last executing test programs: 4m56.351079807s ago: executing program 32 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r4, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x74274b4bb07a6362, 0x3}, 0x94) 4m46.919672781s ago: executing program 33 (id=84): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) 4m46.389584632s ago: executing program 34 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r6, 0x1}, &(0x7f00000000c0)=0x8) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r7 = syz_open_dev$sg(&(0x7f00000000c0), 0xfffffffffffffffa, 0x404000) r8 = getpid() r9 = gettid() rt_tgsigqueueinfo(r8, r9, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) ioctl$SG_BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000300)={'\x00', 0x2, 0x400, 0x8, 0x6, 0x8000, r9}) chown(&(0x7f0000000000)='./cgroup\x00', 0x0, 0xee00) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) 4m44.472109715s ago: executing program 35 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000"], 0x0, 0x56}, 0x28) getgroups(0x0, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) recvmmsg(r4, &(0x7f00000001c0), 0x0, 0x10040, &(0x7f00000002c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4m44.147710894s ago: executing program 36 (id=112): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000100)={0xc01, 0x40, 0x4, 0x0, 0x3}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = dup2(r0, r0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="58b0"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 4m42.570072181s ago: executing program 37 (id=117): socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001180)=ANY=[@ANYRES8, @ANYRES32], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000120) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, 0x0, 0x804) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x401, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/179, 0xb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r4, 0x40}], 0x1, 0x3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="d1f900002000010327bd8f00ffdbdf2502000000000000001e00000008000b0002"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 4m39.716154889s ago: executing program 6 (id=87): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\\-\x00', 0x80000, &(0x7f0000000040)={@align=0x5, {0x5, 0xfffb, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x401, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) r9 = socket(0x80000000000000a, 0x8080d, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x4e25, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0xfffe, 0x1, @remote, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e2a, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x24}, 0x40}}}, 0x108) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000011c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000001c0)=""/4096, 0x1000}) shutdown(r0, 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) r10 = getpgrp(0xffffffffffffffff) r11 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4081, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_bp={&(0x7f0000001240), 0x2}, 0x100997, 0x7ff, 0x7, 0x6, 0x27, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, r10, 0xffffffffffffffff, r1, 0x4) mmap(&(0x7f0000164000/0x4000)=nil, 0x4000, 0x0, 0x12011, r11, 0xa54e7000) 4m38.80654341s ago: executing program 6 (id=120): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf25010000000800010000000000040004800800020001000000240008802000078008000600c200000014"], 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000a80)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x40020) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000900000000004000000850000002700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r8 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x44005) (async) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfe33) r10 = fsmount(r8, 0x1, 0x4) fchdir(r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$binfmt_script(r11, &(0x7f0000000240), 0x3af4701e) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r12 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x22042, 0x20) pwrite64(r12, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async) ioctl$EXT4_IOC_MOVE_EXT(r12, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xd2a9, 0x100000002, 0x7ab2, 0x4}) 4m38.732172896s ago: executing program 6 (id=121): r0 = socket(0x10, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x1, 0x7, 0x0, 0xffff7fff}, 0x10) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001000000", 0x24) ioperm(0x4, 0x5, 0x3) ioperm(0x4, 0x4, 0x5) r1 = syz_io_uring_setup(0x3e1, &(0x7f0000000040)={0x0, 0xf536, 0x8000, 0x1, 0xd9}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xa9, @mcast1, 0x2}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r4, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f0000000200)={0x8000}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708090240000000020900010073797a31000000002c000000030a0101000000f9ffffff000a0000070900010073797a310000000009000300f3797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20044090) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x1, 0x2, 0x1, 0x1}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x401, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m38.58947746s ago: executing program 6 (id=122): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x1238, &(0x7f00000024c0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200), 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 4m38.394525633s ago: executing program 6 (id=124): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00e83912ce2150c000"/24], 0x48}, 0x2}, 0x20000080) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000001080), &(0x7f00000010c0)=0x1c) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001200)='attr\x00') getdents64(r4, &(0x7f0000002440)=""/181, 0xb5) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="4eaa000000000000711015000000c95809b200000500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) flock(0xffffffffffffffff, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x16) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000}, 0x1c) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000080)={{r2}, "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"}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4m38.081304715s ago: executing program 6 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r4, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x74274b4bb07a6362, 0x3}, 0x94) 4m38.079944895s ago: executing program 38 (id=125): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write(r4, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x7}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x74274b4bb07a6362, 0x3}, 0x94) 4m37.802760733s ago: executing program 8 (id=108): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x5a1f45e3c0ab9077, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtaction={0x48, 0x30, 0x224, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4, 0x12}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x40}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r4 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r7, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000008400040000000000de240102040000006f000000", @ANYRES8=r3], 0x20, 0x20008001}], 0x1, 0x24010000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000480)={r8, 0x6}, &(0x7f00000005c0)=0x8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r9, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000001080300000000000000000003fe0007050006003a00000006000240910000000600024000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023892) 4m36.895624684s ago: executing program 8 (id=129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1190e95fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a202304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a8640724a5f4e12ad99012a2e01ce79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe50151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa332482e6137e994d3f5259b7f51544cdc6d8cb4becc20dd3a57545b0c2621e4c5f94a23f73ee02c22ee7e27c2cc491a85947baac523c347c9b9ede5d6265997f2ad6e9719aafdb323988e62b7ec84545cd63b7a7"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async, rerun: 32) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) syz_clone(0x2002280, 0x0, 0x0, 0x0, 0x0, 0x0) 4m36.65835467s ago: executing program 8 (id=131): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x1238, &(0x7f00000024c0)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200), 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 4m36.381282928s ago: executing program 8 (id=136): bpf$BPF_LINK_CREATE(0x8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, @val=@netfilter={0x3, 0x0, 0xbfe, 0x1}}, 0x20) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)={0x200000, 0x200000, 0x0, 0x8, 0x5989, 0x4}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') fchdir(r0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000280)=0xe8) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x2, 0x8001, 0x9, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0x128c, 0x17, 0x4, 0x70bd2b, 0x25dfdbfb, {0x20}, [@generic="e5a4d82e0996e406f40548c6bbabaec30f1d73f418f760cfcebbff311bc314f0eb3eb0dc5ccb4d150755ff2e6f39aab2441c9729c9a0c296afb03b5b5230c0b441d703ef822190a9e0b05d9e593d9cec57cdaea3daa4a271e9909102ba5126712f6710d5d0c5abb00c285c9f8ef8", @generic="4d3125619275b0de64e0c8e53b0f41b4377663ba11b52b7faad60e37c94232f7615737", @generic="b2a62f97b630c1db731971f300bdbaa98b5e63a60fee8be0d59fa447ebbaa890669814a538da1d3d458f70adc19a776bb685846c454b8763a06ca2829e7b95efa47bb448a216fffc7a0b5b89fd867ea7d212ffa32e6d69a1823de43bf3dbce25f4b97dd649bf4633c8c4fd698a7a5f7c9ce382d28285f78d28ba8dd9397870c9d090ca702c25711f796ba14cab03ce7d3866cc5aa87fa664448f001738195c7ba990b00609c67443a74294593ec9ba768a9e55a6bc85d757b763437cf9c3c4dbac3a0d63786d31f04a225eb4744efb1b1fc34ee8a8169ded4b53de47ab77c2f920815ef802cdbf050fae5b029ec3cc", @typed={0x8, 0xcb, 0x0, 0x0, @u32=0x4}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x106, 0x0, 0x0, @uid=r1}, @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x10ba, 0x31, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x8}, @typed={0x10, 0xf5, 0x0, 0x0, @str='personality\x00'}, @generic="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", @typed={0x8, 0xc2, 0x0, 0x0, @pid=r2}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x1}, @generic="917642201737e35b18b9e1335583597f43611ea65f29c3b35731f0864bc5b41f74f8defc9341783efe9373cd567289f0f3ea466e53f23d1be3dd925a4380bc69a7d5eabc2514da351e3e5c6eb99b557e542517cf62046580c8e496a3ba347909dd49a83c39586fc0289cbf2528decfe106cbf4d446a6ab4e5a4e48513b33ec70abca9aaf66d1aa4abd90"]}, @nested={0xc, 0x9d, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @pid=r3}]}]}, 0x128c}, 0x1, 0x0, 0x0, 0x40080}, 0x80) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x21, 0x0, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000240)='personality\x00') r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$BLKFRAGET(r5, 0x1265, &(0x7f0000000480)) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r7, r6, 0x0) pread64(r7, &(0x7f0000000500)=""/31, 0x1f, 0x400040000000009) 4m36.103507407s ago: executing program 8 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ae}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4064002}, 0x40040c0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x4}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='nl80211\x00', 0x20000, &(0x7f0000000200)={@align=0x48, {0xfffb, 0x1, 0x7fffffff, 0x53000}}, 0x93, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x16, 0xcf, &(0x7f0000000300)="69a5802c9f8a1cdd076ec66209c61ed327cf8a4beaa8", &(0x7f0000000340)=""/207, 0xdef9, 0x0, 0xde, 0x2f, &(0x7f0000000440)="4fc92ad51bee684e8e8dfe95f493a892a00ad11f4fd3ac23ae5f1ee3c888253c324f66faaf677a9c481655d0558909f7392436c6efe19b4aca0be1bcc87f7c6b80318856abe0a07fc2f2e800a38257f55d49e6bd165c9a48b97f483f392f18085884684a44da744426b174eca11fcd165a8b64bf7f19c29803019ae2c54971e958e364b8dc4e050a8b2da868e8c3270b647e69ab9c52656270c52f26414f605c25bb60f3232bb98731229ddb9e478f95e00333ae2b73728aa6ce1dbe9bf8ce5a8a32cf09e5dc6eeff200b54c3d8d4455b5974c83e10852f268bbff8437b3", &(0x7f0000000540)="96b9804565b4055379741f59477e957220ee4828baf84d529d9629d94c786a5c5358785ac73a80d69e1eefaed39ca5", 0x4, 0x0, 0x3}, 0x50) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000016c0)=@nat={'nat\x00', 0x19, 0x5, 0x1046, [0x200000000640, 0x0, 0x0, 0x200000000b24, 0x200000000cda], 0x0, &(0x7f0000000600), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x3c, 0x8906, 'erspan0\x00', 'wg1\x00', 'veth1_virt_wifi\x00', 'pim6reg1\x00', @remote, [0xbcd2960b51414194, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xd6, 0x13e, 0x176, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x8}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x7fffffff, 0xff}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x11, 0x8, 0x88f5, 'caif0\x00', 'erspan0\x00', 'veth0_to_batadv\x00', 'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x306, 0x306, 0x33e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x306, 0x10, 0x8, @broadcast, 0xffffffff, @remote, 0xff, @remote, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x94, 0x4c}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x1d, [{0x5, 0x1, 0x4d, 0x1}, {0x8, 0x81, 0x3, 0x5}, {0x9, 0x6, 0x10, 0x24d}, {0x7ce0, 0x7f, 0x6c, 0xb}, {0x40, 0x2, 0x7, 0x4a84}, {0x47c, 0xe, 0xc9, 0x59}, {0x401, 0x4, 0x32, 0x3}, {0x6, 0x0, 0x0, 0x6}, {0x9, 0x1a, 0x0, 0xe}, {0x7, 0x8, 0x0, 0x5}, {0x3, 0x44, 0x7, 0x76428329}, {0x287, 0x5, 0xb8, 0x4306}, {0x5, 0xf, 0xe5, 0x5cf6a741}, {0x2, 0x9, 0x3, 0x3}, {0x29b8, 0x7, 0xd8, 0x5}, {0xfff9, 0x8, 0x3}, {0x6, 0x0, 0x0, 0x5}, {0x2, 0x6e, 0x2, 0x401}, {0x400, 0x9, 0xf}, {0x8, 0xa2, 0x3, 0xfffff58f}, {0x7fff, 0x4, 0x0, 0x8}, {0x7, 0xf8, 0x4, 0x101}, {0x9, 0x1, 0x8, 0x2}, {0x0, 0x9, 0x4, 0x2}, {0x1e02, 0x4, 0x2, 0xf}, {0x9, 0xf, 0x0, 0x8}, {0x1, 0x2, 0xf9, 0xbe6}, {0x0, 0x4, 0x6, 0x253}, {0xfff8, 0x9, 0xf, 0xffffffff}, {0xe, 0x4, 0x7c, 0x2}, {0x80, 0x80, 0x3, 0x9}, {0xffff, 0x8, 0xf1, 0xffff}, {0x8, 0xf8, 0x8, 0x7fffffff}, {0x8, 0xf, 0x7, 0x7}, {0x8, 0x5, 0x2, 0x50}, {0x5, 0x1, 0x2, 0xff000000}, {0x1, 0x2, 0x6, 0x7}, {0x1, 0xff, 0xc4, 0x400}, {0x8, 0xad, 0x9, 0x4}, {0x80, 0x8, 0x9, 0x10}, {0x6, 0x7, 0x6, 0x7}, {0x50, 0xe8, 0x7, 0x244}, {0x3865, 0x5, 0x8, 0x5}, {0xf800, 0x7, 0x1, 0xe0}, {0xb6, 0x6, 0xb, 0x4}, {0x2, 0x4, 0x8, 0x6}, {0x0, 0x5, 0x4, 0x80}, {0x6, 0x81, 0x1, 0x8}, {0x7, 0x6, 0x7f, 0x1ff}, {0x3, 0x6, 0x1, 0x2}, {0x5, 0x0, 0xf, 0x6}, {0x9, 0x2, 0x4, 0x7efd}, {0x7, 0x7, 0x5, 0x7}, {0x2, 0x2, 0x7f, 0x1}, {0x1, 0x0, 0x3, 0xffffffff}, {0xfffb, 0x41}, {0x9, 0xd, 0xf1, 0x5}, {0x4, 0x1, 0x1, 0x7}, {0x2, 0x8, 0x5, 0x2}, {0x23b, 0x35, 0x40, 0x8000}, {0x3, 0x6, 0x1}, {0x40, 0xff}, {0x8b4, 0x5, 0x80, 0x9}, {0x98, 0xae, 0x94, 0x1}]}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x4, 0x1b, 'nicvf0\x00', 'veth0\x00', 'veth1_vlan\x00', 'macvtap0\x00', @random="ff492e541d44", [0x7f, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff], 0xde, 0x14e, 0x186, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1\x00', 'veth1_virt_wifi\x00', 0x21, 0x3, 0x8, 0x400, 0x5, 0x5, {0x1}, {0x8}}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0x3}}}, @arpreply={'arpreply\x00', 0x10, {{@random="c999320e9e8e", 0xfffffffffffffffe}}}], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x60, 0x883e, 'syz_tun\x00', 'syz_tun\x00', 'wg1\x00', 'ip6erspan0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], 0x856, 0x856, 0x88e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0xe, 0x1}, {0x1, 0x3}, {0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x7fff, 0x1}, {0x0, 0x1}, {0x78c, 0x3}, {0x6}, {0x401, 0x2}], [{0x68d, 0x8}, {0x8}, {0x7f, 0x4}, {0x5, 0x100}, {0x6, 0xc}, {0x7, 0x9}, {0x3, 0x3}, {0x7e4, 0x5}, {0xfffffffc, 0x65}, {0x3, 0xee55}, {0xfff, 0x10001}], 0x7, 0x8}, {[{0xfffffffe, 0x2}, {0x80, 0x2}, {0x5, 0x1}, {0x9, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0xfffffffd, 0x3}, {0x401, 0x3}, {0xce4, 0x3}, {0x0, 0x1}, {0x7fffffff, 0x1}], [{0x8001, 0x6f7bf825}, {0xffffffff, 0x80000001}, {0x9, 0x4}, {0x5, 0xd3c}, {0xc, 0x2}, {0x9, 0x3}, {0x0, 0x6}, {0x10000, 0x6}, {0x7, 0x7fff}, {0x6, 0x1}, {0x4, 0x6}], 0x5, 0xb}, {[{0xffffffff}, {0x4, 0x2}, {0x80, 0x3}, {0x10001}, {0x379}, {0xb75, 0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0xffffffff, 0x1}], [{0xfffeffff, 0x2}, {0xd9a, 0x5}, {0x101, 0x67}, {0xfff, 0x3}, {0x6, 0x10000}, {0x2, 0x10001}, {0x7fffffff, 0x5}, {0x6, 0x8c0d}, {0x8, 0x9}, {0x7fff}, {0xfff, 0x2}], 0x7, 0xb}, {[{0x4}, {0x1, 0x3}, {0x40}, {0x3, 0x2}, {0xe, 0x3}, {}, {0x5}, {0x9}, {0x101, 0x3}, {0x9, 0x1}, {0xd4d3}], [{0x1400, 0x7e}, {0x7588, 0x8001}, {0x80000001, 0x3}, {0x7f, 0xffff}, {0x7, 0x6}, {0x8, 0xfffffff3}, {0x0, 0x9}, {0xb4c}, {0x8, 0x100}, {0x8, 0x4}, {0x5, 0xffffff7f}], 0x9, 0x7}, {[{0xb, 0x2}, {0x7fffffff, 0x3}, {0x3, 0x3}, {0xb, 0x3}, {0x0, 0x3}, {}, {0xfffffff3, 0x1}, {0x80, 0x1}, {0x2, 0x2}, {0x800, 0x3}, {0x9, 0x1}], [{0x5, 0x5}, {0x10000, 0x8}, {0xfffffffb, 0x7}, {0xe0000, 0x2}, {0x2, 0x4}, {0x0, 0xc}, {0x8, 0xff}, {0xe68}, {0x4}, {0x9, 0x6}, {0x9}], 0x1, 0xa}, {[{0x3, 0x1}, {0x4, 0x2}, {0x8, 0x2}, {0x7fff, 0x1}, {0x3, 0x3}, {0x4}, {0xffffff00}, {0x4, 0x1}, {0x600000, 0x2}, {0x9, 0x3}, {0x4, 0x1}], [{0x4, 0x3}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x9ca}, {0x0, 0x10001}, {0x8, 0x13b185f9}, {0x9, 0x7a}, {0x5, 0x1}, {0xffff8001, 0x200}, {0x9, 0x1}, {0x7, 0x3c3}], 0x4, 0x1}, {[{0x5, 0x2}, {0x0, 0x1}, {}, {0x0, 0x3}, {}, {0xb083}, {}, {0x6, 0x3}, {0x3, 0x3}, {0x2}, {0x13321a5a, 0x3}], [{0x9, 0x6}, {0xf78b, 0xfffffffc}, {0x0, 0x64}, {0xfffffffd, 0x31f}, {0x200, 0x7}, {0x5, 0x2}, {0x6b5962d7, 0x3}, {0xf, 0x4}, {0x5, 0x4}, {0x2, 0x3}, {0x9}], 0x7, 0xb}, {[{0x0, 0x1}, {0xb, 0x3}, {0x5, 0x1}, {0x8, 0x3}, {0x5, 0x1}, {0x8, 0x1}, {0x7}, {0x4b9, 0x2}, {0xfffffffe, 0x2}, {0x9, 0x3}, {0x8, 0x3}], [{0x4}, {0x1ff, 0x30}, {0x7, 0x57b2}, {0x3, 0x2f52}, {0x8, 0x8}, {0xfffffff9, 0x6}, {0x80000000, 0x4}, {0x4}, {0x1, 0x338b}, {0x4, 0x2}, {0xfffffff8, 0xfffffeff}], 0x3, 0x1}, {[{0x8}, {0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x8, 0x1}, {0x10001, 0x1}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9}, {0x4, 0x1}], [{0x4, 0x1}, {0x7fffffff, 0x80}, {0x10, 0x20000}, {0x32, 0x2}, {0x7fff}, {0x8, 0x2}, {0x9, 0x6}, {0x4, 0x1}, {0x4}, {0x1, 0x3}, {0x87a, 0x2c3}], 0x1, 0x9}, {[{0xfffffffa, 0x1}, {0x6, 0x2}, {0x5, 0x1}, {0x5, 0x3}, {0xfffffff8, 0x1}, {0x6, 0x1}, {0x7, 0x3}, {0xd00, 0x2}, {0xcda, 0x3}, {0x140, 0x3}, {0x7}], [{0x80, 0x2}, {0x9, 0x101}, {0xd}, {0xca8, 0x8b8}, {0x2, 0x200}, {0x1, 0x2}, {0x0, 0x1}, {0x8, 0xfff}, {0x3, 0xffffff01}, {0x200, 0x4}, {0x270, 0xffff}], 0xa, 0x5}, {[{0x2, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0x3}, {0x3, 0x3}, {0xada, 0x2}, {0xfffffff7}, {0x2, 0x1}, {0x322, 0x2}, {0x3, 0x1}], [{0xffffffff, 0x4}, {0x8, 0x1}, {0x46, 0x8001}, {0x9, 0x3}, {0xe1fe, 0x9}, {0x8, 0x8}, {0x2, 0x6}, {0xa, 0x1000}, {0xff, 0x7ff}, {0x5, 0x6}, {0x1, 0x98}], 0x5, 0xa}], 0x3}}}], [], @snat={'snat\x00', 0x10, {{@empty, 0x10}}}}, {0x11, 0x2, 0x9100, 'macvtap0\x00', 'pim6reg1\x00', 'vcan0\x00', 'dummy0\x00', @random="0b93fff4ba19", [0x0, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz1\x00', {0x5}}}}}]}]}, 0x10be) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r0) (async) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0xa3400000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x98, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x761}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x1b, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a00)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000001b00)=[{0x4, 0x4, 0x9, 0x1}], 0x10, 0xfffff9ef}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c00)={'gretap0\x00', 0x0, 0xf895, 0x700, 0xffffffae, 0x401, {{0x2b, 0x4, 0x0, 0x7, 0xac, 0x68, 0x0, 0x7c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x5f, [@private=0xa010100, @multicast1, @loopback, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100, @multicast1]}, @generic={0x7, 0x12, "e704979fe551ffde0c560b22c334df3b"}, @lsrr={0x83, 0x7, 0x76, [@multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xa9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x45, 0x3, [{0x7, 0xa, "f666f0a28797a0af"}, {0x0, 0x12, "e358fa90eaa6cc7f4632ca39f99de3b8"}, {0x6, 0x7, "005fc11c47"}, {0x5, 0x6, "f187be84"}, {0xad865e3f14682ece, 0x9, "d256f5764b9bff"}, {0x1, 0xd, "0ce2cc4f132952138890a6"}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001d40)={r3, r4, 0x25, 0x4, @val=@perf_event={0x8}}, 0x18) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000001d80)=0x8) (async) r5 = mq_open(&(0x7f0000001dc0)='u32\x00', 0x880, 0xc0, &(0x7f0000001e00)={0x6, 0x0, 0xfffffffffffffff4, 0x1000}) preadv(r5, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/99, 0x63}, {&(0x7f0000001ec0)=""/92, 0x5c}, {&(0x7f0000001f40)=""/36, 0x24}, {&(0x7f0000001f80)=""/225, 0xe1}, {&(0x7f0000002080)=""/212, 0xd4}, {&(0x7f0000002180)=""/18, 0x12}, {&(0x7f00000021c0)=""/238, 0xee}, {&(0x7f00000022c0)=""/224, 0xe0}, {&(0x7f00000023c0)=""/161, 0xa1}], 0x9, 0x6, 0x10) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000003540)={&(0x7f0000002540)=""/4096, 0x1000}) (async) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000003580)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) lseek(r2, 0x7, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000003600)) (async) socket$kcm(0x29, 0x7, 0x0) getpeername$inet6(r6, &(0x7f0000003640)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000003680)=0x1c) (async) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000036c0), 0x80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003740), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa}]}, 0x30}}, 