last executing test programs: 7m13.185241179s ago: executing program 0 (id=62): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x28040010}, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x2000000, 0x1001f3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xa142, 0x189) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x9, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) unshare(0x2c020400) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) fallocate(r1, 0x8, 0x0, 0x10000) r6 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES8=r6], 0xdd12}], 0x1, 0x0, 0x0, 0x4008000}, 0x20040051) 7m9.602821024s ago: executing program 0 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x1, 0x0, 0xfe17) set_mempolicy(0x6005, 0x0, 0x4) r8 = socket$netlink(0x10, 0x3, 0xf) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x51, 0x0, 0x0, 0x0, 0x6e5, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x9}, 0x100e64, 0xc77}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000300), 0x0) open_by_handle_at(r9, &(0x7f0000000080)=ANY=[@ANYRES8=r9], 0x755c00) bind$netlink(r8, 0x0, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 7m4.674104292s ago: executing program 0 (id=75): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="74000000090601020000000000000000010000010900020073797a310000000005000100070000004c00078007000280"], 0x74}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) fcntl$lock(r5, 0x6, 0x0) 7m1.344874663s ago: executing program 0 (id=79): socket$kcm(0x2a, 0x2, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2f, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x64}}, 0x20004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, 0x0, 0xffaf) r5 = socket(0x40000000019, 0x5, 0x20000) connect$inet(r5, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="000000000a00020014001680100001800c00050000000000000200"], 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) 7m0.567971991s ago: executing program 0 (id=81): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf25640101010000000000000000000000007f00000100000000000000000000000000000020001d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000002c0)={'tunl0\x00', {0x2, 0x4e23, @broadcast}}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0xfffff801, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r5 = socket$nl_generic(0x10, 0x3, 0x10) read(r5, &(0x7f0000000440)=""/138, 0x8a) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x25, 0x3, 0x7) 6m56.4637843s ago: executing program 0 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000500), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0xf6, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0xc0, 0x11, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x0, 0x0, 0x66, 0x0, 0x0, 0x6, 0x67}, @dstopts={0x29, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x1000, [0x2, 0x9]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x3, 0x26, "7f9647030c467cd6fa34a23e075737f17472b93eda259601632541f878f050d9dda3e9248d92"}]}, @fragment={0xb, 0x0, 0x8, 0x1, 0x0, 0x2, 0x67}], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, 0x0, &(0x7f00000001c0)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) munlockall() 6m41.331032232s ago: executing program 32 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000500), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0xf6, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0xc0, 0x11, 0x0, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x0, 0x0, 0x66, 0x0, 0x0, 0x6, 0x67}, @dstopts={0x29, 0xb, '\x00', [@pad1, @ra={0x5, 0x2, 0xfff}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0x1000, [0x2, 0x9]}}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0x5}, @generic={0x3, 0x26, "7f9647030c467cd6fa34a23e075737f17472b93eda259601632541f878f050d9dda3e9248d92"}]}, @fragment={0xb, 0x0, 0x8, 0x1, 0x0, 0x2, 0x67}], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, 0x0, &(0x7f00000001c0)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) munlockall() 6m33.094511896s ago: executing program 5 (id=109): creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) unshare(0x8040600) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) fstat(r6, &(0x7f0000001440)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r11, 0x541c, &(0x7f0000000000)) 6m29.136510252s ago: executing program 5 (id=141): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, r1, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'macsec0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r5, &(0x7f0000002040)='./file0\x00', 0x5) ioctl$AUTOFS_IOC_SETTIMEOUT(r5, 0x80049367, &(0x7f0000000b80)=0x6) recvmsg$kcm(r3, &(0x7f0000000880)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f0000000140)=""/4, 0x4}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/200, 0xc8}, {&(0x7f0000000780)=""/38, 0x26}], 0x8, &(0x7f0000000840)=""/31, 0x1f}, 0x41) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x17, 0x1000, 0x1, 0x7, 0x200, r7, 0x5, '\x00', r8, r0, 0x1, 0x3, 0x3}, 0x50) recvmsg$kcm(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x202) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) 6m28.726478276s ago: executing program 5 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x6, 0x10010, 0x8, 0x90, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) timer_create(0xfffffffd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001800)=ANY=[@ANYBLOB="34000000030601020000000000000000030000060900020073797a30000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 6m13.199174147s ago: executing program 33 (id=144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x5, 0xffffffffffffffff}, 0x102802, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x686, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x6, 0x10010, 0x8, 0x90, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0), 0xc) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) timer_create(0xfffffffd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000000050015"], 0x64}}, 0x20008040) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001800)=ANY=[@ANYBLOB="34000000030601020000000000000000030000060900020073797a30000000000500010007"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40) pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 11.941270865s ago: executing program 4 (id=1420): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x200008c0) 11.823878353s ago: executing program 4 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 9.854776873s ago: executing program 4 (id=1426): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', 0x0}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000200), 0x0}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x4e26, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="a90500000000746400010000579f000000e5c09a", 0x14}], 0x1}}], 0x1, 0x4000814) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1c00}, &(0x7f0000000280)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x382aecc51a6ac646}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c7b8000", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf252500000005002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x2, 0x2, 0x26d}) eventfd2(0xff, 0x80800) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x47ba, 0x0, 0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r9, &(0x7f0000000540)}, 0x20) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) getdents64(r2, 0x0, 