b77089246101c0647c3486055342dd36", @ANYRESHEX=r5, @ANYBLOB="d7d172e782a7d7a0c952d52a8f94bb95ccd7ff2abeb9fed27ad3a17bcee05936a44ea0f75685630345c3c8946f9e1e93a1e832e5c645d1d0092dd60d4de333a9f48e4abba3a300b6fa086440e9f346b016ed3649f50df08087e1008004dae2959f1ebed01a1aa07b44063c3d6cac8cf13708fabc49de29f519beee6c48ddc991126ce2", @ANYRESDEC=r5, @ANYRES16, @ANYBLOB="cd80142e", @ANYRES8=r4], 0x1, 0x2c2, &(0x7f0000000ac0)="$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") r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) syz_emit_ethernet(0x34e, &(0x7f0000000780)=ANY=[@ANYBLOB="0180c20000020180c200000086dd6000cd0403183afffe8000000000000000000000000000bbff02000000000000000000000000000186009078005a01000000000000000000030aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000100000000dac15084dbaf736b41e5af050200010000050000000000260004000018fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af94504e668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000000b17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f00e07b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a027440000000000000000000000000c5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"], 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000001800)=ANY=[@ANYBLOB="12011001000000108205a30040000102030109026000010100000a2401f4f60a0002010209040100000102000009040101010102000009"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21m24.313678091s ago: executing program 38 (id=729): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0x0, &(0x7f00000002c0)="e300806700445fb102f8a74194eafde991470cd86baabe6b3846ad9f63178c71abeb2e3b88", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="3c00ebf1d0007bc83fde4d000010004b04000000", @ANYRES32=0x0, @ANYBLOB="00000000004600001c0012800b00010062726964676500000c0002800800310007000000"], 0x3c}}, 0x4000000) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$sndseq(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000160000042cbd7000ffdbdf25020800c8", @ANYRES32=0x0, @ANYBLOB="0800080004000000080007000600000008000100ac1414bb14000600bb0700000800000052aa000000000000"], 0x44}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x1, 0x0, 0x7}}, 0x14) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x1) 18m25.803949082s ago: executing program 39 (id=1724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000042c77000c0003804e"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) 16m5.181086528s ago: executing program 40 (id=2908): r0 = perf_event_open(&(0x7f0000000fc0)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x4, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x1, 0x0, 0x61, 0x4, 0x0, 0x6, 0x86e46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0xc, 0x806}, 0xc, 0x1, 0x0, 0x3, 0x9, 0xffff0000, 0xe, 0x0, 0xfffffffd, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffffc, r0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000600)=""/182}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000026e9ed17633af85800000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000076274907010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) gettid() open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x8, 0xfffffffc}, 0x70bd2a, 0x34ff, 0x2, 0x1, 0xf, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0xf0, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1=0x4d4, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 15m40.82993544s ago: executing program 41 (id=3178): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_io_uring_setup(0x83b04, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000100)) 14m55.756070395s ago: executing program 42 (id=3309): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000007000073113f00000000008510000002000000850000002700000095000000000000009500a505000000001d0721f032527825dbd28ece65a21428962f5c851dcf8d85097db901c61777b22b2ebe62633de19b16e45bde4117a6f561f4fdd2b65b840738ff1f517c0593b1626a71cef5467bd592"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 14m7.756319141s ago: executing program 43 (id=3722): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = syz_open_dev$evdev(0x0, 0xcba, 0x202000) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000007c0)=""/187) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/protocols\x00') preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000680)=""/161, 0xa1}], 0x1, 0x3d1, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = epoll_create1(0x0) ioctl$FIONCLEX(r2, 0x5450) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x4}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000000c0)={0x5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000010403000000000000000000000000050502010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x4f3, &(0x7f00000005c0)="$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") r7 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x20000088) r8 = syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d3c9b, 0x0, 0x80, 0x0, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x36, &(0x7f00000004c0)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES16=r8, @ANYRES16, @ANYRES64], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d800000018", 0x5}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000100)={0x1, 0x8000000000000000, 0x0, 0x5, 0x7}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80214, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2f}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 13m2.11274312s ago: executing program 9 (id=4056): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x44050}, 0x40400c0) sendfile(r3, r4, 0x0, 0xffffffff000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 13m1.2297478s ago: executing program 9 (id=4061): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 13m1.038055444s ago: executing program 9 (id=4062): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r1, r2}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r2}, 0x38) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c0000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="7b8b0100000000005c0012800b00010062726964676500004c00028005002500010000000c001f00fcfffffbffffffff05001800010000000500260001000000050029000100000008001c000500000005001600010000000c002e"], 0x7c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 13m0.933556661s ago: executing program 9 (id=4063): process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) pipe2$9p(0x0, 0x80000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2004006, &(0x7f0000001180)=ANY=[@ANYBLOB='rodir,utf8=0,nonumtail=0,uni_xlate=1,utf8=1,shortname=mixed,utf8=0,shortname=mixed,shortname=winnt,iocharset=mn,shortname=winnt,uni_xlate=1,iocharset=default,shortname=lower,shortname=mixed,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x36e, &(0x7f0000000ac0)="$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") dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x80000001, 0xffffffffffffffff}, 0x102806, 0x0, 0x0, 0x3, 0xf0a, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) setpriority(0x1, r3, 0x806) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="170924bd7000000000000100ffff0500070000000000080009000100000008000a0000000000060002000100000008001700", @ANYRES32, @ANYBLOB], 0x3c}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002cbd7000fbdbdf25030000000c000f00001000000000000006001d000b00000008000a0000000000050004006300000006000e000f00000006000e00ecb400000500060008000000060003000cff000008001700", @ANYRES32=r2, @ANYBLOB="12923b51721818efff2750"], 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@deltaction={0x280, 0x31, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffc}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa19}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}]}]}, 0x280}}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xf, 0x2, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x22ae1cb39d0d444e, 0x7, 0x0, 0x11}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="34010000180000022cbd7000fcdbdf251c1014090003fd030000000084001300000000000000070000000000000000000000000000000000000004000000000000000000000e0d0000000000000c0d0000000100000006000000000000000700000000000000000000000b000000000000000000000000000000000000000e000000000000000000000f0c0000000000000f0f0000000000000000000000000008000400", @ANYRES32, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x48804) r6 = fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0xffffffffffffffff, r6) 13m0.700662577s ago: executing program 9 (id=4064): r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x65, 0x0, 0x20, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x28, 0x37, 0x1, {0x2, 0x5, 0x9, r1, 0xa, 'syzkaller\x00'}}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@cswp={0x58, 0x114, 0x7, {{0x8a, 0x800}, &(0x7f00000000c0)=0x3b3, 0x0, 0x10001, 0x2, 0x0, 0x4, 0x0, 0x9}}], 0x58, 0x8004}, 0x0) chroot(&(0x7f0000000100)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000002940), 0x40000000000017d, 0x888) r8 = syz_open_dev$mouse(&(0x7f0000000180), 0xa, 0xc0280) sendmsg$unix(r8, &(0x7f0000000b80)={&(0x7f0000000380)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000a80)=[{&(0x7f00000004c0)="f0ee8278e9469cb84347c9e298ff30ce2b988e5f402303f2fd03cf566213d088e8e42e1df499339f171d35c14177462ee5d874aeb21b6e5744f3dcf9243a44e2262534c8888ae73a64641e889c33450999178a", 0x53}, {&(0x7f0000000540)="925e7442b14f2a385f6975d7e7ce18b8b408683bd68e", 0x16}, {&(0x7f0000000580)="ceb267b78057a61f086228", 0xb}, {&(0x7f00000005c0)="6b379971add878ae2391ac3749a9f3ef59b4ef3eb0a653fdc76cb1621d6586b96fc5317e2fa24ed8a07bd632c88da19746e54c3a4a60054f2b4dee130649ace17de9415b2738f8624f7018d5f23d4168332747d902ee7ceedb4dbf4a129fdd0512b77bc12657f0bc877ef4c97b6ad381f628729d02e5e1ca7a673e9c010b0487040f8a03c0e50832fa2864a5e8474dd2da413796bfbf27b5fa63dab54191a19a6b11a187a8aeb832b3386a5d803c4dc49153c3c718c32f7924466a23994bf59943edd8fc629d9eb41dbdf7aa8d0d78958540092ecc9d02003df5c514cf48d370959d14a160435d31c4a9839ba01b6630f440344ecb771ce1dd", 0xf9}, {&(0x7f00000006c0)="21effbf67386b3491e66bd", 0xb}, {&(0x7f0000000700)="aa82cbd52c540a2b95bc0bc6d1e2460c427f09c373c4ed81fd0f3db16d00d9bb76dc917c61d8fcfaf219e9ca88a4304623f63dbfd313b5982e215f9b052380c5b4a0fbb07408a1bca8add31b3c8b41598007b6c8896136a3ab418d56b6b50858a0447e120ad8884d5bd85d2be05c4d46d86bbe316c3055573caea6dc167394962f5d9d4efef26214fae5aee1d57d", 0x8e}, {&(0x7f00000007c0)="63e766377f50dab84543e53f50bce18d1bef723d8bc91702d26471a801c3411ed03574f6259258bb4199ec517231de09a2f862c81324279ae59d3b0d111bb801baa51ae2cb4fd931f7b04486489cf6380dddb1e0d3a064c8ac30bf848035b6a7866af67d7a007c29187de86bb5147c183040e331733da26c8bbdcd19d917", 0x7e}, {&(0x7f0000000880)="5fc5f96699ed52bbf0d34f5cc98071a69d9260a60af71a14997dbc8493372fb88ee0a69a376570ca00b8e2415939af5fcccb9f711f834b96d9e0f3ac438928dca61aaadf3f3a2d56854cc9601dee91cab1a9b8e31525e15be8e1547e22babbbeaa04cc7a9db9cc8a7bab0380d82378a1f85fc9b315a292870fac2b41c082a936a74a2f7bdca36f221da64425eec70470a028cf6ba698b3bb34bfd31b9e7c", 0x9e}, {&(0x7f0000000940)="cd77504345d8282a552d2f80b70b9a3a09f6ed4d05f6be267bb7ccda6f7b0aadfceacd23af2b5bcaa56d083a7f5eea02f2ecbd0c866ff0b6d7f980ab76ac799e7f4c4ce542eb715be8f237b9a01427c2b8bb0fcdc44441dcad6190fb7fa0b17c367d7460159ecf295c8136960f4260abd75a7fa6a21b1f58f2d38c518f9540ef7102f6431e997a58f7af812e16d3cfd3f4109bda6cb43b411c99c0426c44d04fc8c212f8d2cc6afc9689333aee0bf3b2d26eb40bd5f6391d572e10", 0xbb}, {&(0x7f0000000a00)="9a8e246ea56412341f0d56e12d3998964c3b0cddc87590d3b655034f34c7fc19b661cb737e4b43c3f22214cfac077422a5e61c52d0378551433d5a32857f6ecfba392a8a050f51da4112ea75dc733fc0aab2c5a5009e9e1d35540ab27a765822c9cba6394b458ab49c9a3dee4b", 0x6d}], 0xa, &(0x7f0000000b40), 0x0, 0x1}, 0x0) connect$unix(r8, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) 13m0.457416753s ago: executing program 9 (id=4067): r0 = syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) io_setup(0x8, &(0x7f0000000540)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x43000) (async) r4 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) (async) openat$qrtrtun(0xffffff9c, &(0x7f00000001c0), 0x840) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x370}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) (async) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x6}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2fb}, 0x1c) r9 = fcntl$dupfd(r3, 0x0, r3) dup3(r9, r1, 0x80000) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) recvfrom(r1, &(0x7f0000000200)=""/187, 0xbb, 0x2000, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8}}}, 0x80) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040)=0xc, 0x4) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r11, 0x12, 0x0, 0x0) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES8, @ANYRES8=r0], 0x48}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, 0x0) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r13, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="a68d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 13m0.440662394s ago: executing program 44 (id=4067): r0 = syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) io_setup(0x8, &(0x7f0000000540)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x43000) (async) r4 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) (async) openat$qrtrtun(0xffffff9c, &(0x7f00000001c0), 0x840) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x370}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) (async) io_uring_enter(r5, 0x742f, 0x77ae, 0x1, 0x0, 0x0) (async) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x6}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2fb}, 0x1c) r9 = fcntl$dupfd(r3, 0x0, r3) dup3(r9, r1, 0x80000) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) (async) recvfrom(r1, &(0x7f0000000200)=""/187, 0xbb, 0x2000, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x2, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff8}}}, 0x80) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000040)=0xc, 0x4) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) (async) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r11, 0x12, 0x0, 0x0) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r12) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r4, @ANYRES8, @ANYRES8=r0], 0x48}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, 0x0) r13 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r13, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)="a68d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 12m54.617464951s ago: executing program 2 (id=4120): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x400002, 0x10000000}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) (async) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x2}}, 0x10) (async) sendmsg$tipc(r0, 0x0, 0x0) (async) syz_emit_ethernet(0x69, &(0x7f0000000480)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x33, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e621b"}}}}}}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) (async) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000000c0)=0x8, 0x4) (async) write$tcp_congestion(r2, &(0x7f0000000180)='reno\x00', 0x5) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) (async) io_setup(0x7, &(0x7f0000000280)=0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r3, 0x0}]) (async) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x101, 0x4) (async) io_uring_setup(0x5425, &(0x7f0000000080)={0x0, 0x8679, 0x80, 0x2, 0x1b0}) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 12m54.524045228s ago: executing program 2 (id=4122): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xc31bc7e, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100) rename(0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0/file1\x00', &(0x7f00000008c0), 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2a, 0xa5dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xb, 0x9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_mrelease(0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0/../file0\x00'}) getsockname$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000280)=0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000000c0)=0x20007, 0x4) 12m53.46566247s ago: executing program 2 (id=4123): perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x800, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x7, 0x5, 0xff, 0x0, 0x4, 0x80, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x40, 0x4, @perf_config_ext={0x200}, 0x460, 0x7, 0xb7d, 0x9, 0xfffffffffffffff9, 0xb09, 0xfffa, 0x0, 0x1, 0x0, 0x3c7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xbfb3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000d00)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000005) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) fdatasync(r9) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000005c0)) pwritev2(r10, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r10, 0x6609) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="200000b77d000000000000850000008600000095000000000000004803775856d0d40b46030f4068ca84ab9aa11e68bca99337134266d9ee8c739f919fbc7b84834280ca1b8891a6e063fb29c7c942f0ec6845d9f989047d71d1cd4dff9e94cba34277f8bcc1e88a05cb580982464ed42b4fbda36e18afefda45631bfc3a3b5f3bd2e9baeab67fedef94c6df9fb1faeae98a90eec67852e325dba609ebbf7a33a15d90301bc7460986374ac9f02561cf0de02d2f87f9b9be0104de2449bb"], &(0x7f0000000300)='GPL\x00', 0x2, 0xa3, &(0x7f0000000340)=""/163, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x8, 0x7, 0x48e6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r5, 0xffffffffffffffff, r6, r7, r8, r9, r10], &(0x7f0000000680)=[{0x4, 0x4, 0x8}, {0x1, 0x1, 0xe, 0x9}, {0x3, 0x2, 0x4, 0x5}, {0x3, 0x3, 0x7, 0xc}, {0x2, 0x3, 0xc, 0x1}, {0x2, 0x3, 0xd, 0x4}], 0x10, 0x7ff}, 0x94) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r11 = syz_open_pts(r1, 0x101000) r12 = dup3(r11, r1, 0x0) ioctl$TIOCSTI(r12, 0x5412, &(0x7f0000000000)=0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 12m52.233576444s ago: executing program 2 (id=4131): process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000240)='msdos\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) pipe2$9p(0x0, 0x80000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x2004006, &(0x7f0000001180)=ANY=[@ANYBLOB='rodir,utf8=0,nonumtail=0,uni_xlate=1,utf8=1,shortname=mixed,utf8=0,shortname=mixed,shortname=winnt,iocharset=mn,shortname=winnt,uni_xlate=1,iocharset=default,shortname=lower,shortname=mixed,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x36e, &(0x7f0000000ac0)="$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") dup(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x410, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x80000001, 0xffffffffffffffff}, 0x102806, 0x0, 0x0, 0x3, 0xf0a, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@deltaction={0x280, 0x31, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffc}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa19}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x14, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x101}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x14, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8}}]}]}, 0x280}}, 0x20000080) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0xf, 0x2, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x22ae1cb39d0d444e, 0x7, 0x0, 0x11}}) sendmsg$nl_route(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="34010000180000022cbd7000fcdbdf251c1014090003fd030000000084001300000000000000070000000000000000000000000000000000000004000000000000000000000e0d0000000000000c0d0000000100000006000000000000000700000000000000000000000b000000000000000000000000000000000000000e000000000000000000000f0c0000000000000f0f0000000000000000000000000008000400", @ANYRES32, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x48804) r3 = fcntl$getown(0xffffffffffffffff, 0x9) setpgid(0xffffffffffffffff, r3) 12m51.753782157s ago: executing program 2 (id=4133): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b0000000000639810afd9f68e7e2d378816ddc963c93e558d5c5285d55158f162781b3bb804a02c1409529deb529f5de6"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x20481c, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@utf8}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x8, 0x6, 0x20, @dev={0xfe, 0x80, '\x00', 0x33}, @private0, 0x7, 0x7800, 0x1, 0x6}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000240)={'\x00', 0x1, 0x6, 0x401, 0x0, 0x8}) 12m51.339518376s ago: executing program 2 (id=4143): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) dup3(r1, r0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0xf3a, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) set_tid_address(0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) fsync(r4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r7, &(0x7f0000000540), 0x0}, 0x20) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7121b92b, @private0, 0x140}}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x849, @local, 0x5}}]}, 0x60}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000025c0)={0xfc, {"a2e3ad1bed0d09f91b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f3b3568030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb62913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab002f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m51.303016448s ago: executing program 45 (id=4143): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) dup3(r1, r0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0xf3a, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) set_tid_address(0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) fsync(r4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r7, &(0x7f0000000540), 0x0}, 0x20) sendmsg$key(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x70bd2a, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7121b92b, @private0, 0x140}}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x849, @local, 0x5}}]}, 0x60}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m3.886190981s ago: executing program 6 (id=6895): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000b40), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFIRHUcB/Dve3eXqUdYLUFQQkSUILYFLbYUCCESEVRgRLQUGpjSpk0tDTVXOLVItGWN4SItRdBk5WBLUNKQNNRw8e40LC+Kzu5F7/OBp+/d/d/7/R/vfX93y+MCNNZMksUkrSRzSWaTFJcHzA6WmfPN3cnD1aTXe+yHoj9usD1wsd90kp0kDyQ5KIu80E629p86+enokXte3+zc/e7+k5NjPclzpyfHj569s/zaB0v3b332xXfLRRbT/d15Xb9iyGvtIrnl3yj2H1G0654Bf8fKK+9/WeX+1iR39fPfSZnBxXtj44aDTu57+8/2ffP7z28f51yB69frdarPwJ0e0Dhlkm6Kcj7JYL0s5+cH3+G/ak2VL65vvDz3/Prm2nN1dyrgunST44c/mvhw+g/5/7Y1yD/w/1Xl//GVva+r9bNW3bMBxqnK/9wz2/dG/qFx5B+aS/6hueQfmkv+obnkH5pL/qG55B+aS/6hueQfmuty/gGAZulN1P0EMlCXuvsPAAAAAAAAAAAAAAAAAABw1e7k4erFMq6an7yVnD6UpD2sfqv/e8TJjf2/Uz8W1bDfFMnEqPWfvnPUI4zmvZqfvr7pm3rrf3pHvfW315KdV5MstNtX77/i/P77527+i/c7z45YYEQPPlFv/V/26q2/dJR8XPWfhWH9p8xt/f/D+0+3un4j1n/p5xEPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNj8GgAA//+3u21H") 8m3.705420544s ago: executing program 6 (id=6901): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x44050}, 0x40400c0) sendfile(r1, r2, 0x0, 0xffffffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) 8m3.440401621s ago: executing program 6 (id=6902): connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 8m2.453707719s ago: executing program 6 (id=6911): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = mq_open(&(0x7f0000000080)='\x00', 0x2, 0x1d8, &(0x7f0000000180)={0x8, 0x597e, 0x4, 0x7}) mq_getsetattr(r0, &(0x7f0000000200)={0x9, 0x6, 0x4, 0x2}, &(0x7f0000000240)) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989c56, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 8m1.316081227s ago: executing program 6 (id=6917): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x24040084) 7m59.78899683s ago: executing program 6 (id=6924): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x177}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x75) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r6, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @private}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x81, 0x9, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x80, 0x8000, 0x10001, 0x8}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m59.720447295s ago: executing program 46 (id=6924): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0x177}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x75) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r5, @ANYRES16=r6, @ANYRESDEC], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000140)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @initdev, @private}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x81, 0x9, 0xd, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x80, 0x8000, 0x10001, 0x8}}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x1b) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m4.620850578s ago: executing program 1 (id=9970): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xffffff00}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = memfd_create(0x0, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r5, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000180)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@init_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@user_xattr}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101041, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xe7c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffbb}, 0x48) openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0xc0000, 0x0) 3m4.363065985s ago: executing program 1 (id=9973): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{&(0x7f0000000680)={0xa, 0x4e24, 0x4, @local, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x2f}}}, @rthdrdstopts={{0x18}}], 0x30}}], 0x1, 0x801) r1 = syz_open_pts(0xffffffffffffffff, 0x101900) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x1, 0x5, 0x4, 0x8, 0x3, "bd13f3651234fd7d25b70c376f85ee9345e5b1"}) 3m4.28156101s ago: executing program 1 (id=9974): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) r4 = syz_pidfd_open(r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r3) syz_emit_ethernet(0xa5, &(0x7f0000000340)=ANY=[], &(0x7f0000000400)={0x1, 0x4, [0xd34, 0x149, 0x321, 0xe5a]}) ioctl$EXT4_IOC_MIGRATE(r4, 0xff08) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c010000100024f49cfedf2686769d8125c1c9aaac130700000000fcdbdf2564f086fbec10a1b33b460b1cfc7900000000000000001e000001000000024e210002020000001d000000000000000000000000000000000000000000e56a95b9fa891ab475b2028b62668e49e600e095b78440f4445f31cd", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080) r9 = socket(0x1a, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r10], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfdb8) r12 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYRES8=r7], 0x3c}}, 0x0) r14 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r14, 0x0, 0x4000) setsockopt$sock_attach_bpf(r9, 0x84, 0x1f, &(0x7f00000001c0)=r11, 0xfffffffffffffd2f) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 3m4.167514108s ago: executing program 1 (id=9979): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x2000000, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x101}}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000d80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x8021, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @echo_reply={0xe0}}}}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xf, r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 3m3.921762703s ago: executing program 1 (id=9983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x3c}, 0x1, 0xfeff, 0x0, 0x690}, 0x20048040) 3m2.75012576s ago: executing program 1 (id=9996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0xffe4}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {0x1000}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0xfff, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x3}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4, 0x80}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x4}, {0xfffffffe, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x2, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000, 0x1}, {0x9}, {0x0, 0x80, 0x2}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {0xd5a0, 0x9}, {}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f033050}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0x10000000}, {}, {}, {}, {}, {0x10000, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x4000, 0x8, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 3m2.702281143s ago: executing program 47 (id=9996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x0, 0xffe4}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {0x1000}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0xfff, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x3}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x2, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4, 0x80}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x0, 0x0, 0x4}, {0xfffffffe, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x2, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000, 0x1}, {0x9}, {0x0, 0x80, 0x2}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {0xd5a0, 0x9}, {}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1f033050}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {0x10000000}, {}, {}, {}, {}, {0x10000, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {0x0, 0x0, 0x4000, 0x8, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 2m57.152101184s ago: executing program 7 (id=10034): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x101}) fcntl$lock(r0, 0x26, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x0, 0x1, 0x800000000, 0x1}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x800000000, 0x13}) 2m56.268265481s ago: executing program 7 (id=10038): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$eJzs3V9rW+UfAPDvSZv9//3WwRgqIgUvnMyla+ufCV7Max0O9H6WNiuj6TKadKx14HbhrmV4oTgQLwXx2svhG/DC1zBQYcgoeuFN5KQnWdombbqlaTSfD5zyPOec9Hm+ec7z5Dl5EhLA0BpP/+Qino+Iz5OI4xGRZMdGIzs4vn7e2uNbs+mWRK324R9J/bw03/hfjccdzTLPRcRPn0WcyW0tt7KyujBTKhWXsvxEdfH6RGVl9ezVxZn54nzx2tT09Pk3pqfefuvNnsX66qW/vvrgwUiWO3EviQtxLMu1xvEMbrdmxmM8e07ycWHTiZM9KGyQJG33/tD3erA7I1k/z0c6BhyPkazXA/99n0ZEDRhSya77/y/5vakJ0F+NeUDj3n7n++Dv+jAr6Z9H767fAG2Nf3T9vZE4FPn4Mo6sJRvujNL73bEelJ+W8eNv9++lW/TufQiAHd2+ExHnRke3jn9JNv49vXNdnLO5DOMf9M+DdP7zWrv5T645/0ltnv8cbdN3n8bO/T830oNiOkrnf++0nf82F63GRrLc/+pzvnxy5WqpmI5t/4+I05E/mOa3W885v/aw1ulY6/wv3dLyG3PBrB6/jx7c+Ji5merMs8Tc6tGdiBfazn+TZvsnbdo/fT4udVnGqeL9lzod2zn+vVX7NuKVtu3/ZEUr2X59cqJ+PUw0roqt/rx76udO5e93/Gn7H9k+/rGkdb22svsyvjn0dzGa68kbbYg/ur/+DyQf1dMHsn03Z6rVpcmIA8n7zf25xv6pJ49t5Bvnp/Gffnn78a/d9X84Ij7uMv67J79/sdOxQWj/ubbt37y73dT+HRONC2bLoYfvffJ1dqy2eSDsbvx7vZ46ne3pZvxrU8GkXRDP9OQBAAAAAADAgMlFxLFIcoVmOpcrFNY/33EyjuRK5Ur1zJXy8rW5qH9XdizyucZK9/GWz0NMZiuGjfzUpvx0RJyIiC9GDtfzhdlyaW6/gwcAAAAAAAAAAAAAAAAAAIABcbTD9/9Tv+7pLy8AA8FPfsPw2rH/9+KXnoCB5PUfhpf+D8Nrl/0/2at6AP3n9R+Gl/4Pw0v/h+HV0v8X9rMeQP95/QcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunTxYrrV1h7fmk3zczdWlhfKN87OFSsLhcXl2cJseel6Yb5cni8VC7PlxZ3+X6lcvj45Fcs3J6rFSnWisrJ6ebG8fK16+erizHzxcjHfl6gAAAAAAAAAAAAAAAAAAADg36WysrowUyoVlyQknioxOhjV6CoRuYiWPQf3uz6DnNjvkQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnvgnAAD//64qL2Y=") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3V1rZGcdAPD/Ocmk2d3UTFVkLdgttrJbdGeSxrZRpK0gelVQ6/0ak0kImWRCZlI3oWiKH0AQUcEP4I3gBxBkP4IIC3ovKororl7qHjkzJ5qXmWRIJpl18vvBs/M85+3/fw6ZM+dtzwngynoxIt6OiLGIeCUipovhaVFir1Py6R4/en8xL0lk2bt/SyIphu0vK2+PR8SNYrbJiPj6VyK+lRyP29zZXVuo12tbRbvaWt+sNnd2766uL6zUVmobc3Ozr8+/Mf/a/ExWOFc/yxHx5pf+9KPv/+zLb/7qM9/+/b2/3PlOntYXPtbJOyIWzxWgh86yS+11sS9fR1sXEWxI8v6UxoadBQAA/cj38T8cEZ9s7/9Px1h7bw4AAAAYJdlbU/GvJCIDAAAARlYaEVORpJXiXoCpSNNKpXMP70fjelpvNFufXm5sbyzl4yLKUUqXV+u1meJe4XKUkrw9W9xju99+9Uh7LiKei4gfTl9rtyuLjfrSsE9+AAAAwBVx49bh4/9/TqftOgAAADBiyj0bAAAAwKhwyA8AAACjz/E/AAAAjLSvvvNOXrL993gvvbezvdZ47+5SrblWWd9erCw2tjYrK43GSvuZfeunLa/eaGx+Nja271dbtWar2tzZvbfe2N5o3Vs99ApsAAAA4BI9d+vB75KI2Pv8tXaJ4jmAAIf8cdgJAIM0NuwEgKEZH3YCwNCUTp3CFgJGXXLK+OM373TOFcavLyYfAABg8G5//Pj1/4li3OnnBoD/Z7eGnQAAcOlc3YOrq3TWOwBvDjoTYFg+1Pl4ptf4ng/v6OP6f+f/E2XZmRIDAAAGZqpdkrRS7KdPRZpWKhHPtl8LUEqWV+u1meL44LfTpWfy9mx7zuTUe4YBAAAAAAAAAAAAAAAAAAAAAAAAgI4sSyIDAAAARlpE+uek/TT/iNvTL08dPjtw5K1fP333x/cXWq2t2YiJ5O/T+aCJiGj9pBj+auaVAAAAAPAU6BynF5+zw84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFHz+NH7i/vlMuP+9YsRUe4Wfzwm25+TUYqI6/9IYvzAfElEjA0g/t4HEXGzW/wknmRZVi6y6Bb/2gXHL7dXTff4aUTcGEB8uMoe5Nuft7t9/9J4sf3Z/fs3XpTz6r39S/+7/Rvrsf159ki7l+cf/qLaM/4HEc+Pd9/+7MdPOvEPhcgbL/XZx29+Y3e364gDi+wW/2Csamt9s9rc2b27ur6wUlupbczNzb4+/8b8a/Mz1eXVeq34t2uYH3zil09O6v/1HvHLh/t/bP2/3Ffvs/j3w/uPPtJplLrFv/NS99/fmz3ip8Vv36eKej7+9n59r1M/6IWf/+aFk/q/1KP/k6f0/05f/Y/PvfK17/2h65hjawMAuAzNnd21hXq9tnVCZbKPaS658tbTkcYAK/F0pDGsSvbdzt/j+ZZzztmPVbLzzD4eA0hj4tj3dCzOusAkYi9fVp9/kAAAwIj5307/SVeQAAAAAAAAAAAAAAAAAAAAgIt0xseSTUZE3xMfjbk3nK4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzoPwEAAP//JffRlw==") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740)=0x0, &(0x7f0000000780)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) syz_io_uring_submit(r8, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1, {0x0, r7}}) syz_io_uring_submit(0x0, r6, 0x0, &(0x7f00000007c0)=@IORING_OP_CLOSE={0x13, 0x37, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m54.334644827s ago: executing program 7 (id=10051): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10, 0x2000600}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10000000) 2m54.174364038s ago: executing program 7 (id=10053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000a000200aaaaaaaaaabb0000080007"], 0x30}}, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000300)={@broadcast, @random="2759124d7066", @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "104012", 0x4e, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x5]}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0x802, 0x3}}}}}}}}}, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) socket$caif_seqpacket(0x25, 0x5, 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x0, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1c0, 0x20a, 0x278, 0x1c0, 0x278, 0x3, 0x0, {[{{@ipv6={@local, @loopback, [0x0, 0x0, 0xff000000], [], 'bond_slave_1\x00', 'team_slave_0\x00', {}, {0x101}, 0x3b}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4}, {0xffffffffffffffff, 0xfe, 0x83ae0c10c44c0425}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@ipv6header={{0x28}, {0xe7, 0xd}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 2m54.077894804s ago: executing program 7 (id=10055): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) 2m54.077461944s ago: executing program 7 (id=10056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e"], 0x35c}}, 0x4000000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_128={{0x303}, "210a8fb79774e34a", "2cd3399bce4ab236cfa48d5a354494e6", "9ff8b82e", "00000000eeffff05"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') lseek(r7, 0x87, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c2bae82bccb6d03e6"]) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffffdd9100800600395032303030"], 0xc8) 2m38.341228768s ago: executing program 48 (id=10056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e"], 0x35c}}, 0x4000000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_128={{0x303}, "210a8fb79774e34a", "2cd3399bce4ab236cfa48d5a354494e6", "9ff8b82e", "00000000eeffff05"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x44000, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESDEC=r4]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') lseek(r7, 0x87, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c2bae82bccb6d03e6"]) write$P9_RVERSION(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="1300000065ffffdd9100800600395032303030"], 0xc8) 3.619053035s ago: executing program 3 (id=12301): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000200)=0xfe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x944, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0xffffffffffffffa9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0xd7d480a040f25156, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x8001, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb86dd60017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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"}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffff0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[], 0xffffff47}, 0x1, 0x0, 0x0, 0x80}, 0x4041) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ipvlan0\x00'}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x340, 0xffffffff, 0x0, 0xf0, 0x0, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xc}}, @common=@unspec=@connlabel={{0x28}, {0x8, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff, 0x0, 'dvmrp1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x2f, 0x1, 0x49}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@owner={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x444, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 3.514043062s ago: executing program 3 (id=12303): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x41e0, 0x4) syz_open_dev$usbmon(0x0, 0xde05, 0x8000) unshare(0x6a040000) fsmount(0xffffffffffffffff, 0x1, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8915, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 2.056824006s ago: executing program 3 (id=12315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0xf4, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xe0, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x80000300}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x3, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xb3, 0x20000001, 0x34e, 0xffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xf4}}, 0x0) 1.959821512s ago: executing program 3 (id=12318): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00034000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) 1.915003725s ago: executing program 3 (id=12320): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4a00) 1.325334834s ago: executing program 0 (id=12333): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800c3ffffffffffffff000000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32, @ANYBLOB="08001b00"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 1.258695638s ago: executing program 0 (id=12335): r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c000000100041042bbd700000768a000000ffff", @ANYRES32=0x0, @ANYBLOB="00000300000000002800128009000100766c616e0000000018000280040004800e0003800c000100ff0300000700000014000300766c616e30"], 0x5c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES64=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES8=r6, @ANYRES64=r3, @ANYRES32=r4], 0x3c}}, 0x4) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) symlink(&(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40)='./file0\x00') fchmodat(0xffffffffffffffff, 0x0, 0x4) r8 = openat2(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r7, 0x4040942c, &(0x7f0000000f80)={0x0, 0xd, [0x5, 0x8, 0xa6, 0x2, 0x1, 0x5]}) setresuid(0x0, 0x0, 0xee01) fremovexattr(0xffffffffffffffff, 0x0) r9 = syz_clone(0x1900400, &(0x7f0000001200)="2acc931c85cfa165a7dda762b2e4b483431a137fdd811fe5f75129bf09c878b1079547443e190406240ae60eca3a9f6f15794d27198d643995926df37e37088c407f89e8ba67267461c61b0dbf8c5d94cf8e793603fd49a8d71801848df53e040089dc07bf3496fd571f2939c92e6ce1fafd2d8fb04101a40302573c30c426c44b1584ebf77a58cc115269afca1487802f3d987d3164810f629a466b91a2d5182ccc5c0dfc545ab17fc6b1173de41bcee3fe0ee27275c30db50432", 0xbb, 0x0, 0x0, 0x0) read$msr(r8, 0x0, 0x0) renameat2(r8, 0x0, 0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x11879, 0x80000000, 0x80, 0x3, 0x73d, 0x8001, 0x7dff}, r9, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x6, 0x8b}, 0x0) mount$9p_tcp(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x1005880, &(0x7f0000001640)=ANY=[@ANYBLOB='tra00000000004e21,cache=readahead,\x00']) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 1.104532698s ago: executing program 0 (id=12338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)={0x1c, r5, 0x303, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000013c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0400001}, 0xc, &(0x7f0000001380)={&(0x7f0000000800)={0xb58, r4, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x24b, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @random="18a93a7e1105", {0x3, 0x9}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x1, @default, 0x118, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6, {0x5, 0x5, 0x1, 0xd5e}}, @void, @val={0x2d, 0x1a, {0x4000, 0x0, 0x6, 0x0, {0x4, 0x6, 0x0, 0x61}, 0x300, 0x1, 0x9}}, @val={0x72, 0x6}, @void, [{0xdd, 0x76, "e021d5f1555de9bb415f2ad964914974d8924d155e489fc7cf90115f874891e26d0f963431a3d0b8e52b0413ffd11b37584ba9d90f7b2f832c8ebcfbef5da5d79a3e587a04dd85a5ae3f8dc733ee8c05432b79d3a0242515ce5dff5daf387cb4fbeca81764cc92d8aeb1b53fe2ded0208dced730ada7"}, {0xdd, 0x84, "1417db20540826fc5c9ed794beee2706774014940a482eda56a60d332324581272ff7201aced15aa7fd21a252fb979e3af83c8c38f16cf86946d671df21de078110cbc2b4ce8c920e6c24cec768824711efb52200f2af74432b236f99edd9033b9cb4d305e58eaac3696bdfd9aaf830df512c108736579a56d60f282b4fe43cb452cb454"}, {0xdd, 