last executing test programs: 4m57.512816724s ago: executing program 32 (id=746): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="f8ff0000000000e9210000000000c7c51f9ff504ce154509e21eeecbf4000200000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02000000010000000400"/28], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = dup(r6) bind$inet(r7, &(0x7f0000002700)={0x2, 0x4e21, @private=0xa010101}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r12, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) 4m37.760143863s ago: executing program 33 (id=909): socket$nl_route(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602002700000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3m38.037419174s ago: executing program 34 (id=1067): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="120000000200000008000000ebd00000000a0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) 2m42.659676147s ago: executing program 6 (id=1431): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000700090043150000090006006e6f6e6500000000080008"], 0x50}}, 0x0) 2m42.156641789s ago: executing program 6 (id=1435): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioprio_get$pid(0x2, r0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hopopts={{0x18}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x30}, 0x40c0) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000400)="04", 0x1}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2m39.172687693s ago: executing program 6 (id=1447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x2e, 0x2e]}}, 0x0, 0x29, 0xe4}, 0x28) 2m39.142316627s ago: executing program 6 (id=1449): r0 = syz_io_uring_setup(0xfee, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x1, 0x260}, &(0x7f0000ff0000), &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x459, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000440)={0x0, 0x0, 0x3}, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x794, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdfffff, 0x2, @perf_config_ext={0xff, 0x30000000000}, 0x12132, 0x10000, 0xfffffffe, 0x3, 0x86, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0'}, 0xb) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/asound/timers\x00', 0x0, 0x0) lseek(r3, 0x164, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r1, 0x0) r4 = syz_clone(0x900200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, r4, 0x0, 0xffffffffffffffff, 0x0) 2m38.813314243s ago: executing program 6 (id=1451): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x1c, &(0x7f0000000040), &(0x7f0000cab000)=0x7) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x14, 0x0, 0x0, 0x0, 0x0, 0x8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x0, 0x3800000000000}) 2m38.758687072s ago: executing program 6 (id=1452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r6, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r5}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r7, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r5}, 0x20) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r3, 0x1a, 0x0, 0x0, @void, @value=r8, @void, @void, r5}, 0x20) r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r9, 0xffffffffffffffff, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r10, r5}, 0x20) r11 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r11}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r12, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000) 2m38.694308459s ago: executing program 35 (id=1452): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e0"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r6, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r5}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="09000000fdffffff83000000440d000020000000", @ANYRES32, @ANYBLOB="0100000000000000004000"/20, @ANYRES32, @ANYBLOB="0000000003000000ff0100"/28], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r7, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r5}, 0x20) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r2}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, r3, 0x1a, 0x0, 0x0, @void, @value=r8, @void, @void, r5}, 0x20) r9 = socket$caif_seqpacket(0x25, 0x5, 0x3) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r9, 0xffffffffffffffff, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r10, r5}, 0x20) r11 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x2, &(0x7f0000000040)={0x0, 0x15, 0x4, @tid=r11}, &(0x7f0000000240)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r12, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x800]}, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x4000000) 2m25.320754075s ago: executing program 5 (id=1505): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x7, 0x4, [@private]}]}}}], 0x18}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c96, &(0x7f0000000280)={[{@abort}, {@nodelalloc}]}, 0x1, 0x270, &(0x7f00000002c0)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x101) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000002040), r4) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fcdbe639e4b0000008000400010000000800010083db990b21b196d56acf3b92a5670765ddd76c56432b5564ca3b12c645cf96775be697100f20a614aabc9b516037c9f860e0cc76165e7e6b14d4a0031e00eeb5b4d6533d85606809dede1621c135f5d324c279cbb36f6bce2cecf8dcf9e75b7d3e359292e19f8d06d5d588821086", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x4000010) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2400000064006bcd9e3fe3dc6e48aa31086b8703130000001f0000000000000004001400", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044000) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) r7 = syz_open_dev$evdev(&(0x7f0000000100), 0x3, 0x80) close_range(r1, r7, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000000)) syz_io_uring_setup(0x208b, &(0x7f0000000540)={0x0, 0x301f, 0x11420, 0x3, 0x131, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000000240)) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, 0xffffffffffffffff, 0x10000000) r10 = syz_io_uring_setup(0x426, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}) syz_io_uring_submit(r8, r9, &(0x7f0000000940)=@IORING_OP_READ=@pass_buffer={0x16, 0x17, 0x6000, @fd_index, 0x6, &(0x7f0000000880)=""/145, 0x91, 0x0, 0x0, {0x0, r13}}) 2m25.218894075s ago: executing program 5 (id=1508): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000012000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 2m25.156888003s ago: executing program 5 (id=1510): mmap$IORING_OFF_SQ_RING(&(0x7f0000ad3000/0x4000)=nil, 0x4000, 0x1000007, 0x10010, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 2m25.09088724s ago: executing program 5 (id=1511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x38, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21840}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}]}}}]}, 0x38}, 0x1, 0x300, 0x0, 0x40080d5}, 0x0) 2m25.035641169s ago: executing program 5 (id=1512): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000240)="08f059530b087b7a887e62102a4bf1f10f6688496da4000a90fdf32fe5627f1a9959d6728ea5a45aa16f0d84357d3aa0a1523f14656fdc26f77807060f1ef489d2faf241a0189a139a4b8fa35057f3787d7462e539797e9c92e6d3f489a39a58c69bc7bbe05e4f197cf777c7f75496c6c6ee977a90d021eb9da1b9adbd7d1995d9a2fc27be0ade2ea5ad9b2967273fba03", 0x91) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f0000000f80)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r9, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca30000000000002403000020feffff620a00fef8ffffff71a400fe000000001f03000000000000e5000600000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) 2m23.940555474s ago: executing program 5 (id=1527): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x200, 0x0, 0x0, 0x2, 0x4}, @volatile={0xfffffffc, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x29000, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x91dd, 0x8, '9P2000.u'}, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000008ec642e19b70a987494a7afd844bb7c7162cb0df78bf164cb2baa1b125041db033cb779eed9eeb8008389e9198cbab54324ac49a9d55625d8037b122447a5926e684baea7120d9f9c538921c53f029a8ad6f344f7f9f8168b0c7e62946ae36e2b85c1ead9038eccce30caa1af47265310843313fd0b688b97708ddf13a1b3f9a688e7c", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000500"/28], 0x50) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) 2m8.7850169s ago: executing program 36 (id=1527): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x200, 0x0, 0x0, 0x2, 0x4}, @volatile={0xfffffffc, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7000, 0x29000, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000140)={0x15, 0x65, 0xffff, 0x91dd, 0x8, '9P2000.u'}, 0x15) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000008ec642e19b70a987494a7afd844bb7c7162cb0df78bf164cb2baa1b125041db033cb779eed9eeb8008389e9198cbab54324ac49a9d55625d8037b122447a5926e684baea7120d9f9c538921c53f029a8ad6f344f7f9f8168b0c7e62946ae36e2b85c1ead9038eccce30caa1af47265310843313fd0b688b97708ddf13a1b3f9a688e7c", @ANYRES32, @ANYBLOB="ff00"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="020000000500"/28], 0x50) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) 1m19.475613095s ago: executing program 7 (id=1861): shutdown(0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010800000000000000000200000820000000020a0102000000c5410000000000020000070900010073797a3000a8a5f4b95e738e87ba75659b00000014"], 0x5c}}, 0x0) 1m19.432619416s ago: executing program 7 (id=1862): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x420300, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x1405, 0x200, 0x70bd26, 0x3ff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0xd4}, 0x20044041) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000200), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x880, 0x8, {}, {r1, r2/1000+60000}, {0x4, 0x1, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x0, 0x1}, 0x9, 0x0, 0x0, 0x0, "107683fd3b83bc1a49422c4dc39da3723a65eef6854124ecfbe70e82fb455d97fa453570448b554637f3d1e0a1b36a972693a691ffeaa2c7edc7eb9edc140f35"}}, 0x80}}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x3b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x10}]}, 0x40}, 0x1, 0x0, 0x0, 0x44001}, 0x48080) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000500)) sync_file_range(0xffffffffffffffff, 0x0, 0x4d95, 0x7) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x48, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}, @NL80211_NAN_FUNC_SERVICE_INFO={0x39, 0xb, "839db0a85a78eca4008dad09f7a2dc85b7fd310a7e68792de8d11cfa60313f18219f1215a7a2f0d67e87b20e740b9dbcfb8aef021b"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_open_pts(r0, 0x149081) fsync(r4) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r5, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20044850}, 0x40800) r6 = open$dir(&(0x7f00000007c0)='./file0\x00', 0x343800, 0x120) mknodat$loop(r6, &(0x7f0000000800)='./file0\x00', 0x800, 0x1) pipe2$9p(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRWALK(r7, &(0x7f0000000880)={0xf, 0x1f, 0x1, 0x80}, 0xf) setsockopt(r0, 0x90ce, 0x9, &(0x7f00000008c0)="bd23530060e4f4ee5cd0a4cff5f5ce906eec8120b9300b9fad513b54c046704d2eadc38aed582f82b11d591f4292bd4c22c8ed849fe49d50dcd06b7f3b80003bd55c6d227186a58a7ed28c19fbc92996ab308f15c254418ff00644b53373eccdc34f6d14929f337afce4961fc725dfddb9600c29775f4f462a3e6866885c119601dfa2796f41a989d0f9632807a1cb28d4f31addf9289caa60f0c61279bea8ed7638584ea1509c668bc702e820c57a8330e7c58780356491d672390a5c8bcc1c6dd5e049", 0xc4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r8, 0x84, 0x1e, &(0x7f00000009c0)=0x1, 0x4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x50) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4880) pidfd_send_signal(r0, 0x23, &(0x7f0000000c00)={0x37, 0x4, 0xd}, 0x0) r9 = accept$unix(r0, &(0x7f0000000c80), &(0x7f0000000d00)=0x6e) connect$unix(r9, &(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000e00), r4) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80280}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, r10, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x48011) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r9, 0x8982, &(0x7f0000000f00)={0x1, 'erspan0\x00', {}, 0x2}) 1m19.373402934s ago: executing program 7 (id=1863): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000080)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@nombcache}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x1}}, {@nodiscard}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x29}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa00500e0}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 1m19.336319017s ago: executing program 7 (id=1864): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a40)={0x0, 0x0}) capset(&(0x7f0000000ac0)={0x19980330, r0}, &(0x7f0000000b00)={0x9, 0x7, 0x7, 0x6, 0x7, 0x401}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x522, &(0x7f0000000440)="$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") r1 = socket(0x10, 0x2, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r2, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xffffffff, 0x0, r3}, 0x50) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01121800000000000000240000002400000002000000000000000000000400000003000001000000000a03000000000000000000000d020000000000de91893eace9ca6ea1ade827456d1f0b34916b25cd9dd561000ef4b97cf7922601561401d8"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800009, 0x4000030, r5, 0xfbfcd000) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x1, &(0x7f0000000500)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r9 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r9, r9, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x10085000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.231352537s ago: executing program 7 (id=1865): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) sendmsg$inet(r0, 0x0, 0x20004000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400000000bfffffffffffffff", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) 1m19.084042228s ago: executing program 7 (id=1867): io_uring_setup(0x6612, &(0x7f0000000200)={0x0, 0x41bd, 0x6, 0x2, 0x368}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aee000/0x4000)=nil, 0x4000, 0x0, 0x10000000000015b, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x576, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119400000000008510000002000000850000008c00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioprio_get$uid(0x3, 0xffffffffffffffff) (async) ioprio_get$uid(0x3, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x12, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2a, 0x9, 0x0, 0x0, 0x0, 0x3, 0x718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x106200, 0x10004, 0x0, 0x3, 0x11, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x2278, &(0x7f0000001840)={0x0, 0x3dee, 0x40, 0x0, 0x1f7}) (async) r2 = io_uring_setup(0x2278, &(0x7f0000001840)={0x0, 0x3dee, 0x40, 0x0, 0x1f7}) close(r2) syz_io_uring_setup(0x31c6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x376, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x20, 0x6000, 0x1}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x20, 0x6000, 0x1}) syz_emit_ethernet(0x32, &(0x7f0000002000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008a782ea58e10d"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004"], 0x1e8}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r5, 0x900) (async) r6 = syz_open_pts(r5, 0x900) r7 = dup3(r6, r5, 0x80000) read(r7, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r7, &(0x7f0000003d40)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x10c, &(0x7f00000002c0)=0x101, 0x0, 0x4) inotify_init() (async) r8 = inotify_init() readv(r8, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) 1m19.069458885s ago: executing program 37 (id=1867): io_uring_setup(0x6612, &(0x7f0000000200)={0x0, 0x41bd, 0x6, 0x2, 0x368}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000aee000/0x4000)=nil, 0x4000, 0x0, 0x10000000000015b, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x576, &(0x7f0000000940)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071119400000000008510000002000000850000008c00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioprio_get$uid(0x3, 0xffffffffffffffff) (async) ioprio_get$uid(0x3, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) (async) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000900)=@ethtool_link_settings={0x12, 0x4, 0x0, 0xe, 0x3, 0x0, 0x8, 0x0, 0x0, 0x4, [0x0, 0x0, 0x6, 0x4, 0x6, 0xffffffff, 0xfffffffa]}}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2a, 0x9, 0x0, 0x0, 0x0, 0x3, 0x718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x106200, 0x10004, 0x0, 0x3, 0x11, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x2278, &(0x7f0000001840)={0x0, 0x3dee, 0x40, 0x0, 0x1f7}) (async) r2 = io_uring_setup(0x2278, &(0x7f0000001840)={0x0, 0x3dee, 0x40, 0x0, 0x1f7}) close(r2) syz_io_uring_setup(0x31c6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x376, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x20, 0x6000, 0x1}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000001c0)='./file0\x00', 0x20, 0x6000, 0x1}) syz_emit_ethernet(0x32, &(0x7f0000002000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008a782ea58e10d"], 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) (async) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r5, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r5, 0x900) (async) r6 = syz_open_pts(r5, 0x900) r7 = dup3(r6, r5, 0x80000) read(r7, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r7, &(0x7f0000003d40)=""/4096, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x10c, &(0x7f00000002c0)=0x101, 0x0, 0x4) inotify_init() (async) r8 = inotify_init() readv(r8, &(0x7f0000000140)=[{&(0x7f0000000340)=""/263, 0x107}], 0x1) 53.553293128s ago: executing program 0 (id=1999): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0xd1}, @ldst={0x1, 0x0, 0x0, 0x0, 0x6, 0x20, 0x8}, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x7}], &(0x7f0000000040)='GPL\x00', 0x8000, 0xcb, &(0x7f0000000680)=""/203, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1e, r0, 0x8, &(0x7f00000003c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x8, 0x44e}, 0x10, 0x0, r4, 0x0, &(0x7f00000004c0), 0x0, 0x10, 0x33}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xd0}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040810) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 53.074016194s ago: executing program 0 (id=2004): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x2201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x2010, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000192000/0x4000)=nil, 0x4000) write$binfmt_elf32(r2, 0x0, 0x69) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="99a74a1cbb401ffb36beeb4b743004a60c6ea4293c0bf4c527739bb0ee914f66bb60c6bb61f1d6d41080e8041b0b524305d0836cb34c1a6c57ec8e3f2e1edf55cb22abb8ab7c55ce5c300cd89dde92e29936acc96228bcd9e43f44e65cdb7f1e433fe0710b359def23cf55777f03c58df9f3fc5ded6b38a23d75c657fa296b87732fa6fa3688baa762be336e276c04f635b3c59b163ec80430be40182351b5f64a980db022c7a16bc244be193c5bdd8f6cfcb89a0f5829dbcfb8f21e429f65996ea90fc985603947cffa1f025ad587e0896d016400387a96", @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000a40)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x9}, 