0x22) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) 9.314241084s ago: executing program 6 (id=1430): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x4000084, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x219d80f, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xcb5000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0x30) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x1e, r2, 0x0, 0xee00) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x2, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x21, 0x7, 0x6, 0xba0, 0x8002, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00') 9.23851981s ago: executing program 6 (id=1431): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a00000180000002b6974f334e5058"], 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9sG1UaAPBvxnbTP9lNVtqVdlc9VLtIRarqJP0DhVN7RVSq1AMSF4gcN6rixFWcQBNFIr1XiB4QoF7KDQ4cQRw4IC4cuXIBcUaqaARS0wMYOR6naeoUJ8RxiX8/yfF788b+3pvx9+IZzcgB9K1jjT9pxH8i4lISMbShLR9Z47HmeqsrS6UHK0ulJOr1yz8lkUTE/ZWlUmv9JHs+EhHLEfHviPiqEHEiXX/LA61CbWFxarxSKc9m9ZG56WsjtYXFk1enxyfLk+WZ08+/cPbcmbNjp8Y2dvdBfWOtsL2x3vz+1ts3v3npzq2PPzm6XHp3PInzMZi1bRzHbmpuk0Kc37T8TDeC9VDS6w6wI7kszxup9K8YilyW9e3UN04OA3vSPaCL6gMR9XUbikAfSCQ99KnW94DG8W/rsZffP+5eaB6ANOKuriyV3oql4WZLvnluIg6uHZsc/jl55Mikcbw5vJcdZV9avhERo/n845//JPv87dzobnSQrvryQnNHPb7/0/X5J9rMP4Otc6d/Umv+W83mv9U28XNbzH+XOozx66s/fLBl/BsD8d+28ZP1+Emb+GlEvN5h/NuvfH5uq7b6hxHHo338luTJ54dHrlytlEebf9vG+OL40Re3Hn/E4S3iN8/ZHlzryMbxH8j6lHY4/s++/vR/y0+I/+z/n7z/223/QxHxTofx/3H/o5e3art7I7nX+Baw3f2fRCHudBj/ufPHvsuKzhoCAAAAAAAAAMAuSteuZUvS4no5TYvF5j28/4zDaaVamztxpTo/M9G85m04CmnrSquhZj1p1Mey63Fb9VOb6qdzWcDcobV6sVStTPR47AAAAAAAAAAAAAAAAAAAAPC0OLLp/v9fcmv3/2/+uWpgv9r6J7+B/U7+Q/96NP+TnvUD2Hv+/0Pfqst/6F/yH/qX/If+Jf+hf8l/6F/yH/qX/AcAAAAAAAAAAAAAAAAAAAAAAAAAgK64dPFi41F/sLJUatQn8gvzU9U3Tk6Ua1PF6flSsVSdvVacrFYnK+ViqTr9R++XVKvXRmNm/vrIXLk2N1JbWHxtujo/0/pN0XKh6yMCAAAAAAAAAAAAAAAAAACAv57BtUeSFiMKzXqaFosRf4uI4SSSK1cr5dGI+HtEfJsrDDTqY73uNAAAAAAAAAAAAAAAAAAAAOwztYXFqfFKpTzbvUI+C9XFEJ0X8ttZOSKWd7cbjXfc9qsK2Qbs8abbH4Xc0/E5fPoLPZyUAAAAAAAAAAAAAAAAAACgTz286bfTV/zW3Q4BAAAAAAAAAAAAAAAAAABAX0p/TCKi8Tg+9Mzg5tYDyWpu7Tki3rx9+b3r43Nzs2ON5ffWl8+9ny0/tf6y/N6OAehEK0/TiGjkMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBQbWFxarxSKc/usDDQwTq9HiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADATvweAAD//7M9zgI=") bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4105, 0x0, 0x1009, 0x8}, 0x28) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210002, &(0x7f0000000780)={[{@dioread_nolock}, {@noload}, {@noblock_validity}, {@nombcache}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000001020103004011000007000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x40) 7.806026328s ago: executing program 6 (id=1432): gettid() msgsnd(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r2, &(0x7f0000000080)='./control\x00', 0xa0000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1, 0x0, 0xfffffffc, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1000) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.805132728s ago: executing program 2 (id=1434): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000019440), 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f000001b980)={@desc={0x1, 0x0, @desc1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) sendfile(r7, r6, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r9 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x5b2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x7, 0x3c8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f0000019200)=""/249, 0xf9}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {&(0x7f0000019580)=""/188, 0xbc}, {&(0x7f0000019640)=""/90, 0x5a}], 0xa, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}, {&(0x7f000001b780)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x3, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f000001bac0), &(0x7f000001bb00)=0x1, 0x0, 0x3, 0xffff, 0x7, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7}}], 0x140, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000019080)) 7.306406417s ago: executing program 1 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac01bd0edcbe8a5dea438bce2d26b42fac94876446e7a50498dd3ce64ca74af811203320c767ab62b9746565e64d89162c210e84aacc075dc30af2f60c36e4abb4e986f149611d8bd5334996caed771187552b8fdc0c0ad7e2e3bed9400"/110, 0xfffffc53}], 0x1}}], 0x1, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0x5c, 0x160, 0x158, 0x3e0, 0x268, 0x228, 0x25a, 0x268, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x158, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x10000, 0x80000000, 0x8, 0x9, 0x40, 0x5, 0x4}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x2, {0xfffffffffffffffa}}}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd25, 0x25dedafe, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x24000894) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = dup3(r4, r10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x120, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2da7, 0x42}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0x4, 0x7, 0xdf, 0x8001, 0x6, 0x38e]}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xffffff97, 0x3, 0xe, 0x1, 0x8, 0x7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2bd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x329}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x4800, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0xe]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendto$inet6(r2, &(0x7f00000006c0)="5671cd3b959efb3a2a8caf49ba7fbca5dc8a94f143cff61b66507cf8f93352bc5c85043c20db4cc6274e130b5bb32b2b5976fc74c7174bec3e3eccf04a2f0517378c974c1a39815c15de7726a8eff7de703b5513ace3a8a51c14c7ba20184a2fc304cd2bdb6f586a2edbc5e9487b5bbecf798ece1d683a32b76663a398e36e73cdf70cf57167785b738c0dec09e7e47505c71922bb94dea4d4d8c8e13bd7c02b2337e3cb7551bf24ca0b9e97b12017c1028d1e46e54eb63a906913a9f7ddabcd18cbb5901913523447c6ff86deb469352c660f5a3abc3a383d5481af9e29885d6210adf1a449dd37a3", 0xe9, 0x80, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/242, 0xf2) 6.545390288s ago: executing program 6 (id=1439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) r2 = dup(r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendto$inet6(r1, 0x0, 0x0, 0x48c00, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000040000000000000090000008500000011000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)=ANY=[@ANYBLOB="140000001000010000000400000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000144000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.538680666s ago: executing program 4 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r4 = syz_pidfd_open(0x0, 0x0) r5 = dup(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 6.415256264s ago: executing program 1 (id=1441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11feb0, 0x1002, 0x20da, 0x5, 0x8006, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x85, 0x7, 0xfff}]}) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x80000000}, 0x38) fcntl$dupfd(r3, 0x406, r0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1f, 0x19, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x73f, 0x70bd29, 0x25dfdbfb, {0x1, 0x0, 0xffa1}}, 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_MCE_KILL(0x4e, 0x1, 0x8b871bb4e678c6f3) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f00000004c0)=0xc) prlimit64(r8, 0xe, 