0xe8, "9eba877e5a527d942567182fcd624a36ca7e3cb5057195537024eeefb88c76f6a9bdc9649ae960dbd928972fffde00ca3a95bd88383f7b96192b900e78a54bfe3e9628e8baa9f85c4efcf641c743b5d4cd75c391e74fd9a6ec960e887ffb7c27f27569fb9f4df6c587739d11cc9f456601dc9447ad02b1be89d52663aa804978da00b3e0cedeb819f0407d376884f75445322d65a719af34eccf927c0361f5827717574e014bcc5fd624776008d8da2b1334478896fdfedc3abd3a217bf4933d6eb5ca4a34b48fb9463473ed9e5cdb117a81d60c48850e42aa37e3c655c8309710cb4cf7c146d18a"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x246, 0x33, @mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_b, @device_a, @random="b4579e36ecf6", {0x1, 0xffc}}, 0x2048, 0x2, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x30}, {0x5, 0x1}, {0x3}, {0x9, 0x1}, {0x24, 0x1}]}, @void, [{0xdd, 0x3a, "10c6ea7eba96e98ee82535c6b7a1c484dac35bfe61e5a7ad3c6c940e5b91939ead32432dbe5e737996c66a8f6738adf1ebf87226619bbcd68227"}, {0xdd, 0x17, "d518bb4bab5429d6ad8df0fd1c004b14200c45e577f26b"}, {0xdd, 0x46, "5d109341a782d76e18596aca36ad14baeb4c77d19ef70aeeb6d97f1be59ee4fc905f4ae91c00c8e618f01e0a1ef813bd03566e70c3bc4e78cbb07515729313ac85c8ff2a462f"}, {0xdd, 0x91, "2e1a890ab3690ad6ebd59b71ac9cd0e823f0885689df15cf8c933787c50fd0b7230800890a3ad3e71722101a1af9eb7ff4d27db24b4203640d0cae46491e2465474ca27dfa78946fe2c86bd7d77a1432586c8b85257b3ff40628ff91bf1a1183a425b1a41aeeededc8d2025a27bc48342049056515d4c2799c60ca81c5f638ec6d946c545bb0e19def03af4ae328075630"}, {0xdd, 0x77, "d4abf4820216c2e7b65aad17ec8a4569ece80f59e84fc6dfeb8fb2ac02f9ad05e86082b353a79c49c4ef20c026b455ab8548374b94791738fbc8099b7e00837a6b9ae34c674fd9c6206f214505dacbe844750974f16723c44813fd2da0871b08fa32d1f725d16203002a044215e529a42cd9481f72665b"}, {0xdd, 0x7, "0a6d1876a0984c"}, {0xdd, 0x63, "9d419ecb09bd681de0e43659e01acc5e0cbb7e56ee0ae6c892871a8e968ac97dc8c50fd8fe784343a24985184dc34ed7426b7216f693005278c8da9a69d51149fc2a7cc3750e660a1cd16436e029baa2cd3503612ce080ae467dadde82ef44078a7d74"}]}}, @NL80211_ATTR_FRAME={0x38, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_a, @from_mac, {0x7, 0x9}}, 0x30, @val={0x8c, 0x18, {0xfc6, "c373ed78689c", @long="896e54ea8873fa8382b2b6912cf573b8"}}}}, @NL80211_ATTR_FRAME={0x5a5, 0x33, @data_frame={@a_msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x44b}, @random="251d76240d70", @device_b, @random="9cfa3658b3b4", {0x2, 0x1}}, @random="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"}}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x3d}, @device_b, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x68f}, "1b2f5d90bc1e8c3346b11ba04e32bed45f6443b7bb74fc7e4060e488f161bce88727612adce5b9848c3d38de9769e3fb0a6ddad6f873e1df2c8e5e614f38e8852dcbb2a1a5eed3d78f2f66857db309dff65f0b9e1a0242b9aa7b7df48cd14093890101e46c10bfbcf72f57c503e29bd2842fe2322c1f521bb8d80ea4223c04cd"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xb58}, 0x1, 0x0, 0x0, 0x4000024}, 0x851) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000480340001800c0001007061796c6fe16400240002800800014000000009f2ff02400000004f080004400000003708000240000000021800018008000100647570000c00028008000140000000100900020073797a3200"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) linkat(r8, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r8, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) 1.003388855s ago: executing program 4 (id=12342): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) write$nci(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7105040603050220e600a5000300020400"], 0x11) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) chroot(0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r3, &(0x7f00000022c0)=[{&(0x7f0000000000)='x', 0x1}, {&(0x7f00000001c0)='\x00\x00\x00\b', 0x4}, {&(0x7f0000002280)="9c", 0x1}], 0x3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fffedffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) 923.05782ms ago: executing program 3 (id=12344): epoll_create1(0x80000) openat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={0x0, 0x9e515fe4e33818b}, 0x18) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9a00fe00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0xc00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e11000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000dea000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ca6000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x6}]}}}]}, 0x3c}}, 0x0) 861.633724ms ago: executing program 0 (id=12346): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x1, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x3e96564ea7a9e37e, 0x30, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x8000003, 0x4, 0x0, 0x40d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu<=-||!') getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000f1c8c96c9ae6f70164836f00001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000089000008000300", @ANYRES32=r5, @ANYBLOB="280012800b000100697036746e6c00001800028014000300fc010000000000000000000000000001"], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) 846.157725ms ago: executing program 8 (id=12348): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="9de8daa10800", 'ip6gre0\x00'}}, 0x1e) tee(r0, r0, 0x6, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0xfff2}, {0xb, 0x1}, {0x0, 0x9}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x200, 0x80000a, 0x1, 0xf, 0x400}}, {0x4}}]}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x2) close(r0) 745.728041ms ago: executing program 0 (id=12350): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="9de8dac4a100", 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'net_prio'}]}, 0xa) (async) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'net_prio'}]}, 0xa) 745.534171ms ago: executing program 5 (id=12351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000840900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 745.312281ms ago: executing program 8 (id=12352): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) (async) r1 = inotify_init1(0x80000) (async) clock_settime(0xfffffffa, &(0x7f0000000280)) setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f0000000380)="30573472b62173", 0x7, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$tipc2(&(0x7f0000003100), r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f00000000c0)={[{@debug}]}, 0x0, 0x512, &(0x7f0000000c40)="$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") (async) inotify_add_watch(r1, &(0x7f0000000140)='./bus\x00', 0x2a2) (async) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$kcm(0x2b, 0x1, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) 503.974957ms ago: executing program 5 (id=12353): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}}, 0x20}, 0x1, 0x0, 0x0, 0x4028011}, 0x8000) r5 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f00000003c0)=[{r7, 0x400}, {r6, 0x100}], 0x2, &(0x7f0000000440)={r8, r9+10000000}, &(0x7f0000000480)={[0x7]}, 0x8) sendmsg$xdp(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, 0x8, 0x0, 0x32}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)="7b072d7bdc98201e46b1c2d06e21e7a42c1705ab896aaccea8c45d726533d8999af5636075cda5753d45c16cc26812a96fa5cf528778fb6b7944c72749e1b4e1dc8f47058f21f078c23a11d0d04667ca366e8b15f31c05e8b6c4c81c5a36c793738703d8b54e723b65bbfefe29c5471e743a4a567105d7057a7a7d7a3674f9a32c9116afba56917d75c1c5467d662ee870c035a57ff710bb4fae361bca96ed8f4aad6f", 0xa3}, {&(0x7f00000001c0)="c54776170d1f51348d26c394b9c09ff5fad2be89d6662627d0ee31b378e473ca2a71", 0x22}, {&(0x7f0000000200)="dab253f7b794f348fdc906a417f2e1357dedcf05c6c9a51097c85bb69b5280badf4ac42307daa50fb751be3461cb6730a488acbfd6478a120f50d792082e40159ff4b752631868ba1b7fb31ac60f7b7a9e511c3fa52323bda7586aaa643ef1ea2b16aa1dc37f55cf61535ce715f7276208c038c37d961bccc8902cf81913e16fbe8476c6deed62ef5a9f477e1f562288aac9539e2891817c4f8d53577b369c1a399cb6ebd3edd878c981d6eb2502c2c024f5b4a195a64c37abbbb347751bff18f40e6d935f43a6a0cee8f4c42d803a07d1b0bc8d060a647c8d365350cbb0ac60f84957d95ea5d6ce207489d2b0edb140", 0xf0}, {&(0x7f0000000300)='1', 0x1}], 0x4, 0x0, 0x0, 0x40000}, 0x84) r10 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r10, r10, 0x0, 0x3fffff) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000080)={'wg2\x00', 0x8000}) write(r6, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) 464.0644ms ago: executing program 8 (id=12354): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x1008205, &(0x7f0000000080)={[{@journal_ioprio}, {@jqfmt_vfsv1}, {@barrier}, {@noacl}]}, 0x81, 0x63b, &(0x7f00000004c0)="$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") 423.619423ms ago: executing program 5 (id=12355): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x89, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x2, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x16, 0x1, 0xf6e6}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0x0, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x33, 0x4, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) r7 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r9, 0x84, 0x79, &(0x7f00000001c0)={r10, 0x7, 0x7}, 0x8) accept4(r0, &(0x7f0000000100)=@x25, &(0x7f0000000180)=0x80, 0x80800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2adbfa7ac5f98d7d78df5f0b180400f700000000000000000000000061112400"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r11 = memfd_secret(0x80000) fsconfig$FSCONFIG_SET_BINARY(r11, 0x2, &(0x7f0000001200)='\x00', &(0x7f0000001240)="87946f46d8339789b799f2092f4388997db6265a05e4c16524ec3ffc17d50f08e12d00598d71bf69f9525687339efced77827f660cab2ed71f9eb608ab5e8070f9767537d129acd30d858926f5a24d03b851417b5c0e82cf68e8277079752c8279ddece3e86982e6affb99c86761bf30281a47c9a4c289a4d9738327a1f9da2dd978cbb2beecd1e88ee5744920bd3b4050467b2b042cf1392dd76f3d7c2589e4e4ecd3f8e595a803661d5c4b7057927579d3a9f837877729dd1695ff887c76a717f00a72588e04e18e0088e22ac7daf2cf0c8a55e695baa8d0cc1a0d", 0xdc) 345.546718ms ago: executing program 4 (id=12356): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3263, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10004, 0x8000, 0x1, 0x8, 0x20005, 0xfffc, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480542401800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 307.32039ms ago: executing program 4 (id=12357): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48010000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) 303.39375ms ago: executing program 8 (id=12358): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@usrquota}, {@nobarrier}, {@noauto_da_alloc}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000002c0007012dbd7000ffdbdf25017c000008000180552004f1080002"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 249.696064ms ago: executing program 5 (id=12359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0xf5, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}}, 0x0) 249.548684ms ago: executing program 4 (id=12360): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0x100514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0xfffffffc, 0x5, 0x2000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x8400000000000000, 0x0, 0x24000840}, 0x40) 222.229605ms ago: executing program 5 (id=12361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0xfffffffe, 0x2000000}, 0x4) 193.861007ms ago: executing program 0 (id=12362): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) close(0x3) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x483, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) (rerun: 64) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0xfffffff9, 0x2376}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) (async) io_uring_enter(r1, 0x742f, 0x77ae, 0x1, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) (async) r6 = syz_io_uring_setup(0x363, &(0x7f0000000280)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 113.617402ms ago: executing program 5 (id=12363): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close_range(0xffffffffffffffff, r4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x2f, 0x0, 0x452072cc, &(0x7f0000000040)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r9 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0xb065, 0x10, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, 0x0, 0x0) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000340)=0x3) ioctl$TIOCVHANGUP(r8, 0x5437, 0x2) r10 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/fscreate\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r10, r0, 0x11, 0x2000, 0x0, @value=r0, @void, @void, @void, r7}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r11 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) r12 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x181) ioctl$EXT4_IOC_MOVE_EXT(r12, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9000200000000000, 0x7ff, 0x85c}) fallocate(r11, 0x10, 0x0, 0x7000000) socket$netlink(0x10, 0x3, 0x12) 113.284002ms ago: executing program 8 (id=12364): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) r3 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000240)={r3, r0, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x20, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000801}, 0x806) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r6, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x81) symlink(&(0x7f0000000100)='./bus/\x00', &(0x7f0000000140)='./bus\x00') mount(0x0, &(0x7f00000001c0)='./bus//file0\x00', 0x0, 0x1000000, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000780)={0x0, 0x3c, &(0x7f0000000740)={&(0x7f0000000540)={0x20, r7, 0x111, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00010040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r0, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 113.175123ms ago: executing program 4 (id=12365): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x9}, 0x2002, 0x20000032, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc}, {@bh}, {}, {@abort}, {@errors_remount}]}, 0x47, 0x605, &(0x7f00000001c0)="$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") 9.49377ms ago: executing program 4 (id=12366): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0x1, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x9}, {0x8, 0x400800, 0x9, 0x292}, {0x1000, 0x0, 0x4}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(camellia)\x00'}, 0x80, "6e000b00000040200000000019000000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x194}}, 0x44050) 0s ago: executing program 8 (id=12367): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/120, 0x78, 0x0, &(0x7f0000000600)=""/9, 0x9}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x13, &(0x7f0000002640)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186b00000800000000000000000000009500000000000000"], &(0x7f0000000800)='syzkaller\x00', 0xfff000, 0xde, &(0x7f0000000840)=""/222, 0x40f00, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000009c0)=[{0x4, 0x5, 0x10, 0x3}, {0x5, 0x3, 0xd, 0x4}], 0x10, 0x6}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x9, 0xa, 0x3, 0x0, 0x8002, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x5006, 0x20000000, 0x6c, 0x1000c, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x8}, 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000002140)={{r0, &(0x7f0000000bc0)='\\$,\x00', 0x0, &(0x7f0000000c00)={@align=0x7f, {0x9, 0xf0d0, 0x0, 0x7}}, 0x40, &(0x7f0000000c40)={@_ha_fsid}, &(0x7f0000000c80)=0x1}, 0x6, &(0x7f0000002080)=[{0x2, 0x100, &(0x7f0000000cc0)='#:/]\x00', &(0x7f0000000d00)="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", 0x1000, 0x10}, {0x2, 0xfffffffe, &(0x7f0000001d00)='/\'.\\#\'.\x00', &(0x7f0000001d40)="e7b05c0d07dbc432e5163d8d252da9bba42874feb9a74daf7c8ca3bf2c01a15ed2c85dc1fefc29796fbdb08bf6ae589eb20523ba23a3cce50f8eef6ed0f7f328a46226fcb02e02fe5afc8f93f2bcb972e6536377538dcfd226b32771c449f29cb7c792b08b07f505b04912f150a4567617dd1254e5e77e02b17c671b6c584d8b093e977b04c7074f56edc226bf42b70ff3efa879a3b9f44c", 0x98, 0x20}, {0x3, 0x10001, &(0x7f0000001e00)=',-\x00', &(0x7f0000001e40), 0x0, 0x22}, {0x1, 0xf, &(0x7f0000001e80)=')\x00', &(0x7f0000001ec0)="1f80689f5dc76218bfc7571bcec45c4f76ca2012d4e7dc8a7c8b0148b7e1bafbea0c2713a95d", 0x26}, {0x1, 0x2c39c0, &(0x7f0000001f00)=']&\x00', &(0x7f0000001f40)="cbb0334de1dc18cdd8514701f68513906f53a0810942fa80de755883eb08fd83a491c7d694", 0x25, 0x20}, {0x1, 0x8001, &(0x7f0000001f80)='$:\x00', &(0x7f0000001fc0)="81a3a68a2dca19a294d34058e443329a2c9fd8de0e96994fd3ef3c57eab446dbb933c1933e8cf6c58d2e25508def8b0e8e8ef3b4849df90030e3d03c3ab3e1a525e64fe6b34e0de7b038597d9f0db7b9bd7ae131188dfd62620ffc3c1631370e77d3f7d21c5f8c80aa102da683777d53db522e39ee8df43d4a51bae99fd2cdf8114c983e35f1ac3fff1866f37e727dcb51de2046b30765af", 0x98}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000021c0)={0x1b, 0x0, 0x0, 0xbef, 0x0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x10, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd583}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @ldst={0x1, 0x2, 0x1, 0x0, 0xb, 0x0, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000400)=""/236, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x17, r1, 0x8, &(0x7f0000000540)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, r3, 0x0, &(0x7f0000002240)=[0x1, r4, r5, 0xffffffffffffffff, r6, r7]}, 0x94) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000002340)={0x0, 0xdc, "76af68588b1218a316f4c090680666823eba1bffe68e3e13b24816575182098f2052a1342edc86074ce3ff14b54d68e43fcb4c3959809d0c20f235bfe76023168a80c08509ceefd6098383da12653ccabc027d4ad9ed9530eea613216c90a6bab26c2741ed5ed736a9c89c063c40022dc23f2636358270bbfa57c3ffa853efbe3175549029659c9163a0938299579f5e55474011252fcbad86127004a7cadcbe579f99801215012a86153f456c34f8856c8eeeb61a031080ba42c1cbb325399457c8fbd1400fc04213e087f444e3f98926031268965c43510b6913f2"}, &(0x7f0000002440)=0xe4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002480)={r9, @in={{0x2, 0x4e24, @multicast1}}}, 0x84) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) r11 = dup(r0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r11, &(0x7f0000000300)={0xa, 0x4}, 0xc) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000700)='./file1\x00', 0x880003, &(0x7f00000012c0), 0x2, 0x253, &(0x7f0000002a40)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x44, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0, 0x1, 0x0, &(0x7f0000000d40)) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r12, 0x0, 0x0, 0x8ffff) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCGSID(r11, 0x5429, 0x0) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e40)=ANY=[], 0x11ac}, 0x1, 0x0, 0x0, 0x85}, 0x0) kernel console output (not intermixed with test programs): ending:0kB zspages:0kB present:3129332kB managed:2948120kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 1342.421133][T13332] lowmem_reserve[]: 0 0 4978 4978 [ 1342.426477][T13332] Node 0 Normal free:4263868kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:136764kB inactive_anon:4kB active_file:52164kB inactive_file:69420kB unevictable:456kB writepending:292kB zspages:0kB present:5242880kB managed:5098240kB mlocked:456kB bounce:0kB free_pcp:45904kB local_pcp:10452kB free_cma:0kB [ 1342.462854][T13332] lowmem_reserve[]: 0 0 0 0 [ 1342.467972][T13332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1342.481837][T13332] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944596kB [ 1342.501959][T13332] Node 0 Normal: 2830*4kB (U) 2919*8kB (UME) 621*16kB (UME) 750*32kB (UME) 1011*64kB (UME) 828*128kB (UME) 665*256kB (UME) 542*512kB (UM) 431*1024kB (UM) 241*2048kB (UME) 645*4096kB (UM) = 4263872kB [ 1342.511032][T13366] loop5: detected capacity change from 0 to 764 [ 1342.531677][T13332] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1342.560112][T13332] 51597 total pagecache pages [ 1342.565009][T13332] 5 pages in swap cache [ 1342.569496][T13332] Free swap = 124288kB [ 1342.573788][T13332] Total swap = 124996kB [ 1342.578476][T13332] 2097051 pages RAM [ 1342.582472][T13332] 0 pages HighMem/MovableOnly [ 1342.587598][T13332] 81621 pages reserved [ 1342.592466][ T28] audit: type=1400 audit(2000000466.289:18418): avc: denied { mount } for pid=13364 comm="syz.5.11077" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1342.654546][ T28] audit: type=1400 audit(2000000466.329:18419): avc: denied { unmount } for pid=12070 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1342.868692][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11080'. [ 1343.346212][T13381] netlink: 'syz.5.11083': attribute type 4 has an invalid length. [ 1343.375388][ T3423] lo speed is unknown, defaulting to 1000 [ 1343.384118][T13381] netlink: 'syz.5.11083': attribute type 4 has an invalid length. [ 1343.396775][ T3423] syz2: Port: 1 Link DOWN [ 1343.426656][ T10] lo speed is unknown, defaulting to 1000 [ 1343.463659][ T10] syz2: Port: 1 Link ACTIVE [ 1343.530930][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11085'. [ 1344.254140][ T28] audit: type=1400 audit(2000000467.949:18420): avc: denied { bind } for pid=13392 comm="syz.5.11087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1344.276889][ T28] audit: type=1400 audit(2000000467.949:18421): avc: denied { name_bind } for pid=13392 comm="syz.5.11087" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1344.327068][ T28] audit: type=1400 audit(2000000467.949:18422): avc: denied { node_bind } for pid=13392 comm="syz.5.11087" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1344.548517][T13407] FAULT_INJECTION: forcing a failure. [ 1344.548517][T13407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1344.574169][T13407] CPU: 0 UID: 0 PID: 13407 Comm: syz.5.11093 Tainted: G W syzkaller #0 PREEMPT(full) [ 1344.574205][T13407] Tainted: [W]=WARN [ 1344.574225][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1344.574236][T13407] Call Trace: [ 1344.574277][T13407] [ 1344.574285][T13407] __dump_stack+0x1d/0x30 [ 1344.574313][T13407] dump_stack_lvl+0x95/0xd0 [ 1344.574334][T13407] dump_stack+0x15/0x1b [ 1344.574352][T13407] should_fail_ex+0x263/0x280 [ 1344.574388][T13407] should_fail+0xb/0x20 [ 1344.574407][T13407] should_fail_usercopy+0x1a/0x20 [ 1344.574431][T13407] _copy_from_user+0x1c/0xb0 [ 1344.574505][T13407] __se_sys_cachestat+0x72/0x710 [ 1344.574536][T13407] ? ksys_write+0x161/0x1a0 [ 1344.574554][T13407] __x64_sys_cachestat+0x55/0x70 [ 1344.574598][T13407] x64_sys_call+0x2fb3/0x3020 [ 1344.574623][T13407] do_syscall_64+0x12c/0x370 [ 1344.574653][T13407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.574675][T13407] RIP: 0033:0x7fae3880c819 [ 1344.574765][T13407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.574784][T13407] RSP: 002b:00007fae3725f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c3 [ 1344.574807][T13407] RAX: ffffffffffffffda RBX: 00007fae38a85fa0 RCX: 00007fae3880c819 [ 1344.574822][T13407] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1344.574835][T13407] RBP: 00007fae3725f090 R08: 0000000000000000 R09: 0000000000000000 [ 1344.574872][T13407] R10: 00000000000000ee R11: 0000000000000246 R12: 0000000000000001 [ 1344.574883][T13407] R13: 00007fae38a86038 R14: 00007fae38a85fa0 R15: 00007fff19fc00e8 [ 1344.574899][T13407] [ 1344.816396][T13413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13413 comm=syz.0.11095 [ 1344.838890][T13415] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1344.899387][T13426] loop8: detected capacity change from 0 to 136 [ 1344.958062][T13435] loop8: detected capacity change from 0 to 512 [ 1344.965580][T13435] EXT4-fs: Ignoring removed mblk_io_submit option [ 1345.082994][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11111'. [ 1345.510310][T13457] lo speed is unknown, defaulting to 1000 [ 1345.539735][T13473] netlink: 'syz.0.11116': attribute type 9 has an invalid length. [ 1345.548172][T13473] __nla_validate_parse: 1 callbacks suppressed [ 1345.548188][T13473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11116'. [ 1345.669398][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1345.751325][T13490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11124'. [ 1345.755941][T13492] netlink: 'syz.3.11125': attribute type 5 has an invalid length. [ 1345.786662][T13490] veth0_vlan: Caught tx_queue_len zero misconfig [ 1346.118762][T13511] ip6tnl0: Caught tx_queue_len zero misconfig [ 1346.685949][T13520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11133'. [ 1346.701685][T13520] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11133'. [ 1346.889367][ T28] audit: type=1326 audit(2000000470.589:18423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13524 comm="syz.8.11135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff458c4c819 code=0x0 [ 1346.970157][ T28] audit: type=1400 audit(2000000470.659:18424): avc: denied { setcurrent } for pid=13530 comm="syz.5.11137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1346.997336][T13537] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11135'. [ 1347.044001][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11139'. [ 1347.057482][ T28] audit: type=1401 audit(2000000470.659:18425): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1347.145483][ T28] audit: type=1326 audit(2000000470.839:18426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1347.211498][ T28] audit: type=1326 audit(2000000470.839:18428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1347.285815][ T28] audit: type=1326 audit(2000000470.839:18427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1347.333350][T13556] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11145'. [ 1347.352273][T13555] loop5: detected capacity change from 0 to 1024 [ 1347.365586][ T28] audit: type=1326 audit(2000000470.839:18430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13547 comm="syz.5.11142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1347.397504][T13555] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1347.435199][T13555] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1347.444898][T13555] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1347.452823][T13555] EXT4-fs error (device loop5): ext4_free_blocks:6724: comm syz.5.11146: Freeing blocks not in datazone - block = 0, count = 4096 [ 1347.470602][T13555] loop5: lost filesystem error report for type 5 error -117 [ 1347.470705][T13555] EXT4-fs (loop5): Remounting filesystem read-only [ 1347.478553][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1347.478604][ C0] EXT4-fs (loop5): initial error at time 2000000471: ext4_free_blocks:6724 [ 1347.478624][ C0] EXT4-fs (loop5): last error at time 2000000471: ext4_free_blocks:6724 [ 1347.510851][T13555] EXT4-fs (loop5): 1 orphan inode deleted [ 1347.518043][T13555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1347.582902][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.604575][T13562] lo speed is unknown, defaulting to 1000 [ 1347.628887][T13563] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1347.698627][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1347.708665][T13565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11150'. [ 1347.764777][T13567] netlink: 'syz.8.11151': attribute type 9 has an invalid length. [ 1348.078286][T13584] lo speed is unknown, defaulting to 1000 [ 1348.128021][T13591] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1348.391931][T13600] lo speed is unknown, defaulting to 1000 [ 1348.411187][T13609] loop5: detected capacity change from 0 to 128 [ 1348.500485][T13613] bio_check_eod: 14 callbacks suppressed [ 1348.500518][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.500518][T13613] loop5: rw=2049, sector=145, nr_sectors = 96 limit=128 [ 1348.590213][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.590213][T13613] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1348.616291][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.616291][T13613] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1348.630968][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.630968][T13613] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1348.646151][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.646151][T13613] loop5: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1348.660011][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.660011][T13613] loop5: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 1348.674431][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.674431][T13613] loop5: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 1348.711155][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.711155][T13613] loop5: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 1348.725924][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.725924][T13613] loop5: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 1348.740675][T13613] syz.5.11163: attempt to access beyond end of device [ 1348.740675][T13613] loop5: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 1348.905822][T13625] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1348.919070][T13627] smc: net device bond0 applied user defined pnetid SYZ2 [ 1348.934069][T13627] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1348.943519][T13627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.955128][T13627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.968710][T13627] bond0 (unregistering): Released all slaves [ 1349.085412][T13637] netlink: 'syz.0.11177': attribute type 1 has an invalid length. [ 1349.098688][T13637] smc: adding net device bond0 with user defined pnetid SYZ2 [ 1349.112441][T13637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.536399][ T28] kauditd_printk_skb: 147 callbacks suppressed [ 1349.536421][ T28] audit: type=1326 audit(2000000473.229:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1349.724224][ T28] audit: type=1326 audit(2000000473.229:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1349.870381][T13657] loop5: detected capacity change from 0 to 512 [ 1349.905210][ T28] audit: type=1326 audit(2000000473.229:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1349.968082][ T28] audit: type=1326 audit(2000000473.279:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1350.005453][ T28] audit: type=1326 audit(2000000473.279:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1350.035510][T13657] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1350.050472][ T28] audit: type=1326 audit(2000000473.279:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1350.094465][T13657] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.164795][T13668] netlink: 'syz.3.11188': attribute type 10 has an invalid length. [ 1350.178086][ T28] audit: type=1326 audit(2000000473.319:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1350.209243][T13671] 9p: Bad value for 'rfdno' [ 1350.265784][ T28] audit: type=1326 audit(2000000473.319:18584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13d770c582 code=0x7ffc0000 [ 1350.314351][T13657] bond2: entered promiscuous mode [ 1350.322183][T13657] bond2: entered allmulticast mode [ 1350.341046][ T28] audit: type=1326 audit(2000000473.319:18585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f13d770c617 code=0x7ffc0000 [ 1350.368250][T13657] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1350.405593][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.418766][ T28] audit: type=1326 audit(2000000473.319:18586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13644 comm="syz.0.11180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f13d76c9511 code=0x7ffc0000 [ 1350.891890][T13696] Cannot find del_set index 0 as target [ 1350.945689][T13702] team_slave_1: Caught tx_queue_len zero misconfig [ 1351.096564][T13720] __nla_validate_parse: 12 callbacks suppressed [ 1351.096634][T13720] netlink: 112 bytes leftover after parsing attributes in process `syz.5.11211'. [ 1351.162064][T13726] loop5: detected capacity change from 0 to 2048 [ 1351.217806][T13726] Alternate GPT is invalid, using primary GPT. [ 1351.225413][T13726] loop5: p1 p2 p3 [ 1351.252116][T13730] netlink: 'syz.3.11214': attribute type 10 has an invalid length. [ 1351.302398][ T5893] udevd[5893]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1351.304276][ T4197] udevd[4197]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1351.313302][T13737] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11216'. [ 1351.334067][ T9296] udevd[9296]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1351.347085][T13738] netlink: 'syz.3.11214': attribute type 10 has an invalid length. [ 1351.348929][T13730] bond0: (slave dummy0): Releasing backup interface [ 1351.366626][T13739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13739 comm=syz.5.11216 [ 1351.484496][T13747] loop5: detected capacity change from 0 to 8192 [ 1351.505236][T13747] vfat: Unknown parameter '' [ 1351.509470][T13730] team0: Port device dummy0 added [ 1351.533054][T13738] team0: Port device dummy0 removed [ 1351.541708][T13738] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1351.577484][T13753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11222'. [ 1351.608851][T13753] bond2: option ad_actor_sys_prio: invalid value (0) [ 1351.616495][T13753] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1351.625473][T13753] bond2 (unregistering): Released all slaves [ 1351.732781][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11227'. [ 1351.984956][T13777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1352.023556][T13777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1352.144171][T13777] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11230'. [ 1352.338308][T13784] lo speed is unknown, defaulting to 1000 [ 1352.495212][T13791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11234'. [ 1352.517443][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11234'. [ 1352.652354][T13801] lo speed is unknown, defaulting to 1000 [ 1352.707357][T13800] lo speed is unknown, defaulting to 1000 [ 1352.936806][T13806] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1352.976586][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11238'. [ 1353.519232][T13814] loop5: detected capacity change from 0 to 1024 [ 1353.537405][T13814] EXT4-fs: Ignoring removed mblk_io_submit option [ 1353.555397][T13814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1353.586364][T13814] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1353.627241][T13814] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.11240: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1353.668429][T13814] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1353.668609][T13814] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.11240: couldn't read orphan inode 11 (err -117) [ 1353.679232][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1353.679255][ C0] EXT4-fs (loop5): initial error at time 2000000477: ext4_ext_check_inode:521: inode 11 [ 1353.679281][ C0] EXT4-fs (loop5): last error at time 2000000477: ext4_ext_check_inode:521: inode 11 [ 1353.751126][T13819] loop8: detected capacity change from 0 to 1024 [ 1353.767206][T13819] EXT4-fs: test_dummy_encryption option not supported [ 1353.880680][T13814] loop5: lost filesystem error report for type 5 error -117 [ 1353.881285][T13814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1354.053360][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1354.228631][T13836] gtp0: entered promiscuous mode [ 1354.234111][T13836] gtp0: entered allmulticast mode [ 1354.821512][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 1354.821527][ T28] audit: type=1400 audit(2000000478.519:18763): avc: denied { read } for pid=13860 comm="syz.4.11254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1355.003372][T13870] loop5: detected capacity change from 0 to 512 [ 1355.013118][T13870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1355.027857][T13870] EXT4-fs error (device loop5): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1355.091622][T13870] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #11: comm syz.5.11257: corrupted inode contents [ 1355.105081][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1355.105101][ C1] EXT4-fs (loop5): initial error at time 2000000478: mb_free_blocks:2049: inode 11: block 64 [ 1355.105149][ C1] EXT4-fs (loop5): last error at time 2000000478: mb_free_blocks:2049: inode 11: block 64 [ 1355.166886][T13873] netlink: 'syz.3.11258': attribute type 10 has an invalid length. [ 1355.204851][T13870] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1355.205089][T13870] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #11: comm syz.5.11257: mark_inode_dirty error [ 1355.239195][T13870] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1355.239607][T13870] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.11257: invalid indirect mapped block 1 (level 1) [ 1355.286001][T13880] 8021q: VLANs not supported on wg2 [ 1355.287343][T13870] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1355.297447][T13870] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #11: comm syz.5.11257: corrupted inode contents [ 1355.329676][T13870] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1355.329851][T13870] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1355.356922][T13870] loop5: lost filesystem error report for type 5 error -117 [ 1355.357188][T13870] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #11: comm syz.5.11257: corrupted inode contents [ 1355.392106][T13870] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1355.392520][T13870] EXT4-fs error (device loop5): ext4_truncate:4602: inode #11: comm syz.5.11257: mark_inode_dirty error [ 1355.426168][T13870] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1355.426320][T13870] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1355.447226][T13870] loop5: lost filesystem error report for type 5 error -117 [ 1355.447441][T13870] EXT4-fs (loop5): 1 truncate cleaned up [ 1355.461426][T13870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1355.489011][T13870] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 13: comm syz.5.11257: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 1355.516947][T13870] ip6gre0: Caught tx_queue_len zero misconfig [ 1355.538297][T13892] SELinux: Context Y7j [ 1355.538297][T13892] u/$2Sٟ2'ks2- vjd #,N< [ 1355.538297][T13892] :E]Y\?ͼ=ً1KIk{kL^0}4nr}pįNwyxiu?+H~F1Wjm &8UۂVN2)GxV%5xeRM4r4cJsHU&'p2EMMk&cbU,,f@8bD%$f=8@kI|w Ox&KCH;x-Ko4i!Oi%ڂ2 F"2E,P] k? is not valid (left unmapped). [ 1355.586498][T13892] SELinux: Context *mkXI$hx4۫KM is not valid (left unmapped). [ 1355.607743][T13892] SELinux: Context KM*,hcIǾû̋y+.