last executing test programs: 9m17.46536972s ago: executing program 32 (id=269): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40003, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) socket(0x28, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0xa, 0x40) accept4$unix(r0, 0x0, 0x0, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f0000", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 8m58.144464067s ago: executing program 33 (id=619): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x290000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@newsa={0x148, 0x10, 0x831, 0x870bd2f, 0x0, {{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x100, 0xecdf, 0x0, 0x0, 0x2}, {@in=@broadcast, 0x0, 0x32}, @in=@local, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x7f, 0x0, 0xffffffff80000001}, {0x2, 0x400800}, {0x0, 0x0, 0x9}, 0x0, 0x0, 0x2, 0x4, 0x3, 0x2c}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x4}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 8m46.811252749s ago: executing program 34 (id=783): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a110000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 8m42.722146801s ago: executing program 35 (id=855): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020201000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 7m50.684310479s ago: executing program 36 (id=1652): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000030002000100000008000100", @ANYRES32=r2, @ANYBLOB="4c00088048000080200004000a004e210000dfffffff00000000bdd3bff7f7a852ef00010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYRES8=r4], 0x28}}, 0x24000004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xff, 0x32}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0xc004) 7m46.600916531s ago: executing program 37 (id=1531): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x1200, 0x0, 0x0, &(0x7f0000000840), 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000340)="1637557fdec2d01e2cdf62c60f636af15af2c5113f95d69ac4da565de83577d9c222968a320ebe5d1a97ee13988e6fff4ce5eec69a0549d64a22b5d62074556ec19e770fedf45b45afd46422148616db4649433c435c71f451fa2dc803f1a2e2224bba027859e1476c966ad0cf6e75f49975277f66ea0ed271eb508a24cfa5df59629d", 0x83}, {&(0x7f00000009c0)="13461fb90d5ddb48f350b9eb83df929d7427fe92cd9d21f079817bd670aa857c5674a524d4097b00d315b75523bab7887b6bc5e6fdf083654eb2adeb1937a06b3188396f9fdeedfff300974410faa54d7fb3815756cef2adb5fe85f84b11c9863ee130f16c574f516a3831b8b25ce6ff510bfda428b3f5c27634405479378cd2cf00043d11f43b78f4482cdb", 0x8a}, {&(0x7f0000000480)="3d3b7b9df3d70d55d31b1ea30da859d8afbf9139530a56b25930f1a478c98e883521d10537f066fe2dec6cc8764a883c90fbab4ae6d3c206c23abfb053a9316a1e5296a088d4e01e74824b3a5176c85f0c233087a119353dd7c1a87ec64027855745117ecd603fe9abcedf95afda0101000000000000cb42e2b18641d891ade78cd908e876", 0x85}, {&(0x7f0000000600)="c0701ab170238cc61bbb5d977395dcf2fbacab23897312b046c942399a62276ed0d28c28ef924bd2de8ec2ce1f8f8bb919dd4faeec713a4d54532cebf12e27fdc7239da8a8f36f8b2317fe2b7ed8e978ce17a79b93b9847b19f25595da695460a35115d7339c7e1f2476671fc17faf2c4f63e0e8520db0d57a8dccb0839b3b6c6194c7142753797cc017646597f87a67001ef182f12093dd5d5095d0815eaa5690572fa4c437b81f942394b50a8a66215889adf51e93cbabe033078cec7c2c", 0xbf}, {&(0x7f0000000540)="b1bdc0b11e73a970179c59f9ed989c4b752c408741965f5364b90c20e1375199dc71df1e2a8674d83bcb06acac3fdd8d64783bb85097eec87e7beda176e6df68ac9e9a3566fc7b38c552a256979f2e820f92c15d17e80ccb8fc2b9881bf2cd42f5ee5fccd083a498c46f019d53ca51f21d", 0x7d}, {&(0x7f00000006c0)="ec2c194b252d9feffd01adb252772d525c4820c53e7d7516fecddc21863b0c837083d243d10b895a20dc78400edaa2e857d4350476352778dd7b5e361fb3f82434109bfae611a43ed624d27438e96452e0c68cd0b086670c16a7314891b7978ca12bb52fb7435296", 0x68}, {&(0x7f0000000740)="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", 0xfe}, {&(0x7f0000000840)="f03aab0618c543b45b361b3b0fbb92a6dfc3a5acbab839f0a829841e2c13c5f2a66cfc1450b37ed91f1db98deacf8c78751c0f202b9b2a4691bce0d94c193a1f41c5e06d19f773138aa503eece4edfa53ce0a36877be41eac20e166eb8639297e7028df38e3c833cfce8fd218f0364d940746f8e6fd6149a25fee17b128caab511aba9f65f529f7224b5efc7dc0c1753318440511efd92d21d1cc222bd3bf3b9ebf0f3ae951bbc20e3493493087eac72abe05cd89ae762922112cf8bfcaf8275fb20233edd7282b10e34cb385f0341", 0xcf}, {&(0x7f0000000d00)="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"}, {&(0x7f0000000b80)="ddd1476a9608a7c91be258614adc57a1ab6038cf37439c1f67fabfbe20870fe777a8f3ece28743c349776a8df4527fb3de66e9bd780e240071277e8188d2d54b4e520682e06b47dc82826071184baafc7273d13710d9fbe8027ab88aaa079aa788d838f39183d07ad95bfd2f67914dd79f064aead0f52b57304909c09c2bb35b88fb0d247460d8c42102538187ea8c673603e67a6f955e835eb1"}, {&(0x7f0000000940)="37f8f0bd65349b1aedd7937a5e8291c045e3d30c0876bdfd1428cdc7a673d9ebd3046eb6141816c96b1e0bac1e9496af55471c903a0945ec39f049c2d8843255d7f00aee7f5f47446825be3d39c11f8bc0990f5091b2e767659ce1185ffe980e76251da2f7b520be24"}], 0x8}, 0x4044044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) splice(r6, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r7, r5, 0xb, 0x20}, 0x20) write$P9_RLERRORu(r5, &(0x7f0000000100)=ANY=[], 0xe) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = dup(r8) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000013002f0a26bd70000000000007006800", @ANYRES32=r11, @ANYBLOB="68c900004502030024001a8009000100766c616e0000000014000480100003800c"], 0x44}}, 0x10) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe000000}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x0) 7m42.673987664s ago: executing program 38 (id=1567): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) (async, rerun: 32) sendmmsg(r0, &(0x7f0000006000)=[{{&(0x7f00000000c0)=@can={0x1d, r1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="847b311eef782b3fe4", 0x9}], 0x1}}], 0x1, 0x20000810) (async, rerun: 32) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x5, {0x0, 0x0, 0x2}, 0xfe}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_create(0x1, 0x80800) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r3 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x80b, 0xed) (async) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bb3bbbbbbbbbaaaaaaaaaabb08004500001c00000000362a9162e43a9e00029078000000e0000300100090780003000e"], 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) (async) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x296, &(0x7f0000000380)="$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") (async) unshare(0x2000400) (async) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) (async) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) sendfile(r6, r8, 0x0, 0x9) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 7m32.647182939s ago: executing program 39 (id=1894): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x9, 0x5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @multicast1}, 0xc) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8}]}}, @TCA_STAB={0x6c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0xe, 0x8000, 0x200, 0x0, 0x24c1, 0xfffffffc, 0x4}}, {0xc, 0x2, [0xc, 0xe9f, 0x2, 0x6]}}, {{0x1c, 0x1, {0x7, 0x7, 0xa511, 0x4, 0x2, 0x4, 0xb}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x3, 0xb, 0x22, 0x1, 0x7, 0x8}}, {0x4}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x44004}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@ifindex=r2, 0x3e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d4, &(0x7f0000000040)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6m0.064888522s ago: executing program 40 (id=3631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) creat(0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x1a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m32.872041765s ago: executing program 41 (id=3970): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000380000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 5m29.674513215s ago: executing program 42 (id=4013): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=ANY=[], 0x50}}, 0x4000010) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048460000000000000000000000000008001d0000000000080022"], 0x148}}, 0x20000000) 5m0.378655933s ago: executing program 43 (id=4472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x3c, r1, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x20, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r5, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200000034000380080001"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r9, 0x301, 0x70bd30, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x3000000}, 0x800) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20008880) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="0500000008"], 0x20) r12 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = syz_open_dev$loop(&(0x7f0000000280), 0x10001, 0x10f6c0) ioctl$LOOP_CONFIGURE(r13, 0xc0c0128e, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) connect$inet(r12, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) syz_emit_ethernet(0x10d1, &(0x7f0000000a80)={@broadcast, @random='\x00\x00B\f\x00', @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x109b, 0x3a, 0x0, @private0, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private2, [{0x1f, 0x200, "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"}, {0x2, 0xb, "7476e972e6e2a662b3ce2e745f021b208bea6ae61287d4584d70447018eba5823b0a2543746e99a7ccd4d9bd8136ed240f579cf36123170e450cf112d12579909d3ac46f3a3a25dd28e57d27056b4cc5bcae2ca13d08fdced3f3"}, {0x4, 0x5, "ee95ec98de3d806ec5f30b621ad0c2b7d48ba3819b967fa81b7449c58302d261900159ac829f83"}]}}}}}}, 0x0) 4m7.470645172s ago: executing program 7 (id=5403): sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9ddd62", 0x28, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0xe, 0x9b, 0x4, 0x4e24, 0x4e24, 0x1, 0x4, 0x0, 0x0, 0x1}}}}}}}, 0x0) 4m7.420309125s ago: executing program 7 (id=5405): r0 = socket(0x23, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) r3 = socket(0x1, 0x1, 0x6) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x8f, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_LINKMODE={0x0, 0x11, 0x4}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000000190002002cbd7000fddbdf2580100003fc01c802003a000008000b000400000008000300", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000001) 4m7.355018378s ago: executing program 7 (id=5407): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0xffd0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m7.298910442s ago: executing program 7 (id=5409): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@fat=@nfs_nostale_ro}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x588}}, {@fat=@dmask={'dmask', 0x3d, 0xe4}}, {@fat=@showexec}, {@shortname_mixed}, {@utf8}, {@numtail}]}, 0x0, 0x2ad, &(0x7f0000000840)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) pread64(r5, &(0x7f0000000600)=""/4099, 0x1003, 0x110) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000440006"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000017000000440006"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) writev(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m6.606417443s ago: executing program 7 (id=5413): r0 = socket(0x18, 0x3, 0x2) unshare(0x2040400) (async, rerun: 32) bind$bt_l2cap(r0, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FIONCLEX(r1, 0x5450) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x8a710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x2, 0x18000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x6, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x5}, 0x2, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 4m2.383146974s ago: executing program 7 (id=5486): sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9ddd62", 0x28, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0xe, 0x9b, 0x4, 0x4e24, 0x4e24, 0x1, 0x4, 0x0, 0x0, 0x1}}}}}}}, 0x0) 4m2.358160275s ago: executing program 44 (id=5486): sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @broadcast, @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "9ddd62", 0x28, 0x6, 0x1, @mcast2, @rand_addr=' \x01\x00', {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x7, 0x0, 0x0, 0xe, 0x9b, 0x4, 0x4e24, 0x4e24, 0x1, 0x4, 0x0, 0x0, 0x1}}}}}}}, 0x0) 3m28.959634126s ago: executing program 9 (id=6056): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d08, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x8, 0xa, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r3) 3m28.662432024s ago: executing program 9 (id=6062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = gettid() signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r1, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r4, 0x300, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r5, 0x2) (async) listen(r5, 0x2) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) (async) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x100c3, 0x0) openat2(r7, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40000, 0x41, 0x1}, 0x18) (async) openat2(r7, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x40000, 0x41, 0x1}, 0x18) gettid() (async) r8 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r9, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000080)={r10, r11+60000000}, 0xfffffffffffffffe) (async) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000080)={r10, r11+60000000}, 0xfffffffffffffffe) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffdaf, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x404c890}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffdaf, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x404c890}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3m27.838803573s ago: executing program 9 (id=6079): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x6, 0x1, 0x1, 0x2, 0x1, 0x7}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000140)={0xffffffffffff7fff, 0x1, 0x1, 0x401, 0x2, [0x7fffffff, 0x2, 0x5, 0x8]}) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000240)=r3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000180)=0x4, 0x4) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2a, r4}) getsockopt$inet_udp_int(r3, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000280)=0x4) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) 3m27.661979654s ago: executing program 9 (id=6084): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x8, 0xffffe1ac, 0x8, 0x6, 0x7}) setregid(0xee01, 0xffffffffffffffff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m27.430531547s ago: executing program 9 (id=6092): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x0, 0x2, 0x7fffffffffffffff}) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000002, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0xd9a, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000000b0603000000000000000000000000063400078008001c40000000020c0018400000000000010001080009400000000114001700626f6e64300000000000009d000000000500010007000000"], 0x50}, 0x1, 0x0, 0x0, 0x4044881}, 0x4000000) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = getpid() r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x4, &(0x7f0000000500)={0x0, 0x16, 0x5, @thr={&(0x7f0000000380)="f2bfcb51e3d637df752cd52de41375ef9ae72a316588615e1ab6e123e0dc41b34ad27f1b46e196a13317a36778a519db442e106308e400953bf208a4b8760ea2cdfc09ce8dff5c7aa5652cf2f34e027f9ba26a723bcd6a100b05f694289c532e5df990923b33dff99fd202276e5b0f36fb70", &(0x7f0000000400)="16c804f81ed77c23ff0ab0eafde9c9167e1aaa34a7e2f43aa282f4845f6b9aaa7948c5db643a0338c21b3df84a3e2bf57295b61ba5076106cd4a9cbef97f3415250da5f1a134d0a12d30911303b0e674742e675fe090a7d849cb71b500a81cd47fa596a457a811fdce27ac91777d5bc24fae2b621b3efc4f8b220821a669e4bc1b7846af2bc77a017daed2876ade1317b9d4219bca835ec07d46c87637fb17353fa251092bfa8ac52199bb29d487f5068181dfe6ec0e4c3af094"}}, &(0x7f0000000540)) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000a80)={r7, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="01e52abd7000fbdbdf250500000008000300", @ANYRES32, @ANYBLOB="08000600", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x8801}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0xe, &(0x7f0000000f80)={@initdev, 0x0}, &(0x7f0000000fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001000)={'vxcan1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001080)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001040)={&(0x7f0000001980)={0x8b4, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x274, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x213680}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5e}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3b59}}}]}}, {{0x8, 0x1, r8}, {0x14c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f1b}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xfff, 0xc, 0x9, 0x9}, {0x5f, 0x2, 0x1, 0x9}, {0x8, 0x7, 0x5, 0x2}, {0x0, 0x1, 0x4, 0x7087}]}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x5, 0x1, 0x1, 0x623}, {0x8, 0x22, 0xc, 0x91a2}, {0x5, 0x3, 0x8, 0x3}, {0x4, 0x3, 0x6, 0x1000}, {0x0, 0x14, 0x7, 0x3a}, {0x7fff, 0x7f, 0x80}, {0xd, 0x5, 0xfc, 0x28}, {0x200, 0x7f, 0xfe, 0x10001}, {0x98e, 0x1, 0x3, 0x3}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r9}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r11}}}]}}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x8000010}, 0x4008005) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3m27.084064028s ago: executing program 9 (id=6098): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb000000, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m27.03376468s ago: executing program 45 (id=6098): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb000000, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m14.711772001s ago: executing program 4 (id=7635): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@resgid}, {@nodioread_nolock}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000000680)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x45d, &(0x7f0000000ac0)="$eJzs3M1vFOUfAPDvzLaFH2/tD/EFRG1CDI0vLS2oHLxoNPGA0UQPeKzbQggLNbQmQohUY/BiYoh6Nh5N/Ce8GPVk4lXvhoQoF9BTzczOwHbZLSxddiv7+SQDz7PzdJ/n22eemWfm2W0AA2s8+yeJ2BYRv0XEaD27usB4/b/rV89X/756vprEyspbfyZ5uWtXz1fLouXPbS0yE2lE+klSVLLa4tlzJ2drtfkzRX5q6dR7U4tnzz174tTs8fnj86dnDh8+dHD6hednnutKnFlc1/Z8uLB392vvXHq9evTSuz99l7V3W7G/MY5uGc8C/2sl17zvyW5X1mfbG9LJUB8bQkcqEZF113A+/kejEjc7bzRe/bivjQPuqezatKn97uUV4D6WRL9bAPRHeaHP7n/LrUdTjw3hykv1G6As7uvFVt8zFGlRZrjp/rabxiPi6PI/X2db3KPnEAAAjT6rfnUknmk1/0vjoYZyO4o1lLGI+H9E7IyIByJiV0Q8GJGXfTgiHumw/ualoVvnP+nluwrsDmXzvxeLta3V879y9hdjlSK3PY9/ODl2ojZ/oPidTMTwpiw/vUYd37/y6+ft9jXO/7Itq7+cCxbtuDzU9IBubnZpNp+UdsGVjyL2DLWKP7mxEpBExO6I2NPZW+8oEyee+nZvu0K3j38NXVhnWvkmYn+9/5ejKf5Ssvb65NTmqM0fmCqPilv9/MvFN9vVv674uyDr/y2rj//mImNJ43rtYud1XPz907b3NHd7/I8kb+fno7KjPphdWjozHTGSHMlfHCnK5q/P3PzZMl+Wz+Kf2Nd6/O+MmxU8GhHZQfxYRDweEU8UbS+Pkn1rxP/jy+33bYT+n2t5/rtx/Df1f+eJyskfYnOb+u+s/w/lqYnilfz8dxt32sB1/fIAAADgPyLNPwOfpJM30mk6OVn/DP+u2JLWFhaXnj628P7pufpn5cdiOC2fdI02PA+dTpaLd6znZ4pnxeX+g8Vz4y8r/8vzk9WF2lyfY4dBt7XN+M/8Uel364B7rtU62sxIHxoC9Fzz+E9XZy+80cvGAD3l+9owuG4z/tNetQPoPdd/GFytxv+Fpry1ALg/uf7D4DL+YXAZ/zC4jH8YSOv5Xv8gJco/krpR2tP/RKQbohmdJcor3UZpT/cT+7+oR7juN+znWQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB7/g0AAP//0TLrKA==") listen(r1, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='gid_map\x00') writev(r5, &(0x7f0000000100), 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r4, r5}, 0xc) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e244e22030000003100"], 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008880) 2m13.950578127s ago: executing program 4 (id=7645): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@prjquota}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x580, 0xa5) r1 = open_tree(r0, &(0x7f00000001c0)='./file1\x00', 0x0) r2 = openat(r1, &(0x7f0000000400)='./file1\x00', 0x800, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0x4) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x0, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000440)={0xe60d, 0x5, 0x5, 0x7f}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c000400000000fbdbdf257a000000475253e1763c0a7655fa7676c99ee29831aa04cfa78fe555254a5e2ada322ef9ac88cc6c067b278b5b820611da30768b6707d0d1f986204ec17daabc0635e1b6338b22f33e21384899c476e777f386c4ccc28af94f9c7f80459670a168bf67e9759d5f84b8c1460b415025957c27e6973131f4a7f88d084f4ba259d647fa95a496919d7acfcae5f289e0622af5576057947fd513a92021a5ecbcfac5f16e7d3d84e6cd383039b17ad73ab280f1d9bbfa481cb9f58bf2cade0405d30a28c4baf1", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160003000000"], 0x3c}}, 0x0) 2m13.773049837s ago: executing program 4 (id=7649): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20b}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x646f}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x101}, @TIPC_NLA_NODE_ID={0x14, 0x3, "d92711084b913dd0027269511ca15374"}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b4ada1b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0xc050) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r3, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa2524de6d9ef59c8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb5d3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x48101) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r5, &(0x7f0000000640)=@ocfs2={0xc, 