0x0, &(0x7f0000000500)) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004871c) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 6.414775934s ago: executing program 2 (id=1442): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") r0 = creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) unshare(0x22020400) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000900)={0x14, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r7 = socket(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7400ffdbdf250c00000008000b00030000000c000600010000000100000008000300", @ANYRESHEX=r7, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008000b00c20d"], 0x60}, 0x1, 0x0, 0x0, 0x20042081}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000"], 0x74}}, 0x24005000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.179666358s ago: executing program 6 (id=1445): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, r5, 0x1000) setregid(r2, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0x35, 0x0, 0x2}, {0x5}, {0x2}, {0x6, 0x0, 0x0, 0x400}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x11, 0x1, 0x4a, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x703}, 0x8887, 0x10000, 0x8, 0x7, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000046b113c00000000008510000002000000850000007600000095000000000000009500a50500000000faa027c58122fbb8a3988a48e9935dd90a2cb2fc13d0d9e4e936642efe77f7cd410a52bca41d08211529734eba8a425b4612c91daa18ce932dd7fd1d7806c6341322b572330b872c0b5425ba"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 5.179092377s ago: executing program 3 (id=1446): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x8800, &(0x7f0000000140)={[{@errors_remount}, {@init_itable}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x3, &(0x7f0000000000)={0x8, 0x0, 0x8000}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48080) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x4}}, [@NFT_MSG_NEWSET={0x220, 0x9, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "a6d8f8ed5fd682ff5ad16e40765769589cfe4bd15c97531859d7be3269315d00ff0ef21b9628e889ec31e14461e53e0f22c27d14e6f757935b1265b4c4e350dba7d840c74df142c25fddd9dd40799d8e292d2b6b6babe4483b4db403ca93aeec302be17a6168bcf260f40972aedcd562d156f629e6d14faefca5f2ffe1a5e16de945d7bea88aeaef6f43a4cd55ba576f66ffc0015d74a76555634b5f8105c4b468c41078d636f2b74acfa94ebb310c44082455385801a8174f45694795822d367dc8f1e2d4"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x800}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4a}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}, @NFTA_SET_USERDATA={0xc2, 0xd, 0x1, 0x0, "4763ac0d8fe0dd24352929e99aaf7602484771614d746eb867fe63ea74c0ecb1c00f3633f53daf13bad43de1d07d4e045d2db3863f3a1d8f44458a108b983432630c3892967ca00dfa3947a5ea816c42b54e19a66c6a3ebae1e1bc650fae8fa347af32edd95a689cf8f09f4055473fbcc9c985cfffd2b88ca2a02ad850820244fc348b1b805f37ef520a489f9aa919eb98bca2d5be7eb82dc9e8a731d9a1874614f784479ab04a0e59f1f8b70801949de4eb63d2c5d1bf5d34d3bde8c934"}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x60, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_DATA={0x4c, 0x4, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}}, @NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_USERDATA={0x1e, 0xd, 0x1, 0x0, "5cdeb67af74548f724f174af5443168a0758514db0744a9c07b2"}]}, @NFT_MSG_NEWTABLE={0xb4, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x92, 0x6, "0a82bed000c2e68a47d3e5b436bd208060f40be5df7a4cb914ab452f5ed3b88e94c45aab33bce5526948b6bd5357aec0e2d620232ace52bc720ae9c94779647e77fb570a7ebcb5b3fe166d9f6c6a1a863613f4f3335b01ddb8f6877f39eccc42525a7ce4b7f818db464b61de8814f7c2099ba908734dfd982a8e89bbc3f2c5d6ee935f9584a1a921ca3fe65cd0b0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0xfb, 0x6, "3afa8dd2a38de868d0a0b0941ce113efa98a5646d022d71caf460228a9523f56f3e93ac9624413d9eb0b0fb48c564f761573c6ae42bfa4df403d892d8bce3178ad873b7dd21804a78fbb30edd43db1cbb347c3fcb8a3f166892c6b91f1b9105212ebc1970cf517814358c71956881dd838119e12061d4b6627413d28565c16272ba65df8d306afb4a6213581dfa008dcd7bd31741d42cb771e06d2327fe9ab6de540cf2cfc165f522329e811d2475862db693bfbd00544dbd61d85260fd6e2edb71b8238199c24f80d201acc29854eb1561c6e860b4449eba9236f0a83d4cd1e2848813e28955702220a036b08af3174670b4af27348b4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x5ac}}, 0x44020) 5.014443617s ago: executing program 3 (id=1447): r0 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0x2, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4000800) ioctl$SIOCSIFHWADDR(r5, 0x8922, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.106459341s ago: executing program 3 (id=1448): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x3, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x52c00) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x18, 0x830d}, 0x100148, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0), &(0x7f0000000040)) 4.100805511s ago: executing program 2 (id=1458): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./bus\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYRES8=0x0], 0x1, 0x2c7, &(0x7f0000000bc0)="$eJzs3E9rE10Ux/HTpm3SlDZ54EFQUA+60U1o4wvQIC2IAaU2RV0IUzvRkDEpM6ESEZuNuPV1FJfuBPUF2I24cefCXREEN12II85k2jRNQ5qkSdp+P1DmZu799Z6mfzhTmNm8+/pJPuskskZJhiMqwyIV2RKJ/xtVDVWPw954TGpV5PLEr69n79y7fzOVTs/Oq86lFq4kVXXq/Punz99c+FiaWHw79S4sG/EHmz+T3zdObZze/LPwOOeMiqOFYkkNXSoWS8aSZepyzsknVG9bpuGYmis4pr1rPmsVV1bKahSWJ6Mrtuk4ahTKmjfLWipqyS6r8cjIFTSRSOhkVE62kRbWZNbn543UvtNuqKsV4dCNNzpp26lK48nMeg9qAgAAA6Z5/+/3+vv3/+lF/9hW/6+5/fp/kY77/09jvX8vj4JK7Yst13Wb9f+BWMOzke5VhY58a36ta9spI1r9/d2N/h8AAAAAAAAAAAAAAAAAAAAAgKNgy3VjruvGgmPwEa7e4BG87nedOBxtfv+v9qlcdFnNjXsREevVamY14x/9+VRWcmKJKdMSk9/ez0OVP567kZ6dVk9cPlhr1fzaaiYk4SAfiAf5Ie82ND9/7r8ZP6+786MSrd0/KTH5v/H+yYb5Mbl0cTs/LgmJyeeHUhRLlr29d/IvZlSv30rX5ce9dQAAAAAAHAcJ3bbn+t2b9xZEZO+8nz/A/wfqrq9H5Ewrj6gEAAAAAAAdc8rP8oZlmXYbg7CIdBA/roOQDEQZdYNrIjIAZfRqEBER/4y2E/+xHW+0Jix1Z9wWPvOIiPT9bTnAoN9/mQAAAAB0207Tf4DQl5eHWBEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPq88DC9bvmQommsRrtgv1/AsEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABsjfAAAA//+vch8T") r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)}, 0xe9782ca385d6f00c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007514feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x8, 0x29, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf2, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat(r4, &(0x7f0000000040)='./file1\x00', 0x80100, 0xa) sendmsg$key(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2, 0xd, 0xa, 0x3, 0x1d, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x4, 0x8, 0xd93, 0x9}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_sa={0x2, 0x1, 0x4d5, 0x2, 0x9, 0x9a, 0x2}, @sadb_sa={0x2, 0x1, 0x4d4, 0x4, 0x9, 0x4c, 0x3}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @remote}}, @sadb_x_policy={0x8, 0x12, 0x1, 0x49c1ce3421da50f8, 0x0, 0x6e6bb1, 0x4, {0x6, 0x32, 0x1, 0x84, 0x0, 0x15, 0x0, @in6=@empty, @in=@private=0xa010100}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd27, 0x3503}, @sadb_ident={0x2, 0xb, 0xfff, 0x0, 0x5}]}, 0xe8}}, 0x4040) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 3.404699053s ago: executing program 3 (id=1449): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0xfffffffffffffd05) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) shutdown(0xffffffffffffffff, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0x7ff, 0xe34, 0x4eb, 0xffffffffffffffff, 0x5, 0x10, 0x1, 