0x419, 0x40000000, 0x4000000, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000762000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000780)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000800)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000840)={'ip_vti0\x00', 0x0, 0x10, 0x10, 0x1, 0x6, {{0x8, 0x4, 0x2, 0x6, 0x20, 0x66, 0x0, 0x5, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x95, [@empty, @multicast2]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000a00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x404c052}, 0x8010) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0xfd, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, @perf_bp, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) 51.536343502s ago: executing program 0 (id=2012): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) dup(r4) bind$inet(0xffffffffffffffff, &(0x7f0000002700)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5000c242aac2177ce6650000000000000a0000003c0001800c00028005000100010000002c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000000000000001"], 0x50}}, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) syz_open_dev$rtc(&(0x7f00000010c0), 0x40000000000, 0x480000) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x6000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206efffffffffffffff0000070000000c000780080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r8, &(0x7f0000001fc0)=""/184, 0xb8) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001180)={0x9, {"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", 0x1000}}, 0x33e) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x0) 50.45566212s ago: executing program 0 (id=2019): ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffa, 0x0, 0x3, 0x2, 0x10, "4c1b074660964daff300d545069f9acb603b5bf663e802de59a9e529d89f463cf51b579b4a8a1e470af8788b7c1079740bdd4b5142948471a514c228de04578f", "b95689cd752835b13e96e21fa06480d3374b0162f5aaaf733d476b8dd022545b2509182ca9912c3d546fd27d281b3fa916255fc75a03089ff883349ffb1f9bae", "af8003170670e2b91d49c1248c1bcfc4f0a3346f34260200000000000000c416", [0x7fffffffffffffff, 0x81]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) (fail_nth: 14) 49.796156701s ago: executing program 0 (id=2022): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000033418ee31cc2ae3676031b7db99f0018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x16000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x8800, &(0x7f0000000d80)=ANY=[], 0x23, 0x7ff, &(0x7f00000001c0)="$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") statfs(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)=""/133) r2 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0xe8, 0x5, 0x2, 0x1, 0x7f, 0xb, 0x1, 0x34, 0xb7, 0xa, 0x89, 0x27, 0x5, 0x2}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @loopback}]}, &(0x7f0000000000)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000b80)={r4, 0xfff}, 0x8) socket$kcm(0x21, 0x2, 0x2) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0xc30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb47}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x10b8}, 0x8000) close_range(r2, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 49.585205239s ago: executing program 0 (id=2024): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) lseek(r5, 0x0, 0x4) sendfile(r5, r5, &(0x7f00000001c0), 0x7fa) 49.584637339s ago: executing program 38 (id=2024): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, 0x0, 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) poll(0x0, 0x0, 0x9) setitimer(0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002640)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2c}]}, 0x24}}, 0x8800) sendmsg$nl_route(r4, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000180)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x7f\x00~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) lseek(r5, 0x0, 0x4) sendfile(r5, r5, &(0x7f00000001c0), 0x7fa) 47.95735187s ago: executing program 8 (id=2030): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x3, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000040000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x1c8, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x160, 0x194, 0x194, 0x160, 0x194, 0x3, 0x0, {[{{@ip={@remote, @broadcast, 0xff000000, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x1, 0x1e}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@ip={@broadcast, @empty, 0xff000000, 0xffffff00, 'veth1_to_batadv\x00', 'nr0\x00', {}, {0xff}, 0x5c, 0x1, 0x7f}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 47.689062427s ago: executing program 8 (id=2035): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x26, 0x6}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001dc0)=""/69, 0x45}], 0x1}, 0xc00}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 47.563678582s ago: executing program 8 (id=2036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x2}, {{0x1, 0x1}, {0x4, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 47.325237595s ago: executing program 8 (id=2038): ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000001000004010000000000000002000000000000000000000000000003000000000200000001000000010000000000000000000010"], 0x0, 0x56}, 0x28) creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffa, 0x0, 0x3, 0x2, 0x10, "4c1b074660964daff300d545069f9acb603b5bf663e802de59a9e529d89f463cf51b579b4a8a1e470af8788b7c1079740bdd4b5142948471a514c228de04578f", "b95689cd752835b13e96e21fa06480d3374b0162f5aaaf733d476b8dd022545b2509182ca9912c3d546fd27d281b3fa916255fc75a03089ff883349ffb1f9bae", "af8003170670e2b91d49c1248c1bcfc4f0a3346f34260200000000000000c416", [0x7fffffffffffffff, 0x81]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) 47.150741732s ago: executing program 8 (id=2040): readv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001980)=""/4087, 0xff7}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000000000000000000000000000000073797a310000000008000540000000020900020073797a310000000008000a40ffffeefc0800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000134a2d00000a00"/180], 0xb4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000040)={&(0x7f0000003f00)=ANY=[@ANYRES32, @ANYRESDEC=0x0, @ANYRES16=r0, @ANYRES32, @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2a00805, &(0x7f0000000200), 0x1, 0xbeb, &(0x7f0000001440)="$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") r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYRES16], 0xfe, 0x122e, &(0x7f0000001280)="$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") getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x400003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x400000, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x4, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x1000002f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x1, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x101, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7b8, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x8, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0x1, 0xe, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0xfffff800, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "0ee575badf87946c", "215e11139f56a832491d6bdcd41b7110", "c5c8e7d8", "7cc6d9748f6a1407"}, 0x28) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/51, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket(0xa, 0x3, 0xff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 47.064567275s ago: executing program 8 (id=2041): fsmount(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeff"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0xffffffff}, 0x0) 47.019399285s ago: executing program 39 (id=2041): fsmount(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeff"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0xffffffff}, 0x0) 13.038131518s ago: executing program 9 (id=2236): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00', 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x2a8, 0x2a8, 0x0, 0xf0, 0x3b8, 0x458, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@remote, @multicast1, 0xff, 0xffffff00, 'syzkaller0\x00', 'batadv_slave_1\x00', {}, {}, 0x32, 0x1, 0x20}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0xc7}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x81, @local, 0x4e20}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x39}, 0xffffff00, 0xffffff00, 'veth0_macvtap\x00', 'wlan0\x00', {}, {}, 0x4, 0x0, 0x40}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @remote, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {0xff}, {}, 0x33, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x2, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 12.716626955s ago: executing program 9 (id=2238): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$eJzs3U9oHFUYAPBvO5vdpFCTg1AUhNGboKGNeNBTQkmhmIvK4p+DuNhUJYmFLC6mh2zjRTwKHtWLNw967FkERbx58GoFqYoH7a1gcWR3ZrOz2c02Fba1+Psdhi/vvW/f93aHZDLJvn11OTbOz8SF69evxexsJarLZ5bjRiUWIom+yzGqNqYNALg33Miy+DPLHTGl0j0sTLcsAGCKej//Xz9Rann360njs8r0awIApqv4/X9u0pjZwzouTqUkAGDKRu7/PzLUXRv+U3+19F8BAMC96vmXXn5mZS3iuTSdjdh6r91oN+LpQf/KhXgzNmM9TsV83IzILxS6h0rvePbc2uqpNE078ctCNLoZ7UbEVqfdyK8UVpJefj1Ox3wsFPnF1UaWZcnZTyIi7YmIy53e/LFVaTdm4ngx/4/HYz2WIo37R/Ijzq2tLqXFAzS2+vmdiL3BfYtu/YsxH9+/FhdjM85HN7d/WbO2uns6Tc9ka0P57Ua9Ny536B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTfQv7+99kg/17FhfH9Pf2x8nzi/2B9vL9gbJ6Fln2xzuPN95PYmh/oIP787Qb1Th2d5cOAAAAAAAAAAAAAAAAAAAA/xmtnVo0NzfXt1s7lzbKQWe7tXMsIrotb337+VdzMTrmFkG1mKPUlRZNlzaaWdIfnCVDY4og6U7eb/nsyn7F5TH1/VWMLaOedx2LcRWeePjnjwYtDyX9R/57MCaJ8QtMDpRRDrbuy0u6nSdqP1i6xZirWZYdlr77ymhWVCKqt//CTQ5mu8/qN9feeOCJ1skney1fZrlHH5t/4eqHn/620dzszhy9V7C23bqZbTSLr8efbIcHSen8qUQeVMpnQnVS+t5wSzP54fcXH/zgu6PNnpVb3h4zJsmX88XBrloedMs80DU3bq6ZMSf/FIKTHy83r+z+9OtRs0rfJGzUAQAAAAAAAAAAAAAAAAAAd0TpveKF4s2+M5Oynnp2+pUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ0z+Pz/UrA30nKU4K9OjHbV17dbEbW7vUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7n/gkAAP//YA9qrg==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r3 = socket(0x2, 0x3, 0xff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) syz_emit_ethernet(0x42, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback}, "65b37c42"}}}}}, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x2c, @rand_addr=0x64010101, 0x4e20, 0x1, 'fo\x00', 0xa, 0x139, 0x5e}, 0x2c) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 11.805334336s ago: executing program 9 (id=2242): socket$inet_sctp(0x2, 0x1, 0x84) r0 = epoll_create(0x7) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4}) dup(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x20000680) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") getsockopt$inet_mptcp_buf(r4, 0x6, 0x1e, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) bind$rxrpc(r3, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000007040)={0x400, &(0x7f0000006e40), 0x0, 0x0, {0x18}, 0x0, 0x0, 0x0, &(0x7f0000007000)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) unshare(0x10000000) close_range(r2, 0xffffffffffffffff, 0x0) 10.126887437s ago: executing program 9 (id=2254): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2a, 0x0, &(0x7f0000000000)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port1\x00', 0x72, 0x0, 0xe6ed, 0xffffffff, 0x6da, 0x0, 0x0, 0x0, 0x3, 0x8f}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') getdents(r3, &(0x7f0000000dc0)=""/4106, 0x100a) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x9}, 'port0\x00', 0x89, 0x90010, 0x3, 0x2, 0x40000, 0x0, 0x200000, 0x0, 0x1}) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x8000) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x14, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0xaa79}, 0x100a00, 0x0, 0x2, 0x8, 0x1, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r4, &(0x7f0000000c00)={&(0x7f0000000040), 0xc, &(0x7f0000000840)=[{&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f0000000200)=""/236, 0xec}, {&(0x7f0000000380)=""/171, 0xab}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f00000004c0)=""/188, 0xbc}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/34, 0x22}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/170, 0xaa}, {&(0x7f0000000780)=""/157, 0x9d}], 0xa, &(0x7f0000000900)=[{0xe0, 0x0, 0x0, ""/202}, {0xf0, 0x0, 0x0, ""/223}, {0xf8, 0x0, 0x0, ""/228}], 0x2c8, 0x2002}, 0x38, 0xa2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001b00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x317, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x8814}, 0x800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, 0x0, 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r10, @ANYBLOB="080006"], 0x24}}, 0x0) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000114788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0500000000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711078000000000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) 9.851452453s ago: executing program 9 (id=2257): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251b00000008009e0001000000282ef62dd5420b2b40629bd40c70c0bca20cc9176abdf46ce16a1870f8bda2886a02299baa99e6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r3, 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) dup2(r6, r3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000400)="04", 0x1}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) 7.43966005s ago: executing program 2 (id=2260): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="cdb4c957de4d0ae5"}}) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xa880, 0x97) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='attr/sockcreate\x00') preadv(r3, &(0x7f0000000300)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x5, 0xfff5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000007b40)={0x0, 0x7, 0x4}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0xec, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "ae19c4c75d3c21571e00848cf34130646c4363187a0b62d9fc5a788ad7f3344eb90dead31c4f070f4a33235d4efd91be82821dad46dbb30005485b9f638ecfe3198554df12b108ac6fd5f653728f8e43dc1e923b565fb7646f059310332274b6a3a080628f8276ec54954319d20ad93617af9cce6a0d3664c40839ef3e998d7ce6c8d95bcd22e4a21a40d7e7a441b5a88d66ff6a600e2f949cd844aa0a232c9dd1975c65"}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}]}, 0xec}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x6001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r9}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000180)=""/110) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095", @ANYRESOCT=r7, @ANYRES32=r5, @ANYRES8=0x0, @ANYRES8=r9, @ANYRESOCT=r4], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.438744549s ago: executing program 9 (id=2261): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x100b28, 0x9, 0x28000000, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, 0x0) unshare(0x6c040000) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02}) unshare(0x44040200) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) 6.367812019s ago: executing program 2 (id=2264): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SEM_STAT(0x0, 0x4, 0x12, 0x0) 6.205341687s ago: executing program 4 (id=2265): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETS(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0xc08c4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) preadv(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x80000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b28c014de0e1c8c41db7241a8b7636eccf2af934c57a260db0032ef5bd558af43641d50c77654a44e21242c710e35bb305e7b1a08020c6a60c8dfef4937d9a6d9e71666b35f4142f87b5647f04dcdc3dcec5f7aacdc4c61cc6188dba63255f17b3ba8d969c618b416ab9c03924a0746be650c4ee30c99e4ebc317c54f7d4095f0afa1ad4c666579eeb6ccd433f21330d75a0bd07dc530395649a5e963c2d850003ace81ec04f8542a67e8da142f46d0780f974844c51a1d49b9a9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="050000000000000000", @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)}], 0x1, 0x80000001, 0x0, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) 5.394048838s ago: executing program 2 (id=2268): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251b00000008009e0001000000282ef62dd5420b2b40629bd40c70c0bca20cc9176abdf46ce16a1870f8bda2886a02299baa99e6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r5, r3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) 5.374338824s ago: executing program 1 (id=2269): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, r0, 0x1) 5.285167737s ago: executing program 1 (id=2270): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = io_uring_setup(0x3559, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x1, 0x7ffc0002}]}) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r6 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/136, 0x88}], 0x1}, 0x7}], 0x1, 0x40012023, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = gettid() timer_create(0x3, &(0x7f0000000100)={0x0, 0x0, 0x2, @tid=r7}, &(0x7f0000000200)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x401, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc33}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) getsockname$packet(r4, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8001}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x872}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3}}]}}]}, 0x78}}, 0x8d0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x80}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x6c}}, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000080)={0x6, 0x3}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 5.209551562s ago: executing program 3 (id=2271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001480)=""/4122, 0x101a, 0x4b) pread64(r2, &(0x7f0000002400)=""/118, 0x76, 0x10000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x14, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040) 5.172390705s ago: executing program 4 (id=2272): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) ioprio_get$pid(0x2, r0) 4.125370479s ago: executing program 3 (id=2273): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETS(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0xc08c4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) preadv(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x80000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b28c014de0e1c8c41db7241a8b7636eccf2af934c57a260db0032ef5bd558af43641d50c77654a44e21242c710e35bb305e7b1a08020c6a60c8dfef4937d9a6d9e71666b35f4142f87b5647f04dcdc3dcec5f7aacdc4c61cc6188dba63255f17b3ba8d969c618b416ab9c03924a0746be650c4ee30c99e4ebc317c54f7d4095f0afa1ad4c666579eeb6ccd433f21330d75a0bd07dc530395649a5e963c2d850003ace81ec04f8542a67e8da142f46d0780f974844c51a1d49b9a9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="050000000000000000", @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)}], 