0x24000000) (async) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x8051) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003980)='/sys/kernel/rcu_normal', 0x90000, 0x100) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7b}}}}, ["", "", "", "", ""]}, 0x20}}, 0x40) 4m36.059940229s ago: executing program 39 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010010}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3bd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ae}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2d9}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4064002}, 0x40040c0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x4}, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='nl80211\x00', 0x20000, &(0x7f0000000200)={@align=0x48, {0xfffb, 0x1, 0x7fffffff, 0x53000}}, 0x93, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x16, 0xcf, &(0x7f0000000300)="69a5802c9f8a1cdd076ec66209c61ed327cf8a4beaa8", &(0x7f0000000340)=""/207, 0xdef9, 0x0, 0xde, 0x2f, &(0x7f0000000440)="4fc92ad51bee684e8e8dfe95f493a892a00ad11f4fd3ac23ae5f1ee3c888253c324f66faaf677a9c481655d0558909f7392436c6efe19b4aca0be1bcc87f7c6b80318856abe0a07fc2f2e800a38257f55d49e6bd165c9a48b97f483f392f18085884684a44da744426b174eca11fcd165a8b64bf7f19c29803019ae2c54971e958e364b8dc4e050a8b2da868e8c3270b647e69ab9c52656270c52f26414f605c25bb60f3232bb98731229ddb9e478f95e00333ae2b73728aa6ce1dbe9bf8ce5a8a32cf09e5dc6eeff200b54c3d8d4455b5974c83e10852f268bbff8437b3", &(0x7f0000000540)="96b9804565b4055379741f59477e957220ee4828baf84d529d9629d94c786a5c5358785ac73a80d69e1eefaed39ca5", 0x4, 0x0, 0x3}, 0x50) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000016c0)=@nat={'nat\x00', 0x19, 0x5, 0x1046, [0x200000000640, 0x0, 0x0, 0x200000000b24, 0x200000000cda], 0x0, &(0x7f0000000600), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x9, 0x3c, 0x8906, 'erspan0\x00', 'wg1\x00', 'veth1_virt_wifi\x00', 'pim6reg1\x00', @remote, [0xbcd2960b51414194, 0x0, 0xff, 0x0, 0x0, 0xff], @local, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xd6, 0x13e, 0x176, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x8}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x7fffffff, 0xff}}}], [@common=@AUDIT={'AUDIT\x00', 0x8}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffc}}}}, {0x11, 0x8, 0x88f5, 'caif0\x00', 'erspan0\x00', 'veth0_to_batadv\x00', 'dummy0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x306, 0x306, 0x33e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x306, 0x10, 0x8, @broadcast, 0xffffffff, @remote, 0xff, @remote, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, [0x0, 0x0, 0xff, 0xff, 0xff], 0x94, 0x4c}}}, @bpf0={{'bpf\x00', 0x0, 0x210}, {{0x1d, [{0x5, 0x1, 0x4d, 0x1}, {0x8, 0x81, 0x3, 0x5}, {0x9, 0x6, 0x10, 0x24d}, {0x7ce0, 0x7f, 0x6c, 0xb}, {0x40, 0x2, 0x7, 0x4a84}, {0x47c, 0xe, 0xc9, 0x59}, {0x401, 0x4, 0x32, 0x3}, {0x6, 0x0, 0x0, 0x6}, {0x9, 0x1a, 0x0, 0xe}, {0x7, 0x8, 0x0, 0x5}, {0x3, 0x44, 0x7, 0x76428329}, {0x287, 0x5, 0xb8, 0x4306}, {0x5, 0xf, 0xe5, 0x5cf6a741}, {0x2, 0x9, 0x3, 0x3}, {0x29b8, 0x7, 0xd8, 0x5}, {0xfff9, 0x8, 0x3}, {0x6, 0x0, 0x0, 0x5}, {0x2, 0x6e, 0x2, 0x401}, {0x400, 0x9, 0xf}, {0x8, 0xa2, 0x3, 0xfffff58f}, {0x7fff, 0x4, 0x0, 0x8}, {0x7, 0xf8, 0x4, 0x101}, {0x9, 0x1, 0x8, 0x2}, {0x0, 0x9, 0x4, 0x2}, {0x1e02, 0x4, 0x2, 0xf}, {0x9, 0xf, 0x0, 0x8}, {0x1, 0x2, 0xf9, 0xbe6}, {0x0, 0x4, 0x6, 0x253}, {0xfff8, 0x9, 0xf, 0xffffffff}, {0xe, 0x4, 0x7c, 0x2}, {0x80, 0x80, 0x3, 0x9}, {0xffff, 0x8, 0xf1, 0xffff}, {0x8, 0xf8, 0x8, 0x7fffffff}, {0x8, 0xf, 0x7, 0x7}, {0x8, 0x5, 0x2, 0x50}, {0x5, 0x1, 0x2, 0xff000000}, {0x1, 0x2, 0x6, 0x7}, {0x1, 0xff, 0xc4, 0x400}, {0x8, 0xad, 0x9, 0x4}, {0x80, 0x8, 0x9, 0x10}, {0x6, 0x7, 0x6, 0x7}, {0x50, 0xe8, 0x7, 0x244}, {0x3865, 0x5, 0x8, 0x5}, {0xf800, 0x7, 0x1, 0xe0}, {0xb6, 0x6, 0xb, 0x4}, {0x2, 0x4, 0x8, 0x6}, {0x0, 0x5, 0x4, 0x80}, {0x6, 0x81, 0x1, 0x8}, {0x7, 0x6, 0x7f, 0x1ff}, {0x3, 0x6, 0x1, 0x2}, {0x5, 0x0, 0xf, 0x6}, {0x9, 0x2, 0x4, 0x7efd}, {0x7, 0x7, 0x5, 0x7}, {0x2, 0x2, 0x7f, 0x1}, {0x1, 0x0, 0x3, 0xffffffff}, {0xfffb, 0x41}, {0x9, 0xd, 0xf1, 0x5}, {0x4, 0x1, 0x1, 0x7}, {0x2, 0x8, 0x5, 0x2}, {0x23b, 0x35, 0x40, 0x8000}, {0x3, 0x6, 0x1}, {0x40, 0xff}, {0x8b4, 0x5, 0x80, 0x9}, {0x98, 0xae, 0x94, 0x1}]}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x3, 0x4, 0x1b, 'nicvf0\x00', 'veth0\x00', 'veth1_vlan\x00', 'macvtap0\x00', @random="ff492e541d44", [0x7f, 0x0, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff], 0xde, 0x14e, 0x186, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth1\x00', 'veth1_virt_wifi\x00', 0x21, 0x3, 0x8, 0x400, 0x5, 0x5, {0x1}, {0x8}}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0x3}}}, @arpreply={'arpreply\x00', 0x10, {{@random="c999320e9e8e", 0xfffffffffffffffe}}}], @common=@dnat={'dnat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x9, 0x60, 0x883e, 'syz_tun\x00', 'syz_tun\x00', 'wg1\x00', 'ip6erspan0\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], @multicast, [0x0, 0x0, 0xff, 0xff, 0xff], 0x856, 0x856, 0x88e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0xe, 0x1}, {0x1, 0x3}, {0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x7fff, 0x1}, {0x0, 0x1}, {0x78c, 0x3}, {0x6}, {0x401, 0x2}], [{0x68d, 0x8}, {0x8}, {0x7f, 0x4}, {0x5, 0x100}, {0x6, 0xc}, {0x7, 0x9}, {0x3, 0x3}, {0x7e4, 0x5}, {0xfffffffc, 0x65}, {0x3, 0xee55}, {0xfff, 0x10001}], 0x7, 0x8}, {[{0xfffffffe, 0x2}, {0x80, 0x2}, {0x5, 0x1}, {0x9, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0xfffffffd, 0x3}, {0x401, 0x3}, {0xce4, 0x3}, {0x0, 0x1}, {0x7fffffff, 0x1}], [{0x8001, 0x6f7bf825}, {0xffffffff, 0x80000001}, {0x9, 0x4}, {0x5, 0xd3c}, {0xc, 0x2}, {0x9, 0x3}, {0x0, 0x6}, {0x10000, 0x6}, {0x7, 0x7fff}, {0x6, 0x1}, {0x4, 0x6}], 0x5, 0xb}, {[{0xffffffff}, {0x4, 0x2}, {0x80, 0x3}, {0x10001}, {0x379}, {0xb75, 0x2}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0xffffffff, 0x1}], [{0xfffeffff, 0x2}, {0xd9a, 0x5}, {0x101, 0x67}, {0xfff, 0x3}, {0x6, 0x10000}, {0x2, 0x10001}, {0x7fffffff, 0x5}, {0x6, 0x8c0d}, {0x8, 0x9}, {0x7fff}, {0xfff, 0x2}], 0x7, 0xb}, {[{0x4}, {0x1, 0x3}, {0x40}, {0x3, 0x2}, {0xe, 0x3}, {}, {0x5}, {0x9}, {0x101, 0x3}, {0x9, 0x1}, {0xd4d3}], [{0x1400, 0x7e}, {0x7588, 0x8001}, {0x80000001, 0x3}, {0x7f, 0xffff}, {0x7, 0x6}, {0x8, 0xfffffff3}, {0x0, 0x9}, {0xb4c}, {0x8, 0x100}, {0x8, 0x4}, {0x5, 0xffffff7f}], 0x9, 0x7}, {[{0xb, 0x2}, {0x7fffffff, 0x3}, {0x3, 0x3}, {0xb, 0x3}, {0x0, 0x3}, {}, {0xfffffff3, 0x1}, {0x80, 0x1}, {0x2, 0x2}, {0x800, 0x3}, {0x9, 0x1}], [{0x5, 0x5}, {0x10000, 0x8}, {0xfffffffb, 0x7}, {0xe0000, 0x2}, {0x2, 0x4}, {0x0, 0xc}, {0x8, 0xff}, {0xe68}, {0x4}, {0x9, 0x6}, {0x9}], 0x1, 0xa}, {[{0x3, 0x1}, {0x4, 0x2}, {0x8, 0x2}, {0x7fff, 0x1}, {0x3, 0x3}, {0x4}, {0xffffff00}, {0x4, 0x1}, {0x600000, 0x2}, {0x9, 0x3}, {0x4, 0x1}], [{0x4, 0x3}, {0x5, 0x4}, {0x5, 0x1}, {0x0, 0x9ca}, {0x0, 0x10001}, {0x8, 0x13b185f9}, {0x9, 0x7a}, {0x5, 0x1}, {0xffff8001, 0x200}, {0x9, 0x1}, {0x7, 0x3c3}], 0x4, 0x1}, {[{0x5, 0x2}, {0x0, 0x1}, {}, {0x0, 0x3}, {}, {0xb083}, {}, {0x6, 0x3}, {0x3, 0x3}, {0x2}, {0x13321a5a, 0x3}], [{0x9, 0x6}, {0xf78b, 0xfffffffc}, {0x0, 0x64}, {0xfffffffd, 0x31f}, {0x200, 0x7}, {0x5, 0x2}, {0x6b5962d7, 0x3}, {0xf, 0x4}, {0x5, 0x4}, {0x2, 0x3}, {0x9}], 0x7, 0xb}, {[{0x0, 0x1}, {0xb, 0x3}, {0x5, 0x1}, {0x8, 0x3}, {0x5, 0x1}, {0x8, 0x1}, {0x7}, {0x4b9, 0x2}, {0xfffffffe, 0x2}, {0x9, 0x3}, {0x8, 0x3}], [{0x4}, {0x1ff, 0x30}, {0x7, 0x57b2}, {0x3, 0x2f52}, {0x8, 0x8}, {0xfffffff9, 0x6}, {0x80000000, 0x4}, {0x4}, {0x1, 0x338b}, {0x4, 0x2}, {0xfffffff8, 0xfffffeff}], 0x3, 0x1}, {[{0x8}, {0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x8, 0x1}, {0x10001, 0x1}, {0x101}, {0x3, 0x3}, {0x9, 0x1}, {0x9}, {0x4, 0x1}], [{0x4, 0x1}, {0x7fffffff, 0x80}, {0x10, 0x20000}, {0x32, 0x2}, {0x7fff}, {0x8, 0x2}, {0x9, 0x6}, {0x4, 0x1}, {0x4}, {0x1, 0x3}, {0x87a, 0x2c3}], 0x1, 0x9}, {[{0xfffffffa, 0x1}, {0x6, 0x2}, {0x5, 0x1}, {0x5, 0x3}, {0xfffffff8, 0x1}, {0x6, 0x1}, {0x7, 0x3}, {0xd00, 0x2}, {0xcda, 0x3}, {0x140, 0x3}, {0x7}], [{0x80, 0x2}, {0x9, 0x101}, {0xd}, {0xca8, 0x8b8}, {0x2, 0x200}, {0x1, 0x2}, {0x0, 0x1}, {0x8, 0xfff}, {0x3, 0xffffff01}, {0x200, 0x4}, {0x270, 0xffff}], 0xa, 0x5}, {[{0x2, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x6, 0x3}, {0x6, 0x3}, {0x3, 0x3}, {0xada, 0x2}, {0xfffffff7}, {0x2, 0x1}, {0x322, 0x2}, {0x3, 0x1}], [{0xffffffff, 0x4}, {0x8, 0x1}, {0x46, 0x8001}, {0x9, 0x3}, {0xe1fe, 0x9}, {0x8, 0x8}, {0x2, 0x6}, {0xa, 0x1000}, {0xff, 0x7ff}, {0x5, 0x6}, {0x1, 0x98}], 0x5, 0xa}], 0x3}}}], [], @snat={'snat\x00', 0x10, {{@empty, 0x10}}}}, {0x11, 0x2, 0x9100, 'macvtap0\x00', 'pim6reg1\x00', 'vcan0\x00', 'dummy0\x00', @random="0b93fff4ba19", [0x0, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x2, 'syz1\x00', {0x5}}}}}]}]}, 0x10be) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r0) (async) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0xa3400000}, 0xc, &(0x7f0000001880)={&(0x7f00000017c0)={0x98, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x761}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x1b, &(0x7f0000001900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001a00)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001a80)={0x0, 0xf, 0x1, 0x8000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001ac0)=[r2, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000001b00)=[{0x4, 0x4, 0x9, 0x1}], 0x10, 0xfffff9ef}, 0x94) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001d00)={'syztnl0\x00', &(0x7f0000001c00)={'gretap0\x00', 0x0, 0xf895, 0x700, 0xffffffae, 0x401, {{0x2b, 0x4, 0x0, 0x7, 0xac, 0x68, 0x0, 0x7c, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x27, 0x5f, [@private=0xa010100, @multicast1, @loopback, @loopback, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010100, @multicast1]}, @generic={0x7, 0x12, "e704979fe551ffde0c560b22c334df3b"}, @lsrr={0x83, 0x7, 0x76, [@multicast2]}, @noop, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xa9, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x45, 0x3, [{0x7, 0xa, "f666f0a28797a0af"}, {0x0, 0x12, "e358fa90eaa6cc7f4632ca39f99de3b8"}, {0x6, 0x7, "005fc11c47"}, {0x5, 0x6, "f187be84"}, {0xad865e3f14682ece, 0x9, "d256f5764b9bff"}, {0x1, 0xd, "0ce2cc4f132952138890a6"}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001d40)={r3, r4, 0x25, 0x4, @val=@perf_event={0x8}}, 0x18) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000001d80)=0x8) (async) r5 = mq_open(&(0x7f0000001dc0)='u32\x00', 0x880, 0xc0, &(0x7f0000001e00)={0x6, 0x0, 0xfffffffffffffff4, 0x1000}) preadv(r5, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/99, 0x63}, {&(0x7f0000001ec0)=""/92, 0x5c}, {&(0x7f0000001f40)=""/36, 0x24}, {&(0x7f0000001f80)=""/225, 0xe1}, {&(0x7f0000002080)=""/212, 0xd4}, {&(0x7f0000002180)=""/18, 0x12}, {&(0x7f00000021c0)=""/238, 0xee}, {&(0x7f00000022c0)=""/224, 0xe0}, {&(0x7f00000023c0)=""/161, 0xa1}], 0x9, 0x6, 0x10) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000003540)={&(0x7f0000002540)=""/4096, 0x1000}) (async) ioctl$FIONCLEX(r3, 0x5450) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000003580)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) lseek(r2, 0x7, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000035c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$XFS_IOC_FSGETXATTRA(r6, 0x801c582d, &(0x7f0000003600)) (async) socket$kcm(0x29, 0x7, 0x0) getpeername$inet6(r6, &(0x7f0000003640)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000003680)=0x1c) (async) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000036c0), 0x80, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003740), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa}]}, 0x30}}, 0x24000000) (async) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000003940)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x10, 0x3fb, 0x400, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000010}, 0x8051) (async) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000003980)='/sys/kernel/rcu_normal', 0x90000, 0x100) sendmsg$NL80211_CMD_FLUSH_PMKSA(r10, &(0x7f0000003ac0)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003a80)={&(0x7f0000003a40)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7b}}}}, ["", "", "", "", ""]}, 0x20}}, 0x40) 2m17.576278505s ago: executing program 1 (id=1468): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x440, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x8bb9f000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000700)=0x50b, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xe, 0x110, 0xffffffffffffffff, 0x0) 2m16.667196436s ago: executing program 1 (id=1478): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 2m14.752204309s ago: executing program 5 (id=1498): r0 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_pidfd_open(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x3, 0x9, 0x0, 0x7fff}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xfd, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) 2m14.285401662s ago: executing program 5 (id=1502): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 2m14.285025862s ago: executing program 5 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e3, &(0x7f0000000180)={r3}) pwritev2(r3, &(0x7f0000000240), 0x0, 0x7000, 0x29000, 0x3) 2m14.214014929s ago: executing program 1 (id=1505): socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)='(', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[], 0x10}}], 0x1, 0x4044044) 2m14.125225942s ago: executing program 1 (id=1506): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r1 = creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000840)={0xa, 0x4e22, 0xd116, @private1={0xfc, 0x1, '\x00', 0x1}, 0x33c752c7}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000880)='\f', 0x1}], 0x1}}], 0x1, 0x40) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x19, 0x1, "0000e10b0000000026086700"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 2m13.178527626s ago: executing program 1 (id=1513): r0 = syz_io_uring_setup(0x35a9, 0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_mount_image$msdos(&(0x7f0000001580), &(0x7f0000000000)='./file1\x00', 0x2010410, &(0x7f0000001500)=ANY=[@ANYRES16=0x0, @ANYRES8=r1, @ANYRESHEX=r1, @ANYRES32=r0, @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRESDEC=r1], 0x1, 0x219, &(0x7f00000012c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) unshare(0x2c020400) fsync(r3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$eJzs3U9rY1UUAPDz0uQ1QxftwpUIvsUs3Fims3VhBqkgdqVk4R/QwZmBoQkDDQRGxTArP4ELF34Pd+4FN34DwYVLdw5SuPLeS5NMkkmmHdMO5ffb9HLuOe/em3fbFMK7+fKN/vG9R4MHT779I9rtLBqd6MTTLPaiEWfSWAAA18LTlOLvC72/NxubmhMAsFkz7/+t56RsL4be3fS0AIAN+viTTz+8c3R0+FFRtCP63w+7WdQ/6/47D+Jh9OJ+3IrdOJ1+FpBS3X7/g6PDaBalvbjZHw27ZWX/i98mqXlU9QexG3vL6w+K2kz9aNis/vPIsoiHnXIit2M3XluoL/sPby+pj24eb7XHiyzH34/d+P2reBS9uFd9pjEd/7s8ivfSD/9881mZXNZno2F3u8qbSluXfW8AAAAAAAAAAAAAAAAAAAAAALi+9ouJvbjZL0P1+TvdrdOqf/+Z/up8nUbVX9dnEXnVmDsfaJTip7PzdW4VRZGyOn9yvs+NZrzejOaVLRwAAAAAAAAAAAAAAAAAAABeIYPHXx/f7fXun/wvjfFD/pPH+i96nc5M5M1Ynbx9rrFia5xeznU+5+DXz/uTSLmIi0x+2CoiVs25tRC5Uc5n/ZX/TSmlLIt4udvUepGx1jR2VueUL/AvP+68fXw3W/cats9u3M+zXXmcDB7P3dPIVg96+kwknWv75Sty8vGOeaHr7LzkL9E7f9aDjSPZmlW0ZiKtcSOet/3a59rPl/c3CAAAAAAAAAAAAAAAAAAAqE0f+l3S+WRlaWNjkwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASzb9/v9pIxYic41R/FUVL89JKY0mkTxOBle9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK6//wIAAP//qWdtxQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001880)='/proc/consoles\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r5, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r4, &(0x7f0000000000)=""/49, 0x31) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r6, &(0x7f0000000440)='./file0\x00', r4, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r4, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x104200, 0x10004, 0x20dd, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000040)=',/&\\\x00') sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x74, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) write$P9_RWALK(r8, &(0x7f0000001240)=ANY=[@ANYBLOB="640000006f010007000100000000000804000000010000000000000008000000000800000000000000e803000000000000030000000000000000000000100100"/86], 0x64) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006) 2m12.648383557s ago: executing program 5 (id=1518): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb825, 0x0, 0x7fc, 0x6, 0x6, 0x7ffff, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6c010880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x24842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x9, 0x8, 0x9, 0xc8, 0x3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = gettid() timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r6}, &(0x7f0000000240)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r7, &(0x7f0000001180)=""/4096, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m12.50201109s ago: executing program 1 (id=1525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 2m12.062309668s ago: executing program 40 (id=1525): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) 2m11.31970189s ago: executing program 5 (id=1534): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)="ca", 0x1}], 0x2, 0x0) read$char_usb(r1, &(0x7f00000004c0)=""/231, 0xe7) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) fstat(r1, &(0x7f0000001340)) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffe, r7, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000001240)=0x0) stat(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r7, r8, r9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e23, 0x0, 0x4e24, 0x8, 0xa, 0x80, 0x0, 0x3a}, {0xf01, 0x23, 0x3, 0x5, 0x0, 0x2, 0x7ff, 0xc}, {0x9, 0xb, 0x3, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d3, 0x33}, 0xa, @in6=@mcast2, 0x0, 0x7575697f5cf90d40, 0x3, 0x2, 0x8, 0xa, 0x40}}, 0xe8) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001800)=ANY=[@ANYRES64=r5, @ANYRES16, @ANYBLOB="22d701e9c00ae73e71e4e02670c180760a6822ef771b6ccf0b0be5b9a68e6dae9e8e27ad9aaf81f1a644c944", @ANYRES8, @ANYBLOB="6a5ef2f68991e661c146edea917b67f3409faf98a88ac12a5785943c925f86434b55b1e432f60002ceec08e7d89c151b661726f5a9fe2db3da145beb01d9f4c244a98635b100822c81e29a84b2bdd06ab4b5c8024f4019cd9015856eae11834a41f9882f65f6bdd3e87e8c2f2c2efcfe726b25753fed5a67393f4effbd8c375fad1ee3ee74f367270267346da49f65547d498b4107b5161bd087e5ce0337f3", @ANYBLOB="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", @ANYRESDEC=r4, @ANYBLOB="74870d9a99c02d80b6c61baf6a7dc290c9f87504a8368aa2010604c24a56b0a4988731ed45bc25ac04212ea556e5571f7179fb0da3df26982e158aa7c1ff139329365baa37fc3adb86bca9ac3711ce56c6ca9db510547f2156d8cb7356fb8e6f6c9e3df085c2102bab88cc6b5e8483c07054c5ea0908d9b5284f8577305aefd312e7d508e247cba8c0dc99ba731b5688cb039bf1b9b609667ee6ccccefb4ecbc9a4eb2bf858800230a0b859306fbe8879a58b99f76ab7f22193550baef7a48781dd215c05910c3984c97fea9b23bd40cb1d806a8ca424096a19e711431", @ANYRESDEC=r9], 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x3d}, &(0x7f0000000180)=0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x3}, &(0x7f0000001500)="1e99f28e3b130efe4f4f23ad086bc5383d40b34acdea9b0c0b013eba4063f9713e50f603c420dd09d8dd4530c36fac1e8882e40f6a8fea65859554579325b6a8f038", 0x42, 0x0) timer_settime(r10, 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000013c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) timer_settime(r10, 0x1, &(0x7f0000001440)={{r11, r12+10000000}, {r13, r14+10000000}}, 0x0) preadv(r0, &(0x7f00000000c0), 0x0, 0x7d, 0x0) 2m11.262349459s ago: executing program 5 (id=1535): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ptrace$setregset(0x4205, r0, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)="a376cd6dba42886625292a7505f0e67a74748dc9e6b88c5255aa146e38b6dbfc91bf68eaa012590479dca0204ceac88eaad1cffd7b85ae21fef7d41b36e1dcccedc442aa41ee9b6d93d0f065bb13a9e68fde30fcc87479d101ba919f091350c54594d06941f90e1d7e64719f6cb6a9b9bab9fe11d9072d3ea1250fcc1cbe48d8b2402b5c88fa29995f7e4c60", 0x8c}) (async, rerun: 64) r1 = io_uring_setup(0x4166, &(0x7f00000003c0)={0x0, 0x4, 0x40, 0x3, 0x161}) (rerun: 64) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000404000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x8000000) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x40110, r1, 0x10000000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x2, 0x0, r4, &(0x7f0000000240), &(0x7f0000000180)='./mnt\x00', 0x2b6, 0x1000, 0x0, {0x0, r6}}) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) (async) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x5) 1m56.107134417s ago: executing program 41 (id=1535): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ptrace$setregset(0x4205, r0, 0x3, &(0x7f00000000c0)={&(0x7f0000000000)="a376cd6dba42886625292a7505f0e67a74748dc9e6b88c5255aa146e38b6dbfc91bf68eaa012590479dca0204ceac88eaad1cffd7b85ae21fef7d41b36e1dcccedc442aa41ee9b6d93d0f065bb13a9e68fde30fcc87479d101ba919f091350c54594d06941f90e1d7e64719f6cb6a9b9bab9fe11d9072d3ea1250fcc1cbe48d8b2402b5c88fa29995f7e4c60", 0x8c}) (async, rerun: 64) r1 = io_uring_setup(0x4166, &(0x7f00000003c0)={0x0, 0x4, 0x40, 0x3, 0x161}) (rerun: 64) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000404000/0x3000)=nil, 0x3000, 0x0, 0x1010, r1, 0x8000000) (async) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x40110, r1, 0x10000000) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) (async, rerun: 32) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_STATX={0x15, 0x2, 0x0, r4, &(0x7f0000000240), &(0x7f0000000180)='./mnt\x00', 0x2b6, 0x1000, 0x0, {0x0, r6}}) (async) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0x14, &(0x7f0000003480)={0x4, 0x0, 0x4, &(0x7f00000001c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x0}, 0x2) (async) renameat2(0xffffffffffffffff, &(0x7f0000000380)='./mnt\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x5) 1m15.144266961s ago: executing program 9 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c000280050001"], 0x98}}, 0x0) r1 = syz_io_uring_setup(0x150, &(0x7f0000000100)={0x0, 0x1973, 0x8000, 0x2, 