0x800}) setregid(0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000001400)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001440)) sendmsg$netlink(r2, &(0x7f0000001540)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000001000)=[{0x0}, {0x0}, {&(0x7f00000002c0)={0x10, 0x2d, 0x8, 0x70bd2c, 0x25dfdbff}, 0x10}, {&(0x7f0000000c40)={0x10, 0x12, 0x400, 0x70bd28, 0x25dfdbfc}, 0x10}, {&(0x7f00000003c0)={0x28, 0x18, 0x100, 0x70bd2d, 0x25dfdbff, "", [@typed={0x4, 0x119}, @generic="53feb6682f527276e309d071df429a873012"]}, 0x28}], 0x5}, 0x40000) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00) 3.174284771s ago: executing program 4 (id=1450): gettid() msgsnd(0x0, 0x0, 0x0, 0x0) io_uring_setup(0x1b7b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000040)='./control\x00', 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_add_watch(r2, &(0x7f0000000080)='./control\x00', 0xa0000000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1, 0x0, 0xfffffffc, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x8, 0x2, 0x0, 0x0, "ee6a491530f05065"}}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1000) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.173288761s ago: executing program 1 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x4000084, 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x219d80f, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xcb5000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000000)=0x30) mount(0x0, 0x0, &(0x7f0000000340)='proc\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x1e, r2, 0x0, 0xee00) remap_file_pages(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000c, 0x2, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x21, 0x7, 0x6, 0xba0, 0x8002, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30100000001000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) pivot_root(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00') 1.991732205s ago: executing program 3 (id=1451): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'erspan0\x00', 0x0}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000f40)={r0, &(0x7f0000000200), 0x0}, 0x20) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x4e26, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="a90500000000746400010000579f000000e5c09a", 0x14}], 0x1}}], 0x1, 0x4000814) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x1c00}, &(0x7f0000000280)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x382aecc51a6ac646}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c7b8000", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf252500000005002a0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xcb44, 0x2, 0x2, 0x26d}) eventfd2(0xff, 0x80800) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000380)={0x0, 0x60d3, 0x8, 0x0, 0x3df}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x47ba, 0x0, 0x28, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r9, &(0x7f0000000540)}, 0x20) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) getdents64(r2, 0x0, 0x22) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) 1.990303344s ago: executing program 1 (id=1452): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000019440), 0x0, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f000001b980)={@desc={0x1, 0x0, @desc1}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0x6000) madvise(&(0x7f0000109000/0x3000)=nil, 0x3000, 0x9) sendfile(r7, r6, 0x0, 0x7fffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) r9 = openat(r0, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x5b2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x7, 0x3c8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) sendmsg$rds(r0, &(0x7f000001bd40)={0x0, 0x0, &(0x7f00000196c0)=[{&(0x7f00000190c0)=""/160, 0xa0}, {&(0x7f0000019180)=""/46, 0x2e}, {&(0x7f00000191c0)=""/19, 0x13}, {&(0x7f0000019200)=""/249, 0xf9}, {&(0x7f0000019300)=""/182, 0xb6}, {&(0x7f00000193c0)=""/103, 0x67}, {&(0x7f0000019440)}, {&(0x7f0000019480)=""/252, 0xfc}, {&(0x7f0000019580)=""/188, 0xbc}, {&(0x7f0000019640)=""/90, 0x5a}], 0xa, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}, {&(0x7f000001b780)=""/148, 0x94}, {&(0x7f000001b840)=""/102, 0x66}], 0x3, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, &(0x7f000001b900)=0xcf61, &(0x7f000001b940), 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, &(0x7f000001bac0), &(0x7f000001bb00)=0x1, 0x0, 0x3, 0xffff, 0x7, 0x20}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x7}}], 0x140, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000019080)) 1.989183314s ago: executing program 2 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000440)="7f", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac01bd0edcbe8a5dea438bce2d26b42fac94876446e7a50498dd3ce64ca74af811203320c767ab62b9746565e64d89162c210e84aacc075dc30af2f60c36e4abb4e986f149611d8bd5334996caed771187552b8fdc0c0ad7e2e3bed9400"/110, 0xfffffc53}], 0x1}}], 0x1, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x158, 0x5c, 0x160, 0x158, 0x3e0, 0x268, 0x228, 0x25a, 0x268, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0x118, 0x158, 0x52020000, {0x0, 0x6802000000000000}, [@common=@unspec=@limit={{0x48}, {0x10000, 0x80000000, 0x8, 0x9, 0x40, 0x5, 0x4}}, @common=@unspec=@state={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0x2, {0xfffffffffffffffa}}}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xffffffff, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={0x34, r6, 0x1, 0x70bd25, 0x25dedafe, {}, [@ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x28000}, 0x24000894) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = dup3(r4, r10, 0x0) setsockopt$TIPC_GROUP_LEAVE(r11, 0x10f, 0x88) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x120, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2da7, 0x42}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0x4, 0x7, 0xdf, 0x8001, 0x6, 0x38e]}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xb}, @NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0xffffff97, 0x3, 0xe, 0x1, 0x8, 0x7]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2bd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x329}]}, @NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x4800, 0x7]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xd}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x5, 0xe]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1a}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendto$inet6(r2, &(0x7f00000006c0)="5671cd3b959efb3a2a8caf49ba7fbca5dc8a94f143cff61b66507cf8f93352bc5c85043c20db4cc6274e130b5bb32b2b5976fc74c7174bec3e3eccf04a2f0517378c974c1a39815c15de7726a8eff7de703b5513ace3a8a51c14c7ba20184a2fc304cd2bdb6f586a2edbc5e9487b5bbecf798ece1d683a32b76663a398e36e73cdf70cf57167785b738c0dec09e7e47505c71922bb94dea4d4d8c8e13bd7c02b2337e3cb7551bf24ca0b9e97b12017c1028d1e46e54eb63a906913a9f7ddabcd18cbb5901913523447c6ff86deb469352c660f5a3abc3a383d5481af9e29885d6210adf1a449dd37a3", 0xe9, 0x80, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x9}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{&(0x7f000000acc0)=""/4096, 0x1000}], 0x1}, 0x20) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)=""/242, 0xf2) 1.110655433s ago: executing program 1 (id=1454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01cfb98940000000002513000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 1.110230684s ago: executing program 2 (id=1455): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r0}, {r0, 