0x1, 0x80000001, 0x0, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) 3.46860832s ago: executing program 4 (id=2274): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c8, &(0x7f0000000cc0)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x39) 2.849715709s ago: executing program 1 (id=2275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xf1}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80035}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x100, 0x3644, 0x4, 0x710, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xd}, 0x50) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000001c0)={0x9, 0x8000, 0x80000001, 0x4, 0xa, 0xfffffffffffffff8}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e657665"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x5}, {0xffff, 0xffff}, {0xfff3, 0xfff2}}}, 0x24}}, 0x8040) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r6, 0x0, 0x7fffffffffffffff) 2.726162715s ago: executing program 4 (id=2276): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x894) 2.504625411s ago: executing program 4 (id=2277): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf251b00000008009e0001000000282ef62dd5420b2b40629bd40c70c0bca20cc9176abdf46ce16a1870f8bda2886a02299baa99e6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x3ff, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000071121a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setlease(r3, 0x400, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) dup2(r6, r3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) vmsplice(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000400)="04", 0x1}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000480)={0x2b, 0x0, 0xfffffffb}) 2.255865882s ago: executing program 2 (id=2278): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xb, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000080000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x640, 0x4, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ioprio_set$uid(0x3, 0x0, 0x0) recvfrom(r0, &(0x7f0000000400)=""/20, 0x14, 0x10000, &(0x7f0000000d40)=@vsock={0x28, 0x0, 0xffffd8ef, @hyper}, 0x80) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x1, &(0x7f0000000200)=[{0x40, 0x2, 0x5, 0x1}]}) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) io_pgetevents(0x0, 0xcfe3, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x3ee]}, 0x8}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000080)={[{@lazytime}, {@stripe={'stripe', 0x3d, 0x56b2}}, {@bh}, {@nodelalloc}, {@nodelalloc}, {}, {@mblk_io_submit}, {@acl}, {@stripe={'stripe', 0x3d, 0x7}}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") 1.315823228s ago: executing program 1 (id=2279): syz_io_uring_setup(0x132a, &(0x7f0000000000)={0x0, 0x5042, 0x40, 0x1, 0x3df}, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1d0, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}], 0x20}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)="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", 0x101}], 0x3) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f80080001"], 0x168}}, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffff87, 0x2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000100)={r8}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8, 0x1ffe000}, 0x8) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x400) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 1.192519974s ago: executing program 3 (id=2280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x84}, 0xc000894) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8d5}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$packet(0x11, 0x3, 0x300) r3 = syz_io_uring_setup(0x643d, &(0x7f0000000140)={0x0, 0xb771, 0x10000, 0x1, 0x40}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r7, &(0x7f0000000200)='2', 0x1, 0x8000c61) read$msr(r7, &(0x7f0000001200)=""/244, 0xfffffc9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000009, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r8 = getpid() r9 = add_key(&(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r9) syz_pidfd_open(r8, 0x0) setns(0xffffffffffffffff, 0x24020000) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0xe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000207000/0x2000)=nil, 0x2000, 0x9) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write(r10, &(0x7f0000000340)='\x00', 0x1) 672.683072ms ago: executing program 4 (id=2281): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) writev(r0, &(0x7f0000001700)=[{&(0x7f0000000580)="8bbb", 0x2}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff85000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40895) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, 0x0) io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x800, 0x7, 0x2}) r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0x201, 0x2) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, 0x0, 0x40) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000370400"/19, @ANYRES32=r7], 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24008000) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x2) pread64(r8, &(0x7f0000000380)=""/149, 0x95, 0xa) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 670.701741ms ago: executing program 1 (id=2282): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x208814, &(0x7f0000000040)={[{@block_validity}, {@grpquota}]}, 0x0, 0x4d4, &(0x7f00000011c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 645.695426ms ago: executing program 3 (id=2283): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x200) ioctl$BLKSSZGET(r1, 0x1268, &(0x7f00000000c0)) unshare(0x24020400) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e7800000000000, 0x8a000) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000080)=[0x4, 0x8dce]) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, r3, 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0x33) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000005000000020000000700000001000000", @ANYRES32=0x1, @ANYBLOB="920e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000008092de92140000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r9) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r10, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x894) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r11) r12 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r12, &(0x7f0000000280)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 362.618211ms ago: executing program 1 (id=2284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() getrlimit(0x2, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r2, 0x20, &(0x7f0000000340)={&(0x7f00000001c0)=""/230, 0xe6, 0x0, &(0x7f0000000400)=""/168, 0xa8}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfc, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x10}, 0x4, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 273.053873ms ago: executing program 2 (id=2285): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffff", 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000240)="08f059530b087b7a887e62102a4bf1f10f6688496da4000a90fdf32fe5627f1a9959d6728ea5a45aa16f0d84357d3aa0a1523f14656fdc26f77807060f1ef489d2faf241a0189a139a4b8fa35057f3787d7462e539797e9c92e6d3f489a39a58c69bc7bbe05e4f197cf777c7f75496c6c6ee977a90d021eb9da1b9adbd7d1995d9a2fc27be0ade2ea5ad9b2967273fba03", 0x91) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, &(0x7f0000000f80)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) 258.4379ms ago: executing program 3 (id=2286): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) (fail_nth: 2) 223.312163ms ago: executing program 3 (id=2287): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TCSETS(0xffffffffffffffff, 0x89f2, 0x0) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0xc08c4) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, 0x0, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) preadv(r4, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000380)=""/4090, 0xffa}], 0x2, 0xa, 0x203) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6}, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000000)=0x4000000ffb, 0x8) io_setup(0x10000, &(0x7f00000014c0)) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000300)=0x1c, 0x80000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1b28c014de0e1c8c41db7241a8b7636eccf2af934c57a260db0032ef5bd558af43641d50c77654a44e21242c710e35bb305e7b1a08020c6a60c8dfef4937d9a6d9e71666b35f4142f87b5647f04dcdc3dcec5f7aacdc4c61cc6188dba63255f17b3ba8d969c618b416ab9c03924a0746be650c4ee30c99e4ebc317c54f7d4095f0afa1ad4c666579eeb6ccd433f21330d75a0bd07dc530395649a5e963c2d850003ace81ec04f8542a67e8da142f46d0780f974844c51a1d49b9a9"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="050000000000000000", @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)}], 0x1, 0x80000001, 0x0, 0x14) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x3) 0s ago: executing program 2 (id=2288): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) syz_io_uring_setup(0x0, 0xfffffffffffffffe, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000040)=0x4, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100001040bdf00000007000000000000", @ANYRES32=r7, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) flistxattr(r9, &(0x7f0000000280)=""/117, 0x75) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d756e69782c00c51aba0cad7b6f16501845cbb3c0999e1009109d65bd8c8af54dd7ae2e84eb2e324eb427c30870a6034b19"]) kernel console output (not intermixed with test programs): type=1400 audit(1773124452.230:2170): avc: denied { mount } for pid=10768 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 343.864652][ T28] audit: type=1400 audit(1773124452.590:2171): avc: denied { map } for pid=11066 comm="syz.9.1907" path="socket:[32893]" dev="sockfs" ino=32893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 344.162211][T11085] loop8: detected capacity change from 0 to 512 [ 344.202190][T11097] loop9: detected capacity change from 0 to 512 [ 344.256353][T11097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 344.291745][T11097] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.317316][T11085] EXT4-fs (loop8): 1 orphan inode deleted [ 344.341307][T11085] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.366267][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 344.417744][T11110] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1913'. [ 344.513699][T11116] lo speed is unknown, defaulting to 1000 [ 344.520160][T11116] dummy0 speed is unknown, defaulting to 1000 [ 344.526875][T11116] lo speed is unknown, defaulting to 1000 [ 344.644142][ T28] audit: type=1400 audit(1773124453.230:2172): avc: denied { rename } for pid=11103 comm="syz.0.1911" name="file2" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 344.849729][ T28] audit: type=1326 audit(1773124453.350:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11103 comm="syz.0.1911" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f827002c799 code=0x0 [ 344.895676][ T28] audit: type=1400 audit(1773124453.410:2174): avc: denied { read } for pid=11103 comm="syz.0.1911" name="file0" dev="tmpfs" ino=2148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 345.515174][T11145] loop2: detected capacity change from 0 to 1024 [ 345.645928][T11145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.098426][ T8934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.166723][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1920'. [ 346.611409][T11186] loop1: detected capacity change from 0 to 1024 [ 346.634021][T11186] EXT4-fs: test_dummy_encryption option not supported [ 346.742391][ T28] audit: type=1400 audit(1773124455.420:2175): avc: denied { append } for pid=11185 comm="syz.1.1924" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 346.830128][T11223] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1926'. [ 346.850075][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.902222][T11234] loop8: detected capacity change from 0 to 512 [ 346.912358][T11223] loop1: detected capacity change from 0 to 4096 [ 346.919145][T11234] EXT4-fs: test_dummy_encryption option not supported [ 346.936932][T11223] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 346.943892][T11223] EXT4-fs (loop1): mount failed [ 346.968338][T11236] loop2: detected capacity change from 0 to 512 [ 346.975853][T11234] syzkaller0: entered promiscuous mode [ 346.983561][T11234] syzkaller0: entered allmulticast mode [ 347.036137][T11223] loop1: detected capacity change from 0 to 8192 [ 347.249468][T11263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1935'. [ 347.327699][T11269] netlink: 'syz.8.1936': attribute type 8 has an invalid length. [ 347.640504][ T28] audit: type=1400 audit(1773124456.371:2176): avc: denied { bind } for pid=11277 comm="syz.8.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 348.684073][T11278] lo speed is unknown, defaulting to 1000 [ 349.659935][T11287] loop0: detected capacity change from 0 to 1024 [ 349.668524][T11278] dummy0 speed is unknown, defaulting to 1000 [ 350.111560][T11287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.144251][T11281] loop8: detected capacity change from 0 to 8192 [ 350.202774][T11278] lo speed is unknown, defaulting to 1000 [ 350.287991][ T9] IPVS: starting estimator thread 0... [ 350.294935][T11281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 350.512561][T11294] IPVS: using max 2448 ests per chain, 122400 per kthread [ 350.578312][ T28] audit: type=1400 audit(1773124459.312:2177): avc: denied { remount } for pid=11295 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 350.638735][T11299] loop9: detected capacity change from 0 to 512 [ 350.685841][T11299] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 350.698981][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.715868][T11299] EXT4-fs error (device loop9): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 350.755018][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 350.761485][ C0] EXT4-fs (loop9): initial error at time 1773124459: mb_free_blocks:2047: inode 11: block 64 [ 350.771681][ C0] EXT4-fs (loop9): last error at time 1773124459: mb_free_blocks:2047: inode 11: block 64 [ 350.791113][T11299] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #11: comm syz.9.1941: corrupted inode contents [ 350.803125][T11299] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 350.806480][T11299] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #11: comm syz.9.1941: mark_inode_dirty error [ 350.828004][T11299] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 350.829334][T11299] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1941: invalid indirect mapped block 1 (level 1) [ 350.854145][T11306] loop0: detected capacity change from 0 to 128 [ 350.869104][T11299] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 350.871195][T11299] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #11: comm syz.9.1941: corrupted inode contents [ 350.893705][T11299] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 350.895267][T11299] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 350.941311][T11299] loop9: lost filesystem error report for type 5 error -117 [ 350.941841][T11299] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #11: comm syz.9.1941: corrupted inode contents [ 350.948635][T11311] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38160 sclass=netlink_route_socket pid=11311 comm=syz.2.1945 [ 350.949211][T11299] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 350.962482][T11310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38160 sclass=netlink_route_socket pid=11310 comm=syz.2.1945 [ 350.976114][T11299] EXT4-fs error (device loop9): ext4_truncate:4587: inode #11: comm syz.9.1941: mark_inode_dirty error [ 351.008738][T11299] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 351.009068][T11299] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 351.029168][T11299] loop9: lost filesystem error report for type 5 error -117 [ 351.029560][T11299] EXT4-fs (loop9): 1 truncate cleaned up [ 351.044074][T11299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.833627][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.041193][T11333] SET target dimension over the limit! [ 352.061639][T11322] netlink: 'syz.1.1948': attribute type 11 has an invalid length. [ 352.235562][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1954'. [ 352.256630][T11333] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1951'. [ 352.346827][T11333] netlink: 260 bytes leftover after parsing attributes in process `syz.9.1951'. [ 352.361497][T11331] loop8: detected capacity change from 0 to 2048 [ 352.436601][T11331] Alternate GPT is invalid, using primary GPT. [ 352.443115][T11331] loop8: p2 p3 p7 [ 352.477657][ T2999] Alternate GPT is invalid, using primary GPT. [ 352.484036][ T2999] loop8: p2 p3 p7 [ 352.577803][T11340] loop0: detected capacity change from 0 to 1024 [ 352.602612][T11340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.989229][T11421] loop1: detected capacity change from 0 to 256 [ 353.027382][T11421] FAT-fs (loop1): codepage cp852 not found [ 353.104967][ T28] audit: type=1400 audit(1773124461.843:2178): avc: denied { create } for pid=11442 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.324525][T11457] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 353.331937][T11457] xt_TPROXY: Can be used only with -p tcp or -p udp [ 353.510211][ T28] audit: type=1400 audit(1773124462.243:2179): avc: denied { read } for pid=11442 comm="syz.2.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 353.550127][T11461] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1960'. [ 353.648119][T11461] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1960'. [ 353.677820][T11462] loop2: detected capacity change from 0 to 2048 [ 353.726220][T11462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.739451][T11444] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 353.756939][T11464] loop8: detected capacity change from 0 to 1024 [ 353.765274][T11464] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 353.767077][T11444] SELinux: failed to load policy [ 353.779526][T11464] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 353.789255][T11464] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 353.799777][T11464] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 353.808662][T11464] EXT4-fs (loop8): filesystem has both journal inode and journal device! [ 353.873244][ T28] audit: type=1400 audit(1773124462.563:2180): avc: denied { setopt } for pid=11443 comm="syz.8.