+y0[pr;JA9Iq jǼ=7)oM{nF=XmnxrD㑉垳4TW}t%ȖY^slFB53hm5};JXom%~"~9mM~alʺLI8i&Zw8 lX&D;td BIݛ~L [ 1355.710204][T13892] uSċkxIRI$4"lX7f9٬bB|72*kNM is not valid (left unmapped). [ 1355.738365][T13892] SELinux: Context WXE][O:Ѹo߭ObZDfq :~t6uYx(Q8NPZeoQ[aSI> is not valid (left unmapped). [ 1355.930547][T13913] lo speed is unknown, defaulting to 1000 [ 1356.092117][T13910] lo speed is unknown, defaulting to 1000 [ 1356.403568][T13919] xt_hashlimit: size too large, truncated to 1048576 [ 1356.726967][T13929] FAULT_INJECTION: forcing a failure. [ 1356.726967][T13929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1356.771895][T13929] CPU: 0 UID: 0 PID: 13929 Comm: syz.5.11279 Tainted: G W syzkaller #0 PREEMPT(full) [ 1356.771930][T13929] Tainted: [W]=WARN [ 1356.771990][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1356.772004][T13929] Call Trace: [ 1356.772010][T13929] [ 1356.772019][T13929] __dump_stack+0x1d/0x30 [ 1356.772064][T13929] dump_stack_lvl+0x95/0xd0 [ 1356.772088][T13929] dump_stack+0x15/0x1b [ 1356.772111][T13929] should_fail_ex+0x263/0x280 [ 1356.772283][T13929] should_fail+0xb/0x20 [ 1356.772307][T13929] should_fail_usercopy+0x1a/0x20 [ 1356.772369][T13929] _copy_to_user+0x20/0xa0 [ 1356.772442][T13929] simple_read_from_buffer+0xb5/0x130 [ 1356.772524][T13929] proc_fail_nth_read+0x10e/0x150 [ 1356.772610][T13929] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1356.772640][T13929] vfs_read+0x1ab/0x7f0 [ 1356.772664][T13929] ? __se_sys_cachestat+0x6b9/0x710 [ 1356.772703][T13929] ksys_read+0xdc/0x1a0 [ 1356.772724][T13929] __x64_sys_read+0x40/0x50 [ 1356.772744][T13929] x64_sys_call+0x2886/0x3020 [ 1356.772770][T13929] do_syscall_64+0x12c/0x370 [ 1356.772851][T13929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.772875][T13929] RIP: 0033:0x7fae387cd04e [ 1356.772892][T13929] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1356.772991][T13929] RSP: 002b:00007fae3725efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1356.773013][T13929] RAX: ffffffffffffffda RBX: 00007fae3725f6c0 RCX: 00007fae387cd04e [ 1356.773091][T13929] RDX: 000000000000000f RSI: 00007fae3725f0a0 RDI: 0000000000000004 [ 1356.773105][T13929] RBP: 00007fae3725f090 R08: 0000000000000000 R09: 0000000000000000 [ 1356.773120][T13929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1356.773134][T13929] R13: 00007fae38a86038 R14: 00007fae38a85fa0 R15: 00007fff19fc00e8 [ 1356.773184][T13929] [ 1357.014785][T13942] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1357.134557][ T28] audit: type=1400 audit(2000000480.829:18764): avc: denied { connect } for pid=13954 comm="syz.0.11289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1357.219758][T13958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1357.236975][T13958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1357.607127][T13973] loop8: detected capacity change from 0 to 128 [ 1357.684011][ T28] audit: type=1400 audit(2000000481.379:18765): avc: denied { read } for pid=13963 comm="syz.8.11292" dev="sockfs" ino=135614 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1357.710324][T13984] 9p: Bad value for 'rfdno' [ 1358.095377][ T28] audit: type=1400 audit(2000000481.789:18766): avc: denied { accept } for pid=14044 comm="syz.3.11302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1359.082532][T14119] loop5: detected capacity change from 0 to 1024 [ 1359.090905][T14119] EXT4-fs: inline encryption not supported [ 1359.108032][T14119] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 1359.221208][T14140] bond0: Caught tx_queue_len zero misconfig [ 1359.230146][T14140] 9p: Bad value for 'wfdno' [ 1359.236170][T14140] __nla_validate_parse: 10 callbacks suppressed [ 1359.236190][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11313'. [ 1359.302459][T14149] netlink: 'syz.8.11316': attribute type 5 has an invalid length. [ 1359.406634][T14156] sit0: Caught tx_queue_len zero misconfig [ 1359.480666][ T28] audit: type=1400 audit(2000000483.179:18767): avc: denied { map } for pid=14162 comm="syz.3.11322" path="socket:[136495]" dev="sockfs" ino=136495 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1359.570110][T14152] loop8: detected capacity change from 0 to 512 [ 1359.716849][ T4784] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.735446][ T4784] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.745250][ T4784] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.755981][ T4784] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1359.807339][T14152] lo speed is unknown, defaulting to 1000 [ 1360.016877][ T3423] IPVS: starting estimator thread 0... [ 1360.116761][T14175] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1360.587615][T14184] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11328'. [ 1360.905810][T14197] loop8: detected capacity change from 0 to 512 [ 1360.988032][T14206] sit0: Caught tx_queue_len zero misconfig [ 1360.994719][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11335'. [ 1361.189182][T14221] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11341'. [ 1361.291000][T14228] netlink: 176 bytes leftover after parsing attributes in process `syz.5.11344'. [ 1361.336408][T14230] loop8: detected capacity change from 0 to 2048 [ 1361.459752][T14241] xt_hashlimit: size too large, truncated to 1048576 [ 1361.467890][T14241] xt_hashlimit: max too large, truncated to 1048576 [ 1361.476508][ T28] audit: type=1400 audit(2000000485.169:18768): avc: denied { connect } for pid=14240 comm="syz.4.11350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1361.738107][T14230] Alternate GPT is invalid, using primary GPT. [ 1361.746143][T14230] loop8: p2 p3 p7 [ 1361.752845][T14268] 9p: Bad value for 'rfdno' [ 1361.901755][T14283] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1361.940231][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11365'. [ 1361.956918][ T4197] udevd[4197]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1361.958451][ T5893] udevd[5893]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 1361.980846][ T9296] udevd[9296]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1362.000024][T14292] netlink: 'syz.8.11367': attribute type 1 has an invalid length. [ 1362.086081][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11367'. [ 1362.097813][T14293] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1362.109534][T14292] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11367'. [ 1362.292460][T14307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11373'. [ 1363.006319][T14322] FAULT_INJECTION: forcing a failure. [ 1363.006319][T14322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.064619][T14322] CPU: 0 UID: 0 PID: 14322 Comm: syz.5.11379 Tainted: G W syzkaller #0 PREEMPT(full) [ 1363.064655][T14322] Tainted: [W]=WARN [ 1363.064722][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1363.064735][T14322] Call Trace: [ 1363.064743][T14322] [ 1363.064752][T14322] __dump_stack+0x1d/0x30 [ 1363.064812][T14322] dump_stack_lvl+0x95/0xd0 [ 1363.064937][T14322] dump_stack+0x15/0x1b [ 1363.064957][T14322] should_fail_ex+0x263/0x280 [ 1363.064981][T14322] should_fail+0xb/0x20 [ 1363.065000][T14322] should_fail_usercopy+0x1a/0x20 [ 1363.065027][T14322] _copy_from_user+0x1c/0xb0 [ 1363.065104][T14322] ___sys_sendmsg+0xc1/0x1e0 [ 1363.065251][T14322] __x64_sys_sendmsg+0xd4/0x160 [ 1363.065271][T14322] x64_sys_call+0x194c/0x3020 [ 1363.065293][T14322] do_syscall_64+0x12c/0x370 [ 1363.065316][T14322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.065346][T14322] RIP: 0033:0x7fae3880c819 [ 1363.065360][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.065444][T14322] RSP: 002b:00007fae3725f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.065520][T14322] RAX: ffffffffffffffda RBX: 00007fae38a85fa0 RCX: 00007fae3880c819 [ 1363.065536][T14322] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1363.065550][T14322] RBP: 00007fae3725f090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.065565][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.065579][T14322] R13: 00007fae38a86038 R14: 00007fae38a85fa0 R15: 00007fff19fc00e8 [ 1363.065597][T14322] [ 1363.416946][ T28] audit: type=1400 audit(2000000487.109:18769): avc: denied { accept } for pid=14335 comm="syz.5.11384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1363.452447][T14346] FAULT_INJECTION: forcing a failure. [ 1363.452447][T14346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.473710][T14346] CPU: 0 UID: 0 PID: 14346 Comm: syz.8.11387 Tainted: G W syzkaller #0 PREEMPT(full) [ 1363.473746][T14346] Tainted: [W]=WARN [ 1363.473752][T14346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1363.473843][T14346] Call Trace: [ 1363.473849][T14346] [ 1363.473856][T14346] __dump_stack+0x1d/0x30 [ 1363.473881][T14346] dump_stack_lvl+0x95/0xd0 [ 1363.473985][T14346] dump_stack+0x15/0x1b [ 1363.474005][T14346] should_fail_ex+0x263/0x280 [ 1363.474073][T14346] should_fail+0xb/0x20 [ 1363.474163][T14346] should_fail_usercopy+0x1a/0x20 [ 1363.474189][T14346] _copy_from_user+0x1c/0xb0 [ 1363.474216][T14346] ___sys_sendmsg+0xc1/0x1e0 [ 1363.474266][T14346] __x64_sys_sendmsg+0xd4/0x160 [ 1363.474296][T14346] x64_sys_call+0x194c/0x3020 [ 1363.474323][T14346] do_syscall_64+0x12c/0x370 [ 1363.474472][T14346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.474529][T14346] RIP: 0033:0x7ff458c4c819 [ 1363.474544][T14346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.474560][T14346] RSP: 002b:00007ff45769f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1363.474581][T14346] RAX: ffffffffffffffda RBX: 00007ff458ec5fa0 RCX: 00007ff458c4c819 [ 1363.474607][T14346] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 1363.474620][T14346] RBP: 00007ff45769f090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.474632][T14346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.474645][T14346] R13: 00007ff458ec6038 R14: 00007ff458ec5fa0 R15: 00007fff32584298 [ 1363.474667][T14346] [ 1363.826078][T14369] bridge0: entered promiscuous mode [ 1363.832602][T14369] macvlan2: entered promiscuous mode [ 1363.920560][ T28] audit: type=1400 audit(2000000487.619:18770): avc: denied { ioctl } for pid=14371 comm="syz.0.11398" path="socket:[135879]" dev="sockfs" ino=135879 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1364.103266][T14390] blktrace: Concurrent blktraces are not allowed on loop8 [ 1364.124111][T14392] bond5: entered allmulticast mode [ 1364.236197][T14408] SET target dimension over the limit! [ 1364.359033][T14407] netlink: 'syz.4.11409': attribute type 10 has an invalid length. [ 1364.406095][T14426] netlink: 'syz.4.11409': attribute type 10 has an invalid length. [ 1364.438552][T14407] bond0: (slave dummy0): Releasing backup interface [ 1365.482295][T14407] team0: Port device dummy0 added [ 1365.490771][T14426] team0: Port device dummy0 removed [ 1365.512049][T14426] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1365.655875][ T28] audit: type=1326 audit(2000000489.349:18771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14451 comm="syz.3.11428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x0 [ 1365.706939][T14454] lo: Caught tx_queue_len zero misconfig [ 1366.019166][T14471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11435'. [ 1366.075496][T14471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11435'. [ 1366.153767][T14471] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11435'. [ 1366.548110][ T28] audit: type=1400 audit(2000000490.249:18772): avc: denied { write } for pid=14480 comm="syz.3.11437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1366.589692][ T28] audit: type=1400 audit(2000000490.279:18773): avc: denied { read } for pid=14480 comm="syz.3.11437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1366.634385][ T28] audit: type=1400 audit(2000000490.329:18774): avc: denied { ioctl } for pid=14480 comm="syz.3.11437" path="socket:[137144]" dev="sockfs" ino=137144 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1366.712613][ T28] audit: type=1400 audit(2000000490.399:18775): avc: denied { map } for pid=14485 comm="syz.5.11439" path="socket:[137166]" dev="sockfs" ino=137166 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1366.753860][T14490] syz_tun: entered allmulticast mode [ 1366.826797][T14501] netlink: 324 bytes leftover after parsing attributes in process `syz.3.11443'. [ 1366.984323][T14509] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1366.993926][T14508] netlink: 'syz.8.11446': attribute type 1 has an invalid length. [ 1367.024451][T14509] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11445'. [ 1367.042045][T14511] loop8: detected capacity change from 0 to 512 [ 1367.166629][T14517] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11449'. [ 1367.448632][T14525] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1367.459999][ T28] audit: type=1400 audit(2000000491.159:18776): avc: denied { relabelto } for pid=14524 comm="syz.8.11452" name="311" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1367.491647][ T28] audit: type=1400 audit(2000000491.159:18777): avc: denied { associate } for pid=14524 comm="syz.8.11452" name="311" dev="tmpfs" ino=1661 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 1367.522489][T14488] syz_tun: left allmulticast mode [ 1367.873702][T14535] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1367.898204][T14535] bond3 (unregistering): Released all slaves [ 1368.651125][T14551] gtp0: entered promiscuous mode [ 1368.656330][T14551] gtp0: entered allmulticast mode [ 1369.009840][T14572] team0: No ports can be present during mode change [ 1369.017588][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11469'. [ 1369.033838][T14572] team0 (unregistering): Port device team_slave_0 removed [ 1369.045232][T14572] team0 (unregistering): Port device team_slave_1 removed [ 1369.137482][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11468'. [ 1369.150355][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11468'. [ 1369.314089][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11471'. [ 1369.993848][T14584] vlan2: entered promiscuous mode [ 1370.103354][ T28] audit: type=1326 audit(2000000493.799:18778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.4.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1370.328992][ T28] audit: type=1326 audit(2000000493.799:18779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.4.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1370.406058][ T28] audit: type=1326 audit(2000000493.829:18780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.4.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1370.452855][ T28] audit: type=1326 audit(2000000493.829:18781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14585 comm="syz.4.11473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1370.703590][T14602] xt_hashlimit: size too large, truncated to 1048576 [ 1371.885853][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1371.885904][ T28] audit: type=1326 audit(2000000495.579:18812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1371.994868][ T28] audit: type=1326 audit(2000000495.579:18813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.048503][ T28] audit: type=1326 audit(2000000495.579:18814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.091298][T14622] loop8: detected capacity change from 0 to 512 [ 1372.114291][ T28] audit: type=1326 audit(2000000495.579:18815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.154985][ T28] audit: type=1326 audit(2000000495.579:18816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.192176][ T28] audit: type=1326 audit(2000000495.579:18817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.246805][ T28] audit: type=1326 audit(2000000495.579:18818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.275519][ T28] audit: type=1326 audit(2000000495.579:18819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.300253][ T28] audit: type=1326 audit(2000000495.579:18820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.326118][ T28] audit: type=1326 audit(2000000495.579:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14613 comm="syz.3.11484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05d2b8c819 code=0x7ffc0000 [ 1372.563417][T14675] Invalid option length (63724) for dns_resolver key [ 1372.671724][T14703] xt_hashlimit: size too large, truncated to 1048576 [ 1372.765671][T14711] lo speed is unknown, defaulting to 1000 [ 1372.875130][T14723] loop8: detected capacity change from 0 to 256 [ 1372.899357][T14723] __nla_validate_parse: 3 callbacks suppressed [ 1372.899372][T14723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11520'. [ 1372.987953][T14735] netlink: 'syz.3.11525': attribute type 4 has an invalid length. [ 1373.011761][T14735] netlink: 'syz.3.11525': attribute type 4 has an invalid length. [ 1373.219957][T14754] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11532'. [ 1373.229704][T14755] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11532'. [ 1373.247611][T14755] netlink: 'syz.8.11532': attribute type 8 has an invalid length. [ 1373.255971][T14754] netlink: 'syz.8.11532': attribute type 8 has an invalid length. [ 1373.295772][T14758] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11533'. [ 1373.499467][T14772] netlink: 176 bytes leftover after parsing attributes in process `syz.8.11538'. [ 1373.614712][T14785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1373.624220][T14785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1373.891299][T14809] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11554'. [ 1373.919429][T14811] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11555'. [ 1374.126839][ T10] IPVS: starting estimator thread 0... [ 1374.216836][T14815] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1374.251021][T14819] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1374.387991][T14826] ip6_vti0: Caught tx_queue_len zero misconfig [ 1374.859856][T14851] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11570'. [ 1376.006213][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11580'. [ 1376.020380][T14876] ipvlan2: entered promiscuous mode [ 1376.029494][T14876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11580'. [ 1376.297270][T14896] bond_slave_1: Caught tx_queue_len zero misconfig [ 1377.584796][T14941] bond3: entered allmulticast mode [ 1377.799372][T14951] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 1378.304436][T14969] loop5: detected capacity change from 0 to 1024 [ 1378.418319][T14969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1378.469301][T14969] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1378.519309][ T28] kauditd_printk_skb: 78 callbacks suppressed [ 1378.519329][ T28] audit: type=1400 audit(2000000502.219:18900): avc: denied { map } for pid=14967 comm="syz.5.11615" path="/175/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1378.522231][T14967] EXT4-fs error (device loop5): ext4_map_blocks:828: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.588982][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.603880][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.620973][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.637059][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.651764][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.667500][T14969] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.682306][T14969] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.697931][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1378.712564][T14967] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #15: comm syz.5.11615: lblock 0 mapped to illegal pblock 0 (length 1) [ 1379.126909][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1379.159894][T14979] __nla_validate_parse: 2 callbacks suppressed [ 1379.159909][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11617'. [ 1379.221023][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11617'. [ 1379.273635][T14979] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11617'. [ 1379.733863][T15001] FAULT_INJECTION: forcing a failure. [ 1379.733863][T15001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1379.765608][T15001] CPU: 0 UID: 0 PID: 15001 Comm: syz.8.11626 Tainted: G W syzkaller #0 PREEMPT(full) [ 1379.765642][T15001] Tainted: [W]=WARN [ 1379.765649][T15001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1379.765698][T15001] Call Trace: [ 1379.765705][T15001] [ 1379.765713][T15001] __dump_stack+0x1d/0x30 [ 1379.765739][T15001] dump_stack_lvl+0x95/0xd0 [ 1379.765767][T15001] dump_stack+0x15/0x1b [ 1379.765786][T15001] should_fail_ex+0x263/0x280 [ 1379.765816][T15001] should_fail+0xb/0x20 [ 1379.765840][T15001] should_fail_usercopy+0x1a/0x20 [ 1379.765948][T15001] _copy_from_user+0x1c/0xb0 [ 1379.765978][T15001] __sys_bpf+0x183/0x7e0 [ 1379.766032][T15001] __x64_sys_bpf+0x41/0x50 [ 1379.766049][T15001] x64_sys_call+0x10cb/0x3020 [ 1379.766150][T15001] do_syscall_64+0x12c/0x370 [ 1379.766174][T15001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.766197][T15001] RIP: 0033:0x7ff458c4c819 [ 1379.766215][T15001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1379.766264][T15001] RSP: 002b:00007ff45769f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1379.766281][T15001] RAX: ffffffffffffffda RBX: 00007ff458ec5fa0 RCX: 00007ff458c4c819 [ 1379.766294][T15001] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1379.766307][T15001] RBP: 00007ff45769f090 R08: 0000000000000000 R09: 0000000000000000 [ 1379.766321][T15001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.766405][T15001] R13: 00007ff458ec6038 R14: 00007ff458ec5fa0 R15: 00007fff32584298 [ 1379.766436][T15001] [ 1380.082142][T15009] loop5: detected capacity change from 0 to 1024 [ 1380.097096][T15009] EXT4-fs: Ignoring removed bh option [ 1380.114276][T15009] EXT4-fs: Ignoring removed nobh option [ 1380.147365][T15009] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1380.211653][T15009] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #3: block 2: comm syz.5.11630: lblock 2 mapped to illegal pblock 2 (length 1) [ 1380.230690][T15009] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1380.230891][T15009] EXT4-fs (loop5): Remounting filesystem read-only [ 1380.240442][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1380.240461][ C0] EXT4-fs (loop5): initial error at time 2000000503: ext4_map_blocks:786: inode 3: block 2 [ 1380.240499][ C0] EXT4-fs (loop5): last error at time 2000000503: ext4_map_blocks:786: inode 3: block 2 [ 1380.299980][T15009] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 1380.310789][T15009] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 1380.323631][T15009] EXT4-fs (loop5): 1 orphan inode deleted [ 1380.331042][T15009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1380.368330][T15009] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.578449][T15021] loop8: detected capacity change from 0 to 512 [ 1380.739338][T15021] loop8: detected capacity change from 0 to 512 [ 1380.921807][T15018] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1381.069534][T15032] netlink: 'syz.5.11638': attribute type 10 has an invalid length. [ 1381.125199][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.146403][T15038] bridge_slave_1: left allmulticast mode [ 1381.163127][T15038] bridge_slave_1: left promiscuous mode [ 1381.173227][T15038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.192702][T15038] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1381.332967][ T28] audit: type=1326 