0x1, {0x935, 0xff, 0x401}}, 0x8000) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000680)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1db0f8fe}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048998}, 0x8040) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r7, 0x808, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x81) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000a00)=0x22, 0x4) r8 = semget(0x1, 0x4, 0x221) semop(r8, &(0x7f0000000a40)=[{0x0, 0x92, 0x1000}, {0x4, 0x5}, {0x5, 0x1, 0x800}, {0x0, 0xf41, 0x1800}], 0x4) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000ac0), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r9, 0xc00, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x44854}, 0x1) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000e80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x94, r10, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r13}}]}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r15}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000884}, 0x4008040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m13.474707755s ago: executing program 4 (id=7652): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") inotify_init1(0x80000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x5a, 0x0, 0x1, 0x5, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x9}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) socket(0x2d, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) close_range(r3, r3, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x20000000dd4, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x20000, 0x3fff8000}, 0x841, 0x8000000000032, 0x43a1bd76, 0x4a598f8f568d4678, 0x19, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r6 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x3, 0x7, 0x5, 0xca8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000001080)=ANY=[@ANYBLOB="757365722e7b28407d008da6b4da444534cdb54d1c50e904af237ad3682ad5374d12a6cca330bd1244e9d12e0ea057df77ac60e1f4cacc3c7fc7359469b1980f7179473304e2e88833cc277b7a73a69a85eb37c0089f8645"], 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=ANY=[@ANYRES32=0x1, @ANYBLOB="000000000000013179627437d3"], 0x50) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x103) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m13.22187747s ago: executing program 4 (id=7658): r0 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x20, 0x40044}}], 0x1, 0x4) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r3, &(0x7f0000000000)) openat$random(0xffffffffffffff9c, &(0x7f0000000800), 0x80100, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x90ae9a9002ba294a) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r6, @ANYRESHEX=r7, @ANYBLOB='-wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000840)=""/211, 0x0, 0x29, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) close(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f2f6b237900000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180200e1be1000000027000020950000000000000000110000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x26) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYRESDEC=r11], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) syz_genetlink_get_family_id$l2tp(0x0, r5) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x48000) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) 2m13.085484538s ago: executing program 4 (id=7659): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe2(0x0, 0x4946c87b3c4e9f02) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9}, 0x200, 0x10000, 0x8, 0x1, 0x8, 0x7, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2040400) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$P9_RLERROR(r6, &(0x7f0000001040)={0x9, 0x7, 0x1}, 0x9) (async) write$P9_RLERROR(r6, &(0x7f0000001040)={0x9, 0x7, 0x1}, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7, 0x40}}, './bus\x00'}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}}, 0x0) socket(0xa, 0x3, 0xff) (async) r10 = socket(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$netlink(0x10, 0x3, 0x13) 2m13.060138849s ago: executing program 46 (id=7659): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') pipe2(0x0, 0x4946c87b3c4e9f02) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9}, 0x200, 0x10000, 0x8, 0x1, 0x8, 0x7, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2040400) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffff0080) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$P9_RLERROR(r6, &(0x7f0000001040)={0x9, 0x7, 0x1}, 0x9) (async) write$P9_RLERROR(r6, &(0x7f0000001040)={0x9, 0x7, 0x1}, 0x9) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7, 0x40}}, './bus\x00'}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xb, 0x0, 0x4000004}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) (async) getsockopt$inet6_mptcp_buf(r9, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x40, r8, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x20000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}}, 0x0) socket(0xa, 0x3, 0xff) (async) r10 = socket(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) (async) connect$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) socket$netlink(0x10, 0x3, 0x13) 1m45.092369018s ago: executing program 5 (id=8166): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x40, 0x9, 0x3, 0xfff00000}, {0x50, 0x7, 0x48, 0x400005}, {0x6, 0x25, 0x7, 0x205}]}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_config_ext={0x700000, 0x136}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x3c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r3) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x537c0b8d69afff6f}, 0x20008000) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1ac, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "5d30a480a2ae116ac7a2d4445712c290e4ea72f2a78041a43fd37ec4b665a1"}}, @TIPC_NLA_NODE_ID={0x23, 0x3, "8d76abf9b5f9a77b43b4948bf9c1586e695b06e0f3c8553dd0700eb3989bd5"}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x673}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7b}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8001, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x351}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x180}, 0xc0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 1m44.149684255s ago: executing program 5 (id=8183): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r2 = accept(0xffffffffffffffff, &(0x7f0000000200)=@l2, &(0x7f00000002c0)=0x80) sendmsg(r1, &(0x7f0000000740)={&(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x20}}, 0x1, 0x3, 0x2}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="97", 0x1}, {&(0x7f0000000440)="f071e85613d3dc4247982e1b13cc495632d6f297946010f263bfa35afc7f3a5bc95def3ecf1a93", 0x27}, {&(0x7f0000000480)="cd2a", 0x2}], 0x3, &(0x7f0000000500)=[{0x28, 0x10c, 0x5, "f6e3912afb538639aeb1fb5264b4d32c2146bcea7e"}, {0xc0, 0x113, 0x8000, "6d0a004151f795982c8c0dc31f335691fa56c0a7bed4e94dace3b67ab935c0ac0ff0e156175ce89867073c83b88b75202cbdb90cdec2c9db971f2f3df70b1c622d7453ee5ca1d90a1b27cf2b7794b29f2ae24acb5fe1bfa3d55b5bb329e8fa366db9121f52b433306475103376f1b1a5c8130ee056e2ffde148d2649aa409be86d4ec041322fd1ce6f69eddd58e354d8786f06b40c774f4d2b1581afad85cd2b84f8410c7eea3924945bfb19b6"}, {0x48, 0x103, 0xffffffff, "e8e3f7c091368ad85f9323e22bf1c3414e2e97d35d3a5af4cfe1217c8f2108fb054bc277eaa51817cbaa7a102e68ef6669bec819"}, {0xc8, 0x85, 0xfff, "e6432cb8d66c8ab59d3ae030860587e4087f441bf3547eb8bb78e48a20203f4206f65f360031c9e3627d84f7bc11c355441bf69f00ccaa84de5f9104779f41898cbaa6ab62d0cb25b2ba543c71aa2e8e94f7fd034d526bd1688c832f161f5898be7ac9686f52011c4700813e4b18f8ce47d664a8a26a5781ae9bd201902cb723f7321f4667622461498e9a75160ad51c9e62daeb70313dadafd1136f65b7dbdba301fb07c50a1a9480ea1fbc0f2f3d6a44"}, {0x30, 0x0, 0x6, "070067e32da7b6ab0b3b6a38ead49d681bf6ba84f64e9c69cb1b9bb2d1"}], 0x228}, 0xc800) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7fffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)={0x28, r5, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0x4}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4088}, 0x840) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100000, '\x00', 0x0, r0, 0xfffffffe, 0x1}, 0x50) 1m43.994071004s ago: executing program 5 (id=8185): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r0, 0x541b, 0x0) (async) ioctl(r0, 0x5451, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r1 = socket(0x1e, 0x1, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x0, 0x2, 0x2}, {0x7c, 0x40}, {0x3, 0x0, 0x3}, {0x6, 0x4, 0xff, 0x3}]}) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1000}, 0xfffffe}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000400), 0x2000011a) (async) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/68, 0x44}], 0x1, 0x0, 0x18}, 0x3}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10140, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x4) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) (async) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000002c0)=0xc, 0x4) (async) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000380)=@assoc_value={0x0, 0x9}, 0x8) (async) timer_gettime(r4, 0x0) (async) timer_settime(r4, 0x1, &(0x7f0000000180)={{0x0, 0x3938700}}, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) 1m43.646078945s ago: executing program 5 (id=8188): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4480, &(0x7f0000000100)=ANY=[@ANYBLOB="0096397bb229f118b1f6c334ff95e9d57079d2a61ef7526c03c3a0d9cd515719956a0e5922340c97beade3e691744c236c61868da817036b0bab4516cc735ee856ef073c7b0b540347b358404ebe8e0c22e3a8a3caad47889d996a07d6988b211450783f4fdfbb8ae60572ea3bb70fb29560525b"], 0x83, 0x22e, &(0x7f0000000940)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/file0\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x81, 0x5}, 0x2012, 0x0, 0x7, 0x5, 0x2, 0x8d5e, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x10, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000240)='./file0\x00') (async) rmdir(&(0x7f0000000240)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x9, 0x80000) (async) r1 = timerfd_create(0x9, 0x80000) timerfd_gettime(r1, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, &(0x7f0000000500), &(0x7f00000000c0)='syzkaller\x00', 0x401, 0x0, &(0x7f0000000280), 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0x9, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @multicast2}, &(0x7f0000000480)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @multicast2}, &(0x7f0000000480)=0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000004180)={0x0, {{0x2, 0x4e23, @empty}}}, 0x88) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f0000004180)={0x0, {{0x2, 0x4e23, @empty}}}, 0x88) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r3, 0x25, 0x6, @void}, 0x10) 1m43.523206732s ago: executing program 5 (id=8193): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[], 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r2, 0x0, 0xfe59) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000100)=@routing={0xff, 0x0, 0x2, 0x7}, 0x8) 1m43.296391495s ago: executing program 5 (id=8196): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x80000001}, &(0x7f0000000500)=0x8) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000600)=@qipcrtr, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/161, 0xa1}], 0x3}, 0x9}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/197, 0xc5}, {&(0x7f0000000bc0)=""/186, 0xba}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f0000000e40)=""/94, 0x5e}, {&(0x7f0000000ec0)=""/30, 0x1e}], 0x7}, 0x9}], 0x2, 0x10000, &(0x7f0000001000)={0x77359400}) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x3, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x6bf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'dummy0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) r5 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x12, @remote, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400080004000006000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(r8, &(0x7f00000005c0)='uid_map\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) 1m43.250434398s ago: executing program 47 (id=8196): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000540)={0x0, 0x80000001}, &(0x7f0000000500)=0x8) recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f0000000600)=@qipcrtr, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000840)=""/161, 0xa1}], 0x3}, 0x9}, {{&(0x7f0000000940)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000f00)=[{&(0x7f00000009c0)=""/210, 0xd2}, {&(0x7f0000000ac0)=""/197, 0xc5}, {&(0x7f0000000bc0)=""/186, 0xba}, {&(0x7f0000000c80)=""/219, 0xdb}, {&(0x7f0000000d80)=""/171, 0xab}, {&(0x7f0000000e40)=""/94, 0x5e}, {&(0x7f0000000ec0)=""/30, 0x1e}], 0x7}, 0x9}], 0x2, 0x10000, &(0x7f0000001000)={0x77359400}) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x3, 0x8, 0x7, 0x3, 0x0, 0x0, 0x0, 0x6bf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'dummy0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) r5 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0x0, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x12, @remote, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000400080004000006000008001b0000"], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_open_procfs(r8, &(0x7f00000005c0)='uid_map\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0x1c, 0x3, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe, 0x9}}}}}, 0x0) 1m20.501151106s ago: executing program 8 (id=8665): r0 = syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodiscard}, {@acl}, {@nojournal_checksum}, {@data_journal}], [], 0x2e}, 0x84, 0x460, &(0x7f0000000dc0)="$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") ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) 1m20.347384016s ago: executing program 8 (id=8667): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x633, 0xffffffffffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000004000500000000080001"], 0x2c}}, 0x0) mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xa) shutdown(r0, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@noblock_validity}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x480, &(0x7f0000000200)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="340000001820000000000000", @ANYRES32, @ANYBLOB="d47c2b9603aa34cf10a2d531e052cfe78da327ff6ec0f0f79912fe051517d895f16a730e5d67e1656a559c1043b10a7393607c07c3c8e46f36b7434dc0854b072a37de99f68f3dcfb25bda3d557b6766cdc8215ef672ee96922122ad", @ANYRES64=0x0], 0x20) 1m20.164133246s ago: executing program 8 (id=8670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100040000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 1m20.160439746s ago: executing program 8 (id=8673): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040008004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000000d0601040000000000000000010000090d000300686173683a6d616300000000120003006269746d61703a69702c6d6163000000050001"], 0x48}, 0x1, 0x0, 0x0, 0x4000045}, 0x80) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain) socket$igmp(0x2, 0x3, 0x2) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91f, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x18404, 0x2, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00') recvmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x5) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000040)=0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=@newtaction={0x588, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x574, 0x1, [@m_police={0x570, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x1000, 0x0, 0x3, 0x98, 0x1ff, 0x4, 0x6, 0x8e9, 0x8, 0x2, 0x6, 0x6, 0xffff, 0x45, 0x6, 0x4, 0x0, 0x3003, 0x800, 0x738, 0x2, 0x8, 0xfffffff1, 0x1, 0x8, 0x5, 0x9, 0x76d, 0x100, 0x5, 0xa, 0x5, 0x0, 0xc27, 0x5, 0x6, 0x6, 0x1, 0xc33, 0x0, 0x9, 0x1, 0x5, 0x6cc, 0x7, 0x401, 0x2, 0xc, 0x3, 0x29, 0x0, 0xfffffffb, 0xffff0001, 0xffff, 0xe, 0x5, 0x2, 0x8, 0x8, 0x3, 0x4f1, 0x6, 0x0, 0x3, 0xfffffff9, 0xa9, 0x7, 0xa96c, 0x73b, 0x9, 0x5, 0x272, 0x8, 0x4, 0xa, 0x7, 0x9, 0xb, 0xfffff360, 0x0, 0x0, 0x3, 0x7, 0x2, 0x3, 0x5, 0x7, 0x6, 0x2, 0x2, 0x7f7a4617, 0x7, 0x8, 0x0, 0x3864, 0x0, 0xb6, 0x3e1, 0x7, 0x2, 0xfffffffd, 0x10, 0x8, 0x76, 0x87, 0x5eb, 0x80000001, 0x800, 0x2, 0x7, 0x6, 0x2, 0x4, 0x8, 0xf30, 0x3, 0x2, 0x5, 0x7, 0x2, 0x70ed5b64, 0x0, 0x7, 0x0, 0x0, 0x80, 0x3, 0x4, 0x1, 0x6bd, 0x9, 0x2, 0x2, 0xdd86, 0x1, 0x47, 0x48a, 0x7fff, 0x2b, 0xfffffffa, 0x9cf3, 0x5, 0xe54, 0x32cf, 0x7, 0x3, 0x2000000, 0x4, 0x25d4000, 0xe, 0x2, 0x8, 0x9, 0x7fff, 0xe, 0x0, 0x0, 0x3, 0x1, 0x4be, 0xf, 0x3, 0x970, 0x9, 0x4a88, 0x0, 0x6, 0x8, 0x7, 0x6, 0xfffffff0, 0xc, 0xe, 0x51b9087f, 0x3, 0xd, 0x3, 0x4, 0xffff, 0x7f, 0x4, 0xb30, 0x7, 0x7, 0x0, 0xfffffff4, 0x7fff, 0xf9d2, 0x1, 0x76, 0x7, 0xffff, 0x81, 0x4, 0x2, 0xd8b, 0x7, 0x184, 0x8, 0x4, 0x3, 0xd4, 0x100, 0x9, 0x2, 0x9, 0xa, 0x7, 0x0, 0x0, 0x4, 0xffffffff, 0x40, 0xfff, 0x400, 0x4, 0x8, 0x7f, 0x8000000, 0x9, 0x7f, 0x2, 0x3ff, 0x2c, 0x3, 0x9, 0x3, 0x7, 0x7fffffff, 0x0, 0x80, 0x4, 0x7, 0xf, 0x8, 0xffff, 0x3ff, 0xb, 0x7fffffff, 0xd42f00, 0x3, 0x3, 0xa, 0xb2f, 0xfffffffc, 0x4, 0x3, 0x0, 0x3, 0x8, 0xdf, 0xffff, 0xffff, 0x1, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x0, 0x3, 0x7, 0x6, 0x9}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x100008}}]]}, {0xfc, 0x6, "6380b4ce3542bbcb13333778db85ba79486a67e68ab11b5caaf10ddf815cae5f28da7a928b02dd3754bcc817ce401d6406afde3ca737c56b84c9eede5002aa8372a85f886351a2764805932bfa6398c0da5550e4daca32619707cd7b37b4e2a053cceee9e7148adf67e6f2c08e9f72120d6699c4a7486895c906147ae3a4476399531e866cae1cb876e24574268bd6296bb8e39f36f51f50ea291100c7735fdeb13f31b0ee0837991fd33137c9abd1cadce32bde791c0e25593c16be7715927da3c8a647a3ac787c8f147f1765398ca9e51420a479e294c10aaf1dea8288bfa5b76a121accf5ec5a2ac070a4030cea693b5464153e8668e8"}, {0xc}, {0xfffffffffffffe47}}}]}]}, 0x588}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x10, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xe}, {}, {0x0, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xa, 0x1}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000003c0)='id_resolver\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRESDEC=r7, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x3a8c, &(0x7f0000000a40)={0x0, 0x87, 0x0, 0x8001, 0x3dc, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000ac0)) 1m19.146466405s ago: executing program 8 (id=8688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000a08000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m18.933520548s ago: executing program 8 (id=8693): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x75e2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000380)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@nodioread_nolock}, {@errors_remount}, {@nouid32}, {@sysvgroups}, {@commit={'commit', 0x3d, 0x9}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x478, &(0x7f0000000840)="$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") socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0x355b, 0x2, 0xfffffffe, 0x181}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x6, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r3, r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r7 = mq_open(&(0x7f00000003c0)='\x00', 0x2, 0x0, &(0x7f0000000400)={0x9, 0x100, 0x5, 0x2}) mq_timedreceive(r7, &(0x7f0000000640)=""/77, 0x4d, 0x4, &(0x7f00000006c0)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2b, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x2004c084) 1m18.902643429s ago: executing program 48 (id=8693): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x75e2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000280)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000380)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@nodioread_nolock}, {@errors_remount}, {@nouid32}, {@sysvgroups}, {@commit={'commit', 0x3d, 0x9}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x478, &(0x7f0000000840)="$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") socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r3 = io_uring_setup(0x7d3, &(0x7f0000000580)={0x0, 0x355b, 0x2, 0xfffffffe, 0x181}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000080000000000000000018230000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x18, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x6, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) close_range(r3, r3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x204, &(0x7f0000000480)={0x0, 0xbe09, 0x800, 0x0, 0x31e}, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x64, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[], {0x0, 0x4f22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x3, "8a8bebc4b04ccb77e7f3a5ca93d7c73e6c0c42d91e27fb2f15030dcafcdaca76", "e24fcb751eeaa8add0b2f075633f64c7", {"249908bc00000000000000002000", "51f3b6750c654f5d43fbb564be51ddae"}}}}}}}}, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r7 = mq_open(&(0x7f00000003c0)='\x00', 0x2, 0x0, &(0x7f0000000400)={0x9, 0x100, 0x5, 