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 353.895526][T11470] SET target dimension over the limit! [ 353.936034][T11470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1961'. [ 353.948102][T11470] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1961'. [ 353.979819][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.039902][T11474] SET target dimension over the limit! [ 354.040617][T11475] SET target dimension over the limit! [ 354.136020][T11474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1963'. [ 354.142784][T11475] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1962'. [ 354.160963][T11475] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1962'. [ 355.574495][T11497] loop8: detected capacity change from 0 to 512 [ 355.583624][T11499] loop9: detected capacity change from 0 to 128 [ 355.735278][T11497] EXT4-fs (loop8): 1 orphan inode deleted [ 355.752394][T11497] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.355443][T11505] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 356.385541][T11505] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 356.416006][T11507] SELinux: policydb string length 70189064 does not match expected length 8 [ 356.472367][T11507] SELinux: failed to load policy [ 356.629810][T11519] loop2: detected capacity change from 0 to 512 [ 356.665344][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.677062][T11519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.703967][T11519] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.720777][T11522] loop1: detected capacity change from 0 to 1024 [ 356.840366][T11527] tipc: New replicast peer: 255.255.255.255 [ 356.941984][T11527] tipc: Enabled bearer , priority 10 [ 357.025126][ T8934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.192093][ T28] audit: type=1400 audit(1773124465.915:2181): avc: denied { getopt } for pid=11517 comm="syz.2.1978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 357.267020][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.369269][T11542] loop2: detected capacity change from 0 to 256 [ 357.539706][T11544] bridge_slave_1: left allmulticast mode [ 357.545604][T11544] bridge_slave_1: left promiscuous mode [ 357.551364][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.564022][T11544] bridge_slave_0: left allmulticast mode [ 357.569761][T11544] bridge_slave_0: left promiscuous mode [ 357.575802][T11544] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.024626][ T4734] tipc: Node number set to 4243997168 [ 358.096523][T11557] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 358.203444][T11560] loop1: detected capacity change from 0 to 2048 [ 358.212167][T11557] __nla_validate_parse: 3 callbacks suppressed [ 358.212187][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 358.319447][T11543] bio_check_eod: 56 callbacks suppressed [ 358.319481][T11543] syz.2.1984: attempt to access beyond end of device [ 358.319481][T11543] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 358.339000][T11543] syz.2.1984: attempt to access beyond end of device [ 358.339000][T11543] loop2: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 358.352697][T11543] syz.2.1984: attempt to access beyond end of device [ 358.352697][T11543] loop2: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 358.367216][T11543] syz.2.1984: attempt to access beyond end of device [ 358.367216][T11543] loop2: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 358.382100][T11543] syz.2.1984: attempt to access beyond end of device [ 358.382100][T11543] loop2: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 358.396106][T11543] syz.2.1984: attempt to access beyond end of device [ 358.396106][T11543] loop2: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 358.410641][T11543] syz.2.1984: attempt to access beyond end of device [ 358.410641][T11543] loop2: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 358.425209][T11543] syz.2.1984: attempt to access beyond end of device [ 358.425209][T11543] loop2: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 358.439293][T11543] syz.2.1984: attempt to access beyond end of device [ 358.439293][T11543] loop2: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 358.523888][T11543] syz.2.1984: attempt to access beyond end of device [ 358.523888][T11543] loop2: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 358.600130][T11569] loop0: detected capacity change from 0 to 2048 [ 358.648786][T11577] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1992'. [ 358.653928][T11569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.674897][T11569] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.827372][T11569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1993'. [ 358.997416][ T28] audit: type=1400 audit(1773124467.736:2182): avc: denied { read write } for pid=11597 comm="syz.0.1996" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.278678][ T28] audit: type=1400 audit(1773124467.736:2183): avc: denied { open } for pid=11597 comm="syz.0.1996" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 359.350657][T11609] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2000'. [ 359.392704][T11609] netlink: 1472 bytes leftover after parsing attributes in process `syz.1.2000'. [ 359.767717][T11627] loop0: detected capacity change from 0 to 512 [ 359.984821][T11627] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.067912][T11627] EXT4-fs (loop0): 1 truncate cleaned up [ 360.079068][T11627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.172015][T11641] hub 8-0:1.0: USB hub found [ 360.177516][T11641] hub 8-0:1.0: 8 ports detected [ 360.192751][T11641] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 360.349096][T11641] macvlan1: entered allmulticast mode [ 360.406090][T11641] veth1_vlan: entered allmulticast mode [ 360.416364][T11641] team0: Port device macvlan1 added [ 361.095867][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.215254][ T28] audit: type=1400 audit(1773124469.947:2184): avc: denied { bind } for pid=11689 comm="syz.0.2012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.827878][T11694] loop8: detected capacity change from 0 to 512 [ 361.971652][T11704] loop0: detected capacity change from 0 to 2048 [ 361.984698][T11694] EXT4-fs (loop8): 1 orphan inode deleted [ 362.017839][T11694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.062540][T11704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.129437][T11695] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 362.141296][T11695] SELinux: failed to load policy [ 362.202690][ T5094] Bluetooth: hci0: Frame reassembly failed (-84) [ 362.209856][ T5094] Bluetooth: hci0: Frame reassembly failed (-84) [ 362.217173][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.226233][ T28] audit: type=1400 audit(1773124470.948:2185): avc: denied { ioctl } for pid=11710 comm="syz.2.2018" path="socket:[33441]" dev="sockfs" ino=33441 ioctlcmd=0x48e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 362.284162][T11713] loop0: detected capacity change from 0 to 512 [ 362.308798][T11715] loop1: detected capacity change from 0 to 512 [ 362.312080][T11713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.354332][ T28] audit: type=1326 audit(1773124471.088:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06204c799 code=0x7ffc0000 [ 362.377950][ T28] audit: type=1326 audit(1773124471.088:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06204c799 code=0x7ffc0000 [ 362.380416][T11713] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.401979][ T28] audit: type=1326 audit(1773124471.088:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc06204c799 code=0x7ffc0000 [ 362.402010][ T28] audit: type=1326 audit(1773124471.088:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06204c799 code=0x7ffc0000 [ 362.402033][ T28] audit: type=1326 audit(1773124471.088:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc06204c799 code=0x7ffc0000 [ 362.402147][ T28] audit: type=1326 audit(1773124471.088:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.2.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06204c799 code=0x7ffc0000 [ 362.451644][T11715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.514023][T11722] FAULT_INJECTION: forcing a failure. [ 362.514023][T11722] name failslab, interval 1, probability 0, space 0, times 0 [ 362.522724][T11715] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.535867][T11722] CPU: 1 UID: 0 PID: 11722 Comm: syz.0.2019 Tainted: G W syzkaller #0 PREEMPT(full) [ 362.535896][T11722] Tainted: [W]=WARN [ 362.535903][T11722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 362.535914][T11722] Call Trace: [ 362.535938][T11722] [ 362.535944][T11722] __dump_stack+0x1d/0x30 [ 362.535985][T11722] dump_stack_lvl+0x95/0xd0 [ 362.536014][T11722] dump_stack+0x15/0x1b [ 362.536033][T11722] should_fail_ex+0x263/0x280 [ 362.536055][T11722] should_failslab+0x8c/0xb0 [ 362.536121][T11722] __kmalloc_noprof+0xb8/0x4e0 [ 362.536142][T11722] ? qtree_write_dquot+0x70/0x300 [ 362.536162][T11722] qtree_write_dquot+0x70/0x300 [ 362.536323][T11722] ? __pfx_ext4_quota_write+0x10/0x10 [ 362.536352][T11722] ? __rcu_read_unlock+0x4e/0x70 [ 362.536370][T11722] ? filemap_get_entry+0x392/0x3d0 [ 362.536392][T11722] v2_write_dquot+0xd9/0x130 [ 362.536411][T11722] dquot_commit+0x21b/0x260 [ 362.536438][T11722] ext4_write_dquot+0x126/0x1d0 [ 362.536512][T11722] ext4_mark_dquot_dirty+0x95/0xd0 [ 362.536536][T11722] __dquot_alloc_space+0x7d0/0x8a0 [ 362.536598][T11722] ext4_xattr_block_set+0xa08/0x1a60 [ 362.536632][T11722] ext4_xattr_set_handle+0xb26/0xf80 [ 362.536706][T11722] ? __rcu_read_unlock+0x4e/0x70 [ 362.536729][T11722] ext4_initxattrs+0x62/0xc0 [ 362.536751][T11722] security_inode_init_security+0x249/0x320 [ 362.536863][T11722] ? __pfx_ext4_initxattrs+0x10/0x10 [ 362.536887][T11722] ext4_init_security+0x34/0x50 [ 362.536909][T11722] __ext4_new_inode+0x2149/0x2340 [ 362.536935][T11722] ext4_create+0x16e/0x2f0 [ 362.536970][T11722] ? __pfx_ext4_create+0x10/0x10 [ 362.536991][T11722] path_openat+0xd75/0x2050 [ 362.537186][T11722] do_file_open+0x16c/0x290 [ 362.537221][T11722] do_sys_openat2+0x94/0x130 [ 362.537313][T11722] __x64_sys_openat+0xf2/0x120 [ 362.537339][T11722] x64_sys_call+0x1e39/0x3020 [ 362.537361][T11722] do_syscall_64+0x12c/0x370 [ 362.537399][T11722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.537419][T11722] RIP: 0033:0x7f827002c799 [ 362.537467][T11722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.537483][T11722] RSP: 002b:00007f826ea5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 362.537502][T11722] RAX: ffffffffffffffda RBX: 00007f82702a6090 RCX: 00007f827002c799 [ 362.537515][T11722] RDX: 000000000000275a RSI: 0000200000000380 RDI: ffffffffffffff9c [ 362.537589][T11722] RBP: 00007f826ea5e090 R08: 0000000000000000 R09: 0000000000000000 [ 362.537601][T11722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 362.537612][T11722] R13: 00007f82702a6128 R14: 00007f82702a6090 R15: 00007ffcf2887888 [ 362.537629][T11722] [ 362.537692][T11722] EXT4-fs error (device loop0): ext4_write_dquot:6981: comm syz.0.2019: Failed to commit dquot type 1 [ 362.831447][ T8934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.876599][ T3318] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 362.893461][ T3318] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 362.919405][T11728] loop9: detected capacity change from 0 to 1024 [ 362.926214][T11728] EXT4-fs: Ignoring removed nobh option [ 362.954850][ T9930] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.977879][T11728] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #2: comm syz.9.2023: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 362.995714][T11728] loop9: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 362.996652][T11728] EXT4-fs (loop9): get root inode failed [ 363.005712][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 363.005743][ C0] EXT4-fs (loop9): initial error at time 1773124471: ext4_ext_check_inode:521: inode 2 [ 363.005766][ C0] EXT4-fs (loop9): last error at time 1773124471: ext4_ext_check_inode:521: inode 2 [ 363.037234][T11728] EXT4-fs (loop9): mount failed [ 363.137860][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.200007][T11738] RDS: rds_bind could not find a transport for ::ffff:128.0.0.0, load rds_tcp or rds_rdma? [ 363.338417][ T12] bridge_slave_1: left allmulticast mode [ 363.381593][ T12] bridge_slave_1: left promiscuous mode [ 363.413715][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.436993][ T12] bridge_slave_0: left allmulticast mode [ 363.442878][ T12] bridge_slave_0: left promiscuous mode [ 363.448831][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.570910][T11750] loop1: detected capacity change from 0 to 256 [ 363.605996][T11750] FAT-fs (loop1): codepage cp852 not found [ 364.548177][ T3603] Bluetooth: hci0: command 0x1003 tx timeout [ 364.550471][ T5962] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 364.621044][T11711] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 364.658002][T11762] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 364.759635][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.768998][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.780368][ T12] bond0 (unregistering): Released all slaves [ 364.788431][ T12] bond1 (unregistering): Released all slaves [ 364.880432][ T12] tipc: Disabling bearer [ 364.888316][ T12] tipc: Left network mode [ 364.958885][ T12] hsr_slave_0: left promiscuous mode [ 364.970302][ T12] hsr_slave_1: left promiscuous mode [ 364.975969][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.996938][T11777] loop9: detected capacity change from 0 to 512 [ 365.005573][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.023816][ T12] batman_adv: batadv0: Removing interface: macsec1 [ 365.076945][T11777] EXT4-fs (loop9): 1 orphan inode deleted [ 365.088892][T11777] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.128652][ T12] team0 (unregistering): Port device team_slave_1 removed [ 365.141690][ T12] team0 (unregistering): Port device team_slave_0 removed [ 365.242323][T11808] loop2: detected capacity change from 0 to 7 [ 365.250804][T11741] dummy0 speed is unknown, defaulting to 1000 [ 365.259452][T11741] lo speed is unknown, defaulting to 1000 [ 365.325515][T11811] loop8: detected capacity change from 0 to 512 [ 365.409188][T11811] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.434621][T11811] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.481424][T11741] chnl_net:caif_netlink_parms(): no params data found [ 365.522154][ T8934] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 365.536101][ T8934] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 365.537094][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.556526][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.564717][T11741] bridge_slave_0: entered allmulticast mode [ 365.571300][T11741] bridge_slave_0: entered promiscuous mode [ 365.580584][ T8934] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.581753][ T12] IPVS: stop unused estimator thread 0... [ 365.595775][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.608689][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.617033][T11741] bridge_slave_1: entered allmulticast mode [ 365.624086][T11741] bridge_slave_1: entered promiscuous mode [ 365.643836][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.655115][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.684649][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.697102][T11741] team0: Port device team_slave_0 added [ 365.706335][T11741] team0: Port device team_slave_1 added [ 365.722765][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.738369][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.764533][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.778458][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.790354][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.805802][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.839673][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.859774][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.879998][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.916432][T11841] dummy0 speed is unknown, defaulting to 1000 [ 365.923257][T11741] hsr_slave_0: entered promiscuous mode [ 365.929358][T11741] hsr_slave_1: entered promiscuous mode [ 365.932376][T11867] loop9: detected capacity change from 0 to 512 [ 365.935318][T11741] debugfs: 'hsr0' already exists in 'hsr' [ 365.946972][T11741] Cannot create hsr debugfs directory [ 365.959377][T11867] EXT4-fs (loop9): 1 truncate cleaned up [ 365.969554][T11867] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.983277][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.989694][T11867] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.2044: invalid indirect mapped block 4294967295 (level 1) [ 366.008353][T11867] EXT4-fs (loop9): Remounting filesystem read-only [ 366.008574][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 366.008585][ T28] audit: type=1400 audit(1773124474.719:2200): avc: denied { rename } for pid=11866 comm="syz.9.2044" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 366.044253][ T28] audit: type=1400 audit(1773124474.749:2201): avc: denied { ioctl } for pid=11866 comm="syz.9.2044" path="/81/file1/file1" dev="loop9" ino=13 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 366.044844][T11841] lo speed is unknown, defaulting to 1000 [ 366.088746][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.140480][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2045'. [ 366.162391][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2045'. [ 366.192885][T11876] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2045'. [ 366.312483][ T12] bridge_slave_1: left allmulticast mode [ 366.325562][ T12] bridge_slave_1: left promiscuous mode [ 366.335460][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.510804][T11907] x_tables: duplicate underflow at hook 3 [ 366.539413][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.561118][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.581103][ T12] bond0 (unregistering): Released all slaves [ 366.660325][T11841] chnl_net:caif_netlink_parms(): no params data found [ 366.723138][T11906] dummy0 speed is unknown, defaulting to 1000 [ 366.752442][T11906] lo speed is unknown, defaulting to 1000 [ 366.759053][T11841] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.779908][T11841] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.799402][T11841] bridge_slave_0: entered allmulticast mode [ 366.831079][T11841] bridge_slave_0: entered promiscuous mode [ 366.840617][T11841] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.865997][T11841] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.878529][T11916] EXT4-fs (loop9): 1 orphan inode deleted [ 366.887491][T11916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.887584][T11841] bridge_slave_1: entered allmulticast mode [ 366.917785][T11841] bridge_slave_1: entered promiscuous mode [ 366.978470][T11841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.003806][T11841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.056832][T11905] dummy0 speed is unknown, defaulting to 1000 [ 367.076636][ T12] hsr_slave_0: left promiscuous mode [ 367.104385][ T12] hsr_slave_1: left promiscuous mode [ 367.110612][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.118851][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.126303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.136117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.157145][ T12] veth1_macvtap: left promiscuous mode [ 367.162634][ T12] veth0_macvtap: left promiscuous mode [ 367.172281][ T12] veth1_vlan: left promiscuous mode [ 367.188472][ T12] veth0_vlan: left promiscuous mode [ 367.313888][ T12] team0 (unregistering): Port device team_slave_1 removed [ 367.329332][ T12] team0 (unregistering): Port device team_slave_0 removed [ 367.387638][ T6931] dummy0 speed is unknown, defaulting to 1000 [ 367.388790][T11741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 367.393823][ T6931] syz0: Port: 1 Link DOWN [ 367.407763][T11841] team0: Port device team_slave_0 added [ 367.414504][T11905] lo speed is unknown, defaulting to 1000 [ 367.414706][T11741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 367.450775][T11741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 367.460267][ T3407] lo speed is unknown, defaulting to 1000 [ 367.466080][ T3407] syU×: Port: 1 Link DOWN [ 367.471083][ T6931] lo speed is unknown, defaulting to 1000 [ 367.490948][T11950] FAULT_INJECTION: forcing a failure. [ 367.490948][T11950] name failslab, interval 1, probability 0, space 0, times 0 [ 367.505091][T11950] CPU: 0 UID: 0 PID: 11950 Comm: syz.2.2053 Tainted: G W syzkaller #0 PREEMPT(full) [ 367.505120][T11950] Tainted: [W]=WARN [ 367.505127][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 367.505140][T11950] Call Trace: [ 367.505146][T11950] [ 367.505153][T11950] __dump_stack+0x1d/0x30 [ 367.505180][T11950] dump_stack_lvl+0x95/0xd0 [ 367.505262][T11950] dump_stack+0x15/0x1b [ 367.505351][T11950] should_fail_ex+0x263/0x280 [ 367.505429][T11950] should_failslab+0x8c/0xb0 [ 367.505446][T11950] kmem_cache_alloc_noprof+0x66/0x400 [ 367.505479][T11950] ? flock_lock_inode+0x13f/0xf30 [ 367.505507][T11950] flock_lock_inode+0x13f/0xf30 [ 367.505557][T11950] locks_lock_inode_wait+0x6f/0x2a0 [ 367.505581][T11950] __se_sys_flock+0x343/0x400 [ 367.505606][T11950] __x64_sys_flock+0x31/0x40 [ 367.505680][T11950] x64_sys_call+0x1c6f/0x3020 [ 367.505700][T11950] do_syscall_64+0x12c/0x370 [ 367.505719][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.505806][T11950] RIP: 0033:0x7fc06204c799 [ 367.505822][T11950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.505840][T11950] RSP: 002b:00007fc060aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 367.505860][T11950] RAX: ffffffffffffffda RBX: 00007fc0622c5fa0 RCX: 00007fc06204c799 [ 367.505872][T11950] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000009 [ 367.505882][T11950] RBP: 00007fc060aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 367.505892][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.505959][T11950] R13: 00007fc0622c6038 R14: 00007fc0622c5fa0 R15: 00007ffe22122a98 [ 367.505979][T11950] [ 367.704396][T11841] team0: Port device team_slave_1 added [ 367.720229][ T5090] smc: removing ib device syU× [ 367.720392][T11741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 367.731778][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.844811][T11841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.856928][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.913835][T11841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.946479][T11841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.963902][T11841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.035951][T11841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.075673][T11965] syzkaller0: entered promiscuous mode [ 368.086472][T11965] syzkaller0: entered allmulticast mode [ 368.229113][T11841] hsr_slave_0: entered promiscuous mode [ 368.245503][T11841] hsr_slave_1: entered promiscuous mode [ 368.261849][T11841] debugfs: 'hsr0' already exists in 'hsr' [ 368.277654][T11841] Cannot create hsr debugfs directory [ 368.295749][ T12] IPVS: stop unused estimator thread 0... [ 368.353622][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.376610][T11993] set_capacity_and_notify: 3 callbacks suppressed [ 368.376635][T11993] loop2: detected capacity change from 0 to 128 [ 368.398480][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.442405][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.449522][ T5094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.482115][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.489255][ T5094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.545565][T12011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2061'. [ 368.574147][T12011] loop2: detected capacity change from 0 to 4096 [ 368.591228][T12011] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 368.605140][T12011] EXT4-fs (loop2): mount failed [ 368.728583][T11741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.749017][T12020] loop2: detected capacity change from 0 to 8192 [ 368.877558][T11841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 368.898423][T11841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 368.915466][T11841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 368.939957][T11841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 368.991892][T11741] veth0_vlan: entered promiscuous mode [ 369.063307][T11741] veth1_vlan: entered promiscuous mode [ 369.082831][ T28] audit: type=1400 audit(1773124477.801:2202): avc: denied { map } for pid=12067 comm="syz.9.2062" path="socket:[36100]" dev="sockfs" ino=36100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 369.129233][T11841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.162358][T11841] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.180167][T11741] veth0_macvtap: entered promiscuous mode [ 369.198718][T11741] veth1_macvtap: entered promiscuous mode [ 369.233713][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.240827][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.278616][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.285772][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.330888][T11841] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 369.372474][T11841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 369.439225][T11741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.471650][T11741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.491035][ T5090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.515329][ T5090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.547816][ T5090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.569637][ T5090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.619331][T11841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.781860][T11841] veth0_vlan: entered promiscuous mode [ 369.822500][T11841] veth1_vlan: entered promiscuous mode [ 369.862037][T11841] veth0_macvtap: entered promiscuous mode [ 369.883003][T11841] veth1_macvtap: entered promiscuous mode [ 369.921657][T11841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.960894][T12122] loop4: detected capacity change from 0 to 512 [ 369.974860][T11841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.992896][ T5094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.036785][ T5094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.079051][ T5094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.093339][ T5094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.178009][T12122] EXT4-fs (loop4): 1 orphan inode deleted [ 370.205835][T12145] FAULT_INJECTION: forcing a failure. [ 370.205835][T12145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.229457][T12145] CPU: 0 UID: 0 PID: 12145 Comm: syz.2.2067 Tainted: G W syzkaller #0 PREEMPT(full) [ 370.229490][T12145] Tainted: [W]=WARN [ 370.229498][T12145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 370.229513][T12145] Call Trace: [ 370.229519][T12145] [ 370.229526][T12145] __dump_stack+0x1d/0x30 [ 370.229544][T12122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.229561][T12145] dump_stack_lvl+0x95/0xd0 [ 370.229580][T12145] dump_stack+0x15/0x1b [ 370.229597][T12145] should_fail_ex+0x263/0x280 [ 370.229617][T12145] should_fail+0xb/0x20 [ 370.229691][T12145] should_fail_usercopy+0x1a/0x20 [ 370.229753][T12145] _copy_to_user+0x20/0xa0 [ 370.229788][T12145] simple_read_from_buffer+0xb5/0x130 [ 370.229825][T12145] proc_fail_nth_read+0x10e/0x150 [ 370.229848][T12145] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.229871][T12145] vfs_read+0x1ab/0x7f0 [ 370.229970][T12145] ? __rcu_read_unlock+0x4e/0x70 [ 370.229989][T12145] ? __fget_files+0x184/0x1c0 [ 370.230072][T12145] ? mutex_lock+0x57/0x90 [ 370.230098][T12145] ksys_read+0xdc/0x1a0 [ 370.230125][T12145] __x64_sys_read+0x40/0x50 [ 370.230141][T12145] x64_sys_call+0x2886/0x3020 [ 370.230217][T12145] do_syscall_64+0x12c/0x370 [ 370.230236][T12145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.230256][T12145] RIP: 0033:0x7fc06200cfce [ 370.230271][T12145] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.230287][T12145] RSP: 002b:00007fc060aa6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.230346][T12145] RAX: ffffffffffffffda RBX: 00007fc060aa76c0 RCX: 00007fc06200cfce [ 370.230359][T12145] RDX: 000000000000000f RSI: 00007fc060aa70a0 RDI: 0000000000000007 [ 370.230371][T12145] RBP: 00007fc060aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 370.230383][T12145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.230409][T12145] R13: 00007fc0622c6038 R14: 00007fc0622c5fa0 R15: 00007ffe22122a98 [ 370.230464][T12145] [ 370.303922][T12149] loop9: detected capacity change from 0 to 2048 [ 370.523852][T12149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.596505][T12149] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.651882][T12152] loop2: detected capacity change from 0 to 128 [ 370.699292][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2066'. [ 370.847995][T12166] loop1: detected capacity change from 0 to 8192 [ 370.896163][ T7243] loop1: p1 p2 p3 p4 [ 370.904097][ T7243] loop1: p3 start 117772289 is beyond EOD, truncated [ 370.919118][ T7243] loop1: p4 size 262144 extends beyond EOD, truncated [ 370.937778][T12166] loop1: p1 p2 p3 p4 [ 370.940788][T12185] loop3: detected capacity change from 0 to 512 [ 370.943224][T12166] loop1: p3 start 117772289 is beyond EOD, truncated [ 370.955150][T12166] loop1: p4 size 262144 extends beyond EOD, truncated [ 370.996203][T12185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.019489][T12185] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.032412][ T28] audit: type=1400 audit(1773124479.772:2203): avc: denied { append } for pid=12183 comm="syz.3.2072" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.056298][ T28] audit: type=1400 audit(1773124479.802:2204): avc: denied { setattr } for pid=12183 comm="syz.3.2072" path="/1/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.201496][T12203] loop1: detected capacity change from 0 to 256 [ 371.250179][ T7243] udevd[7243]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 371.252139][T11559] udevd[11559]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 371.262161][ T7232] udevd[7232]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 371.364998][T12210] loop9: detected capacity change from 0 to 1024 [ 371.389286][T12210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.490900][T12203] FAT-fs (loop1): codepage cp852 not found [ 371.815904][ T7232] udevd[7232]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 371.835992][ T7243] udevd[7243]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 372.299819][ T7237] udevd[7237]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 372.821816][ T28] audit: type=1400 audit(1773124481.563:2205): avc: denied { map } for pid=12214 comm="syz.2.2075" path="/dev/vcs" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 373.275943][T12203] xt_TPROXY: Can be used only with -p tcp or -p udp [ 373.300782][T12206] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #18: comm syz.3.2072: corrupted inode contents [ 373.313962][T11741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.386185][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.417541][T12206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 373.423551][T12206] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #18: comm syz.3.2072: mark_inode_dirty error [ 373.454607][T12185] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.2072: iget: bad i_size value: 2533274857506816 [ 373.475098][T12232] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2078'. [ 373.485767][T12223] loop2: detected capacity change from 0 to 128 [ 373.538290][T12206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 373.594610][T12206] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #18: comm syz.3.2072: corrupted inode contents [ 373.596694][T12232] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2078'. [ 373.624776][ T3383] IPVS: starting estimator thread 0... [ 373.637270][T12221] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz.3.2072: iget: bad i_size value: 2533274857506816 [ 373.909862][T12251] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2080'. [ 373.942170][T12206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 373.942580][T12206] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #18: comm syz.3.2072: mark_inode_dirty error [ 373.999003][T12206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 374.049988][T12206] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #18: comm syz.3.2072: mark inode dirty (error -117) [ 374.077881][T12241] IPVS: using max 2496 ests per chain, 124800 per kthread [ 374.086475][T12206] loop3: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 374.209169][T12206] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 374.228567][ T28] audit: type=1400 audit(1773124482.953:2206): avc: denied { map } for pid=12254 comm="syz.1.2081" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 374.230411][T12255] loop1: detected capacity change from 0 to 512 [ 374.264096][ T28] audit: type=1400 audit(1773124482.953:2207): avc: denied { execute } for pid=12254 comm="syz.1.2081" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 374.354403][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2082'. [ 374.424402][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2084'. [ 374.482464][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.498543][T12280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2085'. [ 374.524940][T12285] loop1: detected capacity change from 0 to 512 [ 374.544780][T12280] netlink: 'syz.4.2085': attribute type 16 has an invalid length. [ 374.552621][T12280] netlink: 'syz.4.2085': attribute type 17 has an invalid length. [ 374.563962][T12285] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 374.757932][T12304] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2089'. [ 374.941215][T12309] loop3: detected capacity change from 0 to 1024 [ 374.997506][T12309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.071552][T12304] loop9: detected capacity change from 0 to 4096 [ 375.144991][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.152221][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.206824][T12304] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 375.261473][T12304] EXT4-fs (loop9): mount failed [ 376.601354][T12321] hub 8-0:1.0: USB hub found [ 376.606162][T12321] hub 8-0:1.0: 8 ports detected [ 376.803350][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.805055][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.814247][T12280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.860619][T12327] loop9: detected capacity change from 0 to 8192 [ 376.887923][T12335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2091'. [ 376.993557][T12343] loop1: detected capacity change from 0 to 128 [ 377.045013][ T5292] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.101493][T12335] loop3: detected capacity change from 0 to 4096 [ 377.141653][T12335] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 377.148452][T12335] EXT4-fs (loop3): mount failed [ 377.184122][ T5292] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.202577][ T5292] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.252586][ T5292] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.298009][T12359] loop3: detected capacity change from 0 to 8192 [ 377.708455][T12373] loop1: detected capacity change from 0 to 1024 [ 377.764602][T12373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.879579][T12374] EXT4-fs: Ignoring removed bh option [ 377.999079][T12374] EXT4-fs: inline encryption not supported [ 378.142630][T12374] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 378.371141][T12374] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 378.538217][T12379] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2099'. [ 378.581430][T12374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2098: bg 0: block 248: padding at end of block bitmap is not set [ 378.595873][T12374] loop4: lost filesystem error report for type 5 error -117 [ 378.597680][T12374] Quota error (device loop4): write_blk: dquota write failed [ 378.605009][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 378.605025][ C0] EXT4-fs (loop4): last error at time 1773124487: ext4_validate_block_bitmap:441 [ 378.711498][T12374] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 378.747783][T12374] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2098: Failed to acquire dquot type 1 [ 378.800089][T12374] loop4: lost filesystem error report for type 5 error -117 [ 378.801460][T12374] EXT4-fs (loop4): 1 truncate cleaned up [ 378.819863][T12389] set_capacity_and_notify: 1 callbacks suppressed [ 378.819879][T12389] loop9: detected capacity change from 0 to 1024 [ 378.864286][T12389] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 378.894751][T12374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 378.911387][T12389] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 378.934115][T12389] EXT4-fs (loop9): invalid journal inode [ 378.946437][T12389] EXT4-fs (loop9): can't get journal size [ 378.970445][T12389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.207510][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.263119][T12397] loop1: detected capacity change from 0 to 512 [ 379.302896][T12397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 379.315570][T12397] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 379.318321][T12399] loop3: detected capacity change from 0 to 2048 [ 379.342567][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.354218][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 379.395852][T12399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.421637][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2105'. [ 379.442564][T12399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.458449][T11741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 379.467724][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 379.490857][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 379.509722][ T12] loop4: lost filesystem error report for type 5 error -117 [ 379.520651][T12407] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12407 comm=syz.1.2105 [ 379.544426][T12407] loop1: detected capacity change from 0 to 512 [ 379.560841][T12408] batadv_slave_0: entered promiscuous mode [ 379.574071][T12407] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 