audit(2000000505.029:18901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15042 comm="syz.8.11640" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff458c4c819 code=0x0 [ 1381.708456][ T28] audit: type=1326 audit(2000000505.409:18902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.0.11649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1381.753471][ T28] audit: type=1326 audit(2000000505.409:18903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.0.11649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1381.827109][T15069] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1381.851815][ T28] audit: type=1326 audit(2000000505.409:18904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.0.11649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1381.921659][ T28] audit: type=1326 audit(2000000505.409:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.0.11649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1381.967325][T15071] 9p: Bad value for 'rfdno' [ 1381.982322][ T28] audit: type=1326 audit(2000000505.409:18906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.0.11649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1382.056929][ T28] audit: type=1326 audit(2000000505.409:18907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.0.11649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x7ffc0000 [ 1382.236833][T15090] loop8: detected capacity change from 0 to 512 [ 1382.256601][T15090] EXT4-fs: Ignoring removed bh option [ 1382.270863][T15090] EXT4-fs: Ignoring removed mblk_io_submit option [ 1382.286859][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11659'. [ 1382.306039][T15090] dummy0: Caught tx_queue_len zero misconfig [ 1382.573274][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11663'. [ 1382.627238][T15104] team_slave_1: Caught tx_queue_len zero misconfig [ 1383.640413][ T28] kauditd_printk_skb: 316 callbacks suppressed [ 1383.640426][ T28] audit: type=1400 audit(2000000507.339:19224): avc: denied { setopt } for pid=15130 comm="syz.0.11671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1383.747458][T15136] netlink: 'syz.4.11673': attribute type 8 has an invalid length. [ 1384.275019][T15164] xt_hashlimit: size too large, truncated to 1048576 [ 1384.322720][T15168] tmpfs: Bad value for 'mpol' [ 1384.356725][ T28] audit: type=1400 audit(2000000508.019:19225): avc: denied { mounton } for pid=15141 comm="syz.0.11675" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1385.856955][T15195] syzkaller0: entered promiscuous mode [ 1385.886809][T15195] syzkaller0: entered allmulticast mode [ 1385.908402][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11691'. [ 1385.950928][T15191] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11691'. [ 1386.359380][T15205] hub 8-0:1.0: USB hub found [ 1386.364891][T15205] hub 8-0:1.0: 8 ports detected [ 1386.890262][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11698'. [ 1387.514273][T15224] sit0: Caught tx_queue_len zero misconfig [ 1387.530868][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11701'. [ 1387.587491][T15228] loop5: detected capacity change from 0 to 2048 [ 1387.637161][ T4197] loop5: p4 < > [ 1387.647331][T15228] loop5: p4 < > [ 1387.680773][ T4774] Bluetooth: hci0: Frame reassembly failed (-84) [ 1387.791315][ T28] audit: type=1326 audit(2000000511.459:19226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15248 comm="syz.0.11712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d770c819 code=0x0 [ 1387.991789][T15250] tmpfs: Bad value for 'mpol' [ 1388.255844][T15263] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11714'. [ 1388.689555][ T28] audit: type=1326 audit(2000000512.389:19227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1388.773165][T15270] 9p: Bad value for 'rfdno' [ 1388.839486][ T28] audit: type=1326 audit(2000000512.419:19228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1388.955322][ T28] audit: type=1326 audit(2000000512.419:19229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.065969][ T28] audit: type=1326 audit(2000000512.419:19230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.172025][ T28] audit: type=1326 audit(2000000512.419:19231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.277283][ T28] audit: type=1326 audit(2000000512.419:19232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.378560][ T28] audit: type=1326 audit(2000000512.419:19233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.475852][ T28] audit: type=1326 audit(2000000512.429:19234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.580049][ T28] audit: type=1326 audit(2000000512.429:19235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.672888][ T28] audit: type=1326 audit(2000000512.449:19236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15269 comm="syz.4.11717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1389.747210][ T3831] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1389.776403][T15270] 9p: Bad value for 'rfdno' [ 1389.932721][T15290] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11726'. [ 1389.973210][T15292] loop8: detected capacity change from 0 to 128 [ 1390.001374][T15290] netlink: 80 bytes leftover after parsing attributes in process `syz.4.11726'. [ 1390.126159][T15304] batadv1: entered promiscuous mode [ 1390.173205][T15306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11732'. [ 1390.243147][T15310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11733'. [ 1390.335208][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11737'. [ 1390.623622][T15314] loop5: detected capacity change from 0 to 8192 [ 1390.653942][T15340] lo speed is unknown, defaulting to 1000 [ 1390.677034][ T4197] loop5: p2 p3 p4 < > [ 1390.682360][ T4197] loop5: partition table partially beyond EOD, truncated [ 1390.696891][ T4197] loop5: p2 size 590592 extends beyond EOD, truncated [ 1390.706007][ T4197] loop5: p3 start 4294967295 is beyond EOD, truncated [ 1390.714162][ T4197] loop5: p4 start 117440516 is beyond EOD, truncated [ 1390.724254][T15314] loop5: p2 p3 p4 < > [ 1390.736131][T15314] loop5: partition table partially beyond EOD, truncated [ 1390.744475][T15314] loop5: p2 size 590592 extends beyond EOD, truncated [ 1390.756294][T15314] loop5: p3 start 4294967295 is beyond EOD, truncated [ 1390.764203][T15314] loop5: p4 start 117440516 is beyond EOD, truncated [ 1390.961017][T15362] tipc: Failed to remove unknown binding: 66,0,0/2:965680675/965680677 [ 1390.973776][T15362] tipc: Failed to remove unknown binding: 66,0,0/2:965680675/965680676 [ 1391.066497][T15367] __nla_validate_parse: 2 callbacks suppressed [ 1391.066513][T15367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11756'. [ 1391.125382][ T4197] udevd[4197]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 1391.150504][T15375] netlink: 200 bytes leftover after parsing attributes in process `syz.5.11760'. [ 1391.169216][T15378] loop8: detected capacity change from 0 to 512 [ 1391.254094][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11761'. [ 1391.273969][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11761'. [ 1391.450982][T15384] bridge_slave_0: left allmulticast mode [ 1391.458449][T15384] bridge_slave_0: left promiscuous mode [ 1391.466065][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.492136][T15384] bridge_slave_1: left allmulticast mode [ 1391.498897][T15384] bridge_slave_1: left promiscuous mode [ 1391.506288][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.537865][T15384] bond0: (slave bond_slave_0): Releasing backup interface [ 1391.594874][T15384] bond0: (slave bond_slave_1): Releasing backup interface [ 1391.616867][T15392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64288 sclass=netlink_route_socket pid=15392 comm=syz.0.11765 [ 1391.797570][T15384] team0: Port device team_slave_0 removed [ 1391.854639][T15384] team0: Port device team_slave_1 removed [ 1391.876081][T15384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1391.884893][T15384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1391.921449][T15384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.930292][T15384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1391.946667][T15404] netlink: 'syz.4.11768': attribute type 10 has an invalid length. [ 1391.966246][T15384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1391.984594][T15387] bridge0: port 1(syz_tun) entered blocking state [ 1391.991814][T15387] bridge0: port 1(syz_tun) entered disabled state [ 1391.999357][T15387] syz_tun: entered allmulticast mode [ 1392.005874][T15387] syz_tun: entered promiscuous mode [ 1392.011717][T15387] bridge0: port 1(syz_tun) entered blocking state [ 1392.018381][T15387] bridge0: port 1(syz_tun) entered forwarding state [ 1392.037220][T15406] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11769'. [ 1392.068057][T15394] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1392.083756][T15394] bond4 (unregistering): Released all slaves [ 1392.094833][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11767'. [ 1392.105316][T15396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11767'. [ 1392.115396][T15396] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11767'. [ 1392.152061][T15409] loop5: detected capacity change from 0 to 512 [ 1392.177456][T15409] EXT4-fs warning (device loop5): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop5. [ 1392.204942][T15414] block device autoloading is deprecated and will be removed. [ 1392.236059][T15406] bond0: entered promiscuous mode [ 1392.245670][T15406] bond_slave_0: entered promiscuous mode [ 1392.252049][T15406] bond_slave_1: entered promiscuous mode [ 1392.258246][T15406] dummy0: entered promiscuous mode [ 1392.262062][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11773'. [ 1392.267191][T15406] hsr1: entered promiscuous mode [ 1392.289030][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11773'. [ 1392.509950][ T6200] IPVS: starting estimator thread 0... [ 1392.607575][T15443] IPVS: using max 2352 ests per chain, 117600 per kthread [ 1393.850316][T15494] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1393.881860][T15499] bond0 (unregistering): left promiscuous mode [ 1393.895804][T15499] bond_slave_0: left promiscuous mode [ 1393.907152][T15499] bond_slave_1: left promiscuous mode [ 1393.919301][T15499] dummy0: left promiscuous mode [ 1393.927432][T15499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.948855][T15499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.966278][T15502] loop8: detected capacity change from 0 to 8192 [ 1393.975791][T15499] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1393.996331][T15499] bond0 (unregistering): Released all slaves [ 1394.005234][T15507] xt_hashlimit: max too large, truncated to 1048576 [ 1394.015694][ T10] syz1: Port: 1 Link DOWN [ 1394.086931][T15494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.103879][T15494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.119630][T15519] netlink: 'syz.4.11809': attribute type 5 has an invalid length. [ 1394.145987][T15521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15521 comm=syz.4.11810 [ 1394.350027][T15551] lo speed is unknown, defaulting to 1000 [ 1394.414952][ T28] kauditd_printk_skb: 221 callbacks suppressed [ 1394.414969][ T28] audit: type=1400 audit(2000000518.109:19458): avc: denied { checkpoint_restore } for pid=15532 comm="syz.4.11815" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1394.453596][T15556] tipc: Started in network mode [ 1394.462546][T15556] tipc: Node identity ee491f5ffb44, cluster identity 4711 [ 1394.475616][T15556] tipc: Enabled bearer , priority 0 [ 1394.547493][ T28] audit: type=1400 audit(2000000518.249:19459): avc: denied { setattr } for pid=15558 comm="syz.4.11823" name="RAWv6" dev="sockfs" ino=139639 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1394.624587][ T28] audit: type=1400 audit(2000000518.319:19460): avc: denied { map } for pid=15572 comm="syz.0.11829" path="socket:[140616]" dev="sockfs" ino=140616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1394.642500][T15577] vlan2: entered promiscuous mode [ 1394.657461][T15577] gretap0: entered promiscuous mode [ 1394.892357][T15594] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -2 [ 1395.034858][T15594] loop5: detected capacity change from 0 to 512 [ 1395.115124][T15594] EXT4-fs (loop5): 1 orphan inode deleted [ 1395.129466][T15584] Failed to initialize the IGMP autojoin socket (err -2) [ 1395.164064][T15594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1395.587410][ T1034] tipc: Node number set to 353181535 [ 1395.802944][ T28] audit: type=1400 audit(2000000519.499:19461): avc: denied { firmware_load } for pid=15642 comm="syz.4.11854" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1395.850886][T15676] loop0: detected capacity change from 0 to 1024 [ 1395.882593][T15683] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15683 comm=syz.3.11867 [ 1395.886784][T15676] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1395.899254][T15682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15682 comm=syz.3.11867 [ 1395.915301][T15676] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 1395.934283][T15676] EXT4-fs warning (device loop0): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1395.950466][T15676] EXT4-fs (loop0): mount failed [ 1396.039940][T15696] netlink: 'syz.3.11871': attribute type 9 has an invalid length. [ 1396.049067][T15696] netlink: 'syz.3.11871': attribute type 7 has an invalid length. [ 1396.060681][T15696] netlink: 'syz.3.11871': attribute type 8 has an invalid length. [ 1396.069895][T15696] netlink: 'syz.3.11871': attribute type 8 has an invalid length. [ 1396.171916][T15709] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1396.231480][T15719] loop8: detected capacity change from 0 to 128 [ 1396.245746][ T28] audit: type=1400 audit(2000000519.939:19462): avc: denied { create } for pid=15718 comm="syz.8.11881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1396.299408][T15724] loop8: detected capacity change from 0 to 512 [ 1396.327774][T15724] loop8: detected capacity change from 0 to 512 [ 1396.347713][T15724] __nla_validate_parse: 14 callbacks suppressed [ 1396.347728][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11883'. [ 1396.504455][T15741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11889'. [ 1396.514595][T15738] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1396.532859][T15741] netlink: 'syz.4.11889': attribute type 8 has an invalid length. [ 1396.544109][T15743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1396.551601][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11889'. [ 1396.762093][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11898'. [ 1396.775575][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11899'. [ 1396.845185][T15753] loop0: detected capacity change from 0 to 8192 [ 1396.886989][T15753] loop0: p2 p3 p4 [ 1396.895494][T15753] loop0: p2 size 582656 extends beyond EOD, truncated [ 1396.904982][T15753] loop0: p3 start 134217728 is beyond EOD, truncated [ 1396.914383][T15753] loop0: p4 size 262144 extends beyond EOD, truncated [ 1397.026235][T15776] loop0: detected capacity change from 0 to 128 [ 1397.034915][T15776] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1397.058344][ T4197] udevd[4197]: incorrect ext4 checksum on /dev/loop0 [ 1397.067953][T15780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11905'. [ 1397.115472][T15784] netlink: 'syz.3.11907': attribute type 4 has an invalid length. [ 1397.137957][T15784] netlink: 'syz.3.11907': attribute type 4 has an invalid length. [ 1397.182365][T15788] tipc: Enabling of bearer rejected, failed to enable media [ 1397.219519][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11911'. [ 1397.229604][T15788] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11909'. [ 1397.256665][T15802] syz.3.11913: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1397.272857][T15802] CPU: 0 UID: 0 PID: 15802 Comm: syz.3.11913 Tainted: G W syzkaller #0 PREEMPT(full) [ 1397.272927][T15802] Tainted: [W]=WARN [ 1397.272938][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1397.272950][T15802] Call Trace: [ 1397.272956][T15802] [ 1397.272964][T15802] __dump_stack+0x1d/0x30 [ 1397.272995][T15802] dump_stack_lvl+0x95/0xd0 [ 1397.273020][T15802] dump_stack+0x15/0x1b [ 1397.273080][T15802] warn_alloc+0x145/0x1c0 [ 1397.273111][T15802] ? __schedule+0x93c/0xd40 [ 1397.273149][T15802] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 1397.273239][T15802] ? preempt_schedule_common+0x11/0x30 [ 1397.273277][T15802] ? __rcu_read_unlock+0x4e/0x70 [ 1397.273317][T15802] ? avc_has_perm_noaudit+0xab/0x130 [ 1397.273364][T15802] ? should_fail_ex+0x30/0x280 [ 1397.273446][T15802] ? xskq_create+0x36/0xe0 [ 1397.273535][T15802] vmalloc_user_noprof+0x7d/0xb0 [ 1397.273566][T15802] ? xskq_create+0x80/0xe0 [ 1397.273596][T15802] xskq_create+0x80/0xe0 [ 1397.273623][T15802] xsk_init_queue+0x70/0xb0 [ 1397.273707][T15802] xsk_setsockopt+0x3f5/0x640 [ 1397.273735][T15802] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1397.273767][T15802] __sys_setsockopt+0x184/0x200 [ 1397.273810][T15802] __x64_sys_setsockopt+0x64/0x80 [ 1397.273844][T15802] x64_sys_call+0x2327/0x3020 [ 1397.273881][T15802] do_syscall_64+0x12c/0x370 [ 1397.273990][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.274014][T15802] RIP: 0033:0x7f05d2b8c819 [ 1397.274033][T15802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1397.274053][T15802] RSP: 002b:00007f05d15e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1397.274118][T15802] RAX: ffffffffffffffda RBX: 00007f05d2e05fa0 RCX: 00007f05d2b8c819 [ 1397.274135][T15802] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1397.274150][T15802] RBP: 00007f05d2c22c91 R08: 0000000000000014 R09: 0000000000000000 [ 1397.274230][T15802] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.274246][T15802] R13: 00007f05d2e06038 R14: 00007f05d2e05fa0 R15: 00007ffed93628b8 [ 1397.274267][T15802] [ 1397.274339][T15802] Mem-Info: [ 1397.321643][T15801] loop0: detected capacity change from 0 to 512 [ 1397.326451][T15802] active_anon:34946 inactive_anon:1 isolated_anon:0 [ 1397.326451][T15802] active_file:13050 inactive_file:17425 isolated_file:0 [ 1397.326451][T15802] unevictable:114 dirty:244 writeback:0 [ 1397.326451][T15802] slab_reclaimable:4328 slab_unreclaimable:28979 [ 1397.326451][T15802] mapped:39388 shmem:20112 pagetables:6495 [ 1397.326451][T15802] sec_pagetables:0 bounce:0 [ 1397.326451][T15802] kernel_misc_reclaimable:0 [ 1397.326451][T15802] free:1809226 free_pcp:6995 free_cma:0 [ 1397.352429][T15801] EXT4-fs: Ignoring removed bh option [ 1397.356265][T15802] Node 0 active_anon:139784kB inactive_anon:4kB active_file:52200kB inactive_file:69700kB unevictable:456kB isolated(anon):0kB isolated(file):0kB mapped:157552kB dirty:976kB writeback:0kB shmem:80448kB kernel_stack:6112kB pagetables:25864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1397.380709][T15801] EXT4-fs: Ignoring removed mblk_io_submit option [ 1397.382174][T15802] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1397.382247][T15802] lowmem_reserve[]: 0 2879 7857 7857 [ 1397.382320][T15802] Node 0 DMA32 free:2944596kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948120kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1397.382463][T15802] lowmem_reserve[]: 0 0 4978 4978 [ 1397.382502][T15802] Node 0 Normal free:4276948kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:139784kB inactive_anon:4kB active_file:52200kB inactive_file:69700kB unevictable:456kB writepending:976kB zspages:0kB present:5242880kB managed:5098240kB mlocked:456kB bounce:0kB free_pcp:24720kB local_pcp:4504kB free_cma:0kB [ 1397.382577][T15802] lowmem_reserve[]: 0 [ 1397.391996][T15801] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 1397.392803][T15802] 0 0 0 [ 1397.392829][T15802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1397.393022][T15802] Node 0 DMA32: [ 1397.403376][T15801] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1397.403863][T15802] 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944596kB [ 1397.404139][T15802] Node 0 Normal: 3259*4kB (UM) 3986*8kB (UM) 927*16kB [ 1397.413397][T15801] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1397.415018][T15802] (UME) [ 1397.424595][T15801] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4 [ 1397.426542][T15802] 1224*32kB (UM) 1177*64kB (UME) 726*128kB (UME) 599*256kB (UM) 538*512kB (UM) 435*1024kB (UM) 241*2048kB (UME) 645*4096kB (UM) = 4276908kB [ 1397.426848][T15802] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1397.426867][T15802] 50611 total pagecache pages [ 1397.426876][T15802] 7 pages in swap cache [ 1397.426884][T15802] Free