0x40}], 0x2, 0x5e5f) shutdown(r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x1c}}, 0x20000840) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregset(0x4204, r7, 0x2, &(0x7f0000000740)={0x0, 0x20}) ptrace$ARCH_GET_GS(0x1e, r7, &(0x7f0000000100), 0x1004) sendmmsg$inet6(r6, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000240)='l', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000000c0), &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.109815193s ago: executing program 3 (id=1456): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020900000200"], 0x10}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, 0x0, 0x0, 0x20000094) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000200)="b7afc4", 0x3}, {0x0, 0x300}], 0x2) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000040)={0xfd}, 0x4) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @local}, 0x20, 0x0, 0x0, 0x0, 0x76, 0x0, 0x8, 0x5, 0x9}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f00000001c0), 0x8) sendto$inet6(r7, &(0x7f0000000140)='R', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @loopback, 0x4766}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) 1.109493883s ago: executing program 4 (id=1457): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2d, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*', 0x1}], 0x1}}], 0x1, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x703d2f, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20013, 0x2021}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x8000002) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x64, r5}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="030300000000000000000600000008000300", @ANYRES32=r9], 0x1c}}, 0x0) sendfile(r7, r7, 0x0, 0xe3aa6ea) 195.308786ms ago: executing program 6 (id=1459): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000000a0a00000180000002b6974f334e5058"], 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8, &(0x7f0000000100)={[{@debug}, {@init_itable}]}, 0x1, 0x5a2, &(0x7f0000000180)="$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") bpf$ITER_CREATE(0x21, &(0x7f0000000740), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4105, 0x0, 0x1009, 0x8}, 0x28) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x210002, &(0x7f0000000780)={[{@dioread_nolock}, {@noload}, {@noblock_validity}, {@nombcache}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000001020103004011000007000009000000"], 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x40) 9.606632ms ago: executing program 2 (id=1460): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x39) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, 0x0) writev(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r8 = dup2(r7, r7) write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0', [], 0xa, "8292eca6323326cc73608515712caf8554c99f20d74b0e46a394684746d6f355dab084363d59111100f147345926e9503a35ed2e8b9126b4fd9e894d4477034ae1bfd96f7c86"}, 0x51) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 0s ago: executing program 1 (id=1462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r4 = syz_pidfd_open(0x0, 0x0) r5 = dup(r4) fsetxattr$trusted_overlay_upper(r5, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r6) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x55430000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ting to rev 1 because of new feature flag, running e2fsck is recommended [ 365.620713][ T8187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.894: bg 0: block 248: padding at end of block bitmap is not set [ 365.635353][ T8187] loop4: lost filesystem error report for type 5 error -117 [ 365.635650][ T8187] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.894: Failed to acquire dquot type 1 [ 365.654789][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 365.661269][ C0] EXT4-fs (loop4): last error at time 1772942438: ext4_validate_block_bitmap:441 [ 365.674784][ T8187] loop4: lost filesystem error report for type 5 error -117 [ 365.780456][ T8187] EXT4-fs (loop4): 1 truncate cleaned up [ 365.794327][ T8187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 366.169197][ T8218] loop2: detected capacity change from 0 to 764 [ 366.427300][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 366.704208][ T3592] __quota_error: 11 callbacks suppressed [ 366.704231][ T3592] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 366.744535][ T3592] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 1 [ 366.756220][ T3592] loop4: lost filesystem error report for type 5 error -117 [ 366.767835][ T8218] Symlink component flag not implemented [ 366.778527][ T8218] Symlink component flag not implemented (116) [ 366.828581][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.911118][ T8231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.907'. [ 367.173045][ T28] audit: type=1400 audit(1772942439.624:888): avc: denied { ioctl } for pid=8235 comm="syz.4.904" path="socket:[19587]" dev="sockfs" ino=19587 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.203176][ T8244] dummy0 speed is unknown, defaulting to 1000 [ 367.228488][ T8244] xfrm0 speed is unknown, defaulting to 1000 [ 367.268534][ T8257] loop6: detected capacity change from 0 to 512 [ 367.311866][ T28] audit: type=1400 audit(1772942439.764:889): avc: denied { remount } for pid=8243 comm="syz.6.909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 368.060267][ T8272] netlink: 'syz.3.916': attribute type 15 has an invalid length. [ 368.109023][ T8272] netlink: 24 bytes leftover after parsing attributes in process `syz.3.916'. [ 368.566223][ T8244] lo speed is unknown, defaulting to 1000 [ 368.594806][ T8275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(14) [ 368.601473][ T8275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.693248][ T8275] vhci_hcd vhci_hcd.0: Device attached [ 368.699148][ T8283] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 368.705818][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.713545][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 368.723350][ T8282] loop4: detected capacity change from 0 to 1024 [ 368.768127][ T8283] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 368.774916][ T8283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.805205][ T8282] EXT4-fs: inline encryption not supported [ 368.811235][ T8282] EXT4-fs: Ignoring removed nobh option [ 368.835161][ T8283] vhci_hcd vhci_hcd.0: Device attached [ 368.887260][ T8282] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 368.896744][ T8282] System zones: 0-1, 3-12 [ 368.909901][ T8283] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 368.928559][ T8283] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 368.958875][ T8283] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 369.079002][ T4363] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 369.087570][ T8282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.109413][ T8275] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(16) [ 369.116124][ T8275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.244780][ T8299] siw: device registration error -23 [ 369.649486][ T8275] vhci_hcd vhci_hcd.0: Device attached [ 369.690591][ T8276] vhci_hcd: connection reset by peer [ 369.695987][ T8292] vhci_hcd: connection closed [ 369.696266][ T5122] vhci_hcd vhci_hcd.2: stop threads [ 369.706197][ T8286] vhci_hcd: connection closed [ 