0x2ca}, &(0x7f0000000180), &(0x7f0000000280)) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000030601010000000000000000030010070900020073797a30000000001ee8447da196675507be433a7a51"], 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) syz_io_uring_setup(0x7aad, &(0x7f00000002c0)={0x0, 0x1e38, 0x4, 0x2, 0x10f, 0x0, r1}, &(0x7f0000000340), &(0x7f0000000380)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000040)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m14.641320157s ago: executing program 9 (id=2008): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x84}, [@ldst={0x4, 0x3, 0x0, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 1m13.799938641s ago: executing program 9 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000001180)=ANY=[@ANYBLOB="500000000308010200000000000000000300000405000300840000003400048008000540fffffff70800064000000004080003"], 0x50}, 0x1, 0x0, 0x0, 0x448c4}, 0x4000) (fail_nth: 2) 1m13.499922615s ago: executing program 9 (id=2019): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'dummy0\x00', @local}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000fc0)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x2, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f0000000100)={{0x77359400}, {r5, r6+10000000}}, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0x4, 0x1}]}, 0x18}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") r8 = socket(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r9 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000002ffdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r9], 0x44}}, 0x8000000) 1m12.93714777s ago: executing program 9 (id=2025): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)='\x00', 0x1, 0x24000010, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x88, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x8, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xf8, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x6, 0x5, 0x5, 0x6, 0x20], 0x7, 0x1}, {0xffffffffffffffff, [0x56, 0x4, 0x0, 0x5e, 0x1], 0x0, 0x1}}}}, {{@ip={@remote, @multicast1, 0xffffffff, 0xffffff00, 'pimreg\x00', 'vlan0\x00', {}, {0xff}, 0x5c, 0x2, 0x4}, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xe, 0x2, 0x2, 0x3ff, 0x7, 0x0, 0x800]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4c8b1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x4}, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)={0x10, 0x2e, 0x503}, 0x10}], 0x1}, 0x14008010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1m11.505219773s ago: executing program 9 (id=2032): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x7, 0x82, &(0x7f0000000000), 0x0, 0x4, 0x3, 0x0, 0x1155, 0x7, &(0x7f0000000100)="e3ca26b1de2de210d7e18ba0d032c85044b3112edcc9336121ca2eabe60bf3b6d85cfe3c4e13352edf0a4c10160df9daf0d767e9e95f1434976042759d31bd01f4defd6a18e24c4ae3e2893e66018f7414e57fd6b13d9d0bf3dff1e2b4a1a5b28efda8968b010870777750a16054ad16ea3ec9b649057ae59ac9e6876413f1360191df4e7fba9a5c73ad764250618112e9c1c537e072615ae4cedc8b01bab3cbb0355e4287864258a5247841"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c000000090a010400000000000000000500000008000a40000000000900020073797a31000000000900010073797a30002000000800054000000021080002407a"], 0x74}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x18e9, 0x13, [{0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x5}, {0xa}, {}, {0x4, 0x1}, {0x4}, {0x9, 0x1}, {0x3}, {0x9}, {0x1, 0x1}, {0x4}, {0xd}, {0x8, 0x1}, {0x6, 0x1}, {0x4}, {0xa}, {0xb}]}) 1m11.476964028s ago: executing program 42 (id=2032): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}}, 0x0) fallocate(r0, 0x20, 0x0, 0x8000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x7, 0x82, &(0x7f0000000000), 0x0, 0x4, 0x3, 0x0, 0x1155, 0x7, &(0x7f0000000100)="e3ca26b1de2de210d7e18ba0d032c85044b3112edcc9336121ca2eabe60bf3b6d85cfe3c4e13352edf0a4c10160df9daf0d767e9e95f1434976042759d31bd01f4defd6a18e24c4ae3e2893e66018f7414e57fd6b13d9d0bf3dff1e2b4a1a5b28efda8968b010870777750a16054ad16ea3ec9b649057ae59ac9e6876413f1360191df4e7fba9a5c73ad764250618112e9c1c537e072615ae4cedc8b01bab3cbb0355e4287864258a5247841"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c000000090a010400000000000000000500000008000a40000000000900020073797a31000000000900010073797a30002000000800054000000021080002407a"], 0x74}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066000900010073797a30000000000900020073797a3200000000440005800800024000000002080001"], 0x2d4}}, 0x4048010) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000000)={0x18e9, 0x13, [{0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x5}, {0xa}, {}, {0x4, 0x1}, {0x4}, {0x9, 0x1}, {0x3}, {0x9}, {0x1, 0x1}, {0x4}, {0xd}, {0x8, 0x1}, {0x6, 0x1}, {0x4}, {0xa}, {0xb}]}) 6.905238486s ago: executing program 7 (id=2693): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0xb56cea99d7d0f667]}}, 0x0, 0x34}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x100, 0x0, 0x3ab}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x40010, 0xffffffffffffffff, 0xec776000) keyctl$describe(0x6, 0x0, &(0x7f0000004580)=""/185, 0xb9) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x4, 0x0, 0x0) recvmmsg(r5, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}, {0x0}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x2, 0x22, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1830c9720000010000000000000003000000ff000000000084d2d7d84ee36e0bcada97777cc11e23943eb43863d63ee8ab7e7cc3a983840695c81a33e047f9df0ac8e641ce3381202f9398938b45c61a7e"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0}, 0x9092, 0x0, 0xa, 0x2, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x2, 0x60}, 0x14) 5.301545648s ago: executing program 7 (id=2707): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000427000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0xed030, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'pim6reg1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r4], 0x64}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xe7}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00), 0x2, 0xa1a, &(0x7f0000000380)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r7, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x58, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') 3.904990848s ago: executing program 2 (id=2715): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0xd) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xa, 0x801, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r3 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000760000000500000095000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) preadv(r1, &(0x7f0000000480)=[{0x0}], 0x1, 0xfffffe01, 0x800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) r6 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="9a229eb8dfed9c67c56c9505671207be49dd6396c3569d1ec64f8e74e16aa829a629ef7dd64e9d0e23ef045d413724cc16714c12fc686566d58b14fe967919c2094640c82667509f4f6960d40abd0d102a7aef87c1dc7fd9a5411757a4f7654cf677c322c8f6d9cb0d800bf9cba7407fc5f61571fef63ad15fa90248990eece0cc24abb49ea9557e7784264f0c473dd42b3df1a48da8e9cca30fb5a73340e1a5b9001b52e98691a39de618567049ede947693390d62047d638240c52d155d03dcc8a7c5cd85a736c5c590b0a767c830887f87c19e94143f0e201463163ac3e235085", 0xe2, 0xfffffffffffffffa) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000680)={{{@in=@private, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) setregid(r9, r9) keyctl$chown(0x4, r6, r7, r9) 3.791010936s ago: executing program 4 (id=2717): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='sit0\x00', 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendfile(r2, r1, 0x0, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000801) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}}, &(0x7f0000001940)=0x84) 3.669321523s ago: executing program 7 (id=2718): socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000060a010400000000000000000a0000040900010073797a310000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) epoll_create1(0x0) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f000025c000/0x2000)=nil, 0x2000, 0x8299b03c1e7634bf, 0x8031, r2, 0xcee69000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet6(0xa, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x78) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 3.402688844s ago: executing program 0 (id=2720): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb825, 0x0, 0x7fc, 0x6, 0x6, 0x7ffff, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6c010880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = open(0x0, 0x24842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x9, 0x8, 0x9, 0xc8, 0x3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.3827617s ago: executing program 3 (id=2721): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x4e24, 0x0, @mcast2, 0x100}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x110) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$eJzs3c1rXFUbAPDnTj6b9m3zwgtv66bBhRZKJ22NrYJgxIUIFgq6tg2TaYiZZEpmUpqQhUUEQQQtLgTduPaj7tyKrv0b3IhIS9W0WHEhI3c+kkkmH5M2H23z+8FNzpl775zz3DNz7rlzDzMB7FkD6Z9MxJGI+DCJOFR/PImIrmqqM2K4tt29hflcuiRRqbz+e1Ld5u7CfC6a9kntr2cOR8T370Ycz7SWW5qdmxgpFLoa+cHy5OXB0uzcifHJkbH8WH7qzKmhodNnnz17Zuti/fPHuQO3Pnrl6a+H/37n/zc++CGJ4ThQX9ccx1YZiIH6MelKD+EyL291Ybss2WB95w7Vg81J35od9fY5EoeiQ0sBwGMvPf9XAIA9JnH+B4A9pvE5wN2F+Vxjaf58YN+ufCqxc26/FBG9tfgb9zdrazrr9+x6q/dB++4m0RmLtys3vN/VroGI+OzbN79Ml9im+5AAq3n7WkRc7B9o7f+TljkLm3WyjW0GVuT1f7BzvkvHP8+tNv7LLI5/YnH8k3YLtfkhPau8d+/HQER3c771/Z+5ueqOL25B4fXx3wu1uW1poE3jv8VJa/0d9dx/0szRiBgv5NO+7WBEHIuunkvjhfypdco4duefO2utax7//XH9rS/S8tP/S1tkbnb2LN9ndKQ88iAxN7t9LeKJzqW5ffda+v/e6lh3sf2jsTbifPMT3VrxxEeXkq8+/96na5Wfxp/G21ha499elc8jnorV429I1p2fOJg2/8na39XL+ObnT/rWKr+5/dMlLb9xLbCG7vuPtlXa/n3rx9+fLM3XzE+XtrL0duJf/fXfnbxRTTcOxtWRcnn6VER38lrr46eX9m3kG9un8dciXRl/Zt3Xf3oleLHNGDtv/fZVxJMH7y/+RVt1yblMGv/optp/84kb9yY61iq/vfYfqqaO1R9pp/9rt4IPcuwAAAAAAAAAAAAAAAAAAAAAAAAAoF2ZiDgQSSa7mM5kstnab3j/L/oyhWKpfPxScWZqNKq/ld0fXZnGV10equWTxvef9jflT6/IPxMR/42Ij3v2VfPZXLEwutvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/jV+/z/1a89u1w4A2Da9G25xJ78sW6lUKttYHwBg+218/gcAHjfrnP/37WQ9AICd4/ofAPYe538A2Huc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhm58+dS5fKXwvzuTQ/emV2ZqJ45cRovjSRnZzJZXPF6cvZsWJxrJDP5oqTGz1foVi8PBRTM1cHy/lSebA0O3dhsjgzVb4wPjkylr+Q79qRqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgc0qzcxMjhUJ++rFIvB8RD0E1tiORxENRjV1J/HLip8PrbXN9g5fx8EMRxSOW2O2eCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODR8G8AAAD//21CJgc=") syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x1000000000000c8, 0x1, 0x2, 0x8, 0x4, 0xfffffffffffffffc, 0x5166}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x29, 0x1, 0xfd, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0x424, 0x800, 0x2, 0x8, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x4503, 0x20, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) 3.11339927s ago: executing program 3 (id=2722): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x353, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x88, 0x0) r4 = syz_clone(0x0, 0x0, 0x2998cc1d81796d66, 0x0, 0x0, 0x0) syz_open_procfs(r4, &(0x7f0000000b40)='environ\x00') recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, 0x0, 0x60000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x7fffffff, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000002180), &(0x7f00000021c0)=0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r7, 0x0, 0xfffe}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 3.016225232s ago: executing program 2 (id=2723): unshare(0x24020400) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xd, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) setsockopt(r0, 0x200, 0x1, &(0x7f0000000040)="31e8102e000de8bd8da7b9537b972d9ca2af6b54fa2dd7862ded66488a97189b02eda85b6c7de39453450735857b4d233e2d92830b964feafbab827b916776cdcc00d46a8591b880e7a369d9532a42c1ca82897a4289c968c60eae87d366d3bb19727738bfba06388227f173a89b7978d8b67403dd5133a7ea7c491dbdff4a0cc5", 0x81) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x24842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x9, 0x8, 0x9, 0xc8, 0x3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r6, &(0x7f0000001180)=""/4096, 0x1000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.570291139s ago: executing program 4 (id=2727): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0000}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00') pread64(r1, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.946686173s ago: executing program 7 (id=2728): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x4}}, {@jqfmt_vfsv0}]}, 0x6, 0x61f, &(0x7f0000000a80)="$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") r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000280)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 1.945898683s ago: executing program 0 (id=2729): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x181000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x4, 0x8f, 0x7fff0000}]}) r4 = syz_io_uring_setup(0x42e3, &(0x7f0000000240)={0x0, 0xf9ed, 0x3000, 0x0, 0x100028f}, &(0x7f0000000140), &(0x7f0000001440)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000feffffff000000000100000085000000640000009504000000000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xebf}, 0x94) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250e0000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x91}, 0xc006) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000181441", @ANYRESOCT=r2, @ANYBLOB="71eea53a534e112b075ebaaf303edc5e18a1e86fae556388f29e6a9c330d2f93a4f14c7eb28d4982187b7db1140de5267d081f3c8a892b4f7b2ee76f14573fb831140c8f6daf9fbd41bd7de39f49aac4ed2b3bec191e834c04ebf506dcf3b8a5af4ff0995ea80384e0bc830d3467bee766ec1d095b85c5ae1701515fcb121c67cda18eaa58ce5ba14188cd868fcc6bc1b8d9416ff111ea8552e9528ad2dcc9178f81e19a6eaf", @ANYRES16=0x0], 0x20}, 0x1, 0x2000, 0x0, 0x8084}, 0x0) poll(&(0x7f0000000400)=[{r4}], 0x1, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r3, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r7, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000140)={r7, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r7, 0x7}, 0x8) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r9 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x80, 0x6, 0x3, 0xffffffff, 0x5, 0x0}) rt_tgsigqueueinfo(0x0, r10, 0x1b, &(0x7f00000007c0)={0x31, 0x2, 0xc2}) 1.846952464s ago: executing program 2 (id=2730): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001ac0)={0x28, 0x2e, 0xa01, 0x70bd2a, 0x7, {0xa}, [@typed={0x14, 0x9a, 0x0, 0x0, @ipv6=@private2}]}, 0x28}}, 0x0) r2 = socket(0x2b, 0x80801, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c"], 0x184}}, 0x0) listen(r2, 0x8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x1, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x0, 0x6, 0x456a, 0x6, 0x11bfe, 0xb, 0x40, 0x40, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x5, 0x81, 0x2, 0x180000, 0x4003, 0xfffffffa, 0x8, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0xfffffffe, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x3, 0x101, 0x2, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0xffffffff, 0x3, 0x3, 0x2, 0x1, 0x8, 0x0, 0x4, 0x6, 0x0, 0x0, 0x1, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x7, 0x1fc, 0x1ff, 0xffffffff]}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000240)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@oldalloc}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") r5 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r5, 0x2007ffc) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) sendfile(r5, r5, 0x0, 0x2000000000006) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) lseek(r5, 0x8, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r7, 0x2, {0x2, 0xff, 0x4}}, 0x18) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.216371477s ago: executing program 3 (id=2731): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x101}, 0x100000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000002080)=""/4096, 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x128, 0x1170, 0x1170, 0x128, 0x1170, 0x238, 0x1398, 0x1398, 0x238, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x80000000, {0x9}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0xf, 0xd18, 'syz0\x00', 'syz1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=@ipv6_getroute={0x80, 0x1a, 0x200, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x20, 0x2, 0xfc, 0x4, 0xfe, 0x1, 0x1700}, [@RTA_MARK={0x8, 0x10, 0x5}, @RTA_GATEWAY={0x14, 0x5, @empty}, @RTA_PREF={0x5, 0x14, 0x6}, @RTA_ENCAP={0x1c, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x18, 0x1, [{0x4}, {0x800}, {0x2, 0x0, 0x1}, {0x4}, {0x8a36, 0x0, 0x1}]}}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_UID={0x8, 0x19, r3}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008004}, 0x2004c000) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat(r1, &(0x7f0000000880)='./file0\x00', 0x105003, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r5, 0x1, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$unix(0x1, 0x1, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000700)={0xffff0000, 0x7fff, 0x1fc, 0x7}) r6 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006d616373656300004900028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="3a142f390a31d0ccf7338a3d3a093546035dfd9b63523e2b70a8ff36451540ee894955f5e4ad2b497054cdbb7f56e459d0e7e1a1e53086773bfedc26a0ced395d9ec5653635978dcc441ea94910d04ae4ec385c9bd1b6849fa0baf2a01108f2449148a145a0d75aa5eb7316d9c80763ca93d813736cc072748aa0f201c7b8804395b2c79a9f68900b678a18660ac7bb49f4acc8046fd4d15b70dc3dab06b717a276926692306a79f2253509005ac2e56c2acfb3ce96a744c112767e8f080a7dafae398f3bc5c9485"], 0x44}, 0x1, 0x0, 0x0, 0xc0000e3}, 0x4054) 972.542691ms ago: executing program 4 (id=2732): unshare(0x22020600) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000ac0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x1184c, 0x3, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noauto_da_alloc}, {@norecovery}, {@mb_optimize_scan}, {@norecovery}, {}]}, 0x1, 0x4d7, &(0x7f0000000a00)="$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") setresuid(0x0, 0xee01, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="850000000c0000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) syz_emit_ethernet(0xfdef, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, {[], {{0x4e24, 0x4e28, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x2}}}}}}}, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000880)={&(0x7f0000000100), 0x0}) 943.497866ms ago: executing program 2 (id=2733): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x40, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 799.424269ms ago: executing program 3 (id=2734): unshare(0x24020400) r0 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) 736.080698ms ago: executing program 0 (id=2735): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xb825, 0x0, 0x7fc, 0x6, 0x6, 0x7ffff, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x6c010880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = open(0x0, 0x24842, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x9, 0x8, 0x9, 0xc8, 0x3, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4}, &(0x7f0000000240)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) perf_event_open(0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0xd) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r4, &(0x7f0000001180)=""/4096, 0x1000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 664.504994ms ago: executing program 3 (id=2736): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x2, {{0xa, 0x4e24, 0x0, @mcast2, 0x100}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0x21, {{0xa, 0x4e23, 0x5, @mcast2, 0x6}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x110) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000180)={0x7, 0x7, 0x1}, &(0x7f00000001c0)=0x28) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x2, 0x1, 0x1000000000000c8, 0x1, 0x2, 0x8, 0x4, 0xfffffffffffffffc, 0x5166}) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x29, 0x1, 0xfd, 0x0, 0x0, 0x3, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffe}, 0x424, 0x800, 0x2, 0x8, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r2, 0x4503, 0x20, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) 385.195912ms ago: executing program 4 (id=2737): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lsetxattr$security_selinux(&(0x7f0000000680)='./file0\x00', &(0x7f0000000240), &(0x7f00000005c0)='system_u:object_r:hald_acl_exec_t:s0\x00', 0x25, 0x0) lseek(r0, 0xfc, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000000f1ffffffffff010000000000"], 0x0, 0x1a, 0x0, 0x1}, 0x28) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/137, 0x89}, {&(0x7f0000000140)=""/47, 0x2f}], 0x3, &(0x7f0000000380)=""/246, 0xf6}, 0x60) getdents64(r0, 0x0, 0x8f8db2886a7918c7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x2, 0x2}, 0x100004, 0x0, 0xfffc, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xc}, {0xf}, {0xe, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x4000c00) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000304ffff00"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010067656e65766500000400028008000400e1ff0000"], 0x3c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 380.297961ms ago: executing program 7 (id=2738): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe80000000"], 0x610) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100080db300000000fcdbdf2524000000180001801400020076657468315f746f5f626f6e09"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8800) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x14, 0x803d, 0x107, 0x8000, 0x8, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4091}, 0xc000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f00000009c0)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@test_dummy_encryption_v1}, {@init_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@audit}, {@uid_gt}], 