379.607230][T12407] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 379.625642][T12407] block device autoloading is deprecated and will be removed. [ 379.634076][T12407] EXT4-fs (loop1): couldn't read superblock of external journal [ 379.655100][T12420] loop2: detected capacity change from 0 to 1024 [ 379.660391][T12421] loop4: detected capacity change from 0 to 1024 [ 379.677292][T12421] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 379.677658][T12422] loop3: detected capacity change from 0 to 1024 [ 379.686978][T12421] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 379.720101][T12421] EXT4-fs (loop4): invalid journal inode [ 379.726956][T12420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 379.727843][T12421] EXT4-fs (loop4): can't get journal size [ 379.745655][T12426] FAULT_INJECTION: forcing a failure. [ 379.745655][T12426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.745775][T12422] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 379.764265][T12420] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.772749][T12421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 379.779472][T12426] CPU: 1 UID: 0 PID: 12426 Comm: syz.1.2111 Tainted: G W syzkaller #0 PREEMPT(full) [ 379.779514][T12426] Tainted: [W]=WARN [ 379.779529][T12426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.779540][T12426] Call Trace: [ 379.779548][T12426] [ 379.779555][T12426] __dump_stack+0x1d/0x30 [ 379.779580][T12426] dump_stack_lvl+0x95/0xd0 [ 379.779659][T12426] dump_stack+0x15/0x1b [ 379.779678][T12426] should_fail_ex+0x263/0x280 [ 379.779699][T12426] should_fail+0xb/0x20 [ 379.779826][T12426] should_fail_usercopy+0x1a/0x20 [ 379.779853][T12426] _copy_from_user+0x1c/0xb0 [ 379.779877][T12426] get_timespec64+0x4c/0x100 [ 379.779898][T12426] __x64_sys_recvmmsg+0xa3/0x170 [ 379.779928][T12426] x64_sys_call+0x80f/0x3020 [ 379.779998][T12426] do_syscall_64+0x12c/0x370 [ 379.780017][T12426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.780067][T12426] RIP: 0033:0x7fa8ea9cc799 [ 379.780082][T12426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.780098][T12426] RSP: 002b:00007fa8e941f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 379.780116][T12426] RAX: ffffffffffffffda RBX: 00007fa8eac45fa0 RCX: 00007fa8ea9cc799 [ 379.780129][T12426] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 379.780218][T12426] RBP: 00007fa8e941f090 R08: 0000200000003700 R09: 0000000000000000 [ 379.780231][T12426] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 379.780243][T12426] R13: 00007fa8eac46038 R14: 00007fa8eac45fa0 R15: 00007fff3a1a7fc8 [ 379.780334][T12426] [ 379.792986][T12420] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: block 3: comm syz.2.2110: lblock 3 mapped to illegal pblock 3 (length 1) [ 379.802527][T12422] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 379.881823][T12420] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 379.885128][T12422] EXT4-fs (loop3): invalid journal inode [ 379.927028][T12420] EXT4-fs (loop2): This should not happen!! Data will be lost [ 379.927028][T12420] [ 379.929655][T12422] EXT4-fs (loop3): can't get journal size [ 380.016238][T12422] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 380.016316][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 380.316807][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2115'. [ 380.345291][ T3368] IPVS: starting estimator thread 0... [ 380.462666][T12447] loop2: detected capacity change from 0 to 1024 [ 380.506708][T12447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.556792][T12446] IPVS: using max 2496 ests per chain, 124800 per kthread [ 381.087071][T12465] loop9: detected capacity change from 0 to 512 [ 381.203496][T12465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 381.227005][T11741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.240470][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.251154][T12465] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.301726][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 381.433204][T12467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2117'. [ 381.737930][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.753638][T12478] loop9: detected capacity change from 0 to 2048 [ 381.858903][T12478] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.883480][T12489] EXT4-fs: Ignoring removed orlov option [ 381.948210][T12478] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.977721][T12489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.061878][T12489] EXT4-fs (loop1): orphan cleanup on readonly fs [ 382.070033][T12494] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.182989][T12489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2125: bg 0: block 248: padding at end of block bitmap is not set [ 382.249752][T12489] loop1: lost filesystem error report for type 5 error -117 [ 382.252022][T12489] Quota error (device loop1): write_blk: dquota write failed [ 382.259590][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 382.259609][ C0] EXT4-fs (loop1): last error at time 1773124490: ext4_validate_block_bitmap:441 [ 382.648813][T12489] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 382.693188][T12489] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.2125: Failed to acquire dquot type 1 [ 382.730527][T12489] loop1: lost filesystem error report for type 5 error -117 [ 382.731377][T12489] EXT4-fs (loop1): 1 truncate cleaned up [ 382.760498][T12515] FAT-fs (loop2): Directory bread(block 64) failed [ 382.797705][T12515] FAT-fs (loop2): Directory bread(block 65) failed [ 382.808019][T12516] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 382.838888][T12489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.852078][T12515] FAT-fs (loop2): Directory bread(block 66) failed [ 382.873172][T12515] FAT-fs (loop2): Directory bread(block 67) failed [ 382.889953][T12516] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 382.910032][T12515] FAT-fs (loop2): Directory bread(block 68) failed [ 382.929994][T12516] EXT4-fs (loop4): invalid journal inode [ 382.935809][T12516] EXT4-fs (loop4): can't get journal size [ 382.946069][T12489] EXT4-fs: Ignoring removed orlov option [ 382.952255][T12515] FAT-fs (loop2): Directory bread(block 69) failed [ 382.959118][T12489] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 382.977250][T12515] FAT-fs (loop2): Directory bread(block 70) failed [ 382.989365][T12515] FAT-fs (loop2): Directory bread(block 71) failed [ 382.996193][T12489] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 383.016622][T12515] FAT-fs (loop2): Directory bread(block 72) failed [ 383.030347][T12516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 383.042962][T12515] FAT-fs (loop2): Directory bread(block 73) failed [ 383.099571][T12489] EXT4-fs error (device loop1): __ext4_remount:6804: comm syz.1.2125: Abort forced by user [ 383.122555][T12531] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 383.139391][T12489] EXT4-fs (loop1): Remounting filesystem read-only [ 383.146619][T12489] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 383.156713][ T28] audit: type=1400 audit(1773124491.888:2208): avc: denied { mounton } for pid=12500 comm="syz.2.2127" path="/47/file1/file1" dev="loop2" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 383.189233][T12531] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.204867][T12489] ext4 filesystem being remounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 383.232074][T12489] netlink: 'syz.1.2125': attribute type 66 has an invalid length. [ 383.271295][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 383.339571][T12489] syz.1.2125 (12489) used greatest stack depth: 8248 bytes left [ 383.348288][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.490681][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.518592][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'. [ 383.679176][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2132'. [ 383.816403][T12556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.957271][T12555] set_capacity_and_notify: 6 callbacks suppressed [ 383.957285][T12555] loop3: detected capacity change from 0 to 2048 [ 384.188450][T12555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.455825][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.587485][T11741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.952615][T12570] loop1: detected capacity change from 0 to 256 [ 384.993977][T12570] FAT-fs (loop1): codepage cp852 not found [ 385.109719][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.198243][ T28] audit: type=1400 audit(1773124493.939:2209): avc: denied { listen } for pid=12577 comm="syz.4.2137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 385.274483][T12584] xt_TPROXY: Can be used only with -p tcp or -p udp [ 385.532489][T12586] loop2: detected capacity change from 0 to 1024 [ 385.926603][T12587] loop4: detected capacity change from 0 to 2048 [ 385.952553][T12586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.052787][T12587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.278384][T12587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.309132][T12593] loop3: detected capacity change from 0 to 512 [ 386.349229][T12593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 386.377686][T12593] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 386.480083][T12599] FAULT_INJECTION: forcing a failure. [ 386.480083][T12599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.597926][T12599] CPU: 1 UID: 0 PID: 12599 Comm: syz.4.2143 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.597956][T12599] Tainted: [W]=WARN [ 386.597963][T12599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.597975][T12599] Call Trace: [ 386.597982][T12599] [ 386.597989][T12599] __dump_stack+0x1d/0x30 [ 386.598016][T12599] dump_stack_lvl+0x95/0xd0 [ 386.598092][T12599] dump_stack+0x15/0x1b [ 386.598114][T12599] should_fail_ex+0x263/0x280 [ 386.598137][T12599] should_fail+0xb/0x20 [ 386.598155][T12599] should_fail_usercopy+0x1a/0x20 [ 386.598218][T12599] _copy_from_iter+0xcf/0xea0 [ 386.598239][T12599] ? __alloc_skb+0x4f6/0x690 [ 386.598261][T12599] ? __alloc_skb+0x200/0x690 [ 386.598283][T12599] netlink_sendmsg+0x4ae/0x6f0 [ 386.598315][T12599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.598412][T12599] ____sys_sendmsg+0x563/0x5b0 [ 386.598441][T12599] ___sys_sendmsg+0x195/0x1e0 [ 386.598475][T12599] __x64_sys_sendmsg+0xd4/0x160 [ 386.598527][T12599] x64_sys_call+0x194c/0x3020 [ 386.598550][T12599] do_syscall_64+0x12c/0x370 [ 386.598571][T12599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.598626][T12599] RIP: 0033:0x7fa4fac4c799 [ 386.598641][T12599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.598656][T12599] RSP: 002b:00007fa4f969f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.598676][T12599] RAX: ffffffffffffffda RBX: 00007fa4faec5fa0 RCX: 00007fa4fac4c799 [ 386.598690][T12599] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 386.598704][T12599] RBP: 00007fa4f969f090 R08: 0000000000000000 R09: 0000000000000000 [ 386.598716][T12599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.598752][T12599] R13: 00007fa4faec6038 R14: 00007fa4faec5fa0 R15: 00007ffe11a7c858 [ 386.598787][T12599] [ 387.114842][T12605] loop1: detected capacity change from 0 to 512 [ 387.232646][T12605] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 387.372527][T12602] Process accounting resumed [ 387.489962][T12624] FAULT_INJECTION: forcing a failure. [ 387.489962][T12624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 387.503823][T12624] CPU: 0 UID: 0 PID: 12624 Comm: syz.1.2149 Tainted: G W syzkaller #0 PREEMPT(full) [ 387.503853][T12624] Tainted: [W]=WARN [ 387.503858][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.503868][T12624] Call Trace: [ 387.503874][T12624] [ 387.503891][T12624] __dump_stack+0x1d/0x30 [ 387.503917][T12624] dump_stack_lvl+0x95/0xd0 [ 387.503971][T12624] dump_stack+0x15/0x1b [ 387.503991][T12624] should_fail_ex+0x263/0x280 [ 387.504011][T12624] should_fail_alloc_page+0xf2/0x100 [ 387.504033][T12624] __alloc_frozen_pages_noprof+0x108/0x360 [ 387.504132][T12624] alloc_pages_mpol+0xb3/0x260 [ 387.504158][T12624] ? css_rstat_updated+0xbb/0x280 [ 387.504180][T12624] vma_alloc_folio_noprof+0x1a9/0x300 [ 387.504207][T12624] handle_mm_fault+0x111f/0x3020 [ 387.504243][T12624] ? _raw_spin_lock+0x52/0xa0 [ 387.504261][T12624] ? pte_offset_map_lock+0x1d9/0x240 [ 387.504287][T12624] __get_user_pages+0x1023/0x1ea0 [ 387.504371][T12624] __gup_longterm_locked+0x8d7/0xe30 [ 387.504404][T12624] ? should_fail_ex+0xd9/0x280 [ 387.504427][T12624] pin_user_pages_remote+0x7e/0xb0 [ 387.504464][T12624] process_vm_rw+0x49b/0x9c0 [ 387.504501][T12624] __x64_sys_process_vm_writev+0x78/0x90 [ 387.504524][T12624] x64_sys_call+0x1592/0x3020 [ 387.504548][T12624] do_syscall_64+0x12c/0x370 [ 387.504583][T12624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.504604][T12624] RIP: 0033:0x7fa8ea9cc799 [ 387.504619][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.504635][T12624] RSP: 002b:00007fa8e93fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 387.504690][T12624] RAX: ffffffffffffffda RBX: 00007fa8eac46090 RCX: 00007fa8ea9cc799 [ 387.504704][T12624] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000565 [ 387.504717][T12624] RBP: 00007fa8e93fe090 R08: 000000000000023a R09: 0000000000000000 [ 387.504730][T12624] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 387.504743][T12624] R13: 00007fa8eac46128 R14: 00007fa8eac46090 R15: 00007fff3a1a7fc8 [ 387.504762][T12624] [ 387.812357][ T28] audit: type=1400 audit(1773124496.560:2210): avc: denied { create } for pid=12629 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 387.900289][ T28] audit: type=1400 audit(1773124496.560:2211): avc: denied { read write } for pid=9608 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.929167][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2155'. [ 387.934829][ T28] audit: type=1400 audit(1773124496.560:2212): avc: denied { open } for pid=9608 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 387.971001][T12636] loop9: detected capacity change from 0 to 512 [ 387.971864][ T28] audit: type=1400 audit(1773124496.560:2213): avc: denied { ioctl } for pid=9608 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 388.003755][ T28] audit: type=1400 audit(1773124496.600:2214): avc: denied { recv } for pid=11741 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.1.81 dest=56540 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 388.169430][ T28] audit: type=1400 audit(1773124496.600:2215): avc: denied { setopt } for pid=12629 comm="syz.1.2154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 388.214775][T12636] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 388.248107][T12654] FAULT_INJECTION: forcing a failure. [ 388.248107][T12654] name failslab, interval 1, probability 0, space 0, times 0 [ 388.373444][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.1.2161 Tainted: G W syzkaller #0 PREEMPT(full) [ 388.373473][T12654] Tainted: [W]=WARN [ 388.373532][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.373560][T12654] Call Trace: [ 388.373585][T12654] [ 388.373593][T12654] __dump_stack+0x1d/0x30 [ 388.373619][T12654] dump_stack_lvl+0x95/0xd0 [ 388.373641][T12654] dump_stack+0x15/0x1b [ 388.373657][T12654] should_fail_ex+0x263/0x280 [ 388.373725][T12654] should_failslab+0x8c/0xb0 [ 388.373742][T12654] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 388.373805][T12654] ? __d_alloc+0x37/0x340 [ 388.373827][T12654] __d_alloc+0x37/0x340 [ 388.373890][T12654] d_alloc+0x2e/0x100 [ 388.373910][T12654] lookup_one_qstr_excl+0x99/0x250 [ 388.373933][T12654] start_dirop+0x3e/0x70 [ 388.373995][T12654] simple_start_creating+0xa2/0xd0 [ 388.374070][T12654] debugfs_start_creating+0xda/0x150 [ 388.374092][T12654] __debugfs_create_file+0x70/0x2b0 [ 388.374115][T12654] debugfs_create_file_full+0x3f/0x60 [ 388.374188][T12654] ? __pfx_geneve_setup+0x10/0x10 [ 388.374210][T12654] ref_tracker_dir_debugfs+0x10e/0x220 [ 388.374242][T12654] alloc_netdev_mqs+0x1a7/0xa40 [ 388.374266][T12654] rtnl_create_link+0x239/0x720 [ 388.374306][T12654] rtnl_newlink_create+0x174/0x650 [ 388.374322][T12654] ? security_capable+0x7b/0x90 [ 388.374345][T12654] ? netlink_ns_capable+0x86/0xa0 [ 388.374385][T12654] rtnl_newlink+0x10a0/0x1330 [ 388.374417][T12654] ? preempt_schedule_irq+0x2d/0x50 [ 388.374440][T12654] ? __rcu_read_unlock+0x4e/0x70 [ 388.374522][T12654] ? __perf_event_task_sched_in+0xa65/0xad0 [ 388.374542][T12654] ? __rcu_read_unlock+0x4e/0x70 [ 388.374557][T12654] ? avc_has_perm_noaudit+0xab/0x130 [ 388.374642][T12654] ? cred_has_capability+0x224/0x2a0 [ 388.374664][T12654] ? selinux_capable+0x31/0x40 [ 388.374689][T12654] ? security_capable+0x7b/0x90 [ 388.374717][T12654] ? ns_capable+0x7c/0xb0 [ 388.374731][T12654] ? __pfx_rtnl_newlink+0x10/0x10 [ 388.374754][T12654] rtnetlink_rcv_msg+0x64b/0x720 [ 388.374992][T12654] ? avc_has_perm_noaudit+0xab/0x130 [ 388.375020][T12654] netlink_rcv_skb+0x123/0x220 [ 388.375087][T12654] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.375120][T12654] rtnetlink_rcv+0x1c/0x30 [ 388.375141][T12654] netlink_unicast+0x5c0/0x690 [ 388.375164][T12654] netlink_sendmsg+0x5c8/0x6f0 [ 388.375253][T12654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.375275][T12654] ____sys_sendmsg+0x563/0x5b0 [ 388.375362][T12654] ___sys_sendmsg+0x195/0x1e0 [ 388.375454][T12654] __x64_sys_sendmsg+0xd4/0x160 [ 388.375478][T12654] x64_sys_call+0x194c/0x3020 [ 388.375500][T12654] do_syscall_64+0x12c/0x370 [ 388.375545][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.375591][T12654] RIP: 0033:0x7fa8ea9cc799 [ 388.375607][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.375622][T12654] RSP: 002b:00007fa8e941f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.375639][T12654] RAX: ffffffffffffffda RBX: 00007fa8eac45fa0 RCX: 00007fa8ea9cc799 [ 388.375654][T12654] RDX: 0000000000040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 388.375690][T12654] RBP: 00007fa8e941f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.375704][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.375793][T12654] R13: 00007fa8eac46038 R14: 00007fa8eac45fa0 R15: 00007fff3a1a7fc8 [ 388.375878][T12654] [ 388.787638][ T28] audit: type=1400 audit(1773124496.600:2216): avc: denied { allowed } for pid=12632 comm="syz.4.