369.709116][ T8284] vhci_hcd: connection closed [ 369.728431][ T8306] siw: device registration error -23 [ 369.830538][ T5122] vhci_hcd vhci_hcd.2: release socket [ 369.916909][ T5122] vhci_hcd vhci_hcd.2: disconnect device [ 370.074983][ T28] audit: type=1326 audit(1772942442.474:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 370.151231][ T8315] netlink: 'syz.1.924': attribute type 15 has an invalid length. [ 370.329038][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.924'. [ 370.360518][ T5122] vhci_hcd vhci_hcd.2: stop threads [ 370.366499][ T5122] vhci_hcd vhci_hcd.2: release socket [ 370.372728][ T5122] vhci_hcd vhci_hcd.2: disconnect device [ 370.384292][ T28] audit: type=1326 audit(1772942442.474:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 370.486427][ T5122] vhci_hcd vhci_hcd.2: stop threads [ 370.557441][ T28] audit: type=1326 audit(1772942442.474:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 370.585754][ T5122] vhci_hcd vhci_hcd.2: release socket [ 370.585945][ T28] audit: type=1326 audit(1772942442.474:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 370.911070][ T8323] netlink: 'syz.2.927': attribute type 15 has an invalid length. [ 370.982101][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.927'. [ 371.047549][ T8327] loop1: detected capacity change from 0 to 512 [ 371.064345][ T28] audit: type=1326 audit(1772942442.484:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 371.094984][ T8327] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.145530][ T8327] EXT4-fs (loop1): 1 truncate cleaned up [ 371.157565][ T8331] netlink: 'syz.2.928': attribute type 15 has an invalid length. [ 371.177525][ T8327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.190223][ T28] audit: type=1326 audit(1772942442.494:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 371.223776][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.928'. [ 371.296334][ T28] audit: type=1326 audit(1772942442.494:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8309 comm="syz.3.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 371.359195][ T8334] netlink: 'syz.2.929': attribute type 15 has an invalid length. [ 371.386784][ T8334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.929'. [ 371.548639][ T5122] vhci_hcd vhci_hcd.2: disconnect device [ 371.594986][ T5122] vhci_hcd vhci_hcd.2: stop threads [ 371.600266][ T5122] vhci_hcd vhci_hcd.2: release socket [ 371.605905][ T5122] vhci_hcd vhci_hcd.2: disconnect device [ 371.750654][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.965211][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 371.965295][ T28] audit: type=1400 audit(1772942444.404:961): avc: denied { read } for pid=8342 comm="syz.2.933" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 372.067383][ T28] audit: type=1400 audit(1772942444.404:962): avc: denied { open } for pid=8342 comm="syz.2.933" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 372.334564][ T8349] loop6: detected capacity change from 0 to 1024 [ 372.351584][ T8349] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a055c01c, mo2=0002] [ 372.363481][ T8349] System zones: 0-1, 3-36 [ 372.369449][ T8349] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.574375][ T8357] loop2: detected capacity change from 0 to 1024 [ 372.581097][ T8357] EXT4-fs: Ignoring removed orlov option [ 372.586888][ T8357] EXT4-fs: Ignoring removed bh option [ 372.617876][ T8357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.913676][ T8365] netlink: 'syz.4.936': attribute type 15 has an invalid length. [ 372.934373][ T8362] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 372.935104][ T8365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.936'. [ 372.959290][ T8367] netlink: 'syz.3.937': attribute type 15 has an invalid length. [ 372.967468][ T8367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.937'. [ 373.032263][ T8373] netlink: 'syz.4.939': attribute type 15 has an invalid length. [ 373.040192][ T8373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.939'. [ 373.082682][ T8375] loop4: detected capacity change from 0 to 256 [ 373.152185][ T8375] syz_tun: entered allmulticast mode [ 373.172482][ T8375] veth1_to_team: entered allmulticast mode [ 373.195707][ T8374] syz_tun: left allmulticast mode [ 373.203794][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.250453][ T8378] netlink: 'syz.6.941': attribute type 15 has an invalid length. [ 373.267177][ T8378] netlink: 24 bytes leftover after parsing attributes in process `syz.6.941'. [ 373.379670][ T8383] loop6: detected capacity change from 0 to 1024 [ 373.395302][ T8383] EXT4-fs: inline encryption not supported [ 373.413430][ T8383] EXT4-fs: Ignoring removed nobh option [ 373.509695][ T8384] loop4: detected capacity change from 0 to 128 [ 373.716451][ T8383] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 373.767637][ T8383] System zones: 0-1, 3-12 [ 373.802875][ T8383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.963659][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.042454][ T8393] loop1: detected capacity change from 0 to 1024 [ 374.063742][ T8393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.231582][ T4363] usb 5-1: enqueue for inactive port 0 [ 374.243271][ T4363] usb 5-1: enqueue for inactive port 0 [ 374.314774][ T4363] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 374.374932][ T8402] netlink: 'syz.1.945': attribute type 298 has an invalid length. [ 374.411593][ T8402] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.945: Allocating blocks 497-513 which overlap fs metadata [ 374.439465][ T8403] EXT4-fs (loop1): shut down requested (0) [ 374.446249][ T23] usb usb8-port1: attempt power cycle [ 374.455396][ T8401] loop4: detected capacity change from 0 to 1024 [ 374.473701][ T8402] EXT4-fs (loop1): pa ffff8881072f32a0: logic 256, phys. 385, len 8 [ 374.481908][ T8402] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 374.623429][ T8401] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 374.729767][ T8401] System zones: 0-1, 3-8 [ 374.762310][ T8401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 374.784914][ T8401] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.952479][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 374.964452][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.109160][ T8415] netlink: 'syz.1.949': attribute type 15 has an invalid length. [ 375.127922][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.212748][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.949'. [ 375.287326][ T8418] netlink: 'syz.6.950': attribute type 15 has an invalid length. [ 375.341341][ T8418] netlink: 24 bytes leftover after parsing attributes in process `syz.6.950'. [ 375.372072][ T8420] netlink: 'syz.1.951': attribute type 15 has an invalid length. [ 375.386746][ T8420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.951'. [ 375.520115][ T8424] netlink: 'syz.6.952': attribute type 15 has an invalid length. [ 375.530811][ T8425] netlink: 'syz.1.953': attribute type 15 has an invalid length. [ 375.538910][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.952'. [ 375.548485][ T8425] netlink: 24 bytes leftover after parsing attributes in process `syz.1.953'. [ 375.883959][ T8428] loop6: detected capacity change from 0 to 512 [ 376.653215][ T8429] loop1: detected capacity change from 0 to 512 [ 376.740175][ T8437] loop4: detected capacity change from 0 to 128 [ 