0x2c}, 0xa, 0x531, &(0x7f0000000480)="$eJzs3M9vG1UeAPCvnd/bZOPt/ux2d5vd7mqjXW3TpD8Pe2grkHoBIYFQuSCFJK1K04KaILVVpKYItRIHUP+CAjf+BDjBBQHiAOqVCokLCKlCuTT0gAaNZ+zYcZxfjROl+Xwk29+Zec/z3sx78bx5dgLYsQbSp0JEb0R83RvRny3WJxjIXubnZsZ+mpsZK0SSPPtjoZzuwdzMWCVpJd+ufGGwGFF8oxB7G3fbNXX12oXRycmJy/mKoeliHl0cPTdxbuLSyPHjhw/1HDs6cqQuY7LOerZVgj2nX7j91NiZ2y99FrM122vrkSmVnzvXvofqgRiIgfpjWeNfq37f7aGvJi60p8/FrSsMq5a22vR0daT9P/qjrbyU6Y8nX9/SwgEtlSRJ0tWwtvpZNpvUKhSyDElyIwEeA4VYKcWivwLAY6LyQf9gLh2pzow1joMfb/dPRnkElNZ7Pn9kW9rLI9iBUjY26mjR/n8XEWdmH96pXIPttOMPAGy+j05G3DqVXXdUHtmWYvyhJt2vI5sbKkXEbyJid0T8NiI+iIjfR5TT/jEi/lSTp2/FWYCObP6pRuP1z1c9eVB7ubph0uu//+dzW/XXf9WSl9rypb5y/TsKZ89PThzMj8lgdHSly8ONb129rfbxE3ffbrb/gfz6r/JI95++LqQo/tC+6Abd+Oj06KPWu+L+jfKBvV5X/2+jPInVnk9epS97IuLP63j/9Jid/8/7f2m2va7+aT0b6v/WQlhalLl9HQVaJHk34t/Z+Z+NuvOfVb4zj4amL746NHX12v/O185PDh87OnJkqDsmJw4OVVpFo8+/vPlMHjYMI5Y5/5Wu0dKJtPs3ovtXS7b/6sxlKY2q87VTa9/HzXu3mo5p1tv+OwvPlePK/OyV0enpy8MRnYXZxvUjC3mvjPbUpU/b/+D+pfv/7oif38nz7Y2ItBH/NSL+FhH78rL/PSL+ERH7l6n/p6f++XKzIeRAunbZ+rdWWv/xNZ3/ZsGJLyKW3tR24ZMPG3b8Zta8a89/Rzy8M98wYZ6e/8PlaDBfMz463b1SvZYraW3wCIcOAAAAto19EdEbheKB/EZTbxSLBw5E7KreQZma/u/ZV167NJ79RqAUHcXKna7+mvuhw/ntuXQ5zTVSs5xuP1S+b5wkSdKTLqfj98m+ra067Hi7mvT/1PdtW106oOXWNI/W7BdtwLa0uP/fW3XOjf9CBrC5NuB7NMA2pf/DzrXq/t+qX8EBW2ap/n89Yn4LigJssqX6//MNa05sSlmAzWX8DzvX+vu/LwPAdufzH3akVf1Ifh3B7tPLpCm0t2anzYNiZMF3L2bVXvxfAEoRlTWVa5rl3/CbYsTGlLDt0SuYljhf01N3TotL5uqOjTiqUVwxTfsa/hFD06Bng45zXVBcWFNYIXFPXHj6bkubaFdjg1zcequN7XoluNbqLlPuBO9t4Z8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACADfFLAAAA///W6sUa") ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8}, './file1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200402, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x91552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x71c3, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x4, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x820005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r9 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_UNLINKAT={0x24, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) 286.876654ms ago: executing program 0 (id=2739): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x106200, 0x10006, 0x81, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044081}, 0x200c4001) r1 = syz_open_dev$sg(0x0, 0x6f64, 0x400) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000004000/0x2000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x29, 0x5, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c40), r2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa0500070084000000060004404e2000000c0002800800014040ffff"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 250.169447ms ago: executing program 2 (id=2740): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10003, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1b976, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open(&(0x7f0000000000)='./file0\x00', 0x1e5240, 0x141) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x6) 240.148335ms ago: executing program 4 (id=2741): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_gettime(r1, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4c0000001000010027bd7001000000000000ea00", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000024001a80100002800c00018008001d0001040000100002800c0001800800010000000000"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000001080)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYBLOB="01002dbd70027100c1582c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1b00000000000000000000000c00000000000000", @ANYRES32=0x1, @ANYBLOB="04000000000000000000000000000000000000003d6ddc3efc721ff8dc82c676d2a6a8a84b1e4189a9ecae6e5c46915dfd37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000050000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x1a, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000001811000000000000000000000005f64ba434109b4ede3a13a67a851fbf91e5780b429fe9e35e7a3017dc54a9c1be0155fabd395660e19e7449e6e263f7091c52f9cb64db933e60b3d2eff551d6c30572d5b9b074fe2b46670742d80de08d1d959544877574923e56203fcadec8bc7ceecea869a3bebcf4a652ee850e9d6fc665c886c06ab3f012616dfdf9a50b107c17cf831920a24d7dbccd6ae3e3e7e0e2be", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000028a2500001000000096206000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000e80)={0x0, 0x10, 0x1, 0xe}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000f40)=[0xffffffffffffffff, r5], &(0x7f0000000f80)=[{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1, 0x3, 0xb}], 0x10, 0x5}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f00000010c0)={[{@data_writeback}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa3) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x402, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0xffff, 0xffff}, {0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1bf}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24042002}, 0x2000400c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r7, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0], 0x0, 0x3d, &(0x7f0000000940)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) close(r9) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) pwritev2(r7, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 165.582892ms ago: executing program 3 (id=2742): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000300)={[{@barrier}, {@debug}, {@lazytime}]}, 0x1, 0x5b3, &(0x7f0000001400)="$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") connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x24, @short={0x2, 0xffff}}, 0x14) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000005c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0xe7, 0x1, 0x8}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 121.696883ms ago: executing program 2 (id=2743): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, 0x0, {0x300, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) unlink(0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1801000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x1, 0x81, &(0x7f00000004c0)="5ef6beeafbdad7ef6dff75d912033542ad3cf2493adffc217ba591a9517fcabf8b3bc6986ac8c7060fbee5f8c9531ceabfb95ce26f30427b90aee349d6a6a28cfff4288fa3c99f7c398fe034194f4b0d7470b501e39825c9e5205259c056dc7fc6d566047a7c82a8dbf56ad192e113345a29f2d91793c85d1c1ba8fd54aa8b9ca139441e8475901e97c4227eeffcdcf98ba2f6b9822684513f550f6e18ab13ab"}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 0 (id=2744): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r2, 0x4, 0x9, 0x1, 0x6, 0x10, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, 0x80, 0x700, 0xca, 0x40}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000040)={0x40, @time={0x1, 0x7}, 0x40, {0x4, 0x5}, 0x40, 0x0, 0x3}) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) pwrite64(r0, &(0x7f00000001c0)="1227c3b128f0121aeaaf1e", 0xb, 0x43cb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x432, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbffffff186400000300000000000000020000009500000000000000ce39c063026b3615bd4a0ee7cc"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x34}}, 0x0) kernel console output (not intermixed with test programs): AULT_INJECTION: forcing a failure. [ 331.137006][T12357] name failslab, interval 1, probability 0, space 0, times 0 [ 331.178984][T12357] CPU: 0 UID: 0 PID: 12357 Comm: syz.4.2033 Tainted: G W syzkaller #0 PREEMPT(full) [ 331.179014][T12357] Tainted: [W]=WARN [ 331.179093][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.179183][T12357] Call Trace: [ 331.179188][T12357] [ 331.179195][T12357] __dump_stack+0x1d/0x30 [ 331.179258][T12357] dump_stack_lvl+0x95/0xd0 [ 331.179281][T12357] dump_stack+0x15/0x1b [ 331.179301][T12357] should_fail_ex+0x263/0x280 [ 331.179329][T12357] should_failslab+0x8c/0xb0 [ 331.179353][T12357] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 331.179389][T12357] ? __alloc_skb+0x2d6/0x690 [ 331.179414][T12357] __alloc_skb+0x2d6/0x690 [ 331.179437][T12357] ? __alloc_skb+0x200/0x690 [ 331.179493][T12357] netlink_alloc_large_skb+0xbf/0xf0 [ 331.179516][T12357] netlink_sendmsg+0x40c/0x6f0 [ 331.179591][T12357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.179615][T12357] ____sys_sendmsg+0x5af/0x600 [ 331.179643][T12357] ___sys_sendmsg+0x195/0x1e0 [ 331.179725][T12357] __x64_sys_sendmsg+0xd4/0x160 [ 331.179753][T12357] x64_sys_call+0x194c/0x3020 [ 331.179777][T12357] do_syscall_64+0x12c/0x370 [ 331.179832][T12357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.179852][T12357] RIP: 0033:0x7f63e1dfc799 [ 331.179866][T12357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.179882][T12357] RSP: 002b:00007f63e0857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.179935][T12357] RAX: ffffffffffffffda RBX: 00007f63e2075fa0 RCX: 00007f63e1dfc799 [ 331.179949][T12357] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 331.179962][T12357] RBP: 00007f63e0857090 R08: 0000000000000000 R09: 0000000000000000 [ 331.179973][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.179985][T12357] R13: 00007f63e2076038 R14: 00007f63e2075fa0 R15: 00007ffd2b9983a8 [ 331.180027][T12357] [ 331.435782][T12367] loop0: detected capacity change from 0 to 764 [ 331.455671][ T28] audit: type=1326 audit(1772594362.861:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9817d4c799 code=0x7ffc0000 [ 331.470207][T12372] FAULT_INJECTION: forcing a failure. [ 331.470207][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 331.540198][ T28] audit: type=1326 audit(1772594362.861:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9817d4c799 code=0x7ffc0000 [ 331.545199][T12372] CPU: 0 UID: 0 PID: 12372 Comm: syz.4.2097 Tainted: G W syzkaller #0 PREEMPT(full) [ 331.545232][T12372] Tainted: [W]=WARN [ 331.545239][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.545252][T12372] Call Trace: [ 331.545259][T12372] [ 331.545267][T12372] __dump_stack+0x1d/0x30 [ 331.545295][T12372] dump_stack_lvl+0x95/0xd0 [ 331.545320][T12372] dump_stack+0x15/0x1b [ 331.545342][T12372] should_fail_ex+0x263/0x280 [ 331.545367][T12372] should_failslab+0x8c/0xb0 [ 331.545468][T12372] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 331.545495][T12372] ? sidtab_sid2str_get+0xa0/0x130 [ 331.545526][T12372] kmemdup_noprof+0x2b/0x70 [ 331.545546][T12372] sidtab_sid2str_get+0xa0/0x130 [ 331.545614][T12372] security_sid_to_context_core+0x1eb/0x2e0 [ 331.545638][T12372] security_sid_to_context+0x27/0x40 [ 331.545678][T12372] selinux_lsmprop_to_secctx+0x67/0xf0 [ 331.545701][T12372] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 331.545731][T12372] audit_log_subj_ctx+0xa4/0x3e0 [ 331.545765][T12372] ? skb_put+0xa9/0xf0 [ 331.545790][T12372] audit_log_task_context+0x48/0x70 [ 331.545815][T12372] audit_log_task+0xf3/0x250 [ 331.545918][T12372] audit_seccomp+0x60/0x100 [ 331.545949][T12372] ? __seccomp_filter+0x8db/0x1350 [ 331.546037][T12372] __seccomp_filter+0x8ec/0x1350 [ 331.546115][T12372] ? __rcu_read_unlock+0x4e/0x70 [ 331.546137][T12372] ? __fget_files+0x184/0x1c0 [ 331.546185][T12372] ? mutex_lock+0x57/0x90 [ 331.546216][T12372] ? mutex_unlock+0x4e/0x90 [ 331.546245][T12372] __secure_computing+0x81/0x150 [ 331.546350][T12372] do_syscall_64+0xd3/0x370 [ 331.546372][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.546395][T12372] RIP: 0033:0x7f63e1dfc799 [ 331.546411][T12372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.546464][T12372] RSP: 002b:00007f63e0857028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 331.546484][T12372] RAX: ffffffffffffffda RBX: 00007f63e2075fa0 RCX: 00007f63e1dfc799 [ 331.546499][T12372] RDX: 0000000000000000 RSI: 00000000175d20ac RDI: 0000000000000003 [ 331.546513][T12372] RBP: 00007f63e0857090 R08: 0000000000000000 R09: 0000000000000000 [ 331.546526][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.546539][T12372] R13: 00007f63e2076038 R14: 00007f63e2075fa0 R15: 00007ffd2b9983a8 [ 331.546584][T12372] [ 331.551622][T12372] audit: error in audit_log_subj_ctx [ 331.596717][ T28] audit: type=1326 audit(1772594362.861:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f9817d4c799 code=0x7ffc0000 [ 331.836369][ T28] audit: type=1326 audit(1772594362.861:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9817d4c799 code=0x7ffc0000 [ 331.870380][ T28] audit: type=1326 audit(1772594362.861:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.0.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9817d4c799 code=0x7ffc0000 [ 331.977751][T12386] loop0: detected capacity change from 0 to 4096 [ 332.070197][T12386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.457144][T12399] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 333.128147][T12401] netlink: 'syz.4.2098': attribute type 1 has an invalid length. [ 333.153230][T12381] syz_tun: entered allmulticast mode [ 333.314925][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.328484][T12379] syz_tun: left allmulticast mode [ 333.513039][T12433] tipc: Enabled bearer , priority 0 [ 333.599239][T12433] syzkaller0: entered promiscuous mode [ 333.611463][T12433] syzkaller0: entered allmulticast mode [ 333.635002][T12433] tipc: Resetting bearer [ 333.696822][T12432] tipc: Resetting bearer [ 333.717697][T12432] tipc: Disabling bearer [ 333.778943][T12447] loop4: detected capacity change from 0 to 764 [ 334.733003][T12500] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 335.078152][T12511] loop4: detected capacity change from 0 to 512 [ 335.093485][T12511] EXT4-fs: user quota file already specified [ 335.221188][T12520] lo speed is unknown, defaulting to 1000 [ 335.239756][T12520] lo speed is unknown, defaulting to 1000 [ 335.265147][T12524] lo speed is unknown, defaulting to 1000 [ 335.271459][T12520] lo speed is unknown, defaulting to 1000 [ 335.299360][T12524] lo speed is unknown, defaulting to 1000 [ 335.312895][T12535] loop4: detected capacity change from 0 to 2048 [ 335.345136][T12524] lo speed is unknown, defaulting to 1000 [ 335.454679][T12535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.569209][T12546] lo speed is unknown, defaulting to 1000 [ 335.575407][T12546] lo speed is unknown, defaulting to 1000 [ 336.207920][T12546] lo speed is unknown, defaulting to 1000 [ 336.434131][T12544] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 336.459737][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 336.459752][ T28] audit: type=1400 audit(1772594367.878:3693): avc: denied { read } for pid=12558 comm="syz.3.2128" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 336.685109][ T28] audit: type=1400 audit(1772594367.878:3694): avc: denied { open } for pid=12558 comm="syz.3.2128" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 337.622974][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.668325][T12594] loop3: detected capacity change from 0 to 2048 [ 337.683916][T12594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.061918][T12616] netlink: 'syz.4.2142': attribute type 21 has an invalid length. [ 338.087242][T12616] netlink: 'syz.4.2142': attribute type 1 has an invalid length. [ 338.115854][T12616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2142'. [ 338.685997][T12643] loop0: detected capacity change from 0 to 1764 [ 338.693396][T12643] iso9660: Unknown parameter 'tt÷ð' [ 339.416632][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.578103][ T28] audit: type=1400 audit(1772594372.985:3695): avc: denied { create } for pid=12650 comm="syz.2.2149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 341.606366][T12654] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2150'. [ 341.681022][T12662] loop4: detected capacity change from 0 to 512 [ 341.701827][T12666] loop2: detected capacity change from 0 to 1764 [ 341.726714][T12662] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2153: invalid indirect mapped block 256 (level 2) [ 341.771866][T12662] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 341.773283][T12662] EXT4-fs (loop4): 2 truncates cleaned up [ 341.782442][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 341.782462][ C0] EXT4-fs (loop4): initial error at time 1772594373: ext4_free_branches:1023: inode 11 [ 341.782494][ C0] EXT4-fs (loop4): last error at time 1772594373: ext4_free_branches:1023: inode 11 [ 341.814053][T12662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.009206][T12679] loop0: detected capacity change from 0 to 512 [ 342.020969][T12679] EXT4-fs (loop0): 1 truncate cleaned up [ 342.028139][T12679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.041483][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 342.073795][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.191972][ T28] audit: type=1326 audit(1772594373.605:3696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.237812][ T28] audit: type=1326 audit(1772594373.605:3697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.240829][ T8127] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:19: bg 0: block 5: invalid block bitmap [ 342.262820][ T28] audit: type=1326 audit(1772594373.605:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.289275][ T8127] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 342.320819][ T28] audit: type=1326 audit(1772594373.605:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.322192][T12689] 9p: Bad value for 'wfdno' [ 342.350458][ T28] audit: type=1326 audit(1772594373.605:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.374455][ T28] audit: type=1326 audit(1772594373.605:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.377982][ T8127] EXT4-fs (loop4): This should not happen!! Data will be lost [ 342.377982][ T8127] [ 342.429096][ T8127] EXT4-fs (loop4): Total free blocks count 0 [ 342.436106][ T8127] EXT4-fs (loop4): Free/Dirty block details [ 342.442804][ T8127] EXT4-fs (loop4): free_blocks=0 [ 342.448092][ T8127] EXT4-fs (loop4): dirty_blocks=2484 [ 342.453521][ T8127] EXT4-fs (loop4): Block reservation details [ 342.461485][ T8127] EXT4-fs (loop4): i_reserved_data_blocks=2484 [ 342.475681][T12697] loop0: detected capacity change from 0 to 128 [ 342.477592][ T28] audit: type=1326 audit(1772594373.645:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.507227][ T8127] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 428 with error 28 [ 342.534395][ T8127] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.544362][ T8127] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.544584][T12697] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.553682][ T8127] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.574630][ T28] audit: type=1326 audit(1772594373.645:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.598895][ T8127] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.608186][ T28] audit: type=1326 audit(1772594373.645:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12683 comm="syz.7.2159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 342.636570][T12697] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 342.655301][T12702] loop4: detected capacity change from 0 to 512 [ 342.732308][T12702] EXT4-fs: Ignoring removed orlov option [ 342.748069][ T5388] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.762965][T12702] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 342.822483][T12702] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 342.830671][T12714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2166'. [ 342.850921][ T7957] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.860963][T12702] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.2160: corrupted in-inode xattr: e_value size too large [ 342.926611][T12702] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 342.926928][T12702] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2160: couldn't read orphan inode 15 (err -117) [ 342.936086][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 342.936108][ C0] EXT4-fs (loop4): initial error at time 1772594374: ext4_iget_extra_inode:5025: inode 15 [ 342.936151][ C0] EXT4-fs (loop4): last error at time 1772594374: ext4_iget_extra_inode:5025: inode 15 [ 342.985138][T12702] loop4: lost filesystem error report for type 5 error -117 [ 342.985716][T12702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.005888][T12702] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.079266][T12726] netlink: 'syz.4.2172': attribute type 21 has an invalid length. [ 343.099083][T12726] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 343.115201][T12726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2172'. [ 343.220896][T12733] lo speed is unknown, defaulting to 1000 [ 343.227050][T12733] lo speed is unknown, defaulting to 1000 [ 343.233063][T12733] lo speed is unknown, defaulting to 1000 [ 343.721452][T12746] netlink: 'syz.4.2177': attribute type 1 has an invalid length. [ 344.047157][T12746] 8021q: adding VLAN 0 to HW filter on device bond1 [ 344.602378][T12768] netlink: 'syz.2.2184': attribute type 21 has an invalid length. [ 344.626246][T12768] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 344.634032][T12768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2184'. [ 344.765901][T12760] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2181'. [ 344.856185][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.889970][T12778] loop0: detected capacity change from 0 to 128 [ 344.900014][T12778] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.919595][T12778] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 344.964725][ T5388] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.442789][T12800] loop0: detected capacity change from 0 to 1024 [ 345.458920][T12803] ipvlan0: entered allmulticast mode [ 345.470064][T12803] veth0_vlan: entered allmulticast mode [ 345.478897][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 345.496293][T12800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.510010][T12803] ipvlan0 (unregistering): left allmulticast mode [ 345.517819][T12803] veth0_vlan: left allmulticast mode [ 345.583356][T12818] loop2: detected capacity change from 0 to 1024 [ 345.615412][T12818] EXT4-fs: inline encryption not supported [ 345.637357][T12820] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.0.2187: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 345.667872][T12820] EXT4-fs (loop0): Remounting filesystem read-only [ 345.678344][T12818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.678961][T12823] netlink: 'syz.7.2195': attribute type 21 has an invalid length. [ 345.717599][T12823] netlink: 'syz.7.2195': attribute type 1 has an invalid length. [ 345.735748][T12823] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2195'. [ 345.737172][T12818] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2193: Allocating blocks 497-513 which overlap fs metadata [ 345.812137][T12818] EXT4-fs (loop2): Remounting filesystem read-only [ 345.862016][T12821] io-wq is not configured for unbound workers [ 345.887572][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.031614][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2200'. [ 346.041179][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2200'. [ 346.050835][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2200'. [ 346.062157][T12842] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2200'. [ 346.073854][T12843] netlink: 'syz.7.2197': attribute type 1 has an invalid length. [ 346.093256][T12843] 8021q: adding VLAN 0 to HW filter on device bond5 [ 346.166831][T12842] netlink: 'syz.4.2200': attribute type 1 has an invalid length. [ 346.456014][T12850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.477109][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.511486][T12855] openvswitch: netlink: EtherType 0 is less than min 600 [ 346.524217][T12853] lo speed is unknown, defaulting to 1000 [ 346.533720][T12853] lo speed is unknown, defaulting to 1000 [ 346.556389][T12853] lo speed is unknown, defaulting to 1000 [ 346.556934][T12860] netlink: 'syz.0.2206': attribute type 21 has an invalid length. [ 346.586764][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2206'. [ 346.678118][T12860] syzkaller0: entered promiscuous mode [ 346.683604][T12860] syzkaller0: entered allmulticast mode [ 346.812669][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 346.812684][ T28] audit: type=1400 audit(1772594378.223:3884): avc: denied { map } for pid=12868 comm="syz.2.2209" path="socket:[39769]" dev="sockfs" ino=39769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 346.843452][ T28] audit: type=1400 audit(1772594378.242:3885): avc: denied { accept } for pid=12868 comm="syz.2.2209" path="socket:[39769]" dev="sockfs" ino=39769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 346.868682][ T28] audit: type=1400 audit(1772594378.242:3886): avc: denied { read } for pid=12856 comm="syz.4.