0x2}) mq_timedreceive(r7, &(0x7f0000000640)=""/77, 0x4d, 0x4, &(0x7f00000006c0)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x2c, r2, 0xc4fc9e906872338b, 0x70bd2b, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x2004c084) 4.29849589s ago: executing program 6 (id=9418): capset(&(0x7f0000000040)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.276244351s ago: executing program 6 (id=9419): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040), 0x0, 0x20000820}, 0x894) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1}, 0x24044880) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r3 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797525a3fe9e00b62672d01e3d6ab75e187a300000000058000000160a0100000000000000000001000000000900020073797a30000000002c0003800800014000"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x48044}, 0x14) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="760100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000cea100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x14c, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x80, 0x1, 0x8, 0x1, 0x0, 0x2, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x8, 0x5, 0x6, 0xc, 0x0, 0x6, 0x1, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x0, 0x0, 0x401, 0x800, 0x1, 0x7, 0x9e, 0x3}}, {0xa, 0x2, [0x1, 0xc, 0x5]}}, {{0x1c, 0x1, {0xf, 0xd6, 0x1, 0x77d, 0x3, 0x3, 0x2, 0x2}}, {0x8, 0x2, [0x9, 0xda8b]}}, {{0x1c, 0x1, {0x1, 0x79, 0xa, 0xb, 0x0, 0x4, 0x6, 0x6}}, {0x10, 0x2, [0x9, 0x7f, 0xfb72, 0x1, 0x2, 0x3]}}, {{0x1c, 0x1, {0x6, 0x3, 0x7, 0x7, 0x0, 0xe00, 0xfffffffd, 0x7}}, {0x12, 0x2, [0x9, 0x2, 0x53c8, 0x101, 0x7, 0x5, 0x8001]}}]}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0xd3, 0x4200) ioctl$EVIOCGBITSND(r6, 0x80404532, &(0x7f0000000100)=""/102) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r5, 0x1, 0x6, @local}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 4.038838964s ago: executing program 6 (id=9424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r1, 0x5433, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000003000003"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xe, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0xf5) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x100) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TCSETSW2(r1, 0x5433, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000003000003"], 0x50) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xe, 0x6, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) fsmount(0xffffffffffffffff, 0x1, 0xf5) (async) inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x100) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r5}, 0xc) (async) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) 3.844682746s ago: executing program 6 (id=9429): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x48701, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2b, 0x80801, 0x1) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) 2.790316577s ago: executing program 6 (id=9445): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004a00)) fstat(0xffffffffffffffff, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002004e24e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffa4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000200ffffac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) 1.943020147s ago: executing program 2 (id=9452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="680200000005010400000000000000000a00000a540201000000000007000000070104000000090073797a3000"/61], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000480)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000040)="279356d06a0ec1df6bdbab", &(0x7f0000000240)=""/82, &(0x7f0000000340)="ebfdf7aa04a2c2818faa84563f52e9cb17f24176fa7cfca1eb323ad48c54be55a8dd1d75e58acf493ad836fffe5e3af567ee3ee4bd13f9619413ac08cc80a2a9124a68de53291592f6e83d178e9dc31e52f6bea66114d2ffa9fc248b94ad77e55601211c9cb4b8a79b56da4d927b76a021b8d48796597011d7d01f0d63fa516aeab87ad8db9a18544f48b76a8bb79cfdfded290fcbe00e1426259c50591d011ac87e32e0d6ceea8fad41969a4e55f7c288394cbcba8d774090c7a94f9a927fa4ab761fdddf", &(0x7f0000000740)="9e7ee4449c3a504434cd0b369db958e84c320f86286bcb132bafd229ac7d47ea743ca3a5a672ce56af70c42745f7d63504c1fa66af6db6d28b1dd0502b732cfae65d57fd025922bf2956378229138074eaa6ab8710748e87094df28e7e290caedde75185033853925f5801f03d79b0b2639a9c8732eae2e9e2f7bd8315d33d72b4916206ac1a006ab106ff530d0388d0770084531d8075f661abba0725c2833255fde99189cc0e72212efe058808f675df134a84cfaeb2f361f88951080e12455bd0d2ca8df6f37621919523f713162741c666f40733", 0x300000, r2}, 0x38) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8659, @empty, 0x102}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) recvfrom$inet6(r3, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x400, 0xce, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$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") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) 1.798373265s ago: executing program 0 (id=9454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200f5ff0900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 1.651007454s ago: executing program 0 (id=9455): r0 = socket(0x2, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000001680)=ANY=[@ANYBLOB="0b00000000000000ffffffffffffff7f0200000000000000", @ANYRES32=r0, @ANYBLOB="00000000380300"/28, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28]) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$l2tp6(r0, &(0x7f0000000940)="b82d42785474ea1db05e5131d42cfadb215a51d1241632f333ae8c3984d3d776d954a0f41878070eb1c23b0b66aa4bf3e89bf8ca8f22b0d0d90e621e37783a291541985ab454246814d837a768323ab83f01ed36ff929ee1b1f03b66241edb92ef9f5a2f00e0e1918cbe5db153016a45a9d3de845cc898c5ac108fa8f6d20185fe0cb797e4c6f7c4acc92d729bf0a091c5cc3bbf9349745013cb9e4b52b92d5cb120a05cb971f33dffc684791a", 0xad, 0x10, &(0x7f0000000a00)={0xa, 0x0, 0x10000, @mcast1, 0x3, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$sock(r1, &(0x7f0000000900)=[{{&(0x7f0000000180)=@in6={0xa, 0x4e22, 0xa28, @mcast2, 0x534e}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000340)="48e55741aee2d9ae73223271a2c53b5f6a45f832bf1e6019b86f0e424358e0f3e0154d6c35f8f5986abf5d9f095ff679f23bfd4586188e43deae72e8e76aa491919e3e12e0ee50e086439a4079c908fedb27ffdcb99f7be374be3393ae60d4c03cda65a3b6051a4a4d4836c1ea017b065e5f2ebfa1661f4279c4ae6d323014f02b8b5654b376f281b05d0dd7720f8dacfac7442ebc93edb03725b5c9e4d29409443c8f51be", 0xa5}, {&(0x7f00000004c0)="9b28d4aae1cfea540b88e77a6d72a59bf7087335228f9755d82e0f2309d52079beb04f07d33ac36826f91fedc1db73a87a55ed643322f6ebb42d430b895a8133b163a707e38d015192e949cd3f4dda0cc64b564a37f4e3d92bc24c1fb0bfb083e920cbfc53", 0x65}, {&(0x7f0000000040)="04e882ff004d8499213a640f3d998a59c6003535c7eae7", 0x17}, {&(0x7f0000000540)="d41552ac1e4e6d4ebc5e46652c1eb4f6a10fb2e335ad1810f2b9ad8e638f12e80ca6a6b1526f715bd8076e11fef313f10e0d26c4dfc4336ca4bb61a01186a844fb4a33301692aa656b80abf2ba8d4ab8894575ca0a7872478688e6d7e81cb82d2488d6320c04ad1673599e3ad24d8b2cb040b5d67fe0fcf0e7c751e83163329773b96dc157963b0aa8117c812c21b778d72d905a309022ae27a5dc7c5f25797ed6ce4d0c09f337a80a754f15d3c28b81198fc8cf507a09c2f395627254cfa5a1927d3dedebd39d32ad43fc758ae0afb6ff65a9a721e262486f", 0xd9}, {&(0x7f0000000640)="6bb24a3b2e19c774e90d1961beda79c359fbce3fec1db85f199849bc8366a279dbdc41260c64d166b9b63ec33cda31660ced0519129b6e0453030b1d94a32c19f1c390b4d99b298f43779194b70a9a72890fd61ded55c1ae579b54c99d87ea48bf88164562b0d361234a0a2b9f64dac2b9caf6b7873ea21323f6a8f8d2a079a18a244ca75893a46c44fdb36f8d0da1741bc7cb2b150cf27ac39da3ec295448ee1a5990266c2a09bed55a08fccca167cdcca522652b211a42819470a0ae5f1697cc796aed39c22f0b608ff0", 0xcb}, {&(0x7f0000000740)="0bfcbfd9e928eb09fe62fc347f8efdbdf84196841f99598b9e567b4a414df0b02850228cf55a6a7650d2f7300f2d846c0adddb25098460e13594fc2d6a4ac2ddcfdb6662babe7150a85fc9c23b2884c8b09a3c17ac1d47bf577cc83f9268a94542152156312e8b4086c8526de481cfc535b399be50ad21f6297056e5ed54ead4f00726b80ee6fe108f0c686f3addb368c94af67230a11941887ec55b83d7c99dd46ee2e1c37b55a04a5dbbe94a3f61674ec1a80da3caccd9ebc162904565571906a5c03f1aedb70b", 0xc8}], 0x6, &(0x7f00000008c0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x160}}], 0x30}}], 0x1, 0x20000000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getuid() getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0x200, @empty, 0x6}}}, &(0x7f0000000140)=0x84) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, 0x0, 0x0) socketpair(0x5, 0x800, 0x30000, &(0x7f0000000000)) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r7, 0x41, 0x20, 0xaefc}, &(0x7f0000000240)=0x18) 1.584289878s ago: executing program 0 (id=9456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000180000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000008105000000000000850000000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000001e40)=""/4101, 0x0, 0xc}, 0x94) 1.467956985s ago: executing program 0 (id=9457): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x29, 0x8601, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x12090, 0x10000, 0x28c7dbd0, 0x6, 0xb3d, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x8025000, &(0x7f00000001c0)="9a8ba85b1dbf53690c6e3a39679c4be13983836bc77fbba5ef0a5709e9c915712c949b4b2c58711921914b6ca4d54a28a48f33709be03a0ead1b7ec6d2a84c14123d09c6159ff4ca2c8599160058", 0x4e, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)="f87a1295b74f39983ce4999e545975034726c4e410412a2121ccaa9ccdd6f7bab1bbaec03a4768b7205e24b3cb1aa16be7eef763a924e6c6189793a564fdb2b04504098010e2ac3cb14fe07407622be285232e0c2cfd5fd93fef03fdae34432865de2bfc91d088c8d750f336c3aa057de6ceff4e9020e6ab12311d93fd2ef49a22c7a37d3d8da085501c86192e8b99082be9bad5effe4a78e816a59b9f") unshare(0x22020600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.20898345s ago: executing program 2 (id=9458): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000008000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1.063205058s ago: executing program 2 (id=9460): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f0000000600010000000000080005e4", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.048861839s ago: executing program 3 (id=9425): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000002000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440105"], 0x1fc}}, 0x0) 955.153754ms ago: executing program 2 (id=9461): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x6, 0x8, "ca968d0d0d126ad41391000000000047955f0575c1e8de8173b8e69ed934f73e886543738d770e9fac1de4c88873577890daac32c28c538402345e00", "983fd5afcebf2d211f73b5c9b24547efd317ad10d52bdf5a7c76916c3ad48bfb9a00d52b458157d5a62489470311a3a924fe42ed6b245b444f3f745b90b3f6f1", "22aebd0ce460ad9c99a4bcaf1c0e33b22e84a0535400", [0x4, 0x718a183c]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000030000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 954.883804ms ago: executing program 3 (id=9462): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) prctl$PR_SET_THP_DISABLE(0x19, 0x10000000000001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x134) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000002300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x9, 0x5}, {0xf, 0x6}, {0xc, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) 897.363048ms ago: executing program 2 (id=9463): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x36d6}, 0x10208, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x2, {0x0, 0xff, 0x4}, 0x2}, 0x18) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000080)=0x40) pwritev(r4, &(0x7f0000000240)=[{&(0x7f00000002c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000061db000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b1be00008500000082000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f0000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x103440) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) sched_getparam(r1, &(0x7f0000000180)) syz_usb_connect$cdc_ncm(0x3, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fcff00001360580cbb7970e26da3d7b2256c506f04d27f2a54912415cd90db4afcf11c2627030e84b74b2cfc2c4d7a0c5aae8fb236f7c0a32395ae989bdf835d075382d4649d2758645ab5c1c5f3704f795241b93effefa7aa0412ffcfd795ebd69e394a20fc7644b8ea070c91e6157e1b4c2dbdbdff1bb39b31dc0eb776d797be8b1ea4baafdd049ae41df461568cdf1a15dc68ccb343cfcc650f17cea7466b4f75b6a653d64ad545e80b35d9839c002f8e0e363d5833e4f72f200341b683297e2b2b7d30c738d27823f844c67fa9d9fad86c59abf1dcb819fb885da9fbf8959c6526fd0d0343763720534acf65da234deed7d342c1d5fc5438e65944aafd0d474bad50d6705a8d23c5d6c7e103f7e9b0e4911689ea92b716b0d3bee7729937f202bdbf6cc3e492690b7f1bf8ddf10a6e1d342f33c28fabd09371d18c4cb6b0a66fadc1a24a69017d849357eac0323b8a6cf0691f047f420e10e6e89fa8988587655e71db2a86ea453fb80bfb47c0dd15a175dbbd86ba9de702968eee908f262554a6e925f75c83a0aa6244ac1cd2730a888e5487cda98c200fde49d9f55d1ac249e8b85fd834dbdde4e6a9200dda4da41d701633a7e312564dcaf8334221d7da57f9535364e1eddb86e07fefc14b894c", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0xb0) 856.82043ms ago: executing program 3 (id=9464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000f50900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 754.872416ms ago: executing program 6 (id=9465): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x0, 0x3}, {0x8, 0x4}, {0x10, 0x1}, {0xb}, {0xe, 0x3}, {0xa}, {0x9, 0x4}, {0x5, 0x3}, {0xa, 0x2}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x1}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61, 0x5f, 0x30, 0x2e, 0x0]}}, &(0x7f0000000500)=""/76, 0x8b, 0x4c, 0x0, 0x100}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x20, 0x4, 0x900, 0x5, 0x28, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) syz_emit_ethernet(0xbe, &(0x7f0000000840)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600fe10400883afffe8000000000000000000000000000aaff020000000000000000000000000001870090780000000000000000000000000000000004005168010e78676b5529157c4a4f2468a8f55ab301a031c43b00a9d84d0a2336bb418ea68a2e44f59b8f4d4beae7bf367e646889390c945b9efb324d77ebdbb7bf1b03371a36b22c41f9c3cf92c19a9c68215d40fb38ed961201000080d222171f0091c19f35f0e25a2626f54aadf4185a999fdc06d5ff2811e16345ca1c6655005994f7910b991227a971ef511b4a637f7b5290856c0eb6dacbfac3ce12f2f0a401b0b602464d0f8b59d7cdb0ebc3711b1cd2c0d36c03d92fe1be06c4f5a392de27719ee850638e6fa2e6a07e82da05214d6743ef14d3408dc911219fb28ce58ad3d48ec511c0afcb8f39e3778ba40280d15b37d4c316a8d20668fb747e8d6dcb3dd7fcd4db8398112cf712982e4529443661136f5d96fc2fb9628261b5a764ab7f9df821a1af72e1dde94976395fcdfb2ecde6f80555a2008d0668188901c551b39bf555a65a6d394a782528452f3fae020ba6f213e7e7065bfcd743984dd2348a89064183a7230bf80114c1246b"], 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(0xffffffffffffffff) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x6, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010102}, 0x10) setsockopt$inet_int(r1, 0x0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0xffffffffffffffff}, 0x102802, 0x0, 0x80000, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8d5a}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_create_resource$binfmt(&(0x7f0000000300)='./file0\x00') lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) getdents(r2, &(0x7f00000001c0)=""/46, 0x2e) getdents(r2, 0xfffffffffffffffd, 0x58) r3 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'], 0x1, 0x25f, &(0x7f0000000140)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000080)='./bus\x00', 0x126a4b5, &(0x7f0000001b80)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES64, @ANYRESDEC=r3, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085104100fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 754.729906ms ago: executing program 3 (id=9466): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xfd, 0x0, 0x2, 0x0, 0x0, 0x40, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x1, @perf_config_ext={0x8}, 0xc40e, 0x0, 0x0, 0x6, 0x0, 0x6, 0x2, 0x0, 0xfffffffe, 0x0, 0x9ba5}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 679.50979ms ago: executing program 3 (id=9467): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x2c, 0x516, &(0x7f0000000740)="$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") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000003c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8000}}, {}, {@fat=@fmask={'fmask', 0x3d, 0x2}}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xa) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 569.079197ms ago: executing program 0 (id=9468): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/183, 0xb7}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='1\x00', 0x2) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/keys\x00', 0x0, 0x0) read$hiddev(r4, &(0x7f00000012c0)=""/4102, 0x1006) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r5, 0x5608) 443.292314ms ago: executing program 1 (id=9470): setresuid(0x0, 0xee00, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000080)="428b14e4785916d87a00487e46b69c172a04122e0265269da313deb3c07fba466d7365c8f714e98e63810f203c7252387c67d45903fb592bd946c40b34c31d9ed1e1f345b7cc22593887f256bacef244c4d6b34ad4ec2d0958f9152f3ac5e6ee383ef709213da136931d44e19f41255c8e38f0d6c716cf") 443.054724ms ago: executing program 1 (id=9471): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x2, 0x80000000}, {0x6, 0x0, 0x3}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000400)='k\'', 0x2) 439.552774ms ago: executing program 1 (id=9472): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000009000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 392.251727ms ago: executing program 1 (id=9473): setreuid(0x0, 0xee00) request_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f0000000500)='/dev/vcsu#\x00', 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r1, &(0x7f0000000140)) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a40001c8fcbedc7ef148395e826b0fa62275f54001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd409d6e4edef3d93452a92954b43370e97", 0xd8}], 0x1}, 0x0) 295.119033ms ago: executing program 1 (id=9474): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffd, 0x0, 0x0, 0x6, 0x8, "ca968d0d0d126ad41391000000000047955f0575c1e8de8173b8e69ed934f73e886543738d770e9fac1de4c88873577890daac32c28c538402345e00", "983fd5afcebf2d211f73b5c9b24547efd317ad10d52bdf5a7c76916c3ad48bfb9a00d52b458157d5a62489470311a3a924fe42ed6b245b444f3f745b90b3f6f1", "22aebd0ce460ad9c99a4bcaf1c0e33b22e84a0535400", [0x4, 0x718a183c]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000040000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 294.828093ms ago: executing program 0 (id=9475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$tun(r0, &(0x7f0000001840)=ANY=[], 0x1200) (fail_nth: 5) 294.484143ms ago: executing program 3 (id=9476): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004a00)) fstat(0xffffffffffffffff, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002004e24e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000200ffffac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) 20.279318ms ago: executing program 2 (id=9477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="680200000005010400000000000000000a00000a540201000000000007000000070104000000090073797a3000"/61], 0x268}, 0x1, 0x0, 0x0, 0x854}, 0x4004000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4b, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={&(0x7f0000000040)="279356d06a0ec1df6bdbab", &(0x7f0000000240)=""/82, &(0x7f0000000340)="ebfdf7aa04a2c2818faa84563f52e9cb17f24176fa7cfca1eb323ad48c54be55a8dd1d75e58acf493ad836fffe5e3af567ee3ee4bd13f9619413ac08cc80a2a9124a68de53291592f6e83d178e9dc31e52f6bea66114d2ffa9fc248b94ad77e55601211c9cb4b8a79b56da4d927b76a021b8d48796597011d7d01f0d63fa516aeab87ad8db9a18544f48b76a8bb79cfdfded290fcbe00e1426259c50591d011ac87e32e0d6ceea8fad41969a4e55f7c288394cbcba8d774090c7a94f9a927fa4ab761fdddf", &(0x7f0000000740)="9e7ee4449c3a504434cd0b369db958e84c320f86286bcb132bafd229ac7d47ea743ca3a5a672ce56af70c42745f7d63504c1fa66af6db6d28b1dd0502b732cfae65d57fd025922bf2956378229138074eaa6ab8710748e87094df28e7e290caedde75185033853925f5801f03d79b0b2639a9c8732eae2e9e2f7bd8315d33d72b4916206ac1a006ab106ff530d0388d0770084531d8075f661abba0725c2833255fde99189cc0e72212efe058808f675df134a84cfaeb2f361f88951080e12455bd0d2ca8df6f37621919523f713162741c666f40733", 0x300000, r2}, 0x38) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x7}, 0x1c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x8659, @empty, 0x102}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000280)=0x7ff, 0x4) recvfrom$inet6(r3, 0x0, 0x0, 0x2, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111be000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x400, 0xce, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300), 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") listxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x100000) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 1 (id=9478): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x8025000, &(0x7f00000001c0)="9a8ba85b1dbf53690c6e3a39679c4be13983836bc77fbba5ef0a5709e9c915712c949b4b2c58711921914b6ca4d54a28a48f33709be03a0ead1b7ec6d2a84c14123d09c6159ff4ca2c8599160058", 