376.747227][ T8437] msdos: Bad value for 'gid' [ 376.751850][ T8437] msdos: Bad value for 'gid' [ 377.136915][ T8429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 377.186606][ T8428] EXT4-fs (loop6): 1 orphan inode deleted [ 377.216399][ T8429] EXT4-fs (loop1): 1 truncate cleaned up [ 377.237099][ T8429] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.258782][ T8428] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.543676][ T8448] loop4: detected capacity change from 0 to 1024 [ 377.662330][ T8448] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 377.695321][ T8448] System zones: 0-1, 3-8 [ 377.700198][ T8448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 377.784949][ T8448] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.827716][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 378.010745][ T8456] netlink: 'syz.3.960': attribute type 298 has an invalid length. [ 378.022419][ T23] usb usb8-port1: unable to enumerate USB device [ 378.778541][ T8458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 378.874403][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.914920][ T8462] netlink: 'syz.6.963': attribute type 15 has an invalid length. [ 378.922693][ T8462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.963'. [ 378.962466][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.188656][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.220284][ T8465] netlink: 'syz.6.966': attribute type 15 has an invalid length. [ 379.228368][ T8465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.966'. [ 379.928058][ T8472] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 380.134289][ T8471] loop6: detected capacity change from 0 to 128 [ 380.144977][ T8471] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 380.190383][ T8471] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 380.236451][ T28] audit: type=1400 audit(1772942452.684:963): avc: denied { watch watch_reads } for pid=8468 comm="syz.6.967" path="/150/bus" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 380.305624][ T8477] netlink: 'syz.4.969': attribute type 15 has an invalid length. [ 380.600167][ T8481] IPv6: sit1: Disabled Multicast RS [ 380.606928][ T8481] sit1: entered allmulticast mode [ 380.668529][ T8477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.969'. [ 381.500201][ T8491] loop6: detected capacity change from 0 to 512 [ 381.730612][ T8491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.743359][ T8491] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.939954][ T8488] loop1: detected capacity change from 0 to 512 [ 381.964824][ T28] audit: type=1400 audit(1772942454.414:964): avc: denied { watch } for pid=8496 comm="syz.2.972" path="/" dev="ramfs" ino=19858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 381.993182][ T8497] sctp: [Deprecated]: syz.2.972 (pid 8497) Use of int in maxseg socket option. [ 381.993182][ T8497] Use struct sctp_assoc_value instead [ 382.026283][ T8488] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 382.038090][ T8497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.972'. [ 382.249008][ T8488] EXT4-fs (loop1): 1 truncate cleaned up [ 382.371369][ T28] audit: type=1400 audit(1772942454.544:965): avc: denied { map } for pid=8499 comm="syz.4.973" path="socket:[20698]" dev="sockfs" ino=20698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 382.434145][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.459489][ T8488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.533643][ T28] audit: type=1400 audit(1772942454.544:966): avc: denied { accept } for pid=8499 comm="syz.4.973" path="socket:[20698]" dev="sockfs" ino=20698 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 382.614577][ T8526] netlink: 'syz.2.977': attribute type 15 has an invalid length. [ 382.627596][ T8528] netlink: 'syz.6.976': attribute type 15 has an invalid length. [ 382.638837][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.977'. [ 382.658873][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.6.976'. [ 382.864230][ T8543] loop6: detected capacity change from 0 to 1024 [ 382.871867][ T8543] EXT4-fs: Ignoring removed orlov option [ 382.877870][ T8543] EXT4-fs: Ignoring removed bh option [ 382.922129][ T8543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.053120][ T28] audit: type=1326 audit(1772942455.484:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 383.317639][ T8551] loop2: detected capacity change from 0 to 512 [ 383.388842][ T28] audit: type=1326 audit(1772942455.484:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 383.448937][ T28] audit: type=1326 audit(1772942455.484:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 383.472583][ T28] audit: type=1326 audit(1772942455.484:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 383.534092][ T28] audit: type=1326 audit(1772942455.484:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 383.655301][ T28] audit: type=1326 audit(1772942455.484:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8547 comm="syz.4.981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 383.695216][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.776606][ T8561] rdma_rxe: rxe_newlink: failed to add lo [ 384.172895][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.299067][ T8565] loop6: detected capacity change from 0 to 1024 [ 384.317795][ T8570] netlink: 'syz.1.983': attribute type 15 has an invalid length. [ 384.332877][ T8565] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.353196][ T8570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.983'. [ 384.367180][ T8551] EXT4-fs: Ignoring removed bh option [ 384.413382][ T8551] EXT4-fs: inline encryption not supported [ 384.436662][ T8551] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.495129][ T8551] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 384.515016][ T8551] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.979: bg 0: block 248: padding at end of block bitmap is not set [ 384.536220][ T8551] loop2: lost filesystem error report for type 5 error -117 [ 384.537485][ T8551] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.979: Failed to acquire dquot type 1 [ 384.544894][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 384.544925][ C1] EXT4-fs (loop2): last error at time 1772942456: ext4_validate_block_bitmap:441 [ 384.600935][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.664881][ T8551] loop2: lost filesystem error report for type 5 error -117 [ 384.665401][ T8551] EXT4-fs (loop2): 1 truncate cleaned up [ 384.677252][ T8579] loop4: detected capacity change from 0 to 512 [ 384.698804][ T8551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 384.820955][ T8579] EXT4-fs (loop4): 1 orphan inode deleted [ 384.840383][ T8579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.136946][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 385.177096][ T5122] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:26: Failed to release dquot type 1 [ 385.194103][ T8586] netlink: 'syz.6.997': attribute type 15 has an invalid length. [ 385.204378][ T5122] loop2: lost filesystem error report for type 5 error -117 [ 385.204485][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.6.997'. [ 385.225165][ T8588] netlink: 'syz.1.988': attribute type 15 has an invalid length. [ 385.233481][ T8588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.988'. [ 385.291610][ T8590] netlink: 'syz.1.989': attribute type 