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 347.237591][T12880] 8021q: adding VLAN 0 to HW filter on device bond4 [ 347.652914][T12889] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2213'. [ 347.709495][ T28] audit: type=1326 audit(1772594379.112:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.710491][T12885] lo speed is unknown, defaulting to 1000 [ 347.751026][ T28] audit: type=1326 audit(1772594379.152:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.797949][T12885] lo speed is unknown, defaulting to 1000 [ 347.801905][ T28] audit: type=1326 audit(1772594379.152:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.828649][T12885] lo speed is unknown, defaulting to 1000 [ 347.886289][ T28] audit: type=1326 audit(1772594379.162:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.911753][ T28] audit: type=1326 audit(1772594379.162:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.935993][ T28] audit: type=1326 audit(1772594379.162:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.960855][ T28] audit: type=1326 audit(1772594379.212:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12890 comm="syz.4.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 347.996592][T12895] 9p: Bad value for 'wfdno' [ 348.170435][T12904] loop3: detected capacity change from 0 to 2048 [ 348.234653][T12906] validate_nla: 2 callbacks suppressed [ 348.234675][T12906] netlink: 'syz.7.2219': attribute type 1 has an invalid length. [ 348.310016][T12906] 8021q: adding VLAN 0 to HW filter on device bond6 [ 348.391464][T12904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.707776][T12916] loop0: detected capacity change from 0 to 1024 [ 348.727223][T12916] EXT4-fs: Ignoring removed orlov option [ 348.746775][T12916] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 348.784010][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.125657][T12916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.488662][T12935] netlink: 'syz.2.2228': attribute type 30 has an invalid length. [ 349.503795][T12935] bond2: option arp_missed_max: invalid value (0) [ 349.529963][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.529999][T12935] bond2: option arp_missed_max: allowed values 1 - 255 [ 349.547898][T12935] bond2 (unregistering): Released all slaves [ 351.047755][T12962] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 351.060327][T12962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 351.186177][T12984] loop2: detected capacity change from 0 to 512 [ 351.214866][T12984] FAT-fs (loop2): bogus number of FAT sectors [ 351.246574][T12984] FAT-fs (loop2): Can't find a valid FAT filesystem [ 352.322439][T13031] loop2: detected capacity change from 0 to 512 [ 353.625715][T13031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.638353][T13031] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.690111][T13042] netlink: 'syz.0.2249': attribute type 2 has an invalid length. [ 353.697958][T13042] netlink: 'syz.0.2249': attribute type 11 has an invalid length. [ 353.705792][T13042] __nla_validate_parse: 2 callbacks suppressed [ 353.705830][T13042] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2249'. [ 353.880857][T13054] random: crng reseeded on system resumption [ 353.882175][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 353.882309][ T28] audit: type=1400 audit(1772594385.299:3975): avc: denied { write } for pid=13053 comm="syz.4.2251" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 353.924857][T13050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.221757][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.251795][T13050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.448462][T13062] netlink: 'syz.4.2254': attribute type 1 has an invalid length. [ 354.458082][ T28] audit: type=1400 audit(1772594385.319:3976): avc: denied { ioctl } for pid=13053 comm="syz.4.2251" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 354.497674][T13062] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.626536][T13065] syzkaller0: entered promiscuous mode [ 354.658887][T13065] syzkaller0: entered allmulticast mode [ 354.795388][ T28] audit: type=1400 audit(1772594386.198:3977): avc: denied { create } for pid=13073 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 354.908557][T13080] loop2: detected capacity change from 0 to 512 [ 354.916141][T13050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.995812][T13050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.048439][T13080] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 355.136835][T13096] loop4: detected capacity change from 0 to 512 [ 355.365033][ T7177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.382785][T13080] EXT4-fs (loop2): 1 truncate cleaned up [ 355.429099][T13080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.442341][T13096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.455161][T13096] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.578979][T13091] FAULT_INJECTION: forcing a failure. [ 355.578979][T13091] name failslab, interval 1, probability 0, space 0, times 0 [ 355.593948][T13091] CPU: 0 UID: 0 PID: 13091 Comm: syz.4.2255 Tainted: G W syzkaller #0 PREEMPT(full) [ 355.594017][T13091] Tainted: [W]=WARN [ 355.594026][T13091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.594040][T13091] Call Trace: [ 355.594047][T13091] [ 355.594054][T13091] __dump_stack+0x1d/0x30 [ 355.594094][T13091] dump_stack_lvl+0x95/0xd0 [ 355.594120][T13091] dump_stack+0x15/0x1b [ 355.594145][T13091] should_fail_ex+0x263/0x280 [ 355.594171][T13091] should_failslab+0x8c/0xb0 [ 355.594211][T13091] kmem_cache_alloc_noprof+0x66/0x400 [ 355.594234][T13091] ? security_inode_alloc+0x37/0x100 [ 355.594268][T13091] security_inode_alloc+0x37/0x100 [ 355.594336][T13091] inode_init_always_gfp+0x4b7/0x500 [ 355.594365][T13091] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 355.594420][T13091] alloc_inode+0x58/0x170 [ 355.594442][T13091] new_inode+0x1d/0xe0 [ 355.594466][T13091] __debugfs_create_file+0x97/0x2b0 [ 355.594498][T13091] debugfs_create_file_full+0x3f/0x60 [ 355.594528][T13091] ? __pfx_sl_setup+0x10/0x10 [ 355.594579][T13091] ref_tracker_dir_debugfs+0x10e/0x220 [ 355.594612][T13091] alloc_netdev_mqs+0x1a7/0xa40 [ 355.594646][T13091] slip_open+0x2d1/0x930 [ 355.594669][T13091] ? vfree+0x295/0x3a0 [ 355.594772][T13091] ? up_write+0x18/0x60 [ 355.594798][T13091] tty_ldisc_open+0x5d/0xb0 [ 355.594890][T13091] tty_set_ldisc+0x1db/0x380 [ 355.594925][T13091] tiocsetd+0x51/0x60 [ 355.595030][T13091] tty_ioctl+0xa78/0xb80 [ 355.595055][T13091] ? __pfx_tty_ioctl+0x10/0x10 [ 355.595086][T13091] __se_sys_ioctl+0xce/0x140 [ 355.595123][T13091] __x64_sys_ioctl+0x43/0x50 [ 355.595217][T13091] x64_sys_call+0x1563/0x3020 [ 355.595246][T13091] do_syscall_64+0x12c/0x370 [ 355.595268][T13091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.595290][T13091] RIP: 0033:0x7f63e1dfc799 [ 355.595306][T13091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.595323][T13091] RSP: 002b:00007f63e0836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.595346][T13091] RAX: ffffffffffffffda RBX: 00007f63e2076090 RCX: 00007f63e1dfc799 [ 355.595363][T13091] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000007 [ 355.595379][T13091] RBP: 00007f63e0836090 R08: 0000000000000000 R09: 0000000000000000 [ 355.595450][T13091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.595464][T13091] R13: 00007f63e2076128 R14: 00007f63e2076090 R15: 00007ffd2b9983a8 [ 355.595561][T13091] [ 355.595825][T13091] debugfs: out of free dentries, can not create file 'netdev@ffff888104c7c560' [ 355.783854][ T28] audit: type=1400 audit(1772594387.138:3978): avc: denied { getopt } for pid=13079 comm="syz.2.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 355.919695][ T7177] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.932434][ T7177] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.952442][ T7177] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.992599][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.059344][T13112] FAULT_INJECTION: forcing a failure. [ 356.059344][T13112] name failslab, interval 1, probability 0, space 0, times 0 [ 356.072047][ T28] audit: type=1326 audit(1772594387.468:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 356.097906][T13112] CPU: 1 UID: 0 PID: 13112 Comm: syz.4.2260 Tainted: G W syzkaller #0 PREEMPT(full) [ 356.097943][T13112] Tainted: [W]=WARN [ 356.097987][T13112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.098000][T13112] Call Trace: [ 356.098007][T13112] [ 356.098016][T13112] __dump_stack+0x1d/0x30 [ 356.098047][T13112] dump_stack_lvl+0x95/0xd0 [ 356.098074][T13112] dump_stack+0x15/0x1b [ 356.098095][T13112] should_fail_ex+0x263/0x280 [ 356.098194][T13112] should_failslab+0x8c/0xb0 [ 356.098292][T13112] kmem_cache_alloc_noprof+0x66/0x400 [ 356.098316][T13112] ? audit_log_start+0x34c/0x730 [ 356.098403][T13112] audit_log_start+0x34c/0x730 [ 356.098427][T13112] ? should_failslab+0x8c/0xb0 [ 356.098452][T13112] audit_seccomp+0x47/0x100 [ 356.098505][T13112] ? __seccomp_filter+0x8db/0x1350 [ 356.098536][T13112] __seccomp_filter+0x8ec/0x1350 [ 356.098567][T13112] ? alloc_file_pseudo+0x15a/0x190 [ 356.098659][T13112] __secure_computing+0x81/0x150 [ 356.098690][T13112] do_syscall_64+0xd3/0x370 [ 356.098762][T13112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.098787][T13112] RIP: 0033:0x7f63e1dbcfce [ 356.098806][T13112] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.098825][T13112] RSP: 002b:00007f63e0856fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.098848][T13112] RAX: ffffffffffffffda RBX: 00007f63e08576c0 RCX: 00007f63e1dbcfce [ 356.098864][T13112] RDX: 000000000000000f RSI: 00007f63e08570a0 RDI: 0000000000000004 [ 356.098900][T13112] RBP: 00007f63e0857090 R08: 0000000000000000 R09: 0000000000000000 [ 356.098914][T13112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.098929][T13112] R13: 00007f63e2076038 R14: 00007f63e2075fa0 R15: 00007ffd2b9983a8 [ 356.098951][T13112] [ 356.098960][T13112] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 356.211799][ T28] audit: type=1326 audit(1772594387.468:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63e1dbcfce code=0x7ffc0000 [ 356.240150][T13112] audit: out of memory in audit_log_start [ 356.241621][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.341877][ T28] audit: type=1326 audit(1772594387.468:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f63e1dbcfce code=0x7ffc0000 [ 356.365547][ T28] audit: type=1326 audit(1772594387.468:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13111 comm="syz.4.2260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 356.512999][T13120] loop2: detected capacity change from 0 to 256 [ 356.533024][T13114] infiniband syz1: set active [ 356.543644][T13114] infiniband syz1: added syz_tun [ 356.587006][T13114] RDS/IB: syz1: added [ 356.602559][T13114] smc: adding ib device syz1 with port count 1 [ 356.608746][T13114] smc: ib device syz1 port 1 has no pnetid [ 356.721961][T13126] serio: Serial port ptm0 [ 356.990363][T13131] netlink: 'syz.0.2266': attribute type 1 has an invalid length. [ 357.103539][T13131] 8021q: adding VLAN 0 to HW filter on device bond5 [ 357.553701][T13142] loop3: detected capacity change from 0 to 128 [ 357.565362][T13142] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 357.592585][T13142] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 357.679104][T13145] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 357.872199][ T9873] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 358.008194][T13153] loop3: detected capacity change from 0 to 256 [ 358.164212][T13157] syz1: rxe_newlink: already configured on syz_tun [ 358.386873][T13165] netlink: 'syz.4.2278': attribute type 5 has an invalid length. [ 358.513964][T13170] bridge0: port 3(ipvlan0) entered blocking state [ 358.530592][T13170] bridge0: port 3(ipvlan0) entered disabled state [ 358.540856][T13170] ipvlan0: entered allmulticast mode [ 358.553033][T13170] bridge0: entered allmulticast mode [ 358.558842][T13170] ipvlan0: left allmulticast mode [ 358.574290][T13170] bridge0: left allmulticast mode [ 358.602554][T13173] loop0: detected capacity change from 0 to 512 [ 358.631038][T13173] ext4: Unknown parameter 'uid' [ 358.939912][T13177] team_slave_0: entered promiscuous mode [ 358.946213][T13177] team_slave_1: entered promiscuous mode [ 358.985094][T13177] vlan2: entered promiscuous mode [ 359.010188][T13177] team0: entered promiscuous mode [ 359.050753][T13194] FAULT_INJECTION: forcing a failure. [ 359.050753][T13194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.064817][T13194] CPU: 1 UID: 0 PID: 13194 Comm: syz.3.2290 Tainted: G W syzkaller #0 PREEMPT(full) [ 359.064970][T13194] Tainted: [W]=WARN [ 359.064978][T13194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.064993][T13194] Call Trace: [ 359.065000][T13194] [ 359.065009][T13194] __dump_stack+0x1d/0x30 [ 359.065038][T13194] dump_stack_lvl+0x95/0xd0 [ 359.065145][T13194] dump_stack+0x15/0x1b [ 359.065214][T13194] should_fail_ex+0x263/0x280 [ 359.065242][T13194] should_fail+0xb/0x20 [ 359.065364][T13194] should_fail_usercopy+0x1a/0x20 [ 359.065428][T13194] _copy_from_user+0x1c/0xb0 [ 359.065458][T13194] sctp_setsockopt+0x164/0xea0 [ 359.065497][T13194] sock_common_setsockopt+0x69/0x80 [ 359.065521][T13194] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 359.065550][T13194] __sys_setsockopt+0x184/0x200 [ 359.065577][T13194] __x64_sys_setsockopt+0x64/0x80 [ 359.065651][T13194] x64_sys_call+0x2327/0x3020 [ 359.065675][T13194] do_syscall_64+0x12c/0x370 [ 359.065694][T13194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.065778][T13194] RIP: 0033:0x7f80ad1ac799 [ 359.065792][T13194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.065809][T13194] RSP: 002b:00007f80abbff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 359.065857][T13194] RAX: ffffffffffffffda RBX: 00007f80ad425fa0 RCX: 00007f80ad1ac799 [ 359.065870][T13194] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005 [ 359.065882][T13194] RBP: 00007f80abbff090 R08: 000000000000009c R09: 0000000000000000 [ 359.065894][T13194] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 359.065906][T13194] R13: 00007f80ad426038 R14: 00007f80ad425fa0 R15: 00007ffcd5b05e58 [ 359.065923][T13194] [ 359.336641][T13203] FAULT_INJECTION: forcing a failure. [ 359.336641][T13203] name failslab, interval 1, probability 0, space 0, times 0 [ 359.349414][T13203] CPU: 1 UID: 0 PID: 13203 Comm: syz.4.2293 Tainted: G W syzkaller #0 PREEMPT(full) [ 359.349447][T13203] Tainted: [W]=WARN [ 359.349454][T13203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 359.349536][T13203] Call Trace: [ 359.349545][T13203] [ 359.349555][T13203] __dump_stack+0x1d/0x30 [ 359.349585][T13203] dump_stack_lvl+0x95/0xd0 [ 359.349611][T13203] dump_stack+0x15/0x1b [ 359.349636][T13203] should_fail_ex+0x263/0x280 [ 359.349735][T13203] should_failslab+0x8c/0xb0 [ 359.349823][T13203] kmem_cache_alloc_noprof+0x66/0x400 [ 359.349845][T13203] ? dst_alloc+0xbd/0x100 [ 359.349871][T13203] dst_alloc+0xbd/0x100 [ 359.349967][T13203] rt_dst_clone+0x3b/0x2e0 [ 359.349999][T13203] NF_HOOK+0x65/0x230 [ 359.350028][T13203] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 359.350074][T13203] ip_mc_output+0x139/0x370 [ 359.350124][T13203] ? __pfx_dst_output+0x10/0x10 [ 359.350157][T13203] ip_send_skb+0x151/0x160 [ 359.350187][T13203] udp_send_skb+0x6e3/0xa60 [ 359.350276][T13203] udp_sendmsg+0x1129/0x1590 [ 359.350318][T13203] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 359.350359][T13203] ? __pfx_udp_sendmsg+0x10/0x10 [ 359.350437][T13203] inet_sendmsg+0xac/0xd0 [ 359.350466][T13203] sock_sendmsg+0x1f4/0x280 [ 359.350561][T13203] splice_to_socket+0x6e2/0xa80 [ 359.350593][T13203] ? rw_verify_area+0x8d/0x160 [ 359.350640][T13203] ? __pfx_splice_to_socket+0x10/0x10 [ 359.350659][T13203] do_splice+0x970/0x10b0 [ 359.350746][T13203] ? proc_fail_nth_write+0x13b/0x160 [ 359.350775][T13203] ? __rcu_read_unlock+0x4e/0x70 [ 359.350794][T13203] ? __fget_files+0x184/0x1c0 [ 359.350880][T13203] __se_sys_splice+0x26c/0x3a0 [ 359.350903][T13203] __x64_sys_splice+0x78/0x90 [ 359.350929][T13203] x64_sys_call+0x16ef/0x3020 [ 359.351004][T13203] do_syscall_64+0x12c/0x370 [ 359.351029][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.351055][T13203] RIP: 0033:0x7f63e1dfc799 [ 359.351073][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.351127][T13203] RSP: 002b:00007f63e0857028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 359.351221][T13203] RAX: ffffffffffffffda RBX: 00007f63e2075fa0 RCX: 00007f63e1dfc799 [ 359.351235][T13203] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 359.351246][T13203] RBP: 00007f63e0857090 R08: 002000000002ffff R09: 0000000000000000 [ 359.351259][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.351271][T13203] R13: 00007f63e2076038 R14: 00007f63e2075fa0 R15: 00007ffd2b9983a8 [ 359.351356][T13203] [ 359.401776][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 359.401835][ T28] audit: type=1326 audit(1772594390.766:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13199 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ad1ac799 code=0x7ffc0000 [ 359.582166][T13206] Cannot find add_set index 0 as target [ 359.666031][ T28] audit: type=1326 audit(1772594390.766:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13199 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ad1ac799 code=0x7ffc0000 [ 359.689940][ T28] audit: type=1326 audit(1772594391.006:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13199 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f80ad1ac799 code=0x7ffc0000 [ 359.713973][ T28] audit: type=1326 audit(1772594391.006:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13199 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ad1ac799 code=0x7ffc0000 [ 359.737924][ T28] audit: type=1326 audit(1772594391.006:3995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13199 comm="syz.3.2292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ad1ac799 code=0x7ffc0000 [ 359.976146][ T3381] hid (null): invalid report_count 33730 [ 359.987399][ T3381] hid-generic 0003:0009:0200.0002: collection stack underflow [ 360.005808][ T3381] hid-generic 0003:0009:0200.0002: item 0 4 0 12 parsing failed [ 360.027150][ T3381] hid-generic 0003:0009:0200.0002: probe with driver hid-generic failed with error -22 [ 360.086962][T13217] IPv6: sit1: Disabled Multicast RS [ 360.105110][T13217] sit1: entered allmulticast mode [ 360.219457][T13227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 360.249756][T13231] loop4: detected capacity change from 0 to 512 [ 360.275787][T13231] EXT4-fs (loop4): 1 truncate cleaned up [ 360.284420][T13231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.297779][T13237] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2303'. [ 360.316079][T13234] netlink: 'syz.3.2305': attribute type 5 has an invalid length. [ 360.325358][T13231] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.2304: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 360.345512][T13237] loop2: detected capacity change from 0 to 512 [ 360.356040][T13237] ext4: Unknown parameter 'pcr' [ 360.420603][T13244] FAULT_INJECTION: forcing a failure. [ 360.420603][T13244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.435990][T13244] CPU: 0 UID: 0 PID: 13244 Comm: syz.3.2308 Tainted: G W syzkaller #0 PREEMPT(full) [ 360.436022][T13244] Tainted: [W]=WARN [ 360.436029][T13244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.436041][T13244] Call Trace: [ 360.436047][T13244] [ 360.436056][T13244] __dump_stack+0x1d/0x30 [ 360.436085][T13244] dump_stack_lvl+0x95/0xd0 [ 360.436172][T13244] dump_stack+0x15/0x1b [ 360.436209][T13244] should_fail_ex+0x263/0x280 [ 360.436230][T13244] should_fail+0xb/0x20 [ 360.436248][T13244] should_fail_usercopy+0x1a/0x20 [ 360.436280][T13244] _copy_from_user+0x1c/0xb0 [ 360.436334][T13244] __copy_msghdr+0x244/0x300 [ 360.436359][T13244] ___sys_sendmsg+0x10c/0x1e0 [ 360.436409][T13244] ? path_openat+0x1b01/0x2050 [ 360.436526][T13244] __sys_sendmmsg+0x185/0x320 [ 360.436558][T13244] __x64_sys_sendmmsg+0x57/0x70 [ 360.436585][T13244] x64_sys_call+0x27aa/0x3020 [ 360.436663][T13244] do_syscall_64+0x12c/0x370 [ 360.436682][T13244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.436722][T13244] RIP: 0033:0x7f80ad1ac799 [ 360.436786][T13244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.436802][T13244] RSP: 002b:00007f80abbff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.436821][T13244] RAX: ffffffffffffffda RBX: 00007f80ad425fa0 RCX: 00007f80ad1ac799 [ 360.436835][T13244] RDX: 0000000000000001 RSI: 0000200000000c80 RDI: 0000000000000003 [ 360.436925][T13244] RBP: 00007f80abbff090 R08: 0000000000000000 R09: 0000000000000000 [ 360.436938][T13244] R10: 0000000000004040 R11: 0000000000000246 R12: 0000000000000001 [ 360.436949][T13244] R13: 00007f80ad426038 R14: 00007f80ad425fa0 R15: 00007ffcd5b05e58 [ 360.436967][T13244] [ 360.439515][ T28] audit: type=1326 audit(1772594391.846:3996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 360.497569][T13246] loop3: detected capacity change from 0 to 1024 [ 360.505571][ T28] audit: type=1326 audit(1772594391.846:3997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 360.511266][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.515609][ T28] audit: type=1326 audit(1772594391.846:3998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 360.550846][T13246] EXT4-fs: Ignoring removed nobh option [ 360.586905][ T28] audit: type=1326 audit(1772594391.846:3999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 360.678929][T13246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 360.692251][ T28] audit: type=1326 audit(1772594391.846:4000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13240 comm="syz.7.