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 388.855730][ T28] audit: type=1400 audit(1773124496.600:2217): avc: denied { create } for pid=12632 comm="syz.4.2156" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.877641][ T28] audit: type=1400 audit(1773124496.600:2218): avc: denied { map } for pid=12632 comm="syz.4.2156" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=36813 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.999839][T12684] loop4: detected capacity change from 0 to 512 [ 389.042303][T12684] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2168: invalid indirect mapped block 4294967295 (level 1) [ 389.109650][T12696] FAULT_INJECTION: forcing a failure. [ 389.109650][T12696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.114499][T12684] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 389.125448][T12684] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2168: invalid indirect mapped block 4294967295 (level 1) [ 389.134615][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 389.134635][ C1] EXT4-fs (loop4): initial error at time 1773124497: ext4_free_branches:1023: inode 11 [ 389.134686][ C1] EXT4-fs (loop4): last error at time 1773124497: ext4_free_branches:1023: inode 11 [ 389.151831][T12700] sock: sock_timestamping_bind_phc: sock not bind to device [ 389.156624][T12696] CPU: 1 UID: 0 PID: 12696 Comm: syz.1.2170 Tainted: G W syzkaller #0 PREEMPT(full) [ 389.156654][T12696] Tainted: [W]=WARN [ 389.156675][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.156698][T12696] Call Trace: [ 389.156705][T12696] [ 389.156738][T12696] __dump_stack+0x1d/0x30 [ 389.156763][T12696] dump_stack_lvl+0x95/0xd0 [ 389.156785][T12696] dump_stack+0x15/0x1b [ 389.156804][T12696] should_fail_ex+0x263/0x280 [ 389.156851][T12696] should_fail+0xb/0x20 [ 389.156869][T12696] should_fail_usercopy+0x1a/0x20 [ 389.156897][T12696] _copy_from_user+0x1c/0xb0 [ 389.156991][T12696] ___sys_sendmsg+0xc1/0x1e0 [ 389.157034][T12696] __x64_sys_sendmsg+0xd4/0x160 [ 389.157111][T12696] x64_sys_call+0x194c/0x3020 [ 389.157134][T12696] do_syscall_64+0x12c/0x370 [ 389.157154][T12696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.157175][T12696] RIP: 0033:0x7fa8ea9cc799 [ 389.157223][T12696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.157285][T12696] RSP: 002b:00007fa8e941f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.157304][T12696] RAX: ffffffffffffffda RBX: 00007fa8eac45fa0 RCX: 00007fa8ea9cc799 [ 389.157317][T12696] RDX: 0000000000000040 RSI: 00002000000006c0 RDI: 0000000000000004 [ 389.157330][T12696] RBP: 00007fa8e941f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.157342][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.157381][T12696] R13: 00007fa8eac46038 R14: 00007fa8eac45fa0 R15: 00007fff3a1a7fc8 [ 389.157399][T12696] [ 389.159609][T12684] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 389.350813][T12684] EXT4-fs (loop4): 2 truncates cleaned up [ 389.426087][T12718] tipc: Started in network mode [ 389.430971][T12718] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 389.453176][T12718] tipc: Enabled bearer , priority 10 [ 389.475795][T12732] FAULT_INJECTION: forcing a failure. [ 389.475795][T12732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.499311][T12732] CPU: 1 UID: 0 PID: 12732 Comm: syz.3.2182 Tainted: G W syzkaller #0 PREEMPT(full) [ 389.499354][T12732] Tainted: [W]=WARN [ 389.499361][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.499373][T12732] Call Trace: [ 389.499379][T12732] [ 389.499386][T12732] __dump_stack+0x1d/0x30 [ 389.499433][T12732] dump_stack_lvl+0x95/0xd0 [ 389.499560][T12732] dump_stack+0x15/0x1b [ 389.499579][T12732] should_fail_ex+0x263/0x280 [ 389.499599][T12732] should_fail+0xb/0x20 [ 389.499621][T12732] should_fail_usercopy+0x1a/0x20 [ 389.499644][T12732] _copy_from_user+0x1c/0xb0 [ 389.499685][T12732] ___sys_sendmsg+0xc1/0x1e0 [ 389.499734][T12732] __sys_sendmmsg+0x185/0x320 [ 389.499777][T12732] __x64_sys_sendmmsg+0x57/0x70 [ 389.499843][T12732] x64_sys_call+0x27aa/0x3020 [ 389.499862][T12732] do_syscall_64+0x12c/0x370 [ 389.499908][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.500005][T12732] RIP: 0033:0x7fd5865cc799 [ 389.500018][T12732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.500032][T12732] RSP: 002b:00007fd58501f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 389.500072][T12732] RAX: ffffffffffffffda RBX: 00007fd586845fa0 RCX: 00007fd5865cc799 [ 389.500128][T12732] RDX: 0400000000000203 RSI: 0000200000004400 RDI: 0000000000000004 [ 389.500138][T12732] RBP: 00007fd58501f090 R08: 0000000000000000 R09: 0000000000000000 [ 389.500149][T12732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.500159][T12732] R13: 00007fd586846038 R14: 00007fd586845fa0 R15: 00007ffdddec97d8 [ 389.500226][T12732] [ 389.544032][T12735] tap0: tun_chr_ioctl cmd 1074025677 [ 389.691841][T12735] tap0: linktype set to 825 [ 390.157490][T12766] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2187'. [ 390.274661][ T28] kauditd_printk_skb: 94 callbacks suppressed [ 390.274674][ T28] audit: type=1400 audit(1773124499.021:2313): avc: denied { setopt } for pid=12769 comm="syz.9.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 390.331445][ T28] audit: type=1400 audit(1773124499.081:2314): avc: denied { unmount } for pid=11741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 390.351583][ T28] audit: type=1400 audit(1773124499.081:2315): avc: denied { bind } for pid=12769 comm="syz.9.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 390.371149][ T28] audit: type=1400 audit(1773124499.081:2316): avc: denied { create } for pid=12769 comm="syz.9.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 390.391051][ T28] audit: type=1400 audit(1773124499.111:2317): avc: denied { write } for pid=12769 comm="syz.9.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 390.407796][T12779] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12779 comm=syz.9.2188 [ 390.410617][ T28] audit: type=1400 audit(1773124499.152:2318): avc: denied { create } for pid=12775 comm="syz.1.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.456163][ T28] audit: type=1400 audit(1773124499.152:2319): avc: denied { bind } for pid=12775 comm="syz.1.2190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 390.499033][ T28] audit: type=1400 audit(1773124499.252:2320): avc: denied { tracepoint } for pid=12786 comm="syz.4.2192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 390.584429][ T4740] tipc: Node number set to 4269801504 [ 390.653090][ T28] audit: type=1400 audit(1773124499.402:2321): avc: denied { shutdown } for pid=12801 comm="syz.1.2197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 390.696608][ T28] audit: type=1400 audit(1773124499.452:2322): avc: denied { execute } for pid=12816 comm="syz.2.2198" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=38111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.727961][T12819] loop2: detected capacity change from 0 to 512 [ 390.734512][T12819] EXT4-fs: Ignoring removed nomblk_io_submit option [ 390.751379][T12819] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 390.775350][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 390.781610][T12819] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.2198: corrupted inode contents [ 390.781806][ C0] EXT4-fs (loop2): initial error at time 1773124499: mb_free_blocks:2047: inode 11: block 64 [ 390.793957][T12819] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 390.803759][ C0] EXT4-fs (loop2): last error at time 1773124499: mb_free_blocks:2047: inode 11: block 64 [ 390.828455][T12819] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #11: comm syz.2.2198: mark_inode_dirty error [ 390.840786][T12819] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 390.841005][T12819] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2198: invalid indirect mapped block 1 (level 1) [ 390.848447][T12824] FAULT_INJECTION: forcing a failure. [ 390.848447][T12824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.850686][T12819] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 390.872411][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.4.2199 Tainted: G W syzkaller #0 PREEMPT(full) [ 390.872444][T12824] Tainted: [W]=WARN [ 390.872450][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.872461][T12824] Call Trace: [ 390.872468][T12824] [ 390.872476][T12824] __dump_stack+0x1d/0x30 [ 390.872508][T12824] dump_stack_lvl+0x95/0xd0 [ 390.872526][T12824] dump_stack+0x15/0x1b [ 390.872542][T12824] should_fail_ex+0x263/0x280 [ 390.872564][T12824] should_fail+0xb/0x20 [ 390.872607][T12824] should_fail_usercopy+0x1a/0x20 [ 390.872630][T12824] _copy_from_user+0x1c/0xb0 [ 390.872708][T12824] __ia32_sys_rt_sigreturn+0x127/0x350 [ 390.872743][T12824] x64_sys_call+0x2823/0x3020 [ 390.872765][T12824] do_syscall_64+0x12c/0x370 [ 390.872785][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.872809][T12824] RIP: 0033:0x7fa4fabedb19 [ 390.872824][T12824] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 390.872839][T12824] RSP: 002b:00007fa4f969ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 390.872857][T12824] RAX: ffffffffffffffda RBX: 00007fa4faec5fa0 RCX: 00007fa4fabedb19 [ 390.872937][T12824] RDX: 00007fa4f969ea80 RSI: 00007fa4f969ebb0 RDI: 0000000000000021 [ 390.872949][T12824] RBP: 00007fa4f969f090 R08: 0000000000000000 R09: 0000000000000000 [ 390.872993][T12824] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 390.873005][T12824] R13: 00007fa4faec6038 R14: 00007fa4faec5fa0 R15: 00007ffe11a7c858 [ 390.873023][T12824] [ 390.972947][T12802] loop1: detected capacity change from 0 to 1024 [ 390.997707][T12819] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.2198: corrupted inode contents [ 391.066344][T12819] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 391.067603][T12819] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 391.095663][T12819] loop2: lost filesystem error report for type 5 error -117 [ 391.098249][T12819] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #11: comm syz.2.2198: corrupted inode contents [ 391.120925][T12819] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 391.123196][T12819] EXT4-fs error (device loop2): ext4_truncate:4587: inode #11: comm syz.2.2198: mark_inode_dirty error [ 391.144202][T12819] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 391.144360][T12819] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 391.162655][T12819] loop2: lost filesystem error report for type 5 error -117 [ 391.162819][T12819] EXT4-fs (loop2): 1 truncate cleaned up [ 391.248782][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 391.266358][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2200'. [ 391.396226][T12847] loop1: detected capacity change from 0 to 4096 [ 391.406537][T12847] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 391.491642][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2206'. [ 391.516924][T12862] loop3: detected capacity change from 0 to 512 [ 391.540623][T12865] FAULT_INJECTION: forcing a failure. [ 391.540623][T12865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.562226][T12865] CPU: 1 UID: 0 PID: 12865 Comm: syz.9.2208 Tainted: G W syzkaller #0 PREEMPT(full) [ 391.562281][T12865] Tainted: [W]=WARN [ 391.562287][T12865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.562297][T12865] Call Trace: [ 391.562304][T12865] [ 391.562311][T12865] __dump_stack+0x1d/0x30 [ 391.562333][T12865] dump_stack_lvl+0x95/0xd0 [ 391.562386][T12865] dump_stack+0x15/0x1b [ 391.562410][T12865] should_fail_ex+0x263/0x280 [ 391.562431][T12865] should_fail_alloc_page+0xf2/0x100 [ 391.562450][T12865] __alloc_frozen_pages_noprof+0x108/0x360 [ 391.562535][T12865] alloc_pages_mpol+0xb3/0x260 [ 391.562562][T12865] vma_alloc_folio_noprof+0x1a9/0x300 [ 391.562586][T12865] do_wp_page+0xf62/0x2590 [ 391.562669][T12865] ? __rcu_read_lock+0x36/0x50 [ 391.562687][T12865] handle_mm_fault+0x8c7/0x3020 [ 391.562726][T12865] ? mt_find+0x291/0x3d0 [ 391.562819][T12865] do_user_addr_fault+0x3fd/0x1050 [ 391.562847][T12865] exc_page_fault+0x62/0xa0 [ 391.562930][T12865] asm_exc_page_fault+0x26/0x30 [ 391.562948][T12865] RIP: 0010:__put_user_4+0xd/0x20 [ 391.562974][T12865] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 391.562990][T12865] RSP: 0018:ffffc900001ebd70 EFLAGS: 00050202 [ 391.563022][T12865] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000008038 [ 391.563032][T12865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 391.563042][T12865] RBP: 0000000000040000 R08: 0001c900001ebbf7 R09: 0000000000000000 [ 391.563053][T12865] R10: 00000000ffffff97 R11: 0000000000000000 R12: 0000000000000001 [ 391.563064][T12865] R13: 0000200000008000 R14: 0000200000007fc0 R15: 00000000000003ff [ 391.563079][T12865] __sys_sendmmsg+0x1a8/0x320 [ 391.563119][T12865] __x64_sys_sendmmsg+0x57/0x70 [ 391.563145][T12865] x64_sys_call+0x27aa/0x3020 [ 391.563166][T12865] do_syscall_64+0x12c/0x370 [ 391.563260][T12865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.563276][T12865] RIP: 0033:0x7fafab45c799 [ 391.563357][T12865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.563371][T12865] RSP: 002b:00007fafa9eb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.563387][T12865] RAX: ffffffffffffffda RBX: 00007fafab6d5fa0 RCX: 00007fafab45c799 [ 391.563398][T12865] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 391.563408][T12865] RBP: 00007fafa9eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 391.563444][T12865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.563455][T12865] R13: 00007fafab6d6038 R14: 00007fafab6d5fa0 R15: 00007fffb76c0138 [ 391.563471][T12865] [ 391.869012][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 391.881180][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 391.886857][T12862] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 391.895760][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 391.908088][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 391.997922][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 392.007055][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 392.015029][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 392.023183][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 392.031163][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 392.039940][T12871] netlink: 'syz.9.2209': attribute type 4 has an invalid length. [ 392.068587][T12878] loop1: detected capacity change from 0 to 1024 [ 392.243801][T12878] EXT4-fs mount: 11 callbacks suppressed [ 392.243816][T12878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 392.264614][T12862] syzkaller1: entered promiscuous mode [ 392.273981][T12862] syzkaller1: entered allmulticast mode [ 392.284924][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'. [ 392.294644][T12878] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.307321][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2207'. [ 393.020421][T12893] loop9: detected capacity change from 0 to 1024 [ 393.066468][T12878] EXT4-fs error (device loop1): ext4_free_blocks:6724: comm syz.1.2211: Freeing blocks not in datazone - block = 0, count = 16 [ 393.085614][T12878] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2211: bg 0: block 112: padding at end of block bitmap is not set [ 393.188440][T12893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.265953][T12690] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 393.317025][T12878] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 393.329813][T12878] EXT4-fs (loop1): This should not happen!! Data will be lost [ 393.329813][T12878] [ 393.379602][T12878] EXT4-fs (loop1): Total free blocks count 0 [ 393.386883][T12878] EXT4-fs (loop1): Free/Dirty block details [ 393.392810][T12878] EXT4-fs (loop1): free_blocks=0 [ 393.399052][T12878] EXT4-fs (loop1): dirty_blocks=64 [ 393.451697][T12878] EXT4-fs (loop1): Block reservation details [ 393.472269][T12900] loop2: detected capacity change from 0 to 512 [ 393.490278][T12878] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 393.531662][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 393.638919][T12900] EXT4-fs (loop2): 1 orphan inode deleted [ 393.680152][T12900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.824586][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.330052][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.386971][T12909] FAULT_INJECTION: forcing a failure. [ 394.386971][T12909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.429788][T12909] CPU: 0 UID: 0 PID: 12909 Comm: syz.3.2217 Tainted: G W syzkaller #0 PREEMPT(full) [ 394.429897][T12909] Tainted: [W]=WARN [ 394.429904][T12909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.429915][T12909] Call Trace: [ 394.429921][T12909] [ 394.429928][T12909] __dump_stack+0x1d/0x30 [ 394.429951][T12909] dump_stack_lvl+0x95/0xd0 [ 394.429971][T12909] dump_stack+0x15/0x1b [ 394.430060][T12909] should_fail_ex+0x263/0x280 [ 394.430122][T12909] should_fail+0xb/0x20 [ 394.430138][T12909] should_fail_usercopy+0x1a/0x20 [ 394.430158][T12909] _copy_from_user+0x1c/0xb0 [ 394.430248][T12909] kstrtouint_from_user+0x69/0xf0 [ 394.430308][T12909] proc_fail_nth_write+0x50/0x160 [ 394.430332][T12909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.430415][T12909] vfs_write+0x269/0x9f0 [ 394.430438][T12909] ? __rcu_read_unlock+0x4e/0x70 [ 394.430474][T12909] ? __fget_files+0x184/0x1c0 [ 394.430494][T12909] ? mutex_lock+0x57/0x90 [ 394.430516][T12909] ksys_write+0xdc/0x1a0 [ 394.430532][T12909] __x64_sys_write+0x40/0x50 [ 394.430588][T12909] x64_sys_call+0x27e1/0x3020 [ 394.430608][T12909] do_syscall_64+0x12c/0x370 [ 394.430706][T12909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.430723][T12909] RIP: 0033:0x7fd58658cfce [ 394.430737][T12909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.430752][T12909] RSP: 002b:00007fd58501efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.430769][T12909] RAX: ffffffffffffffda RBX: 00007fd58501f6c0 RCX: 00007fd58658cfce [ 394.430834][T12909] RDX: 0000000000000001 RSI: 00007fd58501f0a0 RDI: 0000000000000007 [ 394.430844][T12909] RBP: 00007fd58501f090 R08: 0000000000000000 R09: 0000000000000000 [ 394.430855][T12909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.430865][T12909] R13: 00007fd586846038 R14: 00007fd586845fa0 R15: 00007ffdddec97d8 [ 394.430880][T12909] [ 394.636450][T12911] loop9: detected capacity change from 0 to 512 [ 394.692411][T12915] loop3: detected capacity change from 0 to 512 [ 394.729274][T12915] ext4: Unknown parameter 'euid' [ 394.754231][T12918] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2221'. [ 394.778315][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2222'. [ 394.961981][T12930] hub 8-0:1.0: USB hub found [ 394.968417][T12930] hub 8-0:1.0: 8 ports detected [ 395.275388][T12933] macvlan1: entered allmulticast mode [ 395.409561][T12933] veth1_vlan: entered allmulticast mode [ 395.410650][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.573621][T12933] team0: Port device macvlan1 added [ 396.424570][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 396.424598][ T28] audit: type=1326 audit(1773124505.185:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 397.273161][T12944] loop2: detected capacity change from 0 to 1024 [ 397.415062][ T28] audit: type=1326 audit(1773124505.215:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 397.439283][ T28] audit: type=1326 audit(1773124505.215:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 397.481551][T12946] loop1: detected capacity change from 0 to 1024 [ 398.462844][ T28] audit: type=1326 audit(1773124505.215:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 399.128931][ T28] audit: type=1326 audit(1773124505.215:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 399.251931][T12946] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 399.265984][T12944] EXT4-fs warning (device