0x4e, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)="f87a1295b74f39983ce4999e545975034726c4e410412a2121ccaa9ccdd6f7bab1bbaec03a4768b7205e24b3cb1aa16be7eef763a924e6c6189793a564fdb2b04504098010e2ac3cb14fe07407622be285232e0c2cfd5fd93fef03fdae34432865de2bfc91d088c8d750f336c3aa057de6ceff4e9020e6ab12311d93fd2ef49a22c7a37d3d8da085501c86192e8b99082be9bad5effe4a78e816a59b9f") unshare(0x22020600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.624472][ T6664] IPVS: stop unused estimator thread 0... [ 523.684310][T30197] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.729843][ T6664] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.763804][ T6664] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.786304][ T6664] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.806245][ T1292] __nla_validate_parse: 7 callbacks suppressed [ 523.806293][ T1292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8605'. [ 523.843056][ T1292] netlink: 'syz.1.8605': attribute type 1 has an invalid length. [ 523.856488][ T1300] loop0: detected capacity change from 0 to 512 [ 523.880112][ T1300] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 523.910868][ T1300] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.8609: corrupted xattr entries [ 523.954122][ T1300] EXT4-fs (loop0): Remounting filesystem read-only [ 523.961193][ T1300] EXT4-fs (loop0): 1 truncate cleaned up [ 523.967425][ T1300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.976725][ T1308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8611'. [ 524.000358][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.010559][ T1272] netlink: 'syz.8.8598': attribute type 13 has an invalid length. [ 524.060027][ T1308] team0: Port device team_slave_0 removed [ 524.221947][ T1343] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 524.266284][ T1269] delete_channel: no stack [ 524.450602][ T1373] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 524.528099][ T1380] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pid=1380 comm=syz.1.8628 [ 524.553598][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 524.692249][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 524.740183][ T1399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4114 sclass=netlink_route_socket pid=1399 comm=syz.6.8631 [ 524.773351][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 524.882823][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 524.947529][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 525.077791][ T1423] openvswitch: netlink: Flow key attr not present in new flow. [ 525.110253][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 525.169204][ T1393] cgroup: fork rejected by pids controller in /syz1 [ 525.185897][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 525.312009][ T1386] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1386 comm=syz.8.8629 [ 525.445015][ T1459] sch_fq: defrate 4294967295 ignored. [ 525.719514][ T1489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8646'. [ 525.790434][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8650'. [ 525.872891][ T1496] loop8: detected capacity change from 0 to 2048 [ 525.986756][ T1520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8657'. [ 525.998588][ T1519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8658'. [ 526.019618][ T1519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8658'. [ 526.050670][ T1519] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8658'. [ 526.187429][ T1538] loop8: detected capacity change from 0 to 512 [ 526.196921][ T1538] ext4: Unknown parameter '.' [ 526.286915][ T1542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8666'. [ 526.297380][ T1542] 9p: Bad value for 'rfdno' [ 526.318462][ T1542] loop0: detected capacity change from 0 to 2048 [ 526.347588][ T1542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.361116][ T1542] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.396016][ T1555] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8667'. [ 526.417703][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.524569][ T1564] pimreg: entered allmulticast mode [ 526.532271][ T1564] pimreg: left allmulticast mode [ 526.590682][ T1568] loop8: detected capacity change from 0 to 4096 [ 526.617670][ T1564] loop0: detected capacity change from 0 to 512 [ 526.641405][ T1564] msdos filesystem being mounted at /213/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 526.659550][ T1568] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.739928][ T1568] netlink: 'syz.8.8673': attribute type 21 has an invalid length. [ 526.747887][ T1568] netlink: 'syz.8.8673': attribute type 1 has an invalid length. [ 527.210883][ T1605] FAULT_INJECTION: forcing a failure. [ 527.210883][ T1605] name failslab, interval 1, probability 0, space 0, times 0 [ 527.226303][ T1605] CPU: 0 UID: 0 PID: 1605 Comm: syz.1.8684 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 527.226344][ T1605] Tainted: [W]=WARN [ 527.226352][ T1605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 527.226366][ T1605] Call Trace: [ 527.226372][ T1605] [ 527.226382][ T1605] __dump_stack+0x1d/0x30 [ 527.226410][ T1605] dump_stack_lvl+0x95/0xd0 [ 527.226433][ T1605] dump_stack+0x15/0x1b [ 527.226452][ T1605] should_fail_ex+0x263/0x280 [ 527.226475][ T1605] should_failslab+0x8c/0xb0 [ 527.226498][ T1605] kmem_cache_alloc_noprof+0x68/0x490 [ 527.226520][ T1605] ? mas_alloc_nodes+0x1a2/0x210 [ 527.226547][ T1605] mas_alloc_nodes+0x1a2/0x210 [ 527.226572][ T1605] mas_preallocate+0x2ca/0x510 [ 527.226601][ T1605] __split_vma+0x240/0x660 [ 527.226636][ T1605] ? mas_find+0x5d5/0x700 [ 527.226662][ T1605] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 527.226699][ T1605] mmap_region+0x725/0x1aa0 [ 527.226773][ T1605] ? selinux_file_open+0x2e6/0x330 [ 527.226849][ T1605] do_mmap+0x9b2/0xbd0 [ 527.226885][ T1605] vm_mmap_pgoff+0x183/0x2d0 [ 527.226911][ T1605] ksys_mmap_pgoff+0xc1/0x310 [ 527.226934][ T1605] ? __x64_sys_mmap+0x49/0x70 [ 527.226964][ T1605] x64_sys_call+0x16bb/0x3000 [ 527.226995][ T1605] do_syscall_64+0xc0/0x2a0 [ 527.227024][ T1605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.227047][ T1605] RIP: 0033:0x7f2bbbedacb9 [ 527.227065][ T1605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.227108][ T1605] RSP: 002b:00007f2bba937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 527.227138][ T1605] RAX: ffffffffffffffda RBX: 00007f2bbc155fa0 RCX: 00007f2bbbedacb9 [ 527.227158][ T1605] RDX: 0000000002000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 527.227176][ T1605] RBP: 00007f2bba937090 R08: ffffffffffffffff R09: 0000000000000000 [ 527.227195][ T1605] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 527.227219][ T1605] R13: 00007f2bbc156038 R14: 00007f2bbc155fa0 R15: 00007ffdd7d55948 [ 527.227245][ T1605] [ 527.499670][T29177] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 527.507727][ T1608] loop6: detected capacity change from 0 to 1024 [ 527.521398][T29177] EXT4-fs error (device loop8): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 527.522408][ T1608] EXT4-fs: Ignoring removed mblk_io_submit option [ 527.566318][ T1608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 527.581900][ T1608] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.597875][T32515] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.609248][ T1608] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.8686: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 527.629989][ T1608] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8686: couldn't read orphan inode 11 (err -117) [ 527.650989][ T1608] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.694263][ T1608] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8686: Invalid block bitmap block 0 in block_group 0 [ 527.709504][ T1622] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.719535][ T1622] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.730495][ T1608] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8686: Failed to acquire dquot type 0 [ 527.785700][ T1622] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.795647][ T1622] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.824587][ T6664] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm kworker/u8:28: Invalid inode table block 8589934593 in block_group 0 [ 527.846548][ T1628] pimreg: entered allmulticast mode [ 527.861851][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.863158][ T1628] pimreg: left allmulticast mode [ 527.914455][ T1622] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.925114][ T1622] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.978544][ T1634] loop6: detected capacity change from 0 to 512 [ 527.995199][ T1622] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.005263][ T1622] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.021530][ T1634] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 528.051759][ T1634] EXT4-fs (loop6): 1 orphan inode deleted [ 528.057753][ T1634] EXT4-fs (loop6): 1 truncate cleaned up [ 528.064199][ T1634] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.128919][ T29] kauditd_printk_skb: 364 callbacks suppressed [ 528.128953][ T29] audit: type=1326 audit(3916804278.442:16507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz.3.8695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f5cf3acb9 code=0x0 [ 528.162078][ T6664] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.171192][ T6664] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.196728][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.206033][ T6664] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.214384][ T6664] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.376514][T25531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.388096][T25531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.399337][T25531] bond0 (unregistering): Released all slaves [ 528.410140][T25531] bond1 (unregistering): Released all slaves [ 528.419938][T25531] bond2 (unregistering): Released all slaves [ 528.429874][ T6664] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.438725][ T6664] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.485087][ T6664] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 528.493499][ T6664] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.588342][ T1633] ip6_vti0 speed is unknown, defaulting to 1000 [ 528.634295][ T1672] loop0: detected capacity change from 0 to 512 [ 528.662329][ T1672] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 528.671525][ T1672] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 528.686320][ T29] audit: type=1400 audit(3916804279.019:16508): avc: denied { create } for pid=1676 comm="syz.3.8704" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 528.717208][ T1672] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 528.725803][ T1672] System zones: 0-2, 18-18, 34-35 [ 528.769083][ T29] audit: type=1400 audit(3916804279.103:16509): avc: denied { unlink } for pid=26492 comm="syz-executor" name="file0" dev="tmpfs" ino=2328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 528.813674][ T1672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 528.861812][T25531] hsr_slave_0: left promiscuous mode [ 528.887670][T25531] hsr_slave_1: left promiscuous mode [ 528.902499][ T1660] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 528.909860][T25531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.930647][ T29] audit: type=1400 audit(3916804279.166:16510): avc: denied { read } for pid=1680 comm="syz.6.8705" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 528.955408][ T29] audit: type=1400 audit(3916804279.166:16511): avc: denied { open } for pid=1680 comm="syz.6.8705" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 528.979301][ T29] audit: type=1400 audit(3916804279.250:16512): avc: denied { remount } for pid=1659 comm="syz.0.8702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 529.017067][ T1660] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 529.028275][ T1681] __nla_validate_parse: 4 callbacks suppressed [ 529.028292][ T1681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8705'. [ 529.044906][ T1660] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 529.071793][ T1698] sctp: [Deprecated]: syz.3.8709 (pid 1698) Use of int in max_burst socket option. [ 529.071793][ T1698] Use struct sctp_assoc_value instead [ 529.087267][ T1660] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #2: block 3: comm syz.0.8702: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 529.095978][ T1693] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8705'. [ 529.123766][ T1660] EXT4-fs error (device loop0) in ext4_delete_entry:2737: Corrupt filesystem [ 529.154299][T25531] team0 (unregistering): Port device team_slave_1 removed [ 529.175480][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.212707][ T1705] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8705'. [ 529.231828][T25531] team0 (unregistering): Port device team_slave_0 removed [ 529.312959][ T1709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8712'. [ 529.402176][ T1711] pimreg: entered allmulticast mode [ 529.413974][ T6664] smc: removing ib device syz0 [ 529.429254][ T1711] pimreg: left allmulticast mode [ 529.509526][ T29] audit: type=1326 audit(3916804279.880:16513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1710 comm="syz.1.8713" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2bbbedacb9 code=0x0 [ 529.788851][ T1633] chnl_net:caif_netlink_parms(): no params data found [ 529.817550][ T1737] loop6: detected capacity change from 0 to 128 [ 529.842375][ T1737] msdos filesystem being mounted at /89/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 529.888604][ T1737] bio_check_eod: 26 callbacks suppressed [ 529.888627][ T1737] syz.6.8717: attempt to access beyond end of device [ 529.888627][ T1737] loop6: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 529.927454][ T1737] syz.6.8717: attempt to access beyond end of device [ 529.927454][ T1737] loop6: rw=2049, sector=146, nr_sectors = 8 limit=128 [ 529.952404][ T1737] syz.6.8717: attempt to access beyond end of device [ 529.952404][ T1737] loop6: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 529.966952][ T1737] buffer_io_error: 19 callbacks suppressed [ 529.966974][ T1737] Buffer I/O error on dev loop6, logical block 76, lost async page write [ 529.985365][ T1737] syz.6.8717: attempt to access beyond end of device [ 529.985365][ T1737] loop6: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 530.004808][ T1737] syz.6.8717: attempt to access beyond end of device [ 530.004808][ T1737] loop6: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 530.018827][ T1737] Buffer I/O error on dev loop6, logical block 88, lost async page write [ 530.039302][ T1737] syz.6.8717: attempt to access beyond end of device [ 530.039302][ T1737] loop6: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 530.084916][ T1737] syz.6.8717: attempt to access beyond end of device [ 530.084916][ T1737] loop6: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 530.100119][ T1737] Buffer I/O error on dev loop6, logical block 92, lost async page write [ 530.112885][ T1737] syz.6.8717: attempt to access beyond end of device [ 530.112885][ T1737] loop6: rw=2049, sector=202, nr_sectors = 8 limit=128 [ 530.130614][ T1633] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.138851][ T1633] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.152417][ T1633] bridge_slave_0: entered allmulticast mode [ 530.160714][ T1737] syz.6.8717: attempt to access beyond end of device [ 530.160714][ T1737] loop6: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 530.178560][ T1737] Buffer I/O error on dev loop6, logical block 104, lost async page write [ 530.190170][ T1633] bridge_slave_0: entered promiscuous mode [ 530.198175][ T1633] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.205873][ T1633] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.232286][ T1633] bridge_slave_1: entered allmulticast mode [ 530.238628][ T1737] syz.6.8717: attempt to access beyond end of device [ 530.238628][ T1737] loop6: rw=2049, sector=210, nr_sectors = 8 limit=128 [ 530.273999][ T1633] bridge_slave_1: entered promiscuous mode [ 530.316130][ T1737] Buffer I/O error on dev loop6, logical block 108, lost async page write [ 530.349086][ T29] audit: type=1400 audit(3916804280.762:16514): avc: denied { write } for pid=1757 comm="syz.1.8724" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 530.376234][ T1737] Buffer I/O error on dev loop6, logical block 120, lost async page write [ 530.400906][ T1633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.412467][ T1737] Buffer I/O error on dev loop6, logical block 124, lost async page write [ 530.432489][ T1737] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 530.444433][ T1633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.458243][ T1737] Buffer I/O error on dev loop6, logical block 84, lost async page write [ 530.506886][ T1633] team0: Port device team_slave_0 added [ 530.522947][ T1737] Buffer I/O error on dev loop6, logical block 112, lost async page write [ 530.566641][ T1779] loop0: detected capacity change from 0 to 128 [ 530.570078][ T1633] team0: Port device team_slave_1 added [ 530.647759][ T1633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.652878][ T29] audit: type=1400 audit(3916804281.077:16515): avc: denied { ioctl } for pid=1783 comm="syz.0.8730" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 530.655001][ T1633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.707774][ T1633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.767777][ T1633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.775868][ T1633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.802122][ T1633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.839787][ T1633] hsr_slave_0: entered promiscuous mode [ 530.847074][ T1633] hsr_slave_1: entered promiscuous mode [ 530.873200][ T1789] ip6_vti0 speed is unknown, defaulting to 1000 [ 530.913258][ T29] audit: type=1400 audit(3916804281.360:16516): avc: denied { setopt } for pid=1795 comm="syz.6.8735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 530.917605][ T1796] netlink: 'syz.6.8735': attribute type 1 has an invalid length. [ 531.014346][ T1796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 531.035764][ T1804] ip6erspan0: entered promiscuous mode [ 531.046906][ T1804] bond1: (slave ip6erspan0): making interface the new active one [ 531.056828][ T1804] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 531.078452][ T1819] loop0: detected capacity change from 0 to 1024 [ 531.091435][ T1819] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 531.107206][ T1819] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.117997][ T1813] macvlan2: entered promiscuous mode [ 531.128147][ T1819] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.8739: inode has both inline data and extents flags [ 531.132727][ T1813] bond1: entered promiscuous mode [ 531.154544][ T1819] EXT4-fs (loop0): Remounting filesystem read-only [ 531.162201][ T1819] netlink: 'syz.0.8739': attribute type 21 has an invalid length. [ 531.170125][ T1819] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8739'. [ 531.177138][ T1813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 531.190387][ T1813] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 531.211056][ T1826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8739'. [ 531.220022][ T1813] bond1: left promiscuous mode [ 531.280420][ T1819] netlink: 'syz.0.8739': attribute type 5 has an invalid length. [ 531.288491][ T1819] netlink: 'syz.0.8739': attribute type 6 has an invalid length. [ 531.296524][ T1819] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8739'. [ 531.345230][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 531.397873][ T1833] loop0: detected capacity change from 0 to 1024 [ 531.442393][ T1833] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #2: comm syz.0.8741: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 531.475443][ T1836] syzkaller0: entered promiscuous mode [ 531.481664][ T1836] syzkaller0: entered allmulticast mode [ 531.490519][ T1833] EXT4-fs (loop0): get root inode failed [ 531.496674][ T1833] EXT4-fs (loop0): mount failed [ 531.519076][ T1837] tipc: Started in network mode [ 531.524221][ T1837] tipc: Node identity 7a53910799c1, cluster identity 4711 [ 531.532528][ T1837] tipc: Enabled bearer , priority 0 [ 531.550974][ T1833] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8741'. [ 531.585562][ T1836] tipc: Enabling of bearer rejected, already enabled [ 531.593928][ T1838] loop6: detected capacity change from 0 to 736 [ 531.594320][ T1838] iso9660: Unexpected value for 'hide' [ 531.642896][ T1834] tipc: Resetting bearer [ 531.660412][ T1834] tipc: Disabling bearer [ 531.841579][ T1871] netlink: 'syz.3.8751': attribute type 1 has an invalid length. [ 531.854028][ T1633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 531.889523][ T1881] selinux_netlink_send: 2 callbacks suppressed [ 531.889544][ T1881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58777 sclass=netlink_route_socket pid=1881 comm=syz.0.8753 [ 531.897565][ T1633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 531.952332][ T1881] loop0: detected capacity change from 0 to 512 [ 531.961072][ T1633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 531.980983][ T1881] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 531.995322][ T1889] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1889 comm=syz.6.8750 [ 531.998968][ T1633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 532.024579][ T1881] EXT4-fs error (device loop0): ext4_get_journal_inode:5849: comm syz.0.8753: inode #1: comm syz.0.8753: iget: illegal inode # [ 532.052687][ T1881] EXT4-fs (loop0): no journal found [ 532.058059][ T1881] EXT4-fs (loop0): can't get journal size [ 532.075467][ T1881] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 532.093617][ T1881] EXT4-fs (loop0): failed to initialize system zone (-22) [ 532.100994][ T1881] EXT4-fs (loop0): mount failed [ 532.118832][ T1881] netlink: 'syz.0.8753': attribute type 2 has an invalid length. [ 532.127397][ T1881] netlink: 'syz.0.8753': attribute type 1 has an invalid length. [ 532.198654][ T1633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.227663][ T1913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8758'. [ 532.261758][ T1633] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.293708][T30191] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.301310][T30191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.345349][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.352559][ T6664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.526683][ T1952] loop6: detected capacity change from 0 to 2048 [ 532.562662][ T1952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.588947][ T1952] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.598689][ T1963] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 532.598689][ T1963] The task syz.3.8766 (1963) triggered the difference, watch for misbehavior. [ 532.625782][ T1964] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #16: comm syz.6.8769: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 532.675663][ T1964] EXT4-fs (loop6): Remounting filesystem read-only [ 532.692547][ T1633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.752052][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.915583][ T1633] veth0_vlan: entered promiscuous mode [ 532.934919][ T1633] veth1_vlan: entered promiscuous mode [ 532.989716][ T1633] veth0_macvtap: entered promiscuous mode [ 533.011541][ T1633] veth1_macvtap: entered promiscuous mode [ 533.059261][ T1633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.072065][ T1633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.081113][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 533.081135][ T29] audit: type=1326 audit(2000000001.154:16596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1972 comm="syz.0.8771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 533.132433][ T6683] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.160387][ T2001] loop0: detected capacity change from 0 to 128 [ 533.168263][ T6683] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.184780][ T6683] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.198274][ T6683] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.221821][ T2001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8777'. [ 533.262103][ T2001] lo: Caught tx_queue_len zero misconfig [ 533.377407][ T2016] loop2: detected capacity change from 0 to 1024 [ 533.403483][ T2016] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 533.403483][ T2016] [ 533.403504][ T2016] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 533.652765][ T2027] loop2: detected capacity change from 0 to 512 [ 533.693155][ T2027] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 533.721157][ T2027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 533.774736][ T2027] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.8779: Allocating blocks 41-42 which overlap fs metadata [ 533.781559][ T2027] Quota error (device loop2): write_blk: dquota write failed [ 533.781864][ T2027] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 533.785129][ T2027] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.8779: Allocating blocks 41-42 which overlap fs metadata [ 533.788007][ T2027] Quota error (device loop2): write_blk: dquota write failed [ 533.805101][ T2027] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 533.805356][ T2027] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.8779: Failed to acquire dquot type 1 [ 533.809815][ T2027] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 533.810553][ T2027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.8779: corrupted inode contents [ 533.811906][ T2027] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.8779: mark_inode_dirty error [ 533.813134][ T2027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.8779: corrupted inode contents [ 533.821846][ T2027] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.8779: mark_inode_dirty error [ 533.825339][ T2027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.8779: corrupted inode contents [ 533.826162][ T2027] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 533.836697][ T2027] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.8779: corrupted inode contents [ 533.842224][ T2027] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.8779: mark_inode_dirty error [ 533.843307][ T2027] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 533.858210][ T2027] EXT4-fs (loop2): 1 truncate cleaned up [ 533.899277][ T2027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.939353][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.021305][ T29] audit: type=1400 audit(2000000002.131:16597): avc: denied { module_load } for pid=2048 comm="syz.0.8783" path="/sys/power/wakeup_count" dev="sysfs" ino=216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 534.119448][ T2050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8783'. [ 534.261482][ T2060] bridge0: port 3(veth3) entered blocking state [ 534.261581][ T2060] bridge0: port 3(veth3) entered disabled state [ 534.261759][ T2060] veth3: entered allmulticast mode [ 534.268269][ T2060] veth3: entered promiscuous mode [ 534.269246][ T2074] dummy0: entered allmulticast mode [ 534.269358][ T2074] dummy0: left allmulticast mode [ 534.275798][ T29] audit: type=1400 audit(2000000002.404:16598): avc: denied { bind } for pid=2059 comm="syz.2.8784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.280415][ T29] audit: type=1400 audit(2000000002.414:16599): avc: denied { setopt } for pid=2059 comm="syz.2.8784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 534.318959][ T2060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.352905][ T2084] xt_TPROXY: Can be used only with -p tcp or -p udp [ 534.419613][ T2044] ip6_vti0 speed is unknown, defaulting to 1000 [ 534.807609][T30191] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.818769][T30191] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.831616][ T2108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8791'. [ 534.874999][ T2044] chnl_net:caif_netlink_parms(): no params data found [ 534.890946][ T2111] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8792'. [ 534.897742][ T2116] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8792'. [ 534.936707][T30191] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.948226][T30191] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.004427][T30191] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.015063][T30191] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.051521][ T29] audit: type=1400 audit(2000000003.222:16600): avc: denied { ioctl } for pid=2122 comm="syz.6.8796" path="socket:[111434]" dev="sockfs" ino=111434 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 535.086110][ T2126] netlink: 'syz.3.8793': attribute type 1 has an invalid length. [ 535.133024][T30191] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.149956][T30191] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.189499][ T2136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8799'. [ 535.190130][ T2044] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.208309][ T2044] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.220208][ T2044] bridge_slave_0: entered allmulticast mode [ 535.227976][ T2044] bridge_slave_0: entered promiscuous mode [ 535.237636][ T2141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8793'. [ 535.254799][ T2140] loop6: detected capacity change from 0 to 1024 [ 535.257888][ T2126] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 535.263443][ T2140] EXT4-fs: Ignoring removed bh option [ 535.297257][ T2126] bond7: (slave batadv1): making interface the new active one [ 535.312018][ T2140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.323603][ T2126] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 535.341878][ T2060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.356596][ T2044] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.363850][ T2044] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.385007][ T2044] bridge_slave_1: entered allmulticast mode [ 535.392169][ T2044] bridge_slave_1: entered promiscuous mode [ 535.425270][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.445764][ T2141] bond7 (unregistering): (slave batadv1): Releasing active interface [ 535.462782][ T2141] bond7 (unregistering): Released all slaves [ 535.529113][T30191] bond_slave_0: left promiscuous mode [ 535.534847][T30191] bond_slave_1: left promiscuous mode [ 535.708416][T30191] dvmrp6 (unregistering): left allmulticast mode [ 535.740383][ T2186] FAULT_INJECTION: forcing a failure. [ 535.740383][ T2186] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 535.754852][ T2186] CPU: 1 UID: 0 PID: 2186 Comm: syz.0.8804 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.754888][ T2186] Tainted: [W]=WARN [ 535.754896][ T2186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 535.754912][ T2186] Call Trace: [ 535.754920][ T2186] [ 535.754929][ T2186] __dump_stack+0x1d/0x30 [ 535.754959][ T2186] dump_stack_lvl+0x95/0xd0 [ 535.755050][ T2186] dump_stack+0x15/0x1b [ 535.755077][ T2186] should_fail_ex+0x263/0x280 [ 535.755143][ T2186] should_fail_alloc_page+0xf2/0x100 [ 535.755173][ T2186] __alloc_frozen_pages_noprof+0x108/0x350 [ 535.755209][ T2186] alloc_pages_mpol+0xb3/0x260 [ 535.755301][ T2186] alloc_pages_noprof+0x8f/0x130 [ 535.755388][ T2186] pte_alloc_one+0x1e/0xd0 [ 535.755500][ T2186] handle_mm_fault+0x15b1/0x3030 [ 535.755547][ T2186] ? __rcu_read_unlock+0x4e/0x70 [ 535.755639][ T2186] ? check_vma_flags+0x2e0/0x330 [ 535.755673][ T2186] __get_user_pages+0x1023/0x1ea0 [ 535.755795][ T2186] __mm_populate+0x242/0x390 [ 535.755834][ T2186] vm_mmap_pgoff+0x23b/0x2d0 [ 535.755861][ T2186] ksys_mmap_pgoff+0xc1/0x310 [ 535.755992][ T2186] ? __x64_sys_mmap+0x49/0x70 [ 535.756102][ T2186] x64_sys_call+0x16bb/0x3000 [ 535.756128][ T2186] do_syscall_64+0xc0/0x2a0 [ 535.756162][ T2186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.756222][ T2186] RIP: 0033:0x7fa2bb1facb9 [ 535.756282][ T2186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.756307][ T2186] RSP: 002b:00007fa2b9c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 535.756332][ T2186] RAX: ffffffffffffffda RBX: 00007fa2bb475fa0 RCX: 00007fa2bb1facb9 [ 535.756349][ T2186] RDX: 0000000002000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 535.756365][ T2186] RBP: 00007fa2b9c57090 R08: ffffffffffffffff R09: 0000000000000000 [ 535.756381][ T2186] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 535.756410][ T2186] R13: 00007fa2bb476038 R14: 00007fa2bb475fa0 R15: 00007ffdcb1d2ff8 [ 535.756436][ T2186] [ 536.001103][T30191] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 536.031090][T30191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.042775][T30191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.053771][T30191] bond0 (unregistering): Released all slaves [ 536.062257][T30191] bond1 (unregistering): Released all slaves [ 536.072044][T30191] bond2 (unregistering): Released all slaves [ 536.084715][T30191] bond3 (unregistering): left allmulticast mode [ 536.091182][T30191] bond3 (unregistering): left promiscuous mode [ 536.101811][T30191] bond3 (unregistering): Released all slaves [ 536.111770][ T2044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.128105][ T2060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.140321][ T2190] netlink: 'syz.0.8806': attribute type 17 has an invalid length. [ 536.148502][ T2190] netlink: 'syz.0.8806': attribute type 16 has an invalid length. [ 536.157351][ T2190] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8806'. [ 536.168669][ T2173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 536.184599][T30191] tipc: Disabling bearer [ 536.189930][T30191] tipc: Left network mode [ 536.196781][ T2044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.235527][ T2060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.256305][ T2195] loop6: detected capacity change from 0 to 256 [ 536.280331][ T2195] FAT-fs (loop6): Directory bread(block 64) failed [ 536.289904][ T2195] FAT-fs (loop6): Directory bread(block 65) failed [ 536.296784][ T2195] FAT-fs (loop6): Directory bread(block 66) failed [ 536.304492][ T2195] FAT-fs (loop6): Directory bread(block 67) failed [ 536.311735][ T2195] FAT-fs (loop6): Directory bread(block 68) failed [ 536.324388][ T2044] team0: Port device team_slave_0 added [ 536.334390][ T2195] FAT-fs (loop6): Directory bread(block 69) failed [ 536.342708][ T2197] pimreg: entered allmulticast mode [ 536.349808][ T2197] pimreg: left allmulticast mode [ 536.358775][ T2195] FAT-fs (loop6): Directory bread(block 70) failed [ 536.366604][ T2195] FAT-fs (loop6): Directory bread(block 71) failed [ 536.373908][ T2195] FAT-fs (loop6): Directory bread(block 72) failed [ 536.382448][ T2044] team0: Port device team_slave_1 added [ 536.409033][ T2195] FAT-fs (loop6): Directory bread(block 73) failed [ 536.418225][T30191] hsr_slave_0: left promiscuous mode [ 536.427865][T30191] hsr_slave_1: left promiscuous mode [ 536.434027][T30191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.441541][T30191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.449454][T30191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.456977][T30191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.464785][ T29] audit: type=1326 audit(2000000004.703:16601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.3.8808" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2f5cf3acb9 code=0x0 [ 536.493297][T30191] batadv0: left promiscuous mode [ 536.503629][T30191] veth1_macvtap: left promiscuous mode [ 536.516200][ T2202] netlink: 'syz.0.8809': attribute type 13 has an invalid length. [ 536.532309][T30191] veth0_macvtap: left promiscuous mode [ 536.544143][T30191] veth1_vlan: left promiscuous mode [ 536.552904][T30191] veth0_vlan: left promiscuous mode [ 536.663912][ T2221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8810'. [ 536.730843][ T2044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.738017][ T2044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.764092][ T2044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.850021][T25531] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.859462][ T2044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.866716][ T2044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.892803][ T2044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.922308][T25531] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.965565][ T6664] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.974155][ T2242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8811'. [ 536.987373][ T2044] hsr_slave_0: entered promiscuous mode [ 536.994515][ T2044] hsr_slave_1: entered promiscuous mode [ 537.001272][ T2044] debugfs: 'hsr0' already exists in 'hsr' [ 537.007230][ T2044] Cannot create hsr debugfs directory [ 537.026328][ T6664] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.290311][ T2272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8818'. [ 537.328886][ T2262] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 537.355066][ T2262] bond2 (unregistering): Released all slaves [ 537.625133][ T2044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 537.654680][ T2044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 537.680118][ T2044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 537.691846][ T2044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 537.804690][ T2342] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 537.812597][ T2342] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 537.850701][ T2044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.884872][ T2044] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.927066][T25531] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.934716][T25531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.944295][ T2363] netlink: 'syz.2.8837': attribute type 1 has an invalid length. [ 537.991926][T25531] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.999294][T25531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.024659][ T2376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.032342][ T2376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.056770][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 538.056793][ T29] audit: type=1400 audit(2000000006.372:16604): avc: denied { ioctl } for pid=2369 comm="syz.0.8839" path="socket:[113114]" dev="sockfs" ino=113114 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 538.090790][ T2376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.098820][ T2376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.215880][ T2401] bond2: Invalid ad_actor_system MAC address. [ 538.222282][ T2401] bond2: option ad_actor_system: invalid value (4294967295) [ 538.231871][ T2401] bond2 (unregistering): Released all slaves [ 538.300037][ T2044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.363077][ T2421] netlink: 'syz.0.8850': attribute type 3 has an invalid length. [ 538.379414][ T2421] netlink: 'syz.0.8850': attribute type 19 has an invalid length. [ 538.387875][ T2421] netlink: 'syz.0.8850': attribute type 20 has an invalid length. [ 538.440745][ T2427] loop6: detected capacity change from 0 to 512 [ 538.454318][ T29] audit: type=1400 audit(2000000006.792:16605): avc: denied { mount } for pid=2423 comm="syz.3.8851" name="/" dev="autofs" ino=112125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 538.534980][ T2427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.561245][ T2434] loop0: detected capacity change from 0 to 512 [ 538.588443][ T2434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.602819][ T2427] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.613751][ T2044] veth0_vlan: entered promiscuous mode [ 538.624714][ T2044] veth1_vlan: entered promiscuous mode [ 538.631506][ T2434] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.643664][ T29] audit: type=1400 audit(2000000006.991:16606): avc: denied { append } for pid=2433 comm="syz.0.8853" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 538.679886][ T2044] veth0_macvtap: entered promiscuous mode [ 538.683384][ T29] audit: type=1400 audit(2000000007.012:16607): avc: denied { setattr } for pid=2433 comm="syz.0.8853" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.704359][ T2044] veth1_macvtap: entered promiscuous mode [ 538.716516][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.729733][ T2427] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 538.745042][ T2427] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 538.757347][ T2427] EXT4-fs (loop6): This should not happen!! Data will be lost [ 538.757347][ T2427] [ 538.762379][ T2044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.767441][ T2427] EXT4-fs (loop6): Total free blocks count 0 [ 538.767465][ T2427] EXT4-fs (loop6): Free/Dirty block details [ 538.767550][ T2427] EXT4-fs (loop6): free_blocks=65280 [ 538.767631][ T2427] EXT4-fs (loop6): dirty_blocks=2 [ 538.767646][ T2427] EXT4-fs (loop6): Block reservation details [ 538.801773][ T2044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.804793][ T2427] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 538.819395][ T2441] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 538.850026][ T6683] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.896048][ T6683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.914205][ T6683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.938801][ T29] audit: type=1400 audit(2000000007.296:16608): avc: denied { write } for pid=2044 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 538.953417][ T6683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.966720][ T29] audit: type=1400 audit(2000000007.296:16609): avc: denied { open } for pid=2044 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 539.015297][ T29] audit: type=1400 audit(2000000007.380:16610): avc: denied { ioctl } for pid=2444 comm="syz.3.8855" path="socket:[113249]" dev="sockfs" ino=113249 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 539.213551][ T29] audit: type=1400 audit(2000000007.579:16611): avc: denied { execmod } for