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 360.722219][T13246] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 360.807014][T13246] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.2310: lblock 2 mapped to illegal pblock 2 (length 1) [ 360.831518][T13246] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 360.831706][T13246] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.2310: lblock 0 mapped to illegal pblock 48 (length 1) [ 360.840799][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 360.840828][ C0] EXT4-fs (loop3): initial error at time 1772594392: ext4_map_blocks:776: inode 3: block 2 [ 360.840867][ C0] EXT4-fs (loop3): last error at time 1772594392: ext4_map_blocks:776: inode 3: block 2 [ 360.882101][T13246] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 360.882220][T13246] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.2310: Failed to acquire dquot type 0 [ 360.904996][T13246] loop3: lost filesystem error report for type 5 error -117 [ 360.905102][T13246] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 360.921931][T13246] loop3: lost filesystem error report for type 5 error -117 [ 360.922056][T13246] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.2310: mark_inode_dirty error [ 360.940844][T13246] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 360.940978][T13246] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 360.961690][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2313'. [ 360.970879][T13246] EXT4-fs (loop3): 1 orphan inode deleted [ 360.977085][T13246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.989313][ T62] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.013218][ T62] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 361.013362][ T62] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 0 [ 361.064357][T13260] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2314'. [ 361.553112][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.566657][ T7957] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.590958][ T7957] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 361.591161][ T7957] EXT4-fs error (device loop3): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 361.619797][ T7957] loop3: lost filesystem error report for type 5 error -117 [ 361.621311][ T9873] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 361.642260][ T9873] loop3: lost filesystem error report for type 5 error -117 [ 361.643914][ T9873] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 361.661172][ T9873] loop3: lost filesystem error report for type 5 error -117 [ 361.661391][ T9873] EXT4-fs error (device loop3): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 361.680692][ T9873] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 361.715679][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'. [ 361.822548][T13293] netlink: 'syz.7.2327': attribute type 1 has an invalid length. [ 361.831445][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2327'. [ 361.847013][T13291] bond7: Unable to set up delay as MII monitoring is disabled [ 361.855536][T13291] bond7 (unregistering): Released all slaves [ 362.021993][T13312] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2333'. [ 362.055055][T13312] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2333'. [ 362.162588][T13318] syzkaller0: entered promiscuous mode [ 362.168226][T13318] syzkaller0: entered allmulticast mode [ 362.223919][T13327] loop2: detected capacity change from 0 to 1024 [ 362.266247][T13327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.353677][T13334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13334 comm=syz.4.2337 [ 362.419562][T13334] hub 8-0:1.0: USB hub found [ 362.424325][T13334] hub 8-0:1.0: 8 ports detected [ 362.440047][T13337] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 362.449972][T13337] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 362.597269][T13327] EXT4-fs error (device loop2): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.2.2338: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 362.624196][T13342] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2342'. [ 362.634438][T13327] EXT4-fs (loop2): Remounting filesystem read-only [ 362.872039][T13348] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2345'. [ 362.881068][T13358] vlan0: entered promiscuous mode [ 362.881088][T13358] gretap0: entered promiscuous mode [ 362.897431][T13360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2350'. [ 362.922534][T13362] SELinux: syz.3.2351 (13362) set checkreqprot to 1. This is no longer supported. [ 363.016969][T13369] loop3: detected capacity change from 0 to 8192 [ 363.121230][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.155204][T13383] netlink: zone id is out of range [ 363.160936][T13383] netlink: zone id is out of range [ 363.184876][T13383] netlink: zone id is out of range [ 363.192504][T13383] netlink: zone id is out of range [ 363.198341][T13383] netlink: zone id is out of range [ 363.203967][T13383] netlink: zone id is out of range [ 363.210159][T13383] netlink: zone id is out of range [ 363.222277][T13383] netlink: zone id is out of range [ 363.228099][T13383] netlink: zone id is out of range [ 363.233807][T13383] netlink: zone id is out of range [ 363.347948][T13399] team0 (unregistering): Port device team_slave_0 removed [ 363.358722][T13399] team0 (unregistering): Port device team_slave_1 removed [ 363.379746][T13402] gretap0: entered promiscuous mode [ 363.390459][T13402] vlan2: entered promiscuous mode [ 363.414673][T13406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.425794][T13406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.434442][T13406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.453972][T13406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.630979][T13418] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13418 comm=syz.0.2371 [ 363.678544][T13418] hub 8-0:1.0: USB hub found [ 363.683332][T13418] hub 8-0:1.0: 8 ports detected [ 363.707379][T13418] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 363.717271][T13418] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 364.178674][T13438] sctp: [Deprecated]: syz.7.2375 (pid 13438) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.178674][T13438] Use struct sctp_sack_info instead [ 364.218949][T13442] netlink: 'syz.7.2376': attribute type 5 has an invalid length. [ 364.234285][T13442] geneve3: entered promiscuous mode [ 364.245699][ T7957] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.261863][ T7957] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.272457][ T7957] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.281599][ T7957] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.330244][T13449] loop2: detected capacity change from 0 to 512 [ 364.344261][T13449] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 364.392356][T13449] FAT-fs (loop2): Filesystem has been set read-only [ 364.414114][T13449] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 364.907647][T13460] syzkaller0: entered promiscuous mode [ 364.931416][T13460] syzkaller0: entered allmulticast mode [ 365.166398][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 365.166509][ T28] audit: type=1400 audit(1772594396.563:4041): avc: denied { ioctl } for pid=13472 comm="syz.4.2389" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 365.236350][T13478] netlink: 'syz.3.2391': attribute type 5 has an invalid length. [ 365.249229][T13475] ipvlan2: entered allmulticast mode [ 365.261539][T13475] dummy0: entered allmulticast mode [ 365.333532][T13483] xt_recent: Unsupported userspace flags (000000b1) [ 365.405747][T13487] batadv_slave_1: entered promiscuous mode [ 365.443463][T13479] lo speed is unknown, defaulting to 1000 [ 365.464904][T13489] loop0: detected capacity change from 0 to 512 [ 365.468427][T13479] lo speed is unknown, defaulting to 1000 [ 365.489335][T13489] ext4: Unknown parameter 'uid' [ 365.508629][T13492] __nla_validate_parse: 4 callbacks suppressed [ 365.508662][T13492] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2392'. [ 365.524640][T13479] lo speed is unknown, defaulting to 1000 [ 365.940842][T13492] batadv_slave_1 (unregistering): left promiscuous mode [ 365.976173][T13500] lo speed is unknown, defaulting to 1000 [ 365.982264][T13500] lo speed is unknown, defaulting to 1000 [ 365.988477][T13500] lo speed is unknown, defaulting to 1000 [ 366.039592][T13503] team_slave_0: entered promiscuous mode [ 366.045272][T13503] team_slave_1: entered promiscuous mode [ 366.062358][T13503] vlan2: entered promiscuous mode [ 366.075928][T13503] team0: entered promiscuous mode [ 366.413962][ T28] audit: type=1400 audit(1772594397.813:4042): avc: denied { mount } for pid=13533 comm="syz.0.2410" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 366.517102][ T28] audit: type=1400 audit(1772594397.843:4043): avc: denied { unmount } for pid=13533 comm="syz.0.2410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 366.845276][T13597] lo speed is unknown, defaulting to 1000 [ 366.862816][T13597] lo speed is unknown, defaulting to 1000 [ 366.874459][T13597] lo speed is unknown, defaulting to 1000 [ 366.924070][T13610] netlink: 'syz.7.2444': attribute type 5 has an invalid length. [ 366.974853][ T28] audit: type=1326 audit(1772594398.372:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.7.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.038061][ T28] audit: type=1326 audit(1772594398.372:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.7.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.088271][ T28] audit: type=1326 audit(1772594398.412:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.7.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.149908][ T28] audit: type=1326 audit(1772594398.412:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.7.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.214482][ T28] audit: type=1326 audit(1772594398.412:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.7.2445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.267293][ T28] audit: type=1326 audit(1772594398.432:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13616 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.314996][ T28] audit: type=1326 audit(1772594398.432:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13616 comm="syz.7.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 367.609776][T13628] SELinux: syz.4.2451 (13628) set checkreqprot to 1. This is no longer supported. [ 367.659261][T13630] loop3: detected capacity change from 0 to 512 [ 367.690654][T13630] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 367.727265][T13630] EXT4-fs (loop3): 1 truncate cleaned up [ 367.739290][T13630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.029180][T13646] loop4: detected capacity change from 0 to 128 [ 368.042627][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.051353][T13647] vlan2: entered promiscuous mode [ 368.083454][T13646] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.232110][T13646] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 368.471743][T12016] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 369.127330][T13694] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 369.365697][T13697] netlink: 'syz.7.2473': attribute type 1 has an invalid length. [ 369.382269][T13694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.558178][T13697] 8021q: adding VLAN 0 to HW filter on device bond7 [ 369.591359][T13712] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.699084][T13719] geneve2: entered promiscuous mode [ 369.705720][T13714] loop0: detected capacity change from 0 to 256 [ 369.740534][T13714] FAT-fs (loop0): Directory bread(block 64) failed [ 369.747058][T13714] FAT-fs (loop0): Directory bread(block 65) failed [ 369.753879][T13714] FAT-fs (loop0): Directory bread(block 66) failed [ 369.760424][T13714] FAT-fs (loop0): Directory bread(block 67) failed [ 369.767028][T13714] FAT-fs (loop0): Directory bread(block 68) failed [ 369.773554][T13714] FAT-fs (loop0): Directory bread(block 69) failed [ 369.780163][T13714] FAT-fs (loop0): Directory bread(block 70) failed [ 369.786655][T13714] FAT-fs (loop0): Directory bread(block 71) failed [ 369.793215][T13714] FAT-fs (loop0): Directory bread(block 72) failed [ 369.799742][T13714] FAT-fs (loop0): Directory bread(block 73) failed [ 370.041049][T13743] x_tables: duplicate underflow at hook 3 [ 370.443826][T13761] loop0: detected capacity change from 0 to 1024 [ 370.488215][T13761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 370.515874][T13761] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.543690][ T28] kauditd_printk_skb: 190 callbacks suppressed [ 370.543798][ T28] audit: type=1400 audit(1772594401.950:4241): avc: denied { map } for pid=13756 comm="syz.0.2494" path="/419/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.156044][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 371.293001][T13793] loop0: detected capacity change from 0 to 1024 [ 371.323695][T13793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 ro without journal. Quota mode: none. [ 371.374615][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 371.711179][T13821] net_ratelimit: 31 callbacks suppressed [ 371.711195][T13821] IPv6: addrconf: prefix option has invalid lifetime [ 372.175342][T13838] loop0: detected capacity change from 0 to 2048 [ 372.222257][T13838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.447746][T13843] FAULT_INJECTION: forcing a failure. [ 372.447746][T13843] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 372.475668][T13843] CPU: 0 UID: 0 PID: 13843 Comm: syz.2.2522 Tainted: G W syzkaller #0 PREEMPT(full) [ 372.475703][T13843] Tainted: [W]=WARN [ 372.475728][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.475739][T13843] Call Trace: [ 372.475746][T13843] [ 372.475753][T13843] __dump_stack+0x1d/0x30 [ 372.475781][T13843] dump_stack_lvl+0x95/0xd0 [ 372.475809][T13843] dump_stack+0x15/0x1b [ 372.475834][T13843] should_fail_ex+0x263/0x280 [ 372.475867][T13843] should_fail_alloc_page+0xf2/0x100 [ 372.475939][T13843] __alloc_frozen_pages_noprof+0x108/0x360 [ 372.475973][T13843] alloc_pages_mpol+0xb3/0x260 [ 372.476019][T13843] ? anon_pipe_write+0xb1/0xb30 [ 372.476042][T13843] alloc_pages_noprof+0x8f/0x130 [ 372.476101][T13843] anon_pipe_write+0x69f/0xb30 [ 372.476122][T13843] ? anon_pipe_write+0xb1/0xb30 [ 372.476236][T13843] ? security_file_permission+0x22/0x70 [ 372.476281][T13843] aio_write+0x2fe/0x430 [ 372.476316][T13843] io_submit_one+0xbc1/0x1350 [ 372.476354][T13843] ? __pfx_aio_poll_queue_proc+0x10/0x10 [ 372.476396][T13843] __se_sys_io_submit+0xfb/0x280 [ 372.476440][T13843] __x64_sys_io_submit+0x43/0x50 [ 372.476497][T13843] x64_sys_call+0x19d5/0x3020 [ 372.476527][T13843] do_syscall_64+0x12c/0x370 [ 372.476555][T13843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.476578][T13843] RIP: 0033:0x7f02b078c799 [ 372.476620][T13843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.476654][T13843] RSP: 002b:00007f02af1e7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 372.476675][T13843] RAX: ffffffffffffffda RBX: 00007f02b0a05fa0 RCX: 00007f02b078c799 [ 372.476689][T13843] RDX: 0000200000000300 RSI: 000000000000f000 RDI: 00007f02af1b6000 [ 372.476703][T13843] RBP: 00007f02af1e7090 R08: 0000000000000000 R09: 0000000000000000 [ 372.476718][T13843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.476734][T13843] R13: 00007f02b0a06038 R14: 00007f02b0a05fa0 R15: 00007ffc5629a248 [ 372.476759][T13843] [ 372.768526][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.890682][T13858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2529'. [ 372.896175][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.909669][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.020811][ T28] audit: type=1326 audit(1772594404.429:4242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.057066][T13869] loop2: detected capacity change from 0 to 512 [ 373.064838][T13873] loop0: detected capacity change from 0 to 256 [ 373.075870][T13869] EXT4-fs (loop2): 1 truncate cleaned up [ 373.081944][T13873] FAT-fs (loop0): bogus sectors per cluster 158 [ 373.093043][ T28] audit: type=1326 audit(1772594404.429:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.135518][T13873] FAT-fs (loop0): Can't find a valid FAT filesystem [ 373.158901][T13869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.247972][ T28] audit: type=1326 audit(1772594404.449:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.274062][T13881] loop0: detected capacity change from 0 to 2048 [ 373.284629][ T28] audit: type=1326 audit(1772594404.449:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.291172][T13870] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2532'. [ 373.335615][ T28] audit: type=1326 audit(1772594404.449:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.344147][T13884] loop3: detected capacity change from 0 to 1024 [ 373.359836][T13881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.396773][ T28] audit: type=1326 audit(1772594404.449:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.421182][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.430704][ T28] audit: type=1326 audit(1772594404.449:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.454563][ T28] audit: type=1326 audit(1772594404.449:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.454932][T13884] EXT4-fs: Ignoring removed bh option [ 373.478190][ T28] audit: type=1326 audit(1772594404.449:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13868 comm="syz.2.2533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 373.529735][T13884] EXT4-fs: Ignoring removed nomblk_io_submit option [ 373.539623][T13884] ext4: Unknown parameter 'fowner<00000000000000000000' [ 373.581944][T13901] loop3: detected capacity change from 0 to 512 [ 373.594337][T13889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 373.595489][T13901] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.3.2541: corrupted xattr block 95: invalid header [ 373.607948][T13889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2539'. [ 373.629946][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.636548][T13901] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 373.639072][ T7959] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.640565][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 373.661576][T13901] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2541: bg 0: block 7: invalid block bitmap [ 373.663264][ C0] EXT4-fs (loop3): initial error at time 1772594405: ext4_expand_extra_isize_ea:2808: inode 11 [ 373.685816][ C0] EXT4-fs (loop3): last error at time 1772594405: ext4_expand_extra_isize_ea:2808: inode 11 [ 373.696453][ T7959] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.707189][T13901] loop3: lost filesystem error report for type 5 error -117 [ 373.707341][T13901] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 373.747578][ T7959] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.760028][ T7959] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 373.770074][T13901] loop3: lost filesystem error report for type 5 error -117 [ 