swap = 124288kB [ 1397.426892][T15802] Total swap = 124996kB [ 1397.426901][T15802] 2097051 pages RAM [ 1397.426909][T15802] 0 pages HighMem/MovableOnly [ 1397.426917][T15802] 81621 pages reserved [ 1397.504763][T15809] netlink: 'syz.8.11916': attribute type 10 has an invalid length. [ 1397.514696][T15801] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 1397.941693][T15801] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.11912: Failed to acquire dquot type 1 [ 1397.961532][T15801] loop0: lost filesystem error report for type 5 error -5 [ 1397.966712][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1397.982087][ C1] EXT4-fs (loop0): last error at time 2000000521: ext4_acquire_dquot:7026 [ 1397.998666][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.009868][T15801] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11912: Invalid block bitmap block 0 in block_group 0 [ 1398.021410][T15822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.052880][T15801] loop0: lost filesystem error report for type 5 error -117 [ 1398.055095][T15801] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11912: Invalid block bitmap block 0 in block_group 0 [ 1398.062016][T15822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.074013][T15801] loop0: lost filesystem error report for type 5 error -117 [ 1398.108385][T15801] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.11912: Invalid block bitmap block 0 in block_group 0 [ 1398.119998][T15822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.140890][T15822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.164357][T15801] loop0: lost filesystem error report for type 5 error -117 [ 1398.167675][T15801] Quota error (device loop0): write_blk: dquota write failed [ 1398.196518][T15835] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11921'. [ 1398.215194][T15801] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1398.247187][T15801] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.11912: Failed to acquire dquot type 1 [ 1398.269201][T15801] loop0: lost filesystem error report for type 5 error -28 [ 1398.274388][T15801] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.11912: Failed to acquire dquot type 1 [ 1398.302087][T15801] loop0: lost filesystem error report for type 5 error -28 [ 1398.307218][T15801] EXT4-fs (loop0): 1 orphan inode deleted [ 1398.331528][T15801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1398.410550][T15822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1398.437500][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1398.538114][T15822] gtp0: left promiscuous mode [ 1398.546782][T15822] gtp0: left allmulticast mode [ 1398.560582][T15822] bond5: left allmulticast mode [ 1398.568108][T15822] hsr1: left promiscuous mode [ 1398.587112][ T4774] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.603217][ T4774] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.620654][ T4774] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1398.637576][ T4774] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.646617][ T4774] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.663368][ T4774] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1398.673979][ T4774] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.684635][ T4774] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.694719][ T4774] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1398.704073][ T4774] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.713322][ T4774] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.722542][ T4774] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1398.820067][T15845] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11927'. [ 1399.099285][T15851] netlink: 'syz.5.11930': attribute type 4 has an invalid length. [ 1399.121645][ T10] lo speed is unknown, defaulting to 1000 [ 1399.128181][ T10] syz2: Port: 1 Link DOWN [ 1399.135668][T15851] netlink: 'syz.5.11930': attribute type 4 has an invalid length. [ 1399.146768][ T10] lo speed is unknown, defaulting to 1000 [ 1399.159009][ T10] syz2: Port: 1 Link ACTIVE [ 1399.340658][T15866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1399.460303][T15868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.541093][T15873] macvlan2: entered promiscuous mode [ 1399.562532][T15873] bond0: entered promiscuous mode [ 1399.575150][T15873] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1399.583790][T15873] bond0: left promiscuous mode [ 1399.758791][T15899] loop0: detected capacity change from 0 to 2048 [ 1399.779041][T15899] EXT4-fs: Ignoring removed i_version option [ 1399.801926][T15899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1399.866525][T15899] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1400.065287][T15923] rdma_op ffff88810273d980 conn xmit_rdma 0000000000000000 [ 1400.110091][T15927] loop8: detected capacity change from 0 to 256 [ 1400.140912][T15927] msdos: Unknown parameter 'nodask' [ 1400.181400][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1400.181416][ T28] audit: type=1400 audit(2000000523.879:19466): avc: denied { accept } for pid=15930 comm="syz.4.11961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1400.243098][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1400.339934][T15942] netlink: 'syz.8.11967': attribute type 1 has an invalid length. [ 1400.361990][ T28] audit: type=1400 audit(2000000524.059:19467): avc: denied { bind } for pid=15945 comm="syz.4.11969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1400.399303][T15942] bond6: entered promiscuous mode [ 1400.423585][T15942] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1400.465315][T15961] Failed to initialize the IGMP autojoin socket (err -2) [ 1400.506300][T15942] bond6: (slave bridge9): making interface the new active one [ 1400.542614][T15942] bridge9: entered promiscuous mode [ 1400.556647][T15942] bond6: (slave bridge9): Enslaving as an active interface with an up link [ 1400.748796][T15987] netlink: 'syz.0.11985': attribute type 10 has an invalid length. [ 1401.121100][T16031] random: crng reseeded on system resumption [ 1401.126532][ T28] audit: type=1400 audit(2000000524.819:19468): avc: denied { write } for pid=16030 comm="syz.5.12004" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1401.375365][T16049] __nla_validate_parse: 8 callbacks suppressed [ 1401.375382][T16049] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12013'. [ 1401.443789][T16051] Failed to initialize the IGMP autojoin socket (err -2) [ 1401.734483][T16061] loop8: detected capacity change from 0 to 128 [ 1402.536413][T16069] loop0: detected capacity change from 0 to 4096 [ 1402.553240][T16069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.607588][T16069] Quota error (device loop0): do_check_range: Getting block 3587 out of range 1-5 [ 1402.617391][ T28] audit: type=1400 audit(2000000526.279:19469): avc: denied { link } for pid=16068 comm="syz.0.12021" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1402.693674][T16069] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1402.814653][T16069] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.12021: Failed to acquire dquot type 1 [ 1402.834378][T16085] netlink: 'syz.5.12026': attribute type 10 has an invalid length. [ 1403.054168][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.165726][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12029'. [ 1403.243098][T16093] Failed to initialize the IGMP autojoin socket (err -2) [ 1403.317357][T16096] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1403.322928][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12033'. [ 1403.341171][T16096] bond2 (unregistering): Released all slaves [ 1403.412496][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12034'. [ 1403.697008][T16128] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12041'. [ 1404.059083][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12044'. [ 1404.187525][T16142] netlink: 'syz.8.12045': attribute type 10 has an invalid length. [ 1404.239432][T16143] netlink: 'syz.8.12045': attribute type 10 has an invalid length. [ 1404.272630][T16142] team0: Port device dummy0 added [ 1404.289916][T16143] team0: Port device dummy0 removed [ 1404.432892][T16155] Failed to initialize the IGMP autojoin socket (err -2) [ 1404.887259][T16172] loop5: detected capacity change from 0 to 512 [ 1404.918926][T16172] EXT4-fs error (device loop5): ext4_map_blocks:786: inode #11: block 10: comm syz.5.12059: lblock 0 mapped to illegal pblock 10 (length 1) [ 1404.950298][T16172] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1404.956979][T16172] EXT4-fs (loop5): Remounting filesystem read-only [ 1404.966785][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1404.979607][ T28] audit: type=1400 audit(2000000528.679:19470): avc: denied { mount } for pid=16181 comm="syz.0.12063" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1404.982130][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810553d200: rx timeout, send abort [ 1404.982139][ C1] EXT4-fs (loop5): initial error at time 2000000528: ext4_map_blocks:786: inode 11: block 10 [ 1405.017663][T16172] EXT4-fs warning (device loop5): ext4_evict_inode:268: couldn't mark inode dirty (err -30) [ 1405.025930][ C1] EXT4-fs (loop5): last error at time 2000000528: ext4_map_blocks:786: inode 11: block 10 [ 1405.050206][ T28] audit: type=1326 audit(2000000528.749:19471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.098762][T16172] EXT4-fs (loop5): 1 orphan inode deleted [ 1405.105865][T16172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.122600][ T28] audit: type=1326 audit(2000000528.749:19472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.134152][T16172] netlink: 'syz.5.12059': attribute type 1 has an invalid length. [ 1405.148934][ T28] audit: type=1326 audit(2000000528.749:19473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.207936][T16172] bond4: entered promiscuous mode [ 1405.213621][T16172] bond4: entered allmulticast mode [ 1405.219315][T16172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1405.229489][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 1405.229503][ T28] audit: type=1326 audit(2000000528.929:19573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.282680][ T28] audit: type=1326 audit(2000000528.959:19574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.288500][T16172] erspan2: entered allmulticast mode [ 1405.310730][ T28] audit: type=1326 audit(2000000528.959:19575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.319608][T16172] bond4: (slave erspan2): making interface the new active one [ 1405.348234][T16172] erspan2: entered promiscuous mode [ 1405.354040][ T28] audit: type=1326 audit(2000000528.959:19576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.358448][T16172] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 1405.379934][ T28] audit: type=1326 audit(2000000528.959:19577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.416057][ T28] audit: type=1326 audit(2000000528.959:19578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.432395][T16194] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12067'. [ 1405.464961][T16194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.479670][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811baafc00: rx timeout, send abort [ 1405.482206][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810553d200: abort rx timeout. Force session deactivation [ 1405.505885][ T28] audit: type=1326 audit(2000000528.959:19579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.506280][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.651105][ T28] audit: type=1326 audit(2000000528.959:19580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.776677][ T28] audit: type=1326 audit(2000000528.959:19581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16182 comm="syz.4.12064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f697eb3c819 code=0x7ffc0000 [ 1405.840850][T16208] loop5: detected capacity change from 0 to 512 [ 1405.875244][T16208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1405.889316][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12073'. [ 1405.913503][T16208] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1405.942668][T16208] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:105: comm syz.5.12069: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1405.965105][T16208] EXT4-fs error (device loop5): ext4_lookup:1785: inode #13: comm syz.5.12069: iget: checksum invalid [ 1405.979714][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811baafc00: abort rx timeout. Force session deactivation [ 1406.001327][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1406.080486][T16221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1406.104226][T16221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1406.125168][T16221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12077'. [ 1406.809032][T16238] netlink: 'syz.0.12084': attribute type 1 has an invalid length. [ 1406.836363][T16238] netlink: 'syz.0.12084': attribute type 2 has an invalid length. [ 1406.854221][T16238] netlink: 'syz.0.12084': attribute type 1 has an invalid length. [ 1406.875011][T16238] netlink: 'syz.0.12084': attribute type 1 has an invalid length. [ 1406.917874][T16238] loop0: detected capacity change from 0 to 1024 [ 1406.940435][T16238] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1406.952701][T16238] EXT4-fs error (device loop0): ext4_acquire_dquot:7026: comm syz.0.12084: Failed to acquire dquot type 0 [ 1406.966089][T16238] loop0: lost filesystem error report for type 5 error -5 [ 1406.966726][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1406.967375][T16238] EXT4-fs (loop0): 1 truncate cleaned up [ 1406.974237][ C0] EXT4-fs (loop0): initial error at time 2000000530: ext4_acquire_dquot:7026 [ 1406.981756][T16238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1406.987185][ C0] [ 1406.987195][ C0] EXT4-fs (loop0): last error at time 2000000530: ext4_acquire_dquot:7026 [ 1407.447520][T16259] syzkaller0: entered promiscuous mode [ 1407.472449][T16259] syzkaller0: entered allmulticast mode [ 1407.491546][T16259] tipc: Enabled bearer , priority 0 [ 1407.525102][T16258] tipc: Resetting bearer [ 1407.557742][T16258] tipc: Disabling bearer [ 1407.789546][T16268] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12093'. [ 1407.989384][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1409.023808][T16286] loop0: detected capacity change from 0 to 512 [ 1409.067121][T16286] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12098'. [ 1409.152127][T16287] loop8: detected capacity change from 0 to 128 [ 1409.975836][T16332] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1410.147570][T16336] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12118'. [ 1410.464707][T16344] geneve3: entered promiscuous mode [ 1410.480964][T16344] geneve3: entered allmulticast mode [ 1410.591400][T16349] loop5: detected capacity change from 0 to 512 [ 1410.635993][T16351] veth1_to_bond: Caught tx_queue_len zero misconfig [ 1410.723908][T16349] EXT4-fs error (device loop5): __ext4_fill_super:5588: inode #2: comm syz.5.12122: inode has both inline data and extents flags [ 1410.759861][T16357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12125'. [ 1410.770216][T16349] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1410.770617][T16349] EXT4-fs (loop5): get root inode failed [ 1410.781092][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1410.781111][ C1] EXT4-fs (loop5): last error at time 2000000534: __ext4_fill_super:5588: inode 2 [ 1410.873201][T16349] EXT4-fs (loop5): mount failed [ 1411.846899][T16370] FAULT_INJECTION: forcing a failure. [ 1411.846899][T16370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1411.891163][T16370] CPU: 1 UID: 0 PID: 16370 Comm: syz.0.12130 Tainted: G W syzkaller #0 PREEMPT(full) [ 1411.891193][T16370] Tainted: [W]=WARN [ 1411.891199][T16370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1411.891257][T16370] Call Trace: [ 1411.891265][T16370] [ 1411.891273][T16370] __dump_stack+0x1d/0x30 [ 1411.891356][T16370] dump_stack_lvl+0x95/0xd0 [ 1411.891386][T16370] dump_stack+0x15/0x1b [ 1411.891405][T16370] should_fail_ex+0x263/0x280 [ 1411.891428][T16370] should_fail+0xb/0x20 [ 1411.891459][T16370] should_fail_usercopy+0x1a/0x20 [ 1411.891588][T16370] _copy_from_user+0x1c/0xb0 [ 1411.891613][T16370] ___sys_sendmsg+0xc1/0x1e0 [ 1411.891647][T16370] __x64_sys_sendmsg+0xd4/0x160 [ 1411.891670][T16370] x64_sys_call+0x194c/0x3020 [ 1411.891705][T16370] do_syscall_64+0x12c/0x370 [ 1411.891734][T16370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.891757][T16370] RIP: 0033:0x7f13d770c819 [ 1411.891821][T16370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.891837][T16370] RSP: 002b:00007f13d6167028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.891859][T16370] RAX: ffffffffffffffda RBX: 00007f13d7985fa0 RCX: 00007f13d770c819 [ 1411.891872][T16370] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1411.891883][T16370] RBP: 00007f13d6167090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.891919][T16370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.891933][T16370] R13: 00007f13d7986038 R14: 00007f13d7985fa0 R15: 00007fff22926f68 [ 1411.892048][T16370] [ 1412.178162][T16378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12133'. [ 1412.209181][T16383] gretap0: mtu less than device minimum [ 1412.249264][T16383] loop8: detected capacity change from 0 to 1764 [ 1412.335052][T16395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12141'. [ 1412.397046][T16397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12142'. [ 1412.428160][T16406] netlink: 'syz.3.12145': attribute type 1 has an invalid length. [ 1412.429393][T16397] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1412.469800][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1412.469815][ T28] audit: type=1400 audit(2000000536.169:19584): avc: denied { watch_reads } for pid=16408 comm="syz.4.12146" path="/474/file1" dev="tmpfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1412.506092][T16406] bond5: (slave geneve3): Opening slave failed [ 1412.526188][T16414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1412.577796][T16420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1412.589629][T16419] loop5: detected capacity change from 0 to 2048 [ 1412.590162][T16414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1412.665409][T16419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1412.738404][T16434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12154'. [ 1412.816747][T16438] netlink: 116 bytes leftover after parsing attributes in process `syz.3.12156'. [ 1412.858917][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1412.892087][T16445] loop5: detected capacity change from 0 to 512 [ 1412.915276][T16445] ext2: Unknown parameter 'nouser_xattr' [ 1413.009932][T16453] loop5: detected capacity change from 0 to 512 [ 1413.025663][T16453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1413.039740][T16458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12165'. [ 1413.343167][T16453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1413.423516][T16453] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.537420][T16453] EXT4-fs error (device loop5): ext4_get_first_dir_block:3527: inode #12: comm syz.5.12163: Attempting to read directory block (0) that is past i_size (3) [ 1413.557059][ T28] audit: type=1400 audit(2000000537.229:19585): avc: denied { reparent } for pid=16451 comm="syz.5.12163" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1413.712155][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1413.758261][ T28] audit: type=1400 audit(2000000537.229:19586): avc: denied { add_name } for pid=16451 comm="syz.5.12163" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1413.826655][T16472] loop8: detected capacity change from 0 to 1024 [ 1415.007540][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12185'. [ 1415.190820][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12185'. [ 1415.235893][T16521] loop0: detected capacity change from 0 to 1024 [ 1415.449054][T16521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1415.462501][T16521] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1415.489472][T16521] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: block 3: comm syz.0.12186: lblock 3 mapped to illegal pblock 3 (length 1) [ 1415.505722][T16521] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1415.519899][T16521] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1415.519899][T16521] [ 1415.660299][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12185'. [ 