loop2): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop2. [ 399.300445][ T28] audit: type=1326 audit(1773124505.215:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 399.413565][ T28] audit: type=1326 audit(1773124505.215:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 399.455852][ T28] audit: type=1326 audit(1773124505.215:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12941 comm="syz.9.2228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafab45c799 code=0x7ffc0000 [ 399.482553][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 399.492262][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2230'. [ 399.505297][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2230'. [ 399.514339][ T28] audit: type=1400 audit(1773124506.325:2356): avc: denied { egress } for pid=12935 comm="syz.2.2226" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 399.539931][T12955] loop1: detected capacity change from 0 to 128 [ 399.556172][ T28] audit: type=1400 audit(1773124506.325:2357): avc: denied { sendto } for pid=12935 comm="syz.2.2226" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 399.617268][T12959] FAULT_INJECTION: forcing a failure. [ 399.617268][T12959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.631286][T12959] CPU: 1 UID: 0 PID: 12959 Comm: syz.2.2233 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.631318][T12959] Tainted: [W]=WARN [ 399.631325][T12959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.631337][T12959] Call Trace: [ 399.631343][T12959] [ 399.631356][T12959] __dump_stack+0x1d/0x30 [ 399.631382][T12959] dump_stack_lvl+0x95/0xd0 [ 399.631405][T12959] dump_stack+0x15/0x1b [ 399.631426][T12959] should_fail_ex+0x263/0x280 [ 399.631509][T12959] should_fail+0xb/0x20 [ 399.631529][T12959] should_fail_usercopy+0x1a/0x20 [ 399.631553][T12959] strncpy_from_user+0x27/0x250 [ 399.631600][T12959] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 399.631676][T12959] do_getname+0x59/0x1c0 [ 399.631825][T12959] getname_flags+0x1d/0x30 [ 399.631845][T12959] do_sys_openat2+0x60/0x130 [ 399.631873][T12959] __x64_sys_openat+0xf2/0x120 [ 399.631980][T12959] x64_sys_call+0x1e39/0x3020 [ 399.632005][T12959] do_syscall_64+0x12c/0x370 [ 399.632025][T12959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.632068][T12959] RIP: 0033:0x7fc06200cfce [ 399.632084][T12959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.632101][T12959] RSP: 002b:00007fc060aa6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 399.632121][T12959] RAX: ffffffffffffffda RBX: 00007fc060aa76c0 RCX: 00007fc06200cfce [ 399.632146][T12959] RDX: 0000000000000000 RSI: 00007fc060aa6f90 RDI: ffffffffffffff9c [ 399.632159][T12959] RBP: 00007fc060aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 399.632173][T12959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.632186][T12959] R13: 00007fc0622c6038 R14: 00007fc0622c5fa0 R15: 00007ffe22122a98 [ 399.632204][T12959] [ 399.850122][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 399.859126][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 399.890602][T12971] loop2: detected capacity change from 0 to 2048 [ 399.890855][T12966] validate_nla: 41 callbacks suppressed [ 399.890864][T12966] netlink: 'syz.1.2234': attribute type 7 has an invalid length. [ 399.943669][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 399.949969][T12974] loop9: detected capacity change from 0 to 256 [ 399.959415][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 400.002512][T12966] netlink: 'syz.1.2234': attribute type 7 has an invalid length. [ 400.030142][T12971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.046605][T12974] FAT-fs (loop9): codepage cp852 not found [ 400.062627][T12980] SELinux: failed to load policy [ 400.080092][T12971] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.286889][T12985] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 400.341230][T12985] xt_TPROXY: Can be used only with -p tcp or -p udp [ 400.637038][T12990] loop3: detected capacity change from 0 to 1024 [ 400.942577][T12990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.171844][T12998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2243'. [ 401.572546][T12992] loop9: detected capacity change from 0 to 512 [ 401.606613][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 401.606627][ T28] audit: type=1400 audit(1773124510.357:2381): avc: denied { getopt } for pid=13001 comm="syz.2.2245" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 401.662518][T12992] EXT4-fs (loop9): 1 orphan inode deleted [ 401.668724][T12992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.929604][ T28] audit: type=1400 audit(1773124510.677:2382): avc: denied { recv } for pid=12987 comm="syz.3.2241" saddr=10.128.0.163 src=30036 daddr=10.128.1.81 dest=56540 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 402.007560][T13014] loop1: detected capacity change from 0 to 512 [ 402.024157][ T28] audit: type=1400 audit(1773124510.717:2383): avc: denied { bpf } for pid=12991 comm="syz.9.2242" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 402.060984][ T28] audit: type=1400 audit(1773124510.717:2384): avc: denied { perfmon } for pid=12981 comm="syz.1.2240" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 402.104598][T13017] loop2: detected capacity change from 0 to 512 [ 402.115644][T13018] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2250'. [ 402.137831][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.150214][T13014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2249: bg 0: block 5: invalid block bitmap [ 402.163536][T13017] EXT4-fs: Ignoring removed bh option [ 402.195844][T13017] EXT4-fs: inline encryption not supported [ 402.218326][T13014] loop1: lost filesystem error report for type 5 error -117 [ 402.218556][T13014] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 402.225903][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 402.225925][ C0] EXT4-fs (loop1): initial error at time 1773124510: ext4_validate_block_bitmap:432 [ 402.225965][ C0] EXT4-fs (loop1): last error at time 1773124510: ext4_validate_block_bitmap:432 [ 402.269762][ T28] audit: type=1400 audit(1773124510.717:2385): avc: denied { prog_run } for pid=12991 comm="syz.9.2242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 402.289641][T13014] loop1: lost filesystem error report for type 5 error -117 [ 402.296520][T13020] loop3: detected capacity change from 0 to 1024 [ 402.299613][T13014] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2249: invalid indirect mapped block 3 (level 2) [ 402.307120][T13020] EXT4-fs: inline encryption not supported [ 402.319634][ T28] audit: type=1400 audit(1773124510.727:2386): avc: denied { perfmon } for pid=12991 comm="syz.9.2242" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 402.336738][T13020] EXT4-fs: Ignoring removed i_version option [ 402.352774][T13014] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 402.356455][T13017] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.374796][ T28] audit: type=1400 audit(1773124510.727:2387): avc: denied { read write } for pid=10768 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.374822][ T28] audit: type=1400 audit(1773124510.727:2388): avc: denied { open } for pid=10768 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.423422][ T28] audit: type=1400 audit(1773124510.727:2389): avc: denied { ioctl } for pid=10768 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 402.423902][T13014] EXT4-fs (loop1): 1 orphan inode deleted [ 402.449247][ T28] audit: type=1400 audit(1773124510.737:2390): avc: denied { open } for pid=13011 comm="syz.2.2248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 402.475428][T13014] EXT4-fs (loop1): 1 truncate cleaned up [ 402.481904][T13014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.506866][T13024] loop4: detected capacity change from 0 to 2048 [ 402.513979][T13017] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 402.552686][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.565668][T13020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.580272][T13017] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2248: bg 0: block 248: padding at end of block bitmap is not set [ 402.610375][T13024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.635282][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2254'. [ 402.659911][T13024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.678637][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.680356][T13017] loop2: lost filesystem error report for type 5 error -117 [ 402.688296][T13017] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2248: Failed to acquire dquot type 1 [ 402.696253][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 402.696269][ C1] EXT4-fs (loop2): last error at time 1773124511: ext4_validate_block_bitmap:441 [ 402.727597][T13017] loop2: lost filesystem error report for type 5 error -117 [ 402.729794][T13017] EXT4-fs (loop2): 1 truncate cleaned up [ 402.743564][T13017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 403.970377][T13050] loop9: detected capacity change from 0 to 1024 [ 404.108253][T13050] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.730145][T13054] lo speed is unknown, defaulting to 1000 [ 404.735903][T13054] lo speed is unknown, defaulting to 1000 [ 404.742640][T13054] lo speed is unknown, defaulting to 1000 [ 404.749102][T13054] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 404.769687][T13054] lo speed is unknown, defaulting to 1000 [ 404.775895][T13054] lo speed is unknown, defaulting to 1000 [ 404.782002][T13054] lo speed is unknown, defaulting to 1000 [ 404.788048][T13054] lo speed is unknown, defaulting to 1000 [ 404.794101][T13054] lo speed is unknown, defaulting to 1000 [ 404.800854][T13054] lo speed is unknown, defaulting to 1000 [ 405.238358][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 405.247855][ T9608] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.258192][ T5090] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 1 [ 405.294007][ T5090] loop2: lost filesystem error report for type 5 error -117 [ 405.306653][T11841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.388609][T13063] loop2: detected capacity change from 0 to 512 [ 405.401214][T13067] __nla_validate_parse: 2 callbacks suppressed [ 405.401233][T13067] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2262'. [ 405.431179][T13063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.438801][T13068] lo speed is unknown, defaulting to 1000 [ 405.457806][T13063] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 405.482072][T13073] loop3: detected capacity change from 0 to 4096 [ 405.539322][T13063] EXT4-fs (loop2): shut down requested (1) [ 405.581638][T13073] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 405.589458][T13073] EXT4-fs (loop3): mount failed [ 405.620810][T13065] lo speed is unknown, defaulting to 1000 [ 406.302948][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.373691][T13073] loop3: detected capacity change from 0 to 8192 [ 406.696602][ T28] kauditd_printk_skb: 98 callbacks suppressed [ 406.696616][ T28] audit: type=1400 audit(1773124515.450:2486): avc: denied { create } for pid=13066 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 406.807828][ T28] audit: type=1400 audit(1773124515.490:2487): avc: denied { create } for pid=13066 comm="syz.3.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 406.909200][ T28] audit: type=1400 audit(1773124515.530:2488): avc: denied { read } for pid=13083 comm="syz.4.2265" dev="nsfs" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.039867][ T28] audit: type=1400 audit(1773124515.530:2489): avc: denied { open } for pid=13083 comm="syz.4.2265" path="net:[4026532388]" dev="nsfs" ino=4026532388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 407.153591][ T28] audit: type=1400 audit(1773124515.750:2490): avc: denied { unmount } for pid=11841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 407.221202][T13088] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2266'. [ 407.236281][ T28] audit: type=1400 audit(1773124515.880:2491): avc: denied { write } for pid=13087 comm="syz.3.2266" name="001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 407.349638][T13099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2270'. [ 407.393736][T13099] ip6gre1: entered promiscuous mode [ 407.409741][T13099] ip6gre1: entered allmulticast mode [ 407.494927][T13084] syz.4.2265 (13084) used greatest stack depth: 8008 bytes left [ 408.478514][ T28] audit: type=1400 audit(1773124517.231:2492): avc: denied { write } for pid=13102 comm="syz.3.2271" name="ip6_flowlabel" dev="proc" ino=4026532857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 409.224882][T13108] loop2: detected capacity change from 0 to 1024 [ 409.274678][T13111] loop4: detected capacity change from 0 to 128 [ 409.300792][T13108] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.461402][T13111] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 409.727482][T13111] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 409.944289][ T6449] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 410.107734][ T28] audit: type=1400 audit(1773124518.861:2493): avc: denied { create } for pid=13117 comm="syz.1.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 410.305392][ T28] audit: type=1400 audit(1773124518.911:2494): avc: denied { write } for pid=13117 comm="syz.1.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 410.415618][T10768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.431175][T13118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2275'. [ 410.467239][T13118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2275'. [ 411.391668][T13132] loop2: detected capacity change from 0 to 128 [ 411.442134][T13132] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 411.513916][T13132] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.550907][ T28] audit: type=1400 audit(1773124520.272:2495): avc: denied { create } for pid=13134 comm="syz.3.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 411.595882][T13137] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2279'. [ 411.625671][T13137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2279'. [ 411.656580][T13138] sctp: [Deprecated]: syz.1.2279 (pid 13138) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.656580][T13138] Use struct sctp_sack_info instead [ 411.723803][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 411.723816][ T28] audit: type=1400 audit(1773124520.482:2507): avc: denied { ioctl } for pid=13131 comm="syz.2.2278" path="/76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop2" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 411.884964][ T28] audit: type=1400 audit(1773124520.552:2508): avc: denied { ioctl } for pid=13136 comm="syz.1.2279" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 412.025481][T13145] loop1: detected capacity change from 0 to 1024 [ 412.049769][T13145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.050284][ T28] audit: type=1400 audit(1773124520.812:2509): avc: denied { read } for pid=13146 comm="syz.3.2283" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.062479][T13150] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2281'. [ 412.114604][ T28] audit: type=1400 audit(1773124520.862:2510): avc: denied { open } for pid=13146 comm="syz.3.2283" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.139907][ T28] audit: type=1400 audit(1773124520.862:2511): avc: denied { ioctl } for pid=13146 comm="syz.3.2283" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.179483][ T28] audit: type=1400 audit(1773124520.942:2512): avc: denied { create } for pid=13144 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.211880][T13145] tipc: New replicast peer: 255.255.255.255 [ 412.218070][T13145] tipc: Enabled bearer , priority 10 [ 412.226409][ T28] audit: type=1400 audit(1773124520.972:2513): avc: denied { write } for pid=13144 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.253259][ T28] audit: type=1400 audit(1773124520.972:2514): avc: denied { nlmsg_write } for pid=13144 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 412.308566][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.353783][T10768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.368669][ T28] audit: type=1400 audit(1773124521.112:2515): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop1" dev="devtmpfs" ino=1689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.417759][ T28] audit: type=1400 audit(1773124521.112:2516): avc: denied { open } for pid=3311 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=1689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 412.676688][ T2999] ================================================================== [ 412.684792][ T2999] BUG: KCSAN: data-race in d_delete / lookup_fast [ 412.691225][ T2999] [ 412.693546][ T2999] read-write to 0xffff88811b1e2540 of 4 bytes by task 7243 on cpu 0: [ 412.701623][ T2999] d_delete+0xbe/0xe0 [ 412.705628][ T2999] d_delete_notify+0x32/0x100 [ 412.710305][ T2999] vfs_unlink+0x289/0x490 [ 412.714637][ T2999] filename_unlinkat+0x1e2/0x410 [ 412.719588][ T2999] __se_sys_unlink+0x2b/0xe0 [ 412.724183][ T2999] __x64_sys_unlink+0x1f/0x30 [ 412.728859][ T2999] x64_sys_call+0x2eb6/0x3020 [ 412.733536][ T2999] do_syscall_64+0x12c/0x370 [ 412.738130][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.744029][ T2999] [ 412.746347][ T2999] read to 0xffff88811b1e2540 of 4 bytes by task 2999 on cpu 1: [ 412.753877][ T2999] lookup_fast+0xf0/0x320 [ 412.758215][ T2999] path_lookupat+0x15c/0x500 [ 412.762818][ T2999] filename_lookup+0x190/0x390 [ 412.767594][ T2999] do_readlinkat+0x74/0x2f0 [ 412.772106][ T2999] __x64_sys_readlink+0x47/0x60 [ 412.776968][ T2999] x64_sys_call+0x2b51/0x3020 [ 412.781655][ T2999] do_syscall_64+0x12c/0x370 [ 412.786332][ T2999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.792228][ T2999] [ 412.794542][ T2999] value changed: 0x00300180 -> 0x00004080 [ 412.800245][ T2999] [ 412.802562][ T2999] Reported by Kernel Concurrency Sanitizer on: [ 412.808792][ T2999] CPU: 1 UID: 0 PID: 2999 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 412.819300][ T2999] Tainted: [W]=WARN [ 412.823093][ T2999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.832858][T13164] 9pnet_fd: p9_fd_create_unix (13164): problem connecting socket: ./file0: -2 [ 412.833141][ T2999] ================================================================== [ 412.861302][T13165] bond0: (slave bond_slave_0): Releasing backup interface [ 412.879552][T13165] bond0: (slave bond_slave_1): Releasing backup interface [ 412.897953][T13165] team0: Port device team_slave_0 removed [ 412.910547][T13165] team0: Port device team_slave_1 removed [ 412.918292][T13165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.926106][T13165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.935260][T13165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.942797][T13165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.953760][T13165] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 413.344120][ T4740] tipc: Node number set to 1840887759