373.770217][T13901] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2970: inode #11: comm syz.3.2541: corrupted xattr block 95: invalid header [ 373.817781][T13901] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 373.817927][T13901] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 373.836905][T13901] EXT4-fs (loop3): 1 orphan inode deleted [ 373.844491][T13901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.876877][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.988219][T13928] loop3: detected capacity change from 0 to 2048 [ 373.990532][T13932] loop2: detected capacity change from 0 to 512 [ 374.004869][T13932] journal_path: Non-blockdev passed as './file0' [ 374.012330][T13932] EXT4-fs: error: could not find journal device path [ 374.021633][T13928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.105962][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.192220][T13949] loop0: detected capacity change from 0 to 1024 [ 374.231518][T13949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.262500][T13949] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.0.2557: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 374.282517][T13949] EXT4-fs (loop0): Remounting filesystem read-only [ 374.302508][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.357351][T13956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.378205][T13956] ext4 filesystem being mounted at /435/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.399843][T13956] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 4: comm syz.0.2559: bad entry in directory: directory entry overrun - offset=108, inode=17, rec_len=253816, size=1024 fake=0 [ 374.439645][T13956] EXT4-fs (loop0): Remounting filesystem read-only [ 374.560403][T13973] FAULT_INJECTION: forcing a failure. [ 374.560403][T13973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.573759][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.3.2565 Tainted: G W syzkaller #0 PREEMPT(full) [ 374.573790][T13973] Tainted: [W]=WARN [ 374.573796][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.573884][T13973] Call Trace: [ 374.573890][T13973] [ 374.573898][T13973] __dump_stack+0x1d/0x30 [ 374.573926][T13973] dump_stack_lvl+0x95/0xd0 [ 374.573952][T13973] dump_stack+0x15/0x1b [ 374.573975][T13973] should_fail_ex+0x263/0x280 [ 374.574047][T13973] should_fail+0xb/0x20 [ 374.574066][T13973] should_fail_usercopy+0x1a/0x20 [ 374.574091][T13973] _copy_from_user+0x1c/0xb0 [ 374.574120][T13973] ___sys_recvmsg+0xaa/0x3b0 [ 374.574231][T13973] do_recvmmsg+0x1ef/0x560 [ 374.574265][T13973] ? fput+0x8f/0xc0 [ 374.574292][T13973] __x64_sys_recvmmsg+0xe5/0x170 [ 374.574323][T13973] x64_sys_call+0x80f/0x3020 [ 374.574361][T13973] do_syscall_64+0x12c/0x370 [ 374.574382][T13973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.574410][T13973] RIP: 0033:0x7f80ad1ac799 [ 374.574426][T13973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.574443][T13973] RSP: 002b:00007f80abbff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 374.574463][T13973] RAX: ffffffffffffffda RBX: 00007f80ad425fa0 RCX: 00007f80ad1ac799 [ 374.574477][T13973] RDX: 00000000000005df RSI: 0000200000000b40 RDI: 0000000000000003 [ 374.574490][T13973] RBP: 00007f80abbff090 R08: 0000000000000000 R09: 0000000000000000 [ 374.574528][T13973] R10: 0000000000002001 R11: 0000000000000246 R12: 0000000000000001 [ 374.574622][T13973] R13: 00007f80ad426038 R14: 00007f80ad425fa0 R15: 00007ffcd5b05e58 [ 374.574643][T13973] [ 374.818123][T13982] syz_tun: entered allmulticast mode [ 374.824309][T13982] veth1_to_team: entered allmulticast mode [ 374.832747][T13981] syz_tun: left allmulticast mode [ 375.414290][T14001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.477653][T14001] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.4.2576: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 375.501067][T14001] EXT4-fs (loop4): Remounting filesystem read-only [ 375.560202][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.587369][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.634613][T14007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.649211][T14007] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.666077][T14007] netlink: 'syz.0.2578': attribute type 3 has an invalid length. [ 375.676194][T14011] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.698733][T14017] FAULT_INJECTION: forcing a failure. [ 375.698733][T14017] name failslab, interval 1, probability 0, space 0, times 0 [ 375.721313][T14017] CPU: 0 UID: 0 PID: 14017 Comm: syz.4.2581 Tainted: G W syzkaller #0 PREEMPT(full) [ 375.721408][T14017] Tainted: [W]=WARN [ 375.721416][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.721429][T14017] Call Trace: [ 375.721437][T14017] [ 375.721444][T14017] __dump_stack+0x1d/0x30 [ 375.721480][T14017] dump_stack_lvl+0x95/0xd0 [ 375.721505][T14017] dump_stack+0x15/0x1b [ 375.721593][T14017] should_fail_ex+0x263/0x280 [ 375.721646][T14017] should_failslab+0x8c/0xb0 [ 375.721667][T14017] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 375.721757][T14017] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 375.721807][T14017] hugetlbfs_alloc_inode+0xbc/0x100 [ 375.721838][T14017] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 375.721988][T14017] alloc_inode+0x40/0x170 [ 375.722077][T14017] new_inode+0x1d/0xe0 [ 375.722143][T14017] hugetlbfs_get_inode+0x7b/0x380 [ 375.722172][T14017] hugetlb_file_setup+0x1e9/0x3d0 [ 375.722198][T14017] newseg+0x33d/0x680 [ 375.722261][T14017] ipcget+0x33d/0x4f0 [ 375.722288][T14017] ? mutex_lock+0x57/0x90 [ 375.722314][T14017] ? mutex_unlock+0x4e/0x90 [ 375.722339][T14017] ? fput+0x8f/0xc0 [ 375.722419][T14017] __x64_sys_shmget+0xb8/0xe0 [ 375.722447][T14017] x64_sys_call+0x2d2a/0x3020 [ 375.722474][T14017] do_syscall_64+0x12c/0x370 [ 375.722539][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.722560][T14017] RIP: 0033:0x7f63e1dfc799 [ 375.722576][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.722592][T14017] RSP: 002b:00007f63e0857028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 375.722648][T14017] RAX: ffffffffffffffda RBX: 00007f63e2075fa0 RCX: 00007f63e1dfc799 [ 375.722663][T14017] RDX: 0000000000000800 RSI: 0000000000004000 RDI: 0000000000000000 [ 375.722676][T14017] RBP: 00007f63e0857090 R08: 0000000000000000 R09: 0000000000000000 [ 375.722730][T14017] R10: 0000200000007000 R11: 0000000000000246 R12: 0000000000000001 [ 375.722743][T14017] R13: 00007f63e2076038 R14: 00007f63e2075fa0 R15: 00007ffd2b9983a8 [ 375.722760][T14017] [ 375.727123][T14011] EXT4-fs error (device loop3): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.3.2580: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 375.809423][T14019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.864368][T14011] EXT4-fs (loop3): Remounting filesystem read-only [ 375.913405][T14022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.009859][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.087491][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.223429][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.295900][ T28] kauditd_printk_skb: 572 callbacks suppressed [ 376.295989][ T28] audit: type=1326 audit(1772594407.698:4823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 376.360065][ T28] audit: type=1326 audit(1772594407.728:4824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 376.385485][ T28] audit: type=1326 audit(1772594407.728:4825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 376.422883][ T28] audit: type=1326 audit(1772594407.728:4826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 376.427901][T14047] set_capacity_and_notify: 6 callbacks suppressed [ 376.427918][T14047] loop4: detected capacity change from 0 to 128 [ 376.462039][ T28] audit: type=1326 audit(1772594407.728:4827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14044 comm="syz.4.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63e1dfc799 code=0x7ffc0000 [ 376.502661][T14040] loop2: detected capacity change from 0 to 32768 [ 376.524766][T14047] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 376.525657][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.541590][T14047] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 376.604965][ T6475] loop2: p1 p2 p3 < p5 p6 > [ 376.610612][ T6475] loop2: p2 size 16775168 extends beyond EOD, truncated [ 376.632447][ T6475] loop2: p5 start 4294970168 is beyond EOD, truncated [ 376.646581][T12016] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 376.653616][T14040] loop2: p1 p2 p3 < p5 p6 > [ 376.660943][T14040] loop2: p2 size 16775168 extends beyond EOD, truncated [ 376.670992][T14040] loop2: p5 start 4294970168 is beyond EOD, truncated [ 376.690847][T14057] lo speed is unknown, defaulting to 1000 [ 376.697616][T14057] lo speed is unknown, defaulting to 1000 [ 376.726632][T14057] lo speed is unknown, defaulting to 1000 [ 376.901568][T14067] netlink: 'syz.4.2595': attribute type 1 has an invalid length. [ 376.975888][T14064] loop3: detected capacity change from 0 to 512 [ 377.160445][ T6475] udevd[6475]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 377.171174][ T7664] udevd[7664]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 377.186704][ T6866] udevd[6866]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 377.197486][ T6408] udevd[6408]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 377.290860][T14071] loop2: detected capacity change from 0 to 128 [ 377.297533][T14071] EXT4-fs: Ignoring removed orlov option [ 377.313206][T14071] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.325549][T14071] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.341986][ T28] audit: type=1326 audit(1772594408.737:4828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.7.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 377.366400][ T28] audit: type=1326 audit(1772594408.767:4829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.7.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 377.391518][ T28] audit: type=1326 audit(1772594408.767:4830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.7.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 377.418579][ T28] audit: type=1326 audit(1772594408.767:4831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14075 comm="syz.7.2600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96d282c799 code=0x7ffc0000 [ 377.875518][T14095] lo speed is unknown, defaulting to 1000 [ 377.881669][T14095] lo speed is unknown, defaulting to 1000 [ 377.887935][T14095] lo speed is unknown, defaulting to 1000 [ 377.902016][ T28] audit: type=1326 audit(1772594409.297:4832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14110 comm="syz.0.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9817d4c799 code=0x7ffc0000 [ 378.023508][T14114] loop4: detected capacity change from 0 to 1024 [ 378.081035][T14114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 378.089279][T14114] System zones: 0-1, 3-36 [ 378.096251][T14114] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2609: bad orphan inode 134217728 [ 378.106904][T14114] loop4: lost filesystem error report for type 5 error -117 [ 378.108652][T14114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.217355][T10521] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.237658][ T8125] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.306188][ T8125] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.403997][ T8125] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.434170][T14095] chnl_net:caif_netlink_parms(): no params data found [ 378.468513][ T8125] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.515913][T14095] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.523150][T14095] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.530584][T14095] bridge_slave_0: entered allmulticast mode [ 378.537395][T14095] bridge_slave_0: entered promiscuous mode [ 378.544313][T14095] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.551537][T14095] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.558965][T14095] bridge_slave_1: entered allmulticast mode [ 378.565477][T14095] bridge_slave_1: entered promiscuous mode [ 378.589292][T14095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.611006][T14095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.679736][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.701607][T14095] team0: Port device team_slave_0 added [ 378.708308][T14095] team0: Port device team_slave_1 added [ 378.791052][T14095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.803052][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.829143][T14095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.841576][T14095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.848725][T14095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.874817][T14095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.020430][T14167] loop0: detected capacity change from 0 to 1024 [ 379.038576][T14167] EXT4-fs: Ignoring removed nobh option [ 379.060473][T14167] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 379.082704][T14167] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 379.101959][T14167] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.2629: lblock 2 mapped to illegal pblock 2 (length 1) [ 379.133109][T14167] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.133251][T14167] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.2629: lblock 0 mapped to illegal pblock 48 (length 1) [ 379.133353][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 379.162866][ C1] EXT4-fs (loop0): initial error at time 1772594410: ext4_map_blocks:776: inode 3: block 2 [ 379.172917][ C1] EXT4-fs (loop0): last error at time 1772594410: ext4_map_blocks:776: inode 3: block 2 [ 379.183980][T14167] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.184201][T14167] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.2629: Failed to acquire dquot type 0 [ 379.204944][ T8125] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 379.205015][T14167] loop0: lost filesystem error report for type 5 error -117 [ 379.222422][T14167] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 379.239491][T14167] loop0: lost filesystem error report for type 5 error -117 [ 379.240658][T14167] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.2629: mark_inode_dirty error [ 379.259301][T14167] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.259415][T14167] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 379.278826][T14167] EXT4-fs (loop0): 1 orphan inode deleted [ 379.285134][T14167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.297970][ T7941] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 379.314873][ T8125] bond0 (unregistering): Released all slaves [ 379.321006][ T7941] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 379.323214][ T8125] bond1 (unregistering): Released all slaves [ 379.341821][ T8125] bond2 (unregistering): Released all slaves [ 379.349693][ T8125] bond3 (unregistering): Released all slaves [ 379.358179][ T8125] bond4 (unregistering): Released all slaves [ 379.366458][ T8125] bond5 (unregistering): Released all slaves [ 379.374932][ T8125] bond6 (unregistering): Released all slaves [ 379.382945][ T8125] bond7 (unregistering): Released all slaves [ 379.393403][T14095] hsr_slave_0: entered promiscuous mode [ 379.399431][T14095] hsr_slave_1: entered promiscuous mode [ 379.405381][T14095] debugfs: 'hsr0' already exists in 'hsr' [ 379.411100][T14095] Cannot create hsr debugfs directory [ 379.519192][ T8125] hsr_slave_0: left promiscuous mode [ 379.526864][ T8125] hsr_slave_1: left promiscuous mode [ 379.542803][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.562638][ T7959] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 379.576891][ T7959] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.577040][ T7959] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0 [ 379.602162][ T7959] loop0: lost filesystem error report for type 5 error -117 [ 379.603485][ T5388] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 379.624013][ T5388] loop0: lost filesystem error report for type 5 error -117 [ 379.624325][ T5388] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 379.652017][ T8125] veth1_to_team (unregistering): left allmulticast mode [ 379.661476][ T5388] loop0: lost filesystem error report for type 5 error -117 [ 379.663086][ T5388] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 379.683108][ T5388] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 379.712463][ T8125] team0 (unregistering): Port device dummy0 removed [ 379.739125][T14210] loop0: detected capacity change from 0 to 256 [ 379.819155][T14219] loop2: detected capacity change from 0 to 128 [ 379.837862][T14219] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.852259][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2636'. [ 379.855907][T14219] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.867217][T14215] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2636'. [ 379.942930][T10521] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.971720][T14233] loop0: detected capacity change from 0 to 1024 [ 379.990243][T14233] EXT4-fs: Ignoring removed nobh option [ 379.998798][T14233] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 380.032610][T14233] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 380.064469][T14233] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.2641: lblock 2 mapped to illegal pblock 2 (length 1) [ 380.069857][T14095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 380.078910][T14233] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 380.086590][T14233] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.2641: lblock 0 mapped to illegal pblock 48 (length 1) [ 380.095660][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 380.095713][ C0] EXT4-fs (loop0): initial error at time 1772594411: ext4_map_blocks:776: inode 3: block 2 [ 380.095752][ C0] EXT4-fs (loop0): last error at time 1772594411: ext4_map_blocks:776: inode 3: block 2 [ 380.097883][T14095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 380.133852][T14233] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 380.146887][T14233] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.2641: Failed to acquire dquot type 0 [ 380.176135][T14233] loop0: lost filesystem error report for type 5 error -117 [ 380.176268][T14233] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 380.177649][T14095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 380.184114][T14233] loop0: lost filesystem error report for type 5 error -117 [ 380.199774][T14233] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.2641: mark_inode_dirty error [ 380.218399][T14233] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 380.218566][T14233] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 380.240444][T14095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 380.252261][T14233] EXT4-fs (loop0): 1 orphan inode deleted [ 380.255294][ T8125] IPVS: stop unused estimator thread 0... [ 380.263949][ T7941] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 380.279796][ T7941] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 380.280038][ T7941] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 380.289425][T14233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.308755][ T7941] loop0: lost filesystem error report for type 5 error -117 [ 380.374883][T14095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.405271][T14278] loop3: detected capacity change from 0 to 1024 [ 380.415291][T14278] EXT4-fs: Ignoring removed orlov option [ 380.416416][T14095] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.430497][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.437642][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.453776][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.460867][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.464183][T14278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.536296][T14095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.588535][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.604225][ T7957] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 380.619214][ T7957] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 380.619313][ T7957] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 380.646742][ T7957] loop0: lost filesystem error report for type 5 error -117 [ 380.647033][ T5388] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 380.680861][ T5388] loop0: lost filesystem error report for type 5 error -117 [ 380.681013][ T5388] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 380.712064][ T5388] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 380.773726][T14301] EXT4-fs: Ignoring removed nobh option [ 380.790478][T14301] EXT4-fs (loop0): 1 orphan inode deleted [ 380.799010][T14301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.823643][T14278] lo speed is unknown, defaulting to 1000 [ 380.830056][T14095] veth0_vlan: entered promiscuous mode [ 380.837771][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.840334][T14095] veth1_vlan: entered promiscuous mode [ 380.861505][T14278] lo speed is unknown, defaulting to 1000 [ 380.873102][T14095] veth0_macvtap: entered promiscuous mode [ 380.982253][T14316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2655'. [ 380.995543][T14095] veth1_macvtap: entered promiscuous mode [ 381.006945][T14278] lo speed is unknown, defaulting to 1000 [ 381.016519][T14316] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2655'. [ 381.042590][T14095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.073092][T14095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.102184][ T7177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.112642][ T7177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.146625][ T7177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.173196][ T7177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.327043][T14332] EXT4-fs: Ignoring removed nobh option [ 381.345435][T14332] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 381.402434][T14332] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 381.413515][T14338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2661'. [ 381.439072][T14332] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.2659: lblock 2 mapped to illegal pblock 2 (length 1) [ 381.445039][T14338] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2661'. [ 381.494614][T14332] __quota_error: 224 callbacks suppressed [ 381.494632][T14332] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 381.508474][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 381.508510][ C0] EXT4-fs (loop2): initial error at time 1772594412: ext4_map_blocks:776: inode 3: block 2 [ 381.508546][ C0] EXT4-fs (loop2): last error at time 1772594412: ext4_map_blocks:776: inode 3: block 2 [ 381.654524][T14332] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.2659: lblock 0 mapped to illegal pblock 48 (length 1) [ 381.703344][ T28] audit: type=1326 audit(1772594926.099:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.7.