1415.678741][T16522] Failed to initialize the IGMP autojoin socket (err -2) [ 1416.547260][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12196'. [ 1416.619318][T16551] bond5: option lp_interval: invalid value (18446744073709551613) [ 1416.637320][T16551] bond5: option lp_interval: allowed values 1 - 2147483647 [ 1416.653866][T16551] bond5 (unregistering): Released all slaves [ 1416.792449][T16560] netlink: 84 bytes leftover after parsing attributes in process `syz.5.12202'. [ 1416.927040][T16566] bond5: entered allmulticast mode [ 1416.973090][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12205'. [ 1417.023591][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12205'. [ 1417.383809][T10650] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1417.409251][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1417.451253][T16571] loop5: detected capacity change from 0 to 1024 [ 1417.496270][T16571] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1417.513343][T16571] System zones: 0-1, 3-36 [ 1417.523459][T16590] loop0: detected capacity change from 0 to 512 [ 1417.533862][T16571] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.12205: bad orphan inode 134217728 [ 1417.545205][T16571] loop5: lost filesystem error report for type 5 error -117 [ 1417.545773][T16571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1417.550902][T16590] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1417.582701][T16589] netlink: 'syz.4.12210': attribute type 13 has an invalid length. [ 1417.605027][T16590] EXT4-fs (loop0): 1 truncate cleaned up [ 1417.611609][T16590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.668021][T16600] loop8: detected capacity change from 0 to 512 [ 1417.675315][T16590] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12207'. [ 1417.695668][ T28] audit: type=1400 audit(2000000541.389:19587): avc: denied { ioctl } for pid=16587 comm="syz.0.12207" path="/337/file1/file1" dev="loop0" ino=15 ioctlcmd=0x6608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1417.697044][T16590] EXT4-fs warning (device loop0): verify_group_input:156: Last group not full [ 1417.773238][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1417.843529][T16611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16611 comm=syz.0.12216 [ 1417.862869][T16611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.874014][T16611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.909444][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1418.134863][ T28] audit: type=1400 audit(2000000541.829:19588): avc: denied { connect } for pid=16615 comm="syz.5.12219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1418.375152][T16621] netlink: 'syz.4.12220': attribute type 10 has an invalid length. [ 1418.537636][T16630] loop0: detected capacity change from 0 to 512 [ 1418.559168][T16630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1418.573302][T16630] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1418.896810][T16637] __nla_validate_parse: 4 callbacks suppressed [ 1418.896829][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12225'. [ 1419.966837][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12230'. [ 1420.060734][T16653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12231'. [ 1420.113894][T16655] Failed to initialize the IGMP autojoin socket (err -2) [ 1420.210359][T16659] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1420.247078][T16659] bond6 (unregistering): Released all slaves [ 1420.273413][T16655] Failed to initialize the IGMP autojoin socket (err -2) [ 1421.330742][T16671] can: request_module (can-proto-0) failed. [ 1421.377870][T16671] loop8: detected capacity change from 0 to 512 [ 1421.526557][T16682] loop8: detected capacity change from 0 to 512 [ 1422.540899][T16671] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12236'. [ 1422.561470][T16685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12241'. [ 1422.948290][ T28] audit: type=1400 audit(2000000546.639:19589): avc: denied { setopt } for pid=16690 comm="syz.3.12244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1423.184223][T16697] xfrm0: entered promiscuous mode [ 1423.698550][T16713] loop8: detected capacity change from 0 to 256 [ 1423.720982][T16714] netlink: 'syz.4.12253': attribute type 9 has an invalid length. [ 1423.742296][T16714] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12253'. [ 1423.895374][T16732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12261'. [ 1424.011152][T16730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12260'. [ 1424.242674][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1424.514228][T16744] loop8: detected capacity change from 0 to 8192 [ 1424.708977][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12268'. [ 1424.755891][T16744] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12265'. [ 1424.775268][T16750] vlan2: entered promiscuous mode [ 1424.805276][T16750] gretap0: entered promiscuous mode [ 1424.936479][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12269'. [ 1424.995942][T16761] loop5: detected capacity change from 0 to 1024 [ 1425.010954][T16763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12273'. [ 1425.057181][T16761] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84fc119, mo2=0002] [ 1425.082894][T16761] System zones: 0-1, 3-12 [ 1425.097444][T16761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1425.128862][ T28] audit: type=1326 audit(2000000548.829:19590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.169309][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1425.180034][ T28] audit: type=1326 audit(2000000548.849:19591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.233037][ T28] audit: type=1326 audit(2000000548.859:19592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.262417][ T28] audit: type=1326 audit(2000000548.859:19593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.289188][ T28] audit: type=1326 audit(2000000548.859:19594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.335426][ T28] audit: type=1326 audit(2000000548.859:19595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.363542][ T28] audit: type=1326 audit(2000000548.859:19596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.413591][T16779] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 1425.413591][T16779] Ue[%#s' [ 1425.439308][ T28] audit: type=1326 audit(2000000548.859:19597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.501079][ T28] audit: type=1326 audit(2000000548.859:19598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16760 comm="syz.5.12272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae3880c819 code=0x7ffc0000 [ 1425.578558][T16789] loop5: detected capacity change from 0 to 512 [ 1425.608238][T16789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1425.621835][T16789] ext4 filesystem being mounted at /290/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1425.646334][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.982910][T16803] futex_wake_op: syz.4.12286 tries to shift op by 32; fix this program [ 1426.048438][T16817] Failed to initialize the IGMP autojoin socket (err -2) [ 1426.099048][T16819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12288'. [ 1427.389023][T16846] netlink: 48 bytes leftover after parsing attributes in process `syz.8.12300'. [ 1427.683232][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12304'. [ 1427.716797][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12304'. [ 1428.004415][T16859] Failed to initialize the IGMP autojoin socket (err -2) [ 1428.296649][T16887] loop8: detected capacity change from 0 to 128 [ 1428.420360][T16891] loop5: detected capacity change from 0 to 512 [ 1428.547604][T16891] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 1428.623343][T16891] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1428.688456][T16891] EXT4-fs error (device loop5): ext4_quota_enable:7213: comm syz.5.12313: Bad quota inum: 393216, type: 0 [ 1428.774621][T16891] loop5: lost filesystem error report for type 5 error -117 [ 1428.775581][T16891] EXT4-fs warning (device loop5): ext4_enable_quotas:7261: Failed to enable quota tracking (type=0, err=-117, ino=393216). Please run e2fsck to fix. [ 1428.784791][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1428.784814][ C0] EXT4-fs (loop5): initial error at time 2000000552: ext4_quota_enable:7213 [ 1428.784847][ C0] EXT4-fs (loop5): last error at time 2000000552: ext4_quota_enable:7213 [ 1428.886708][T16891] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1428.905225][T16891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1428.939043][T16891] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.12313: corrupted xattr block 31: invalid header [ 1428.964787][T16891] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 1428.975807][T16891] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.12313: corrupted xattr block 31: invalid header [ 1428.992103][T16891] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 1429.039999][T16899] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #16: comm syz.5.12313: corrupted xattr block 31: invalid header [ 1429.057653][T16891] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.12313: bad symlink. [ 1429.067224][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 1429.067241][ T28] audit: type=1400 audit(2000000552.759:19610): avc: denied { read } for pid=16889 comm="syz.5.12313" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1429.098021][T16899] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=16 [ 1429.115153][T16899] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.12313: bad symlink. [ 1429.138898][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1429.189589][T16908] hub 8-0:1.0: USB hub found [ 1429.194494][T16908] hub 8-0:1.0: 8 ports detected [ 1429.207540][T16912] syz.3.12320: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1429.229849][T16912] CPU: 1 UID: 0 PID: 16912 Comm: syz.3.12320 Tainted: G W syzkaller #0 PREEMPT(full) [ 1429.229882][T16912] Tainted: [W]=WARN [ 1429.229889][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1429.229902][T16912] Call Trace: [ 1429.229946][T16912] [ 1429.229955][T16912] __dump_stack+0x1d/0x30 [ 1429.229986][T16912] dump_stack_lvl+0x95/0xd0 [ 1429.230009][T16912] dump_stack+0x15/0x1b [ 1429.230030][T16912] warn_alloc+0x145/0x1c0 [ 1429.230074][T16912] ? __schedule+0x93c/0xd40 [ 1429.230156][T16912] ? __rcu_read_unlock+0x4e/0x70 [ 1429.230181][T16912] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 1429.230209][T16912] ? __futex_wait+0x1fd/0x260 [ 1429.230228][T16912] ? __pfx_futex_wake_mark+0x10/0x10 [ 1429.230248][T16912] ? __rcu_read_unlock+0x4e/0x70 [ 1429.230333][T16912] ? avc_has_perm_noaudit+0xab/0x130 [ 1429.230364][T16912] ? should_fail_ex+0x30/0x280 [ 1429.230393][T16912] ? xskq_create+0x36/0xe0 [ 1429.230513][T16912] vmalloc_user_noprof+0x7d/0xb0 [ 1429.230548][T16912] ? xskq_create+0x80/0xe0 [ 1429.230579][T16912] xskq_create+0x80/0xe0 [ 1429.230611][T16912] xsk_init_queue+0x70/0xb0 [ 1429.230664][T16912] xsk_setsockopt+0x3f5/0x640 [ 1429.230694][T16912] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1429.230724][T16912] __sys_setsockopt+0x184/0x200 [ 1429.230770][T16912] __x64_sys_setsockopt+0x64/0x80 [ 1429.230814][T16912] x64_sys_call+0x2327/0x3020 [ 1429.230848][T16912] do_syscall_64+0x12c/0x370 [ 1429.230936][T16912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.231010][T16912] RIP: 0033:0x7f05d2b8c819 [ 1429.231029][T16912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.231051][T16912] RSP: 002b:00007f05d15e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1429.231075][T16912] RAX: ffffffffffffffda RBX: 00007f05d2e05fa0 RCX: 00007f05d2b8c819 [ 1429.231093][T16912] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1429.231187][T16912] RBP: 00007f05d2c22c91 R08: 0000000000004a00 R09: 0000000000000000 [ 1429.231204][T16912] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1429.231220][T16912] R13: 00007f05d2e06038 R14: 00007f05d2e05fa0 R15: 00007ffed93628b8 [ 1429.231244][T16912] [ 1429.231341][T16912] Mem-Info: [ 1429.429214][T16929] netlink: 200 bytes leftover after parsing attributes in process `syz.5.12326'. [ 1429.437828][T16912] active_anon:30895 inactive_anon:1 isolated_anon:0 [ 1429.437828][T16912] active_file:13046 inactive_file:17445 isolated_file:0 [ 1429.437828][T16912] unevictable:114 dirty:143 writeback:0 [ 1429.437828][T16912] slab_reclaimable:4355 slab_unreclaimable:47446 [ 1429.437828][T16912] mapped:35395 shmem:17014 pagetables:6656 [ 1429.437828][T16912] sec_pagetables:0 bounce:0 [ 1429.437828][T16912] kernel_misc_reclaimable:0 [ 1429.437828][T16912] free:1780499 free_pcp:21203 free_cma:0 [ 1429.570320][T16912] Node 0 active_anon:123580kB inactive_anon:4kB active_file:52184kB inactive_file:69780kB unevictable:456kB isolated(anon):0kB isolated(file):0kB mapped:141580kB dirty:572kB writeback:0kB shmem:68056kB kernel_stack:6144kB pagetables:26740kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1429.602239][T16912] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1429.644828][T16912] lowmem_reserve[]: 0 2879 7857 7857 [ 1429.654294][T16912] Node 0 DMA32 free:2944596kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948120kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 1429.655471][ T3422] hid_parser_main: 244 callbacks suppressed [ 1429.655488][ T3422] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1429.735503][T16912] lowmem_reserve[]: 0 0 4978 4978 [ 1429.745064][ T3422] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1429.766384][T16945] netlink: 'syz.4.12332': attribute type 10 has an invalid length. [ 1429.771550][T16912] Node 0 Normal free:4165000kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:129204kB inactive_anon:4kB active_file:52168kB inactive_file:69644kB unevictable:456kB writepending:604kB zspages:0kB present:5242880kB managed:5098240kB mlocked:456kB bounce:0kB free_pcp:73860kB local_pcp:49600kB free_cma:0kB [ 1429.845170][T16948] 9p: Bad value for 'wfdno' [ 1429.857925][T16912] lowmem_reserve[]: 0 0 0 0 [ 1429.865826][ T28] audit: type=1400 audit(2000000553.559:19611): avc: denied { create } for pid=16949 comm="syz.0.12335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1429.869264][T16912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1429.917678][T16953] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12335'. [ 1429.920600][T16912] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944596kB [ 1429.970477][T16912] Node 0 Normal: 2832*4kB (UME) 3692*8kB (UM) 1004*16kB (UME) 1072*32kB (UME) 758*64kB (UME) 762*128kB (UM) 591*256kB (UM) 539*512kB (UM) 442*1024kB (UM) 242*2048kB (UME) 623*4096kB (UM) = 4164576kB [ 1430.024882][T16965] loop8: detected capacity change from 0 to 1024 [ 1430.042261][T16912] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1430.083134][T16912] 47509 total pagecache pages [ 1430.090537][T16912] 10 pages in swap cache [ 1430.095405][T16912] Free swap = 124276kB [ 1430.110346][T16912] Total swap = 124996kB [ 1430.115075][T16912] 2097051 pages RAM [ 1430.127463][T16912] 0 pages HighMem/MovableOnly [ 1430.132751][T16912] 81621 pages reserved [ 1430.160596][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12343'. [ 1430.237963][T16989] netlink: 20 bytes leftover after parsing attributes in process `syz.5.12347'. [ 1430.287067][T16994] netlink: 'syz.8.12348': attribute type 1 has an invalid length. [ 1430.309113][T16994] netlink: 'syz.8.12348': attribute type 1 has an invalid length. [ 1430.331661][T16994] netlink: 'syz.8.12348': attribute type 2 has an invalid length. [ 1430.348783][T16998] loop0: detected capacity change from 0 to 512 [ 1430.376515][T16998] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1430.473840][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12351'. [ 1430.486785][T16998] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.12350: bg 0: block 104: invalid block bitmap [ 1430.506740][T17002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12351'. [ 1430.534492][T16998] loop0: lost filesystem error report for type 5 error -117 [ 1430.534669][T16998] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 1430.542846][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1430.542866][ C1] EXT4-fs (loop0): initial error at time 2000000554: ext4_validate_block_bitmap:432 [ 1430.542887][ C1] EXT4-fs (loop0): last error at time 2000000554: ext4_validate_block_bitmap:432 [ 1430.675341][T17014] loop8: detected capacity change from 0 to 1024 [ 1430.690895][T16998] loop0: lost filesystem error report for type 5 error -117 [ 1430.691125][T16998] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.12350: invalid indirect mapped block 1 (level 1) [ 1430.725984][T17014] ext4: Unknown parameter 'noacl' [ 1430.785901][T16998] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1430.787349][T16998] EXT4-fs (loop0): 1 truncate cleaned up [ 1430.829997][T17022] loop8: detected capacity change from 0 to 512 [ 1430.830086][T16998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1430.859493][ T28] audit: type=1400 audit(2000000554.559:19612): avc: denied { unlink } for pid=16997 comm="syz.0.12350" name="file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1430.899050][T17022] netlink: 'syz.8.12358': attribute type 1 has an invalid length. [ 1430.918600][T17022] netlink: 'syz.8.12358': attribute type 2 has an invalid length. [ 1430.928258][T10650] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1430.970947][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12364'. [ 1430.996728][T17033] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12364'. [ 1431.115937][ T1034] ================================================================== [ 1431.125994][ T1034] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 1431.135302][ T1034] [ 1431.137710][ T1034] read-write to 0xffff8881005f7c48 of 8 bytes by task 10650 on cpu 1: [ 1431.146567][ T1034] __filemap_remove_folio+0x218/0x310 [ 1431.152224][ T1034] __remove_mapping+0x390/0x4c0 [ 1431.157379][ T1034] remove_mapping+0x22/0x90 [ 1431.162593][ T1034] mapping_try_invalidate+0x293/0x430 [ 1431.168252][ T1034] invalidate_mapping_pages+0x27/0x40 [ 1431.173900][ T1034] invalidate_bdev+0x58/0x70 [ 1431.178682][ T1034] ext4_put_super+0x610/0x7b0 [ 1431.184176][ T1034] generic_shutdown_super+0xee/0x220 [ 1431.189802][ T1034] kill_block_super+0x2a/0x70 [ 1431.194851][ T1034] ext4_kill_sb+0x42/0x80 [ 1431.199355][ T1034] deactivate_locked_super+0x75/0x1c0 [ 1431.205001][ T1034] deactivate_super+0x97/0xa0 [ 1431.209850][ T1034] cleanup_mnt+0x2bb/0x330 [ 1431.214259][ T1034] __cleanup_mnt+0x19/0x20 [ 1431.218757][ T1034] task_work_run+0x130/0x1a0 [ 1431.224031][ T1034] exit_to_user_mode_loop+0x1f4/0x6f0 [ 1431.229656][ T1034] do_syscall_64+0x249/0x370 [ 1431.234595][ T1034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.241011][ T1034] [ 1431.243585][ T1034] read to 0xffff8881005f7c48 of 8 bytes by task 1034 on cpu 0: [ 1431.251570][ T1034] nr_blockdev_pages+0x7e/0xd0 [ 1431.257047][ T1034] si_meminfo+0x87/0xd0 [ 1431.261509][ T1034] update_defense_level+0x47/0x5d0 [ 1431.266983][ T1034] defense_work_handler+0x1f/0x80 [ 1431.272370][ T1034] process_scheduled_works+0x513/0xa10 [ 1431.278210][ T1034] worker_thread+0x58a/0x780 [ 1431.283346][ T1034] kthread+0x22a/0x280 [ 1431.287602][ T1034] ret_from_fork+0x150/0x360 [ 1431.292630][ T1034] ret_from_fork_asm+0x1a/0x30 [ 1431.297860][ T1034] [ 1431.300527][ T1034] value changed: 0x000000000000000b -> 0x0000000000000008 [ 1431.308138][ T1034] [ 1431.310628][ T1034] Reported by Kernel Concurrency Sanitizer on: [ 1431.316872][ T1034] CPU: 0 UID: 0 PID: 1034 Comm: kworker/0:2 Tainted: G W syzkaller #0 PREEMPT(full) [ 1431.328309][ T1034] Tainted: [W]=WARN [ 1431.332277][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1431.343542][ T1034] Workqueue: events_long defense_work_handler [ 1431.349786][ T1034] ================================================================== [ 1431.590935][T17045] loop5: detected capacity change from 0 to 2048 [ 1431.676228][ T28] audit: type=1400 audit(2000000555.089:19613): avc: denied { write } for pid=3422 comm="kworker/1:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=145024 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1431.741240][T17041] loop8: detected capacity change from 0 to 128 [ 1431.778828][T17045] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1431.793475][T17045] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1431.820657][T17045] EXT4-fs (loop5): shut down requested (0) [ 1433.178711][T12070] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.