pid=2476 comm="syz.1.8866" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=112249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 539.267447][ T2477] ip6_vti0 speed is unknown, defaulting to 1000 [ 539.291729][ T2478] __nla_validate_parse: 9 callbacks suppressed [ 539.291746][ T2478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8865'. [ 539.307276][ T2478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8865'. [ 539.498368][ T2489] pimreg: entered allmulticast mode [ 539.508084][ T2489] pimreg: left allmulticast mode [ 539.553977][ T2491] netlink: 'syz.6.8869': attribute type 3 has an invalid length. [ 539.563199][ T2491] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8869'. [ 539.573375][ T2491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8869'. [ 539.582448][ T2491] netlink: 'syz.6.8869': attribute type 19 has an invalid length. [ 539.590770][ T2491] netlink: 'syz.6.8869': attribute type 20 has an invalid length. [ 539.785384][ T2500] netlink: 47 bytes leftover after parsing attributes in process `syz.1.8872'. [ 539.820370][ T2496] loop0: detected capacity change from 0 to 512 [ 540.155867][ T2504] loop6: detected capacity change from 0 to 1024 [ 540.187431][ T29] audit: type=1326 audit(2000000008.335:16612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2488 comm="syz.0.8870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2bb1facb9 code=0x0 [ 540.212532][ T2504] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 540.226126][ T2504] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 540.239651][ T2504] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: comm syz.6.8875: lblock 0 mapped to illegal pblock 0 (length 1) [ 540.265704][ T2504] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 540.278279][ T2504] EXT4-fs (loop6): This should not happen!! Data will be lost [ 540.278279][ T2504] [ 540.370014][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 540.420644][ T2534] Invalid ELF header magic: != ELF [ 540.424953][ T29] audit: type=1400 audit(2000000008.849:16613): avc: denied { module_load } for pid=2533 comm="syz.6.8880" path="/125/bus" dev="tmpfs" ino=679 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 540.467368][ T2529] loop2: detected capacity change from 0 to 512 [ 540.501174][ T2529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 540.529777][ T2529] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.8882: Unimplemented hash flags: 0x0001 [ 540.542503][ T2529] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.8882: Corrupt directory, running e2fsck is recommended [ 540.625429][ T2553] pimreg: entered allmulticast mode [ 540.631648][ T2553] pimreg: left allmulticast mode [ 540.710544][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.800342][ T2560] loop2: detected capacity change from 0 to 1764 [ 540.851924][ T2563] loop0: detected capacity change from 0 to 256 [ 540.911908][ T2567] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8894'. [ 540.965457][ T2572] loop2: detected capacity change from 0 to 1024 [ 540.988954][ T2572] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 541.024218][ T2572] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.8897: lblock 2 mapped to illegal pblock 2 (length 1) [ 541.024351][ T2572] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.8897: lblock 0 mapped to illegal pblock 48 (length 1) [ 541.024507][ T2572] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.8897: Failed to acquire dquot type 0 [ 541.024686][ T2572] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 541.024770][ T2572] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.8897: mark_inode_dirty error [ 541.024875][ T2572] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 541.024905][ T2572] EXT4-fs (loop2): 1 orphan inode deleted [ 541.025592][ T2572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.053208][T25529] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 541.053385][T25529] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 541.070844][ T2573] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8894'. [ 541.101520][ T2578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8897'. [ 541.512135][ T2597] ip6_vti0 speed is unknown, defaulting to 1000 [ 541.768664][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.781875][T30197] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 541.815586][T30197] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:10: Failed to release dquot type 0 [ 541.833855][ T1633] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 541.850849][ T2597] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8906'. [ 541.860963][ T1633] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 541.884296][ T2622] batadv0: entered promiscuous mode [ 541.900389][ T1633] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 542.272471][ T2647] netlink: 'syz.1.8920': attribute type 2 has an invalid length. [ 542.280278][ T2647] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8920'. [ 542.657810][ T2637] loop6: detected capacity change from 0 to 512 [ 542.685132][ T2637] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 542.712328][ T2637] EXT4-fs (loop6): orphan cleanup on readonly fs [ 542.727259][ T2637] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.8917: Allocating blocks 41-42 which overlap fs metadata [ 542.755368][ T2637] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.8917: Allocating blocks 41-42 which overlap fs metadata [ 542.772623][ T2637] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.8917: Failed to acquire dquot type 1 [ 542.789678][ T2637] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 542.809667][ T2637] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.8917: corrupted inode contents [ 542.826828][ T2637] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.8917: mark_inode_dirty error [ 542.845846][ T2637] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.8917: corrupted inode contents [ 542.860125][ T2637] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.8917: mark_inode_dirty error [ 542.874100][ T2637] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.8917: corrupted inode contents [ 542.894337][ T2637] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 542.905341][ T2637] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.8917: corrupted inode contents [ 542.919553][ T2637] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.8917: mark_inode_dirty error [ 542.933022][ T2637] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 542.945227][ T2637] EXT4-fs (loop6): 1 truncate cleaned up [ 542.981351][ T2637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.006104][ T2637] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.341970][ T2692] hub 6-0:1.0: USB hub found [ 543.349621][ T2692] hub 6-0:1.0: 8 ports detected [ 543.437147][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 543.437168][ T29] audit: type=1400 audit(2000000012.020:16639): avc: denied { name_bind } for pid=2701 comm="syz.6.8933" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 543.472700][ T2702] loop6: detected capacity change from 0 to 512 [ 543.542536][ T2702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.603293][ T29] audit: type=1326 audit(2000000012.188:16640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.627177][ T29] audit: type=1326 audit(2000000012.188:16641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.641559][ T2702] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.651844][ T29] audit: type=1326 audit(2000000012.188:16642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.686391][ T29] audit: type=1326 audit(2000000012.188:16643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.712426][ T29] audit: type=1326 audit(2000000012.188:16644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.736066][ T29] audit: type=1326 audit(2000000012.188:16645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.759928][ T29] audit: type=1326 audit(2000000012.188:16646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.783516][ T29] audit: type=1326 audit(2000000012.198:16647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.807545][ T29] audit: type=1326 audit(2000000012.198:16648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2714 comm="syz.0.8938" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb1facb9 code=0x7ffc0000 [ 543.925246][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.155121][ T2765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8943'. [ 544.379752][ T2765] team1: entered promiscuous mode [ 544.384994][ T2765] team1: entered allmulticast mode [ 544.462847][ T2765] 8021q: adding VLAN 0 to HW filter on device team1 [ 544.472385][ T2791] loop0: detected capacity change from 0 to 512 [ 544.507289][ T2791] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 544.552067][ T2791] EXT4-fs (loop0): orphan cleanup on readonly fs [ 544.601869][ T2791] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.8961: Allocating blocks 41-42 which overlap fs metadata [ 544.677480][ T2791] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.8961: Allocating blocks 41-42 which overlap fs metadata [ 544.703752][ T2791] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.8961: Failed to acquire dquot type 1 [ 544.711890][ T2791] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 544.714517][ T2791] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8961: corrupted inode contents [ 544.716555][ T2791] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.8961: mark_inode_dirty error [ 544.718361][ T2791] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8961: corrupted inode contents [ 544.722667][ T2791] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.8961: mark_inode_dirty error [ 544.724317][ T2791] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8961: corrupted inode contents [ 544.726228][ T2791] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 544.743656][ T2791] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8961: corrupted inode contents [ 544.745708][ T2791] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.8961: mark_inode_dirty error [ 544.746871][ T2791] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 544.749007][ T2791] EXT4-fs (loop0): 1 truncate cleaned up [ 544.780920][ T2791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 544.792380][ T2791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.840359][ T2808] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8965'. [ 544.945972][ T2812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8967'. [ 545.121629][ T2822] loop0: detected capacity change from 0 to 256 [ 545.199429][ T2831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8973'. [ 545.338002][ T2845] bridge0: entered promiscuous mode [ 545.363561][ T2845] bridge0: port 4(macvtap1) entered blocking state [ 545.370380][ T2845] bridge0: port 4(macvtap1) entered disabled state [ 545.403542][ T2845] macvtap1: entered allmulticast mode [ 545.409421][ T2845] bridge0: entered allmulticast mode [ 545.431220][ T2845] macvtap1: left allmulticast mode [ 545.437320][ T2845] bridge0: left allmulticast mode [ 545.460336][ T2845] bridge0: left promiscuous mode [ 545.695095][ T2856] loop0: detected capacity change from 0 to 512 [ 545.739087][ T2847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8973'. [ 545.778909][ T2856] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 546.315248][T30191] bridge_slave_1: left allmulticast mode [ 546.321099][T30191] bridge_slave_1: left promiscuous mode [ 546.326907][T30191] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.335736][T30191] bridge_slave_0: left allmulticast mode [ 546.341824][T30191] bridge_slave_0: left promiscuous mode [ 546.347675][T30191] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.364170][T30191] bond_slave_0: left promiscuous mode [ 546.370087][T30191] bond_slave_1: left promiscuous mode [ 546.473826][T30191] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 546.482704][ T36] SELinux: failure in sel_netif_sid_slow(), invalid network interface (797) [ 546.492966][T30191] ip6gretap1 (unregistering): left allmulticast mode [ 546.505214][T25538] smc: removing ib device syz2 [ 546.543624][ T2872] loop2: detected capacity change from 0 to 128 [ 546.555538][ T2856] EXT4-fs (loop0): orphan cleanup on readonly fs [ 546.574087][ T2872] vfat: Unknown parameter 'dos1xflop_y' [ 546.624836][ T2856] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.8979: Allocating blocks 41-42 which overlap fs metadata [ 546.703609][ T2856] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.8979: Allocating blocks 41-42 which overlap fs metadata [ 546.744001][ T2884] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8989'. [ 546.745337][ T2856] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.8979: Failed to acquire dquot type 1 [ 546.825830][T30191] bond1 (unregistering): (slave macvlan3): Releasing active interface [ 546.835414][ T2856] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 546.856592][ T2856] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8979: corrupted inode contents [ 546.907623][T30191] batman_adv: batadv0: Removing interface: macvlan4 [ 546.924655][ T2856] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.8979: mark_inode_dirty error [ 546.952796][T30191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 546.966568][ T2856] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8979: corrupted inode contents [ 546.998090][ T2856] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.8979: mark_inode_dirty error [ 547.015530][T30191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.024989][ T2856] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8979: corrupted inode contents [ 547.056178][T30191] bond0 (unregistering): Released all slaves [ 547.062556][ T2856] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 547.074158][T30191] bond1 (unregistering): Released all slaves [ 547.111227][ T2856] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.8979: corrupted inode contents [ 547.122636][T30191] bond2 (unregistering): Released all slaves [ 547.148392][ T2856] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.8979: mark_inode_dirty error [ 547.148977][ T36] SELinux: failure in sel_netif_sid_slow(), invalid network interface (797) [ 547.162539][T30191] bond3 (unregistering): Released all slaves [ 547.186597][ T2856] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 547.201871][T30191] bond4 (unregistering): Released all slaves [ 547.213974][ T2856] EXT4-fs (loop0): 1 truncate cleaned up [ 547.226789][T30191] bond5 (unregistering): Released all slaves [ 547.230462][ T2856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 547.256763][ T2856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.299791][T30191] hsr_slave_0: left promiscuous mode [ 547.320719][T30191] hsr_slave_1: left promiscuous mode [ 547.339508][T30191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.346989][T30191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.357673][ T2922] FAULT_INJECTION: forcing a failure. [ 547.357673][ T2922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.370922][ T2922] CPU: 1 UID: 0 PID: 2922 Comm: syz.2.8998 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 547.371050][ T2922] Tainted: [W]=WARN [ 547.371060][ T2922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.371078][ T2922] Call Trace: [ 547.371087][ T2922] [ 547.371096][ T2922] __dump_stack+0x1d/0x30 [ 547.371128][ T2922] dump_stack_lvl+0x95/0xd0 [ 547.371154][ T2922] dump_stack+0x15/0x1b [ 547.371183][ T2922] should_fail_ex+0x263/0x280 [ 547.371209][ T2922] should_fail+0xb/0x20 [ 547.371232][ T2922] should_fail_usercopy+0x1a/0x20 [ 547.371263][ T2922] _copy_from_user+0x1c/0xb0 [ 547.371299][ T2922] __sys_bpf+0x183/0x7b0 [ 547.371410][ T2922] __x64_sys_bpf+0x41/0x50 [ 547.371444][ T2922] x64_sys_call+0x28e1/0x3000 [ 547.371553][ T2922] do_syscall_64+0xc0/0x2a0 [ 547.371604][ T2922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.371693][ T2922] RIP: 0033:0x7faf451bacb9 [ 547.371717][ T2922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.371743][ T2922] RSP: 002b:00007faf43c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.371810][ T2922] RAX: ffffffffffffffda RBX: 00007faf45435fa0 RCX: 00007faf451bacb9 [ 547.371885][ T2922] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 547.371903][ T2922] RBP: 00007faf43c17090 R08: 0000000000000000 R09: 0000000000000000 [ 547.371992][ T2922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.372008][ T2922] R13: 00007faf45436038 R14: 00007faf45435fa0 R15: 00007ffee611a698 [ 547.372037][ T2922] [ 547.561970][T30191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.569654][T30191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.581905][T30191] veth1_macvtap: left promiscuous mode [ 547.596922][T30191] veth0_macvtap: left promiscuous mode [ 547.610870][T30191] veth1_vlan: left promiscuous mode [ 547.625263][T30191] veth0_vlan: left promiscuous mode [ 547.672090][ T2941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9002'. [ 547.862613][T30191] team0 (unregistering): Port device team_slave_1 removed [ 547.873587][T30191] team0 (unregistering): Port device team_slave_0 removed [ 547.897066][ T2966] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 547.897066][ T2966] program syz.6.9008 not setting count and/or reply_len properly [ 547.970421][ T2976] FAULT_INJECTION: forcing a failure. [ 547.970421][ T2976] name failslab, interval 1, probability 0, space 0, times 0 [ 547.983305][ T2976] CPU: 0 UID: 0 PID: 2976 Comm: syz.2.9011 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 547.983374][ T2976] Tainted: [W]=WARN [ 547.983381][ T2976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 547.983398][ T2976] Call Trace: [ 547.983407][ T2976] [ 547.983417][ T2976] __dump_stack+0x1d/0x30 [ 547.983450][ T2976] dump_stack_lvl+0x95/0xd0 [ 547.983490][ T2976] dump_stack+0x15/0x1b [ 547.983517][ T2976] should_fail_ex+0x263/0x280 [ 547.983554][ T2976] should_failslab+0x8c/0xb0 [ 547.983584][ T2976] __kmalloc_noprof+0xb8/0x580 [ 547.983614][ T2976] ? bpf_test_init+0x86/0x130 [ 547.983685][ T2976] bpf_test_init+0x86/0x130 [ 547.983724][ T2976] bpf_prog_test_run_xdp+0x306/0xa10 [ 547.983762][ T2976] ? __rcu_read_unlock+0x4e/0x70 [ 547.983814][ T2976] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 547.983849][ T2976] bpf_prog_test_run+0x204/0x340 [ 547.983874][ T2976] __sys_bpf+0x4c0/0x7b0 [ 547.984025][ T2976] __x64_sys_bpf+0x41/0x50 [ 547.984068][ T2976] x64_sys_call+0x28e1/0x3000 [ 547.984101][ T2976] do_syscall_64+0xc0/0x2a0 [ 547.984231][ T2976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.984262][ T2976] RIP: 0033:0x7faf451bacb9 [ 547.984283][ T2976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.984310][ T2976] RSP: 002b:00007faf43c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.984347][ T2976] RAX: ffffffffffffffda RBX: 00007faf45435fa0 RCX: 00007faf451bacb9 [ 547.984365][ T2976] RDX: 0000000000000050 RSI: 0000200000000c80 RDI: 000000000000000a [ 547.984454][ T2976] RBP: 00007faf43c17090 R08: 0000000000000000 R09: 0000000000000000 [ 547.984471][ T2976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.984486][ T2976] R13: 00007faf45436038 R14: 00007faf45435fa0 R15: 00007ffee611a698 [ 547.984513][ T2976] [ 548.244031][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 548.244054][ T29] audit: type=1326 audit(2000000017.059:16787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.282136][ T29] audit: type=1326 audit(2000000017.101:16788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.312697][ T29] audit: type=1326 audit(2000000017.132:16789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.336630][ T29] audit: type=1326 audit(2000000017.132:16790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.360249][ T29] audit: type=1326 audit(2000000017.143:16791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.383797][ T29] audit: type=1326 audit(2000000017.143:16792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.407902][ T29] audit: type=1326 audit(2000000017.143:16793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.431480][ T29] audit: type=1326 audit(2000000017.143:16794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.455313][ T29] audit: type=1326 audit(2000000017.143:16795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.479184][ T29] audit: type=1326 audit(2000000017.143:16796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2988 comm="syz.6.