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c70f9c799 code=0x7ffc0000 [ 381.709940][T14332] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 381.752122][ T28] audit: type=1326 audit(1772594926.099:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.7.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c70f9c799 code=0x7ffc0000 [ 381.817993][ T28] audit: type=1326 audit(1772594926.099:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.7.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f5c70f9c799 code=0x7ffc0000 [ 381.834683][T14332] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2659: Failed to acquire dquot type 0 [ 381.878948][ T28] audit: type=1326 audit(1772594926.099:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.7.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c70f9c799 code=0x7ffc0000 [ 381.903543][T14332] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 381.933434][T14332] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.2659: mark_inode_dirty error [ 381.950251][ T28] audit: type=1326 audit(1772594926.099:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14348 comm="syz.7.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c70f9c799 code=0x7ffc0000 [ 381.976139][T14332] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 382.001909][T14332] EXT4-fs (loop2): 1 orphan inode deleted [ 382.009143][T14332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.021442][ T7959] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 382.037444][ T7959] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 382.047712][ T7959] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0 [ 382.199233][T14358] 8021q: VLANs not supported on vcan0 [ 382.279943][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.289310][ T7959] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 382.311273][ T7959] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 382.311370][T14366] syzkaller1: entered promiscuous mode [ 382.335121][ T7959] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 0 [ 382.339457][T14366] syzkaller1: entered allmulticast mode [ 382.359105][T10521] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 382.393138][T10521] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 382.413504][T10521] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 382.457170][T14368] netlink: 'syz.2.2672': attribute type 6 has an invalid length. [ 382.457248][T14369] netlink: 'syz.2.2672': attribute type 6 has an invalid length. [ 382.485403][T14368] netlink: 'syz.2.2672': attribute type 6 has an invalid length. [ 382.503716][T14368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2672'. [ 382.590020][T14371] lo speed is unknown, defaulting to 1000 [ 382.602012][T14375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2676'. [ 382.614395][ T7177] Bluetooth: hci0: Frame reassembly failed (-84) [ 382.614676][T14371] lo speed is unknown, defaulting to 1000 [ 382.638441][T14371] lo speed is unknown, defaulting to 1000 [ 383.805988][T14392] set_capacity_and_notify: 2 callbacks suppressed [ 383.806007][T14392] loop4: detected capacity change from 0 to 1024 [ 383.845715][T14394] loop0: detected capacity change from 0 to 512 [ 383.855215][T14392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.870144][T14392] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.4.2681: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 383.894360][T14392] EXT4-fs (loop4): Remounting filesystem read-only [ 383.900996][T14394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 383.926776][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.946243][T14394] System zones: 1-20 [ 383.955794][T14394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.004371][T14394] syz_tun: entered allmulticast mode [ 384.018595][T14394] veth1_to_team: entered allmulticast mode [ 384.043164][T14394] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 384.051724][T14394] mroute: pending queue full, dropping entries [ 384.136431][T14393] syz_tun: left allmulticast mode [ 384.168516][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.338973][T14408] loop4: detected capacity change from 0 to 8192 [ 384.401196][ T7664] loop4: p1 p2 p3 p4 [ 384.409558][ T7664] loop4: p1 size 134430464 extends beyond EOD, truncated [ 384.426738][ T7664] loop4: p3 size 100663552 extends beyond EOD, truncated [ 384.434897][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.444491][ T7664] loop4: p4 size 8388352 extends beyond EOD, truncated [ 384.475682][T14408] loop4: p1 p2 p3 p4 [ 384.491744][T14411] loop3: detected capacity change from 0 to 1024 [ 384.491833][T14408] loop4: p1 size 134430464 extends beyond EOD, [ 384.500875][T14411] EXT4-fs: Ignoring removed oldalloc option [ 384.522476][T14408] truncated [ 384.537580][T14408] loop4: p3 size 100663552 extends beyond EOD, truncated [ 384.544810][T14411] EXT4-fs: Ignoring removed bh option [ 384.556972][T14408] loop4: p4 size 8388352 extends beyond EOD, truncated [ 384.577085][T14411] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.699449][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 384.705518][ T4867] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 384.732344][ T7664] udevd[7664]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 384.732454][ T6408] udevd[6408]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 384.752330][ T6475] udevd[6475]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 384.766249][ T6866] udevd[6866]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 384.797880][ T6866] udevd[6866]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 384.797972][ T7664] udevd[7664]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 384.808993][ T6408] udevd[6408]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 384.829201][ T6475] udevd[6475]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 384.862723][T14426] netlink: 'syz.7.2691': attribute type 5 has an invalid length. [ 384.874287][T14426] geneve2: entered promiscuous mode [ 385.099360][T14436] loop0: detected capacity change from 0 to 1024 [ 385.112998][T14436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.127983][T14436] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.0.2694: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 385.149050][T14436] EXT4-fs (loop0): Remounting filesystem read-only [ 385.166920][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.266702][T14441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65524 sclass=netlink_route_socket pid=14441 comm=syz.0.2695 [ 385.284673][T14445] loop2: detected capacity change from 0 to 512 [ 385.293451][T14441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65524 sclass=netlink_route_socket pid=14441 comm=syz.0.2695 [ 385.330205][T14445] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 385.346056][T14445] System zones: 1-20 [ 385.353062][T14445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.380689][T14449] loop0: detected capacity change from 0 to 2048 [ 385.385208][T14445] syz_tun: entered allmulticast mode [ 385.395304][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.405439][T14445] veth1_to_team: entered allmulticast mode [ 385.410387][T14449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.412142][T14445] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 385.431855][T14445] mroute: pending queue full, dropping entries [ 385.453271][T14444] syz_tun: left allmulticast mode [ 385.470899][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.493104][ T28] audit: type=1326 audit(1772594929.803:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14454 comm="syz.2.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 385.535542][T14455] loop2: detected capacity change from 0 to 512 [ 385.563136][T14455] EXT4-fs (loop2): 1 truncate cleaned up [ 385.580120][ T5388] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.585371][T14455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.658544][T14466] netlink: 'syz.4.2702': attribute type 5 has an invalid length. [ 385.754047][T14470] loop0: detected capacity change from 0 to 128 [ 385.911976][ T7957] Bluetooth: hci0: Frame reassembly failed (-84) [ 385.958997][T10521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.987840][T14486] syzkaller1: entered promiscuous mode [ 386.993591][T14486] syzkaller1: entered allmulticast mode [ 387.664984][T14495] netlink: 'syz.7.2707': attribute type 9 has an invalid length. [ 387.672778][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2707'. [ 387.725369][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 387.725457][ T28] audit: type=1400 audit(1772594931.975:5119): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.163 src=32836 daddr=10.128.0.7 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 387.763901][T14503] loop7: detected capacity change from 0 to 1764 [ 387.785666][ T28] audit: type=1400 audit(1772594932.034:5120): avc: denied { mount } for pid=14479 comm="syz.7.2707" name="/" dev="loop7" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 387.874261][T14506] ipvlan0: entered promiscuous mode [ 387.879644][T14506] ipvlan0: entered allmulticast mode [ 387.888339][T14506] gretap0: entered allmulticast mode [ 387.895620][T14506] team0: Device ipvlan0 failed to register rx_handler [ 387.984879][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 388.001894][ T4867] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.047427][T14512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.073430][T14512] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.4.2716: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 388.093689][T14512] EXT4-fs (loop4): Remounting filesystem read-only [ 388.115145][T12016] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.195301][ T28] audit: type=1400 audit(1772594932.434:5121): avc: denied { unmount } for pid=14095 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 388.230051][T14522] netlink: 88 bytes leftover after parsing attributes in process `syz.7.2718'. [ 388.376619][T14524] bond_slave_0: entered promiscuous mode [ 388.383553][T14524] bond_slave_1: entered promiscuous mode [ 388.390095][T14524] vlan2: entered promiscuous mode [ 388.395524][T14524] bond0: entered promiscuous mode [ 388.571407][T14532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.792831][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.973644][T14556] set_capacity_and_notify: 3 callbacks suppressed [ 389.973662][T14556] loop7: detected capacity change from 0 to 1024 [ 389.988150][T14556] EXT4-fs: Ignoring removed nobh option [ 389.994742][T14556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 390.040985][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 390.070308][T14558] netlink: 340 bytes leftover after parsing attributes in process `syz.2.2730'. [ 390.102632][T14558] loop2: detected capacity change from 0 to 512 [ 390.136705][T14555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2729'. [ 390.147746][T14558] EXT4-fs: Ignoring removed oldalloc option [ 390.168846][T14558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 390.204501][T14558] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2730: iget: bad i_size value: 38620345925642 [ 390.245867][T14558] fserror_report: 7 callbacks suppressed [ 390.245940][T14558] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 390.275565][T14558] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2730: couldn't read orphan inode 15 (err -117) [ 390.296538][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 390.296555][ C0] EXT4-fs (loop2): initial error at time 1772594934: ext4_orphan_get:1391: inode 15 [ 390.296579][ C0] EXT4-fs (loop2): last error at time 1772594934: ext4_orphan_get:1391: inode 15 [ 390.397380][T14560] lo speed is unknown, defaulting to 1000 [ 390.424347][T14560] lo speed is unknown, defaulting to 1000 [ 390.442455][T14560] lo speed is unknown, defaulting to 1000 [ 390.457206][T14558] fserror_report: 6 callbacks suppressed [ 390.457292][T14558] loop2: lost filesystem error report for type 5 error -117 [ 390.484366][T14558] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.672692][T14556] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 390.717646][T14556] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 2: comm syz.7.2728: lblock 2 mapped to illegal pblock 2 (length 1) [ 390.754952][T14556] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 390.755172][T14556] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 390.772292][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 390.772311][ C1] EXT4-fs (loop7): initial error at time 1772594934: ext4_map_blocks:776: inode 3: block 2 [ 390.772367][ C1] EXT4-fs (loop7): last error at time 1772594934: ext4_map_blocks:776: inode 3: block 2 [ 390.798573][T14556] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 48: comm syz.7.2728: lblock 0 mapped to illegal pblock 48 (length 1) [ 390.812722][T14556] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 390.812939][T14556] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 390.830836][T14556] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2728: Failed to acquire dquot type 0 [ 390.842511][T14556] loop7: lost filesystem error report for type 5 error -117 [ 390.842688][T14556] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 390.867153][T14556] loop7: lost filesystem error report for type 5 error -117 [ 390.867322][T14556] EXT4-fs error (device loop7): ext4_evict_inode:255: inode #11: comm syz.7.2728: mark_inode_dirty error [ 390.894529][T14556] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 390.894685][T14556] EXT4-fs warning (device loop7): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 390.915130][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2731'. [ 390.926897][T14577] batadv_slave_0: entered promiscuous mode [ 390.937588][T14556] EXT4-fs (loop7): 1 orphan inode deleted [ 390.937732][T14576] loop4: detected capacity change from 0 to 512 [ 390.943943][T14556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.962345][T14577] batadv_slave_0: left promiscuous mode [ 390.968037][ T7943] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 390.970342][ T7955] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:15: bg 0: block 5: invalid block bitmap [ 390.983950][ T7943] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.011891][ T7943] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 391.037235][ T7943] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 0 [ 391.051538][ T7955] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 391.066087][T14576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.111862][T14576] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.125624][ T7955] EXT4-fs (loop2): This should not happen!! Data will be lost [ 391.125624][ T7955] [ 391.142464][ T7955] EXT4-fs (loop2): Total free blocks count 0 [ 391.148646][T14576] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2732: corrupted xattr block 32: bad e_name length [ 391.162335][ T7955] EXT4-fs (loop2): Free/Dirty block details [ 391.168527][ T7955] EXT4-fs (loop2): free_blocks=0 [ 391.175183][ T7955] EXT4-fs (loop2): dirty_blocks=5608 [ 391.175456][T14576] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 391.180477][ T7955] EXT4-fs (loop2): Block reservation details [ 391.197300][ T7955] EXT4-fs (loop2): i_reserved_data_blocks=5608 [ 391.210377][ T7177] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 391.223659][T14576] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2732: corrupted xattr block 32: bad e_name length [ 391.314337][T14586] loop3: detected capacity change from 0 to 2048 [ 391.368845][T14576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.389294][T14586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.525898][T14095] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.540480][ T7943] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 391.590629][ T7943] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.590810][ T7943] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 391.601868][T14595] netlink: 'syz.4.2737': attribute type 5 has an invalid length. [ 391.632125][ T7943] EXT4-fs error (device loop7): ext4_release_dquot:7037: comm kworker/u8:13: Failed to release dquot type 0 [ 391.653738][ T7943] loop7: lost filesystem error report for type 5 error -117 [ 391.662723][T14095] EXT4-fs error (device loop7): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 391.687933][T14095] loop7: lost filesystem error report for type 5 error -117 [ 391.688115][T14095] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 391.705467][T14095] loop7: lost filesystem error report for type 5 error -117 [ 391.705657][T14095] EXT4-fs error (device loop7): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 391.723876][T14602] geneve2: left promiscuous mode [ 391.740099][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.749657][ T28] audit: type=1326 audit(1772594935.920:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 391.755042][T14095] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 391.794627][ T28] audit: type=1326 audit(1772594935.920:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 391.834752][T14610] loop3: detected capacity change from 0 to 512 [ 391.846275][T14602] loop4: detected capacity change from 0 to 128 [ 391.859797][ T28] audit: type=1326 audit(1772594935.920:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14603 comm="syz.2.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f02b078c799 code=0x7ffc0000 [ 391.862913][T14602] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 391.894116][T14610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 391.946945][T14610] System zones: 1-20 [ 391.974816][T14602] syzkaller0: entered promiscuous mode [ 391.978730][T14610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.980377][T14602] syzkaller0: entered allmulticast mode [ 392.014416][T14602] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 392.025020][T14616] loop7: detected capacity change from 0 to 512 [ 392.082417][T14616] EXT4-fs (loop7): Invalid default hash set in the superblock [ 392.098094][T14616] ================================================================== [ 392.106288][T14616] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 392.113855][T14616] [ 392.116186][T14616] read-write to 0xffff888237d26668 of 1 bytes by task 14602 on cpu 1: [ 392.124332][T14616] folio_add_lru+0xa4/0x1e0 [ 392.128841][T14616] shmem_get_folio_gfp+0x7b0/0xd60 [ 392.133967][T14616] shmem_write_begin+0xfc/0x1f0 [ 392.138830][T14616] generic_perform_write+0x183/0x490 [ 392.144128][T14616] shmem_file_write_iter+0xc5/0xf0 [ 392.144517][T14608] bond_slave_0: entered promiscuous mode [ 392.149254][T14616] do_iter_readv_writev+0x4fd/0x5a0 [ 392.149280][T14616] vfs_writev+0x2e1/0x900 [ 392.149306][T14616] __se_sys_pwritev2+0xfc/0x1c0 [ 392.149330][T14616] __x64_sys_pwritev2+0x67/0x80 [ 392.149354][T14616] x64_sys_call+0xe07/0x3020 [ 392.149387][T14616] do_syscall_64+0x12c/0x370 [ 392.149408][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.149432][T14616] [ 392.149439][T14616] read to 0xffff888237d26668 of 1 bytes by task 14616 on cpu 0: [ 392.149459][T14616] __lru_add_drain_all+0x17e/0x450 [ 392.149488][T14616] lru_add_drain_all+0x10/0x20 [ 392.149515][T14616] invalidate_bdev+0x47/0x70 [ 392.149536][T14616] ext4_fill_super+0x2cf6/0x37c0 [ 392.149561][T14616] get_tree_bdev_flags+0x291/0x300 [ 392.149599][T14616] get_tree_bdev+0x1f/0x30 [ 392.149635][T14616] ext4_get_tree+0x1c/0x30 [ 392.149655][T14616] vfs_get_tree+0x57/0x1d0 [ 392.149691][T14616] do_new_mount+0x288/0x8d0 [ 392.149714][T14616] path_mount+0x4d0/0xbc0 [ 392.149735][T14616] __se_sys_mount+0x28c/0x2e0 [ 392.149760][T14616] __x64_sys_mount+0x67/0x80 [ 392.149785][T14616] x64_sys_call+0x2d61/0x3020 [ 392.149815][T14616] do_syscall_64+0x12c/0x370 [ 392.149832][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.155687][T14608] bond_slave_1: entered promiscuous mode [ 392.160657][T14616] [ 392.160664][T14616] value changed: 0x15 -> 0x16 [ 392.160676][T14616] [ 392.160680][T14616] Reported by Kernel Concurrency Sanitizer on: [ 392.160696][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.7.2738 Tainted: G W syzkaller #0 PREEMPT(full) [ 392.160732][T14616] Tainted: [W]=WARN [ 392.160741][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.160756][T14616] ================================================================== [ 392.334917][T14608] vlan2: entered promiscuous mode [ 392.340344][T14608] bond0: entered promiscuous mode [ 392.378065][T14621] veth1_to_team: entered allmulticast mode [ 392.383943][T14620] syz_tun: entered allmulticast mode [ 392.396094][T14609] syz_tun: left allmulticast mode [ 392.418633][ T9873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.