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32ebd9acb9 code=0x7ffc0000 [ 548.661436][ T36] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 548.669225][ T36] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 548.676880][ T36] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 548.684512][ T36] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 548.691934][ T36] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 548.699895][ T36] hid-generic 0103:0004:0000.0006: unknown main item tag 0x0 [ 548.738568][ T36] hid-generic 0103:0004:0000.0006: hidraw0: HID v0.02 Device [syz0] on syz1 [ 548.782429][T30191] IPVS: stop unused estimator thread 0... [ 548.790271][ T3029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9022'. [ 549.340742][ T3031] loop6: detected capacity change from 0 to 512 [ 549.492707][ T3031] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 549.560439][ T3031] EXT4-fs (loop6): orphan cleanup on readonly fs [ 549.581266][ T3031] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.9024: Allocating blocks 41-42 which overlap fs metadata [ 549.610641][ T3031] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.9024: Allocating blocks 41-42 which overlap fs metadata [ 549.629281][ T3031] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9024: Failed to acquire dquot type 1 [ 549.651027][ T3031] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 549.669975][ T3031] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9024: corrupted inode contents [ 549.687195][ T3031] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.9024: mark_inode_dirty error [ 549.715963][ T3057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3057 comm=syz.2.9030 [ 549.737079][ T3031] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9024: corrupted inode contents [ 549.846381][ T3031] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.9024: mark_inode_dirty error [ 549.861856][ T3031] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9024: corrupted inode contents [ 549.882481][ T3031] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 549.905317][ T3031] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9024: corrupted inode contents [ 549.950581][ T3088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9040'. [ 550.001154][ T3031] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.9024: mark_inode_dirty error [ 550.065753][ T3031] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 550.107915][ T3031] EXT4-fs (loop6): 1 truncate cleaned up [ 550.128739][ T3031] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 550.214909][ T3031] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.260859][ T3122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3122 comm=syz.3.9052 [ 550.289339][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9052'. [ 550.326827][ T3122] hsr_slave_1 (unregistering): left promiscuous mode [ 550.370383][ T3128] loop0: detected capacity change from 0 to 1024 [ 550.378183][ T3128] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 550.387422][ T3128] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 550.399554][ T3128] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 550.412453][ T3128] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 550.428147][ T3128] EXT4-fs (loop0): invalid journal inode [ 550.434089][ T3128] EXT4-fs (loop0): can't get journal size [ 550.440805][ T3128] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.9055: blocks 2-2 from inode overlap system zone [ 550.456390][ T3128] EXT4-fs (loop0): failed to initialize system zone (-117) [ 550.466989][ T3128] EXT4-fs (loop0): mount failed [ 550.935835][ T3160] netlink: 256 bytes leftover after parsing attributes in process `syz.0.9066'. [ 550.945418][ T3160] netlink: 72 bytes leftover after parsing attributes in process `syz.0.9066'. [ 551.053638][ T3164] pimreg: entered allmulticast mode [ 551.099728][ T3173] loop0: detected capacity change from 0 to 4096 [ 551.119304][ T3177] pimreg: left allmulticast mode [ 551.134848][ T3173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.287968][ T3178] netlink: 'syz.1.9067': attribute type 2 has an invalid length. [ 551.308053][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.398238][ T3191] loop0: detected capacity change from 0 to 1024 [ 551.398740][ T3191] EXT4-fs: Ignoring removed bh option [ 551.398814][ T3191] EXT4-fs: Ignoring removed nobh option [ 551.410719][ T3191] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 551.477397][ T3191] loop0: detected capacity change from 0 to 512 [ 551.489731][ T3191] EXT4-fs warning (device loop0): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 551.505224][ T3191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9074'. [ 551.601815][ T3164] loop6: detected capacity change from 0 to 512 [ 551.640658][ T3208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9080'. [ 551.868598][ T3230] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9089'. [ 552.018715][ T3238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9092'. [ 552.041746][ T3238] team0 (unregistering): Port device team_slave_1 removed [ 552.233881][ T3388] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 552.251409][ T3388] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 552.748067][ T3329] loop6: detected capacity change from 0 to 2048 [ 552.772411][ T3307] wireguard0: entered promiscuous mode [ 552.779406][ T3307] wireguard0: entered allmulticast mode [ 552.846463][ T3329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.304735][T32220] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.878045][ T3382] loop2: detected capacity change from 0 to 512 [ 586.896004][ T3382] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 586.959862][ T3395] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 586.999800][ T3382] EXT4-fs (loop2): failed to open journal device unknown-block(0,3) -6 [ 587.269630][ T3430] loop0: detected capacity change from 0 to 512 [ 587.293604][ T3430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9142: bg 0: block 248: padding at end of block bitmap is not set [ 587.324428][ T3430] __quota_error: 203 callbacks suppressed [ 587.324449][ T3430] Quota error (device loop0): write_blk: dquota write failed [ 587.339130][ T3430] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 587.351054][ T3430] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9142: Failed to acquire dquot type 1 [ 587.364642][ T3430] EXT4-fs (loop0): 1 truncate cleaned up [ 587.372270][ T3430] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.390040][ T3430] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 587.491338][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.502480][T25529] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 587.512507][T25529] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 587.536185][ T29] audit: type=1400 audit(2000000058.295:16996): avc: denied { mounton } for pid=3439 comm="syz.2.9144" path="/" dev="ramfs" ino=114645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 587.789520][ T23] hid (null): invalid report_size 29797 [ 587.833804][ T23] hid-generic 0005:5B44:0004.0008: invalid report_size 29797 [ 587.841249][ T23] hid-generic 0005:5B44:0004.0008: item 0 2 1 7 parsing failed [ 587.875823][ T23] hid-generic 0005:5B44:0004.0008: probe with driver hid-generic failed with error -22 [ 588.021251][ T3415] loop6: detected capacity change from 0 to 1024 [ 588.077943][ T29] audit: type=1400 audit(2000000058.883:16997): avc: denied { unmount } for pid=1633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 588.126351][ T29] audit: type=1400 audit(2000000058.914:16998): avc: denied { append } for pid=3465 comm="syz.1.9153" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 588.153929][ T3466] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9153'. [ 588.162999][ T3466] tipc: Invalid UDP bearer configuration [ 588.163015][ T3466] tipc: Enabling of bearer rejected, failed to enable media [ 588.431052][ T3487] loop2: detected capacity change from 0 to 128 [ 588.440686][ T29] audit: type=1400 audit(2000000059.261:16999): avc: denied { append } for pid=3488 comm="syz.0.9160" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 588.493706][ T3489] netlink: 'syz.0.9160': attribute type 11 has an invalid length. [ 588.508625][ T3489] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9160'. [ 588.928177][ T3519] loop2: detected capacity change from 0 to 128 [ 588.944416][ T3519] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 589.016223][ T3526] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 589.224204][ T3530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9173'. [ 589.234681][ T3530] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9173'. [ 589.277573][ T3533] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.9174'. [ 589.298372][ T3533] netlink: zone id is out of range [ 589.304214][ T3533] netlink: zone id is out of range [ 589.309786][ T3533] netlink: get zone limit has 4 unknown bytes [ 589.391315][ T3539] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 589.397983][ T3539] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 589.464949][ T3545] loop2: detected capacity change from 0 to 1024 [ 589.489077][ T3545] EXT4-fs (loop2): bad geometry: first data block 0 is beyond end of filesystem (0) [ 589.540673][ T3550] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9180'. [ 589.575483][ T3550] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.9180'. [ 589.614047][ T3550] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 589.619402][ T3554] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9182'. [ 589.633072][ T3554] tipc: Invalid UDP bearer configuration [ 589.633091][ T3554] tipc: Enabling of bearer rejected, failed to enable media [ 589.661507][ T3555] loop2: detected capacity change from 0 to 1024 [ 589.678664][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.722176][ T29] audit: type=1400 audit(2000000060.594:17000): avc: denied { read } for pid=3551 comm="syz.2.9181" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 589.771608][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.832683][ T29] audit: type=1400 audit(2000000060.720:17001): avc: denied { relabelfrom } for pid=3564 comm="syz.2.9183" name="PACKET" dev="sockfs" ino=116126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 589.832891][ T3567] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 589.879593][ T29] audit: type=1400 audit(2000000060.720:17002): avc: denied { mac_admin } for pid=3564 comm="syz.2.9183" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.991292][ T3584] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.000001][ T3584] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 590.094426][ T3595] xfrm0: entered promiscuous mode [ 590.094484][ T3595] xfrm0: entered allmulticast mode [ 590.094974][ T3595] sctp: [Deprecated]: syz.0.9194 (pid 3595) Use of int in max_burst socket option. [ 590.094974][ T3595] Use struct sctp_assoc_value instead [ 590.245199][ T3609] 9p: Bad value for 'rfdno' [ 590.260360][ T3594] loop2: detected capacity change from 0 to 1024 [ 590.309020][ T3594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.357901][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.404580][ T3620] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 590.411423][ T3620] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 590.520275][ T3632] SELinux: security_context_str_to_sid (ƒyó²æb) failed with errno=-22 [ 590.554867][ T3633] bridge0: entered promiscuous mode [ 590.564817][ T3633] vlan2: entered promiscuous mode [ 590.580270][ T3625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9203'. [ 590.590028][ T3625] netlink: 196 bytes leftover after parsing attributes in process `syz.3.9203'. [ 590.694268][ T3644] tipc: Invalid UDP bearer configuration [ 590.694290][ T3644] tipc: Enabling of bearer rejected, failed to enable media [ 590.929865][ T3659] netlink: 'syz.2.9214': attribute type 21 has an invalid length. [ 590.973480][ T3659] netlink: 'syz.2.9214': attribute type 4 has an invalid length. [ 590.991629][ T3659] netlink: 'syz.2.9214': attribute type 4 has an invalid length. [ 591.037775][ T3667] loop0: detected capacity change from 0 to 512 [ 591.053050][ T3667] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 591.075988][ T3667] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.9216: casefold flag without casefold feature [ 591.122986][ T3667] EXT4-fs (loop0): Remounting filesystem read-only [ 591.137024][ T3667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 591.259395][ T3667] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.301090][ T3681] pimreg: entered allmulticast mode [ 591.319815][ T3679] vlan2: entered promiscuous mode [ 591.339274][ T3681] pimreg: left allmulticast mode [ 591.582927][ T3700] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 591.818666][ T3723] netlink: 'syz.1.9232': attribute type 11 has an invalid length. [ 591.929115][ T3687] loop0: detected capacity change from 0 to 512 [ 592.111878][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 592.111900][ T29] audit: type=1326 audit(2000000063.124:17282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3680 comm="syz.0.9220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2bb1facb9 code=0x0 [ 592.257953][ T3768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=3768 comm=syz.2.9243 [ 592.278880][ T29] audit: type=1400 audit(2000000063.292:17283): avc: denied { nlmsg_write } for pid=3740 comm="syz.6.9238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 592.348094][ T3768] loop2: detected capacity change from 0 to 1024 [ 592.400118][ T3768] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.504050][ T3792] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.9243: Allocating blocks 497-513 which overlap fs metadata [ 592.942996][ T3760] EXT4-fs (loop2): pa ffff888107a51d90: logic 16, phys. 129, len 24 [ 592.952349][ T3760] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 592.969787][ T3830] pimreg: entered allmulticast mode [ 592.985296][ T3830] pimreg: left allmulticast mode [ 593.016760][ T29] audit: type=1400 audit(2000000064.069:17284): avc: denied { shutdown } for pid=3834 comm="syz.0.9258" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 593.078187][ T29] audit: type=1326 audit(2000000064.132:17285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3829 comm="syz.1.9257" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f561989acb9 code=0x0 [ 593.124000][ T29] audit: type=1400 audit(2000000064.184:17286): avc: denied { unlink } for pid=1633 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 593.176092][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.396370][ T3857] loop2: detected capacity change from 0 to 8192 [ 593.424855][ T3389] loop2: p1 p2[DM] p4 [ 593.429247][ T3389] loop2: p1 size 196608 extends beyond EOD, truncated [ 593.437737][ T3389] loop2: p2 start 4292936063 is beyond EOD, truncated [ 593.444607][ T3389] loop2: p4 size 50331648 extends beyond EOD, truncated [ 593.455229][ T3857] loop2: p1 p2[DM] p4 [ 593.471947][ T3857] loop2: p1 size 196608 extends beyond EOD, truncated [ 593.481693][ T3857] loop2: p2 start 4292936063 is beyond EOD, truncated [ 593.489110][ T3857] loop2: p4 size 50331648 extends beyond EOD, truncated [ 593.796794][ T3391] udevd[3391]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 593.811430][ T3389] udevd[3389]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 593.862748][ T3906] __nla_validate_parse: 9 callbacks suppressed [ 593.862780][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9269'. [ 593.883939][ T3906] loop0: detected capacity change from 0 to 128 [ 593.910873][ T3906] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.947317][ T3906] ext4 filesystem being mounted at /367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 594.011249][ T29] audit: type=1400 audit(2000000065.108:17287): avc: denied { setattr } for pid=3905 comm="syz.0.9269" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.012246][ T29] audit: type=1400 audit(2000000065.108:17288): avc: denied { execute } for pid=3905 comm="syz.0.9269" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.012550][ T3906] Invalid argument reading file caps for ./file0 [ 594.012546][ T29] audit: type=1400 audit(2000000065.108:17289): avc: denied { execute_no_trans } for pid=3905 comm="syz.0.9269" path="/367/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 594.032530][ T3906] 9p: Bad value for 'rfdno' [ 594.070508][T30063] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.206500][ T3935] loop0: detected capacity change from 0 to 1024 [ 594.208713][ T3935] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 594.208790][ T3935] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 594.210030][ T3935] EXT4-fs (loop0): invalid journal inode [ 594.210068][ T3935] EXT4-fs (loop0): can't get journal size [ 594.211909][ T3935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 594.287150][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.343176][ T29] audit: type=1400 audit(2000000066.504:17290): avc: denied { unmount } for pid=30063 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 595.429203][ T29] audit: type=1400 audit(2000000066.599:17291): avc: denied { bind } for pid=4053 comm="syz.2.9296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 595.580465][ T4060] loop2: detected capacity change from 0 to 1024 [ 595.600124][ T4060] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9299: Failed to acquire dquot type 0 [ 595.635263][ T4060] EXT4-fs (loop2): 1 truncate cleaned up [ 595.643795][ T4060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.664406][ T4060] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9299: Failed to acquire dquot type 0 [ 595.692596][ T4060] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.9299: Failed to acquire dquot type 0 [ 595.727156][ T4068] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9299'. [ 595.797547][ T4076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9303'. [ 595.822922][ T4076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9303'. [ 595.835381][ T4076] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9303'. [ 595.860071][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.913698][ T4084] loop2: detected capacity change from 0 to 128 [ 595.928653][ T4084] vfat: Unknown parameter './file0' [ 596.019569][ T4089] vlan3: entered promiscuous mode [ 596.024859][ T4089] bridge0: entered promiscuous mode [ 596.133274][ T4105] loop0: detected capacity change from 0 to 512 [ 596.206934][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.276705][ T4105] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.373292][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.394188][ T4115] loop2: detected capacity change from 0 to 8192 [ 596.444070][ T3389] loop2: p1 p2[DM] p4 [ 596.448415][ T3389] loop2: p1 size 196608 extends beyond EOD, truncated [ 596.475699][ T3389] loop2: p2 start 4292936063 is beyond EOD, truncated [ 596.482805][ T3389] loop2: p4 size 50331648 extends beyond EOD, truncated [ 596.518407][ T4115] loop2: p1 p2[DM] p4 [ 596.543288][ T4115] loop2: p1 size 196608 extends beyond EOD, truncated [ 596.568524][ T4115] loop2: p2 start 4292936063 is beyond EOD, truncated [ 596.575402][ T4115] loop2: p4 size 50331648 extends beyond EOD, truncated [ 596.877909][ T3389] udevd[3389]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 596.877951][ T3391] udevd[3391]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 597.655523][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9334'. [ 597.673075][ T4178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9334'. [ 597.889733][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 597.889757][ T29] audit: type=1400 audit(2000000069.171:17292): avc: denied { lock } for pid=4189 comm="syz.1.9338" path="socket:[117578]" dev="sockfs" ino=117578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 597.945457][ T4190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9338'. [ 597.957949][ T4194] loop0: detected capacity change from 0 to 1024 [ 598.004979][ T4194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 598.025240][ T4194] ext4 filesystem being mounted at /383/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.103168][ T4194] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 8: comm syz.0.9340: lblock 8 mapped to illegal pblock 8 (length 8) [ 598.138819][ T4176] loop6: detected capacity change from 0 to 512 [ 598.151379][ T4194] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.9340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 598.172708][ T4211] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm syz.0.9340: lblock 0 mapped to illegal pblock 0 (length 1) [ 598.216329][ T4214] x_tables: duplicate underflow at hook 1 [ 598.253152][ T4211] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 598.265800][ T4211] EXT4-fs (loop0): This should not happen!! Data will be lost [ 598.265800][ T4211] [ 598.314683][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 598.421475][ T4176] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 598.519797][ T4238] loop2: detected capacity change from 0 to 1024 [ 598.543187][ T4238] EXT4-fs: inline encryption not supported [ 598.581541][ T4238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.599621][ T29] audit: type=1400 audit(2000000069.927:17293): avc: denied { watch } for pid=4237 comm="syz.2.9352" path="/133/file1" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.628122][ T4176] EXT4-fs (loop6): orphan cleanup on readonly fs [ 598.661039][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.693426][ T4176] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.9333: Allocating blocks 41-42 which overlap fs metadata [ 598.821954][ T4176] Quota error (device loop6): write_blk: dquota write failed [ 598.832381][ T4176] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 598.866339][ T4250] sctp: [Deprecated]: syz.2.9356 (pid 4250) Use of int in max_burst socket option. [ 598.866339][ T4250] Use struct sctp_assoc_value instead [ 598.890647][ T4250] sctp: [Deprecated]: syz.2.9356 (pid 4250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 598.890647][ T4250] Use struct sctp_sack_info instead [ 598.939188][ T4176] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 598.970456][ T4176] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9333: Failed to acquire dquot type 1 [ 599.031970][ T4176] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 599.091018][ T4176] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9333: corrupted inode contents [ 599.115545][ T4272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9362'. [ 599.340059][ T4176] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.9333: mark_inode_dirty error [ 599.533608][ T4176] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9333: corrupted inode contents [ 599.752104][ T4176] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.9333: mark_inode_dirty error [ 599.804381][ T4285] loop2: detected capacity change from 0 to 1024 [ 599.848451][ T4285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.927123][ T4176] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9333: corrupted inode contents [ 599.960492][ T4290] loop0: detected capacity change from 0 to 1024 [ 599.969075][ T4290] EXT4-fs: inline encryption not supported [ 599.976603][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.024287][ T4290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.158207][ T4176] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 600.189421][ T4176] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9333: corrupted inode contents [ 600.236314][ T4176] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.9333: mark_inode_dirty error [ 600.298030][ T4176] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 600.351996][ T4176] EXT4-fs (loop6): 1 truncate cleaned up [ 600.382751][ T4176] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 600.405888][ T4176] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.565138][ T4312] loop2: detected capacity change from 0 to 4096 [ 600.584190][ T4312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.634665][ T29] audit: type=1400 audit(2000000072.058:17294): avc: denied { append } for pid=4311 comm="syz.2.9377" path="/145/file0/cgroup.controllers" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 600.707864][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.812534][ T4327] loop0: detected capacity change from 0 to 512 [ 600.982845][ T4335] loop0: detected capacity change from 0 to 1024 [ 601.028728][ T4335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 601.095730][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.230747][ T4347] pimreg: entered allmulticast mode [ 601.241079][ T4347] pimreg: left allmulticast mode [ 601.474098][ T29] audit: type=1326 audit(2000000072.940:17295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.2.9391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf451bacb9 code=0x7ffc0000 [ 601.495513][ T29] audit: type=1326 audit(2000000072.971:17296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.2.9391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faf451bacb9 code=0x7ffc0000 [ 601.511244][ T29] audit: type=1326 audit(2000000072.982:17297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.2.9391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf451bacb9 code=0x7ffc0000 [ 601.516255][ T29] audit: type=1326 audit(2000000072.992:17298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.2.9391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf451bacb9 code=0x7ffc0000 [ 601.547933][ T4362] loop6: detected capacity change from 0 to 128 [ 601.564232][ T4362] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 601.708585][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.774119][ T4374] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9397'. [ 602.088763][ T4407] loop0: detected capacity change from 0 to 1024 [ 602.130791][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.235567][ T4420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9410'. [ 602.458857][ T4436] netlink: 182 bytes leftover after parsing attributes in process `syz.6.9419'. [ 602.484032][ T4438] vfat: Unknown parameter 'À' [ 602.611145][ T6683] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x6 [ 602.826832][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.964468][ T4483] set_capacity_and_notify: 1 callbacks suppressed [ 602.964485][ T4483] loop0: detected capacity change from 0 to 1024 [ 603.003221][ T4483] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 603.086721][ T4458] chnl_net:caif_netlink_parms(): no params data found [ 603.240878][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.248154][ T4458] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.261671][ T4458] bridge_slave_0: entered allmulticast mode [ 603.268782][ T4458] bridge_slave_0: entered promiscuous mode [ 603.278751][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.286460][ T4458] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.294340][ T4458] bridge_slave_1: entered allmulticast mode [ 603.308100][ T4458] bridge_slave_1: entered promiscuous mode [ 603.351598][ T4458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.372768][ T4458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.418746][ T4458] team0: Port device team_slave_0 added [ 603.427861][ T4458] team0: Port device team_slave_1 added [ 603.453408][ T4458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.460876][ T4458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.487695][ T4458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.499462][ T4458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.506502][ T4458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 603.532534][ T4458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.563862][ T4458] hsr_slave_0: entered promiscuous mode [ 603.570463][ T4458] hsr_slave_1: entered promiscuous mode [ 603.576534][ T4458] debugfs: 'hsr0' already exists in 'hsr' [ 603.582440][ T4458] Cannot create hsr debugfs directory [ 603.608500][ T4522] bridge0: entered promiscuous mode [ 603.613932][ T4522] vlan2: entered promiscuous mode [ 603.698524][ T4458] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.709511][ T4458] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.719789][ T4458] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.739338][T30063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.783065][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 603.783093][ T29] audit: type=1326 audit(2000000075.365:17330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.813010][ T29] audit: type=1326 audit(2000000075.365:17331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.838226][ T4458] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.848166][ T4458] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.848201][ T4458] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.849894][ T29] audit: type=1326 audit(2000000075.438:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.849934][ T29] audit: type=1326 audit(2000000075.438:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.850010][ T29] audit: type=1326 audit(2000000075.438:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.886356][ T29] audit: type=1326 audit(2000000075.480:17335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.886398][ T29] audit: type=1326 audit(2000000075.480:17336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.886544][ T29] audit: type=1326 audit(2000000075.480:17337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4526 comm="syz.1.9442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f561989acb9 code=0x7ffc0000 [ 603.895519][ T4458] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.895567][ T4458] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.895736][ T4458] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.931906][ T4539] FAULT_INJECTION: forcing a failure. [ 603.931906][ T4539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.931948][ T4539] CPU: 0 UID: 0 PID: 4539 Comm: syz.0.9446 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 603.932014][ T4539] Tainted: [W]=WARN [ 603.932024][ T4539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 603.932041][ T4539] Call Trace: [ 603.932050][ T4539] [ 603.932060][ T4539] __dump_stack+0x1d/0x30 [ 603.932093][ T4539] dump_stack_lvl+0x95/0xd0 [ 603.932174][ T4539] dump_stack+0x15/0x1b [ 603.932202][ T4539] should_fail_ex+0x263/0x280 [ 603.932230][ T4539] should_fail+0xb/0x20 [ 603.932254][ T4539] should_fail_usercopy+0x1a/0x20 [ 603.932309][ T4539] _copy_from_iter+0xcf/0xea0 [ 603.932440][ T4539] ? __rcu_read_unlock+0x4e/0x70 [ 603.932543][ T4539] tun_get_user+0x15f/0x27c0 [ 603.932709][ T4539] ? ref_tracker_alloc+0x1f2/0x2f0 [ 603.932735][ T4539] ? selinux_file_permission+0x1e1/0x320 [ 603.932772][ T4539] tun_chr_write_iter+0x15e/0x210 [ 603.932856][ T4539] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 603.932878][ T4539] vfs_write+0x5a6/0x9f0 [ 603.932925][ T4539] ksys_write+0xdc/0x1a0 [ 603.932949][ T4539] __x64_sys_write+0x40/0x50 [ 603.933004][ T4539] x64_sys_call+0x2847/0x3000 [ 603.933036][ T4539] do_syscall_64+0xc0/0x2a0 [ 603.933105][ T4539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.933129][ T4539] RIP: 0033:0x7fa2bb1facb9 [ 603.933199][ T4539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.933225][ T4539] RSP: 002b:00007fa2b9c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.933251][ T4539] RAX: ffffffffffffffda RBX: 00007fa2bb475fa0 RCX: 00007fa2bb1facb9 [ 603.933270][ T4539] RDX: 0000000000001200 RSI: 0000200000001840 RDI: 0000000000000003 [ 603.933284][ T4539] RBP: 00007fa2b9c57090 R08: 0000000000000000 R09: 0000000000000000 [ 603.933298][ T4539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.933391][ T4539] R13: 00007fa2bb476038 R14: 00007fa2bb475fa0 R15: 00007ffdcb1d2ff8 [ 603.933413][ T4539] [ 603.973410][ T4458] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.973517][ T4458] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 603.973547][ T4458] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.999830][ T4537] loop6: detected capacity change from 0 to 512 [ 604.475340][ T4537] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 604.510298][ T4537] EXT4-fs (loop6): orphan cleanup on readonly fs [ 604.516867][ T4458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 604.526699][ T4458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 604.536316][ T4458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 604.546311][ T4458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 604.555975][ T4545] loop2: detected capacity change from 0 to 128 [ 604.584673][ T4537] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.9445: Allocating blocks 41-42 which overlap fs metadata [ 604.606558][ T4537] Quota error (device loop6): write_blk: dquota write failed [ 604.617693][ T4545] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 604.630383][ T4537] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 604.725524][ T4458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 604.731000][ T4458] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.742361][T30197] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.742470][T30197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.744552][T30197] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.744598][T30197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.763088][ T4458] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 604.763121][ T4458] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 604.792667][ T4537] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.9445: Allocating blocks 41-42 which overlap fs metadata [ 604.794937][ T4537] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9445: Failed to acquire dquot type 1 [ 604.799771][ T4537] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 604.802414][ T4537] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9445: corrupted inode contents [ 604.812047][ T4537] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.9445: mark_inode_dirty error [ 604.850862][ T4564] loop2: detected capacity change from 0 to 1024 [ 604.858688][ T4564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 604.869989][ T4537] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9445: corrupted inode contents [ 604.877054][ T4537] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.9445: mark_inode_dirty error [ 604.883203][ T4537] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9445: corrupted inode contents [ 604.920074][ T4458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.941434][ T4537] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 604.948156][ T4537] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.9445: corrupted inode contents [ 604.968046][ T4537] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.9445: mark_inode_dirty error [ 604.979528][ T4537] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 605.004355][ T4537] EXT4-fs (loop6): 1 truncate cleaned up [ 605.063070][ T4458] veth0_vlan: entered promiscuous mode [ 605.084981][ T4458] veth1_vlan: entered promiscuous mode [ 605.119186][ T4458] veth0_macvtap: entered promiscuous mode [ 605.264598][ T4537] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 605.287649][ T4458] veth1_macvtap: entered promiscuous mode [ 605.304891][ T4537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.334277][ T4458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.418284][ T4458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.439575][T30197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.464523][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.488504][T30197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.538672][T25529] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.570928][T25529] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.910600][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.950422][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.008767][ T4625] loop3: detected capacity change from 0 to 512 [ 606.019263][ T4625] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 606.029064][ T4625] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 606.040854][ T4625] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 606.051031][ T4625] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 606.070109][ T4623] pimreg: entered allmulticast mode [ 606.080598][ T4625] System zones: 0-2, 18-18, 34-35 [ 606.110026][ T4625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.131931][ T4627] pimreg: left allmulticast mode [ 606.258187][ T4640] loop6: detected capacity change from 0 to 512 [ 606.359130][ T4458] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.393556][ T4647] FAULT_INJECTION: forcing a failure. [ 606.393556][ T4647] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.407274][ T4647] CPU: 0 UID: 0 PID: 4647 Comm: syz.0.9475 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 606.407393][ T4647] Tainted: [W]=WARN [ 606.407403][ T4647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.407417][ T4647] Call Trace: [ 606.407424][ T4647] [ 606.407433][ T4647] __dump_stack+0x1d/0x30 [ 606.407464][ T4647] dump_stack_lvl+0x95/0xd0 [ 606.407494][ T4647] dump_stack+0x15/0x1b [ 606.407534][ T4647] should_fail_ex+0x263/0x280 [ 606.407561][ T4647] should_fail_alloc_page+0xf2/0x100 [ 606.407587][ T4647] __alloc_frozen_pages_noprof+0x108/0x350 [ 606.407620][ T4647] alloc_pages_mpol+0xb3/0x260 [ 606.407701][ T4647] alloc_pages_noprof+0x8f/0x130 [ 606.407738][ T4647] alloc_skb_with_frags+0x193/0x470 [ 606.407884][ T4647] ? should_fail_ex+0xd9/0x280 [ 606.407909][ T4647] sock_alloc_send_pskb+0x44d/0x500 [ 606.407971][ T4647] tun_get_user+0x62b/0x27c0 [ 606.408108][ T4647] ? ref_tracker_alloc+0x1f2/0x2f0 [ 606.408140][ T4647] ? selinux_file_permission+0x1e1/0x320 [ 606.408182][ T4647] tun_chr_write_iter+0x15e/0x210 [ 606.408322][ T4647] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 606.408351][ T4647] vfs_write+0x5a6/0x9f0 [ 606.408462][ T4647] ksys_write+0xdc/0x1a0 [ 606.408488][ T4647] __x64_sys_write+0x40/0x50 [ 606.408512][ T4647] x64_sys_call+0x2847/0x3000 [ 606.408599][ T4647] do_syscall_64+0xc0/0x2a0 [ 606.408674][ T4647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.408725][ T4647] RIP: 0033:0x7fa2bb1facb9 [ 606.408745][ T4647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.408766][ T4647] RSP: 002b:00007fa2b9c57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.408839][ T4647] RAX: ffffffffffffffda RBX: 00007fa2bb475fa0 RCX: 00007fa2bb1facb9 [ 606.408865][ T4647] RDX: 0000000000001200 RSI: 0000200000001840 RDI: 0000000000000003 [ 606.408880][ T4647] RBP: 00007fa2b9c57090 R08: 0000000000000000 R09: 0000000000000000 [ 606.408929][ T4647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.408945][ T4647] R13: 00007fa2bb476038 R14: 00007fa2bb475fa0 R15: 00007ffdcb1d2ff8 [ 606.408968][ T4647] [ 606.718001][ T4651] loop3: detected capacity change from 0 to 512 [ 606.740179][ T4653] loop2: detected capacity change from 0 to 1024 [ 606.786989][ T3001] ================================================================== [ 606.795192][ T3001] BUG: KCSAN: data-race in set_nlink / set_nlink [ 606.801752][ T3001] [ 606.804167][ T3001] read to 0xffff88810795bac0 of 4 bytes by task 3390 on cpu 0: [ 606.811770][ T3001] set_nlink+0x29/0xb0 [ 606.815909][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 606.821387][ T3001] inode_permission+0x2de/0x3c0 [ 606.826553][ T3001] link_path_walk+0x779/0xe30 [ 606.831301][ T3001] path_openat+0x1bf/0x23c0 [ 606.836219][ T3001] do_filp_open+0x15d/0x280 [ 606.840786][ T3001] do_sys_openat2+0xa6/0x150 [ 606.845467][ T3001] __x64_sys_openat+0xf2/0x120 [ 606.850426][ T3001] x64_sys_call+0x2b07/0x3000 [ 606.855478][ T3001] do_syscall_64+0xc0/0x2a0 [ 606.860073][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.866291][ T3001] [ 606.868666][ T3001] write to 0xffff88810795bac0 of 4 bytes by task 3001 on cpu 1: [ 606.877033][ T3001] set_nlink+0x99/0xb0 [ 606.881167][ T3001] kernfs_iop_permission+0x1e2/0x220 [ 606.886517][ T3001] inode_permission+0x2de/0x3c0 [ 606.891514][ T3001] link_path_walk+0x779/0xe30 [ 606.896381][ T3001] path_lookupat+0x8c/0x500 [ 606.900954][ T3001] filename_lookup+0x190/0x390 [ 606.905777][ T3001] vfs_statx+0x9d/0x3b0 [ 606.909996][ T3001] vfs_fstatat+0x115/0x170 [ 606.914478][ T3001] __se_sys_newfstatat+0x55/0x3e0 [ 606.919581][ T3001] __x64_sys_newfstatat+0x55/0x70 [ 606.924672][ T3001] x64_sys_call+0x111f/0x3000 [ 606.929581][ T3001] do_syscall_64+0xc0/0x2a0 [ 606.934135][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.940058][ T3001] [ 606.942402][ T3001] value changed: 0x00000008 -> 0x00000009 [ 606.948149][ T3001] [ 606.950489][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 606.956760][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 606.967639][ T3001] Tainted: [W]=WARN [ 606.971464][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.981634][ T3001] ================================================================== [ 607.024664][ T4651] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 607.115044][ T4651] EXT4-fs (loop3): orphan cleanup on readonly fs [ 607.170673][ T4651] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9476: Allocating blocks 41-42 which overlap fs metadata [ 607.189010][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.233222][ T4651] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.9476: Allocating blocks 41-42 which overlap fs metadata [ 607.277631][ T1633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.308179][ T4651] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.9476: Failed to acquire dquot type 1 [ 607.352699][ T4651] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 607.405227][ T4651] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9476: corrupted inode contents [ 607.446198][ T4651] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.9476: mark_inode_dirty error [ 607.490370][ T4651] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9476: corrupted inode contents [ 607.524247][ T4651] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.9476: mark_inode_dirty error [ 607.558536][ T4651] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9476: corrupted inode contents [ 607.589339][ T4651] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 607.609484][ T4651] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.9476: corrupted inode contents [ 607.637567][ T4651] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.9476: mark_inode_dirty error [ 607.652458][ T4651] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 607.671175][ T4651] EXT4-fs (loop3): 1 truncate cleaned up [ 607.691054][ T4651] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 607.716721][ T4651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.