15 has an invalid length. [ 385.310439][ T8592] netlink: 'syz.3.991': attribute type 15 has an invalid length. [ 385.318826][ T8590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.989'. [ 385.329230][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.991'. [ 385.341286][ T28] kauditd_printk_skb: 234 callbacks suppressed [ 385.341302][ T28] audit: type=1400 audit(1772942457.794:1204): avc: denied { read } for pid=8593 comm="syz.6.990" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 385.372386][ T8596] loop2: detected capacity change from 0 to 1024 [ 385.380399][ T28] audit: type=1400 audit(1772942457.794:1205): avc: denied { open } for pid=8593 comm="syz.6.990" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 385.413102][ T8599] loop6: detected capacity change from 0 to 2048 [ 385.420298][ T8596] EXT4-fs: inline encryption not supported [ 385.422673][ T28] audit: type=1400 audit(1772942457.794:1206): avc: denied { ioctl } for pid=8593 comm="syz.6.990" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 385.452383][ T8596] EXT4-fs: Ignoring removed nobh option [ 385.480053][ T8603] netlink: 'syz.1.1004': attribute type 15 has an invalid length. [ 385.506532][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1004'. [ 385.539169][ T8596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 385.549147][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.558619][ T8596] System zones: 0-1, 3-12 [ 385.563574][ T8596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.634732][ T8599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.542671][ T8622] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.549848][ T8622] bridge0: port 2(bridge_slave_1) entered listening state [ 387.557114][ T8622] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.564266][ T8622] bridge0: port 1(bridge_slave_0) entered listening state [ 387.591051][ T8622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 387.684201][ T8594] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.990: bg 0: block 234: padding at end of block bitmap is not set [ 387.715021][ T8594] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 954 with error 28 [ 387.767042][ T8610] loop4: detected capacity change from 0 to 512 [ 387.775138][ T8594] EXT4-fs (loop6): This should not happen!! Data will be lost [ 387.775138][ T8594] [ 387.820368][ T8594] EXT4-fs (loop6): Total free blocks count 0 [ 387.855341][ T8610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 387.880005][ T8594] EXT4-fs (loop6): Free/Dirty block details [ 387.886124][ T8594] EXT4-fs (loop6): free_blocks=0 [ 387.891425][ T8594] EXT4-fs (loop6): dirty_blocks=960 [ 387.897258][ T8594] EXT4-fs (loop6): Block reservation details [ 387.903281][ T8594] EXT4-fs (loop6): i_reserved_data_blocks=60 [ 387.956444][ T8610] EXT4-fs (loop4): 1 truncate cleaned up [ 388.099755][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.147824][ T8634] loop1: detected capacity change from 0 to 512 [ 388.402693][ T8634] EXT4-fs: Ignoring removed bh option [ 388.409357][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.436999][ T8634] EXT4-fs: inline encryption not supported [ 388.438381][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.482385][ T8641] netlink: 'syz.3.1002': attribute type 15 has an invalid length. [ 388.495476][ T8634] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.514847][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'. [ 388.606562][ T8634] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 388.640678][ T8634] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.998: bg 0: block 248: padding at end of block bitmap is not set [ 388.661725][ T8634] loop1: lost filesystem error report for type 5 error -117 [ 388.664730][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 388.678509][ C0] EXT4-fs (loop1): last error at time 1772942461: ext4_validate_block_bitmap:441 [ 388.694583][ T8634] Quota error (device loop1): write_blk: dquota write failed [ 388.875419][ T8634] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 388.927216][ T8634] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.998: Failed to acquire dquot type 1 [ 389.023007][ T8634] loop1: lost filesystem error report for type 5 error -117 [ 389.026497][ T8634] EXT4-fs (loop1): 1 truncate cleaned up [ 389.119454][ T8634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 389.257571][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.282231][ T8655] netlink: 'syz.4.1005': attribute type 15 has an invalid length. [ 389.290552][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1005'. [ 389.348266][ T8659] netlink: 'syz.4.1006': attribute type 15 has an invalid length. [ 389.357176][ T8657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 389.372672][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1006'. [ 389.435402][ T8663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27677 sclass=netlink_route_socket pid=8663 comm=syz.2.1007 [ 389.575468][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 389.595112][ T5126] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 389.604089][ T5126] EXT4-fs error (device loop1): ext4_release_dquot:7037: comm kworker/u8:28: Failed to release dquot type 1 [ 389.624792][ T5126] loop1: lost filesystem error report for type 5 error -117 [ 389.660065][ T8670] loop2: detected capacity change from 0 to 1024 [ 389.699600][ T8670] EXT4-fs: inline encryption not supported [ 389.725249][ T8670] EXT4-fs: Ignoring removed nobh option [ 389.748627][ T8674] netlink: 'syz.4.1013': attribute type 15 has an invalid length. [ 389.757002][ T8674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1013'. [ 389.766757][ T8670] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 389.859707][ T8672] loop6: detected capacity change from 0 to 4096 [ 389.874843][ T8670] System zones: 0-1, 3-12 [ 389.887173][ T8670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.903578][ T8682] netlink: 'syz.4.1015': attribute type 15 has an invalid length. [ 389.911686][ T8682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1015'. [ 389.939191][ T8672] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 390.048189][ T8672] loop6: detected capacity change from 0 to 256 [ 390.109655][ T28] audit: type=1400 audit(1772942462.564:1207): avc: denied { create } for pid=8671 comm="syz.6.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 390.309082][ T8684] loop4: detected capacity change from 0 to 512 [ 390.323857][ T8688] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1012'. [ 390.357235][ T8684] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 390.382369][ T8684] EXT4-fs (loop4): 1 truncate cleaned up [ 390.393491][ T8684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.415802][ T8678] netlink: 'syz.1.1010': attribute type 16 has an invalid length. [ 390.423653][ T8678] netlink: 'syz.1.1010': attribute type 17 has an invalid length. [ 390.603517][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.637411][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.941720][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.967738][ T8696] netlink: 'syz.6.1027': attribute type 15 has an invalid length. [ 390.977986][ T8696] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1027'. [ 390.987287][ T8697] netlink: 'syz.3.1018': attribute type 15 has an invalid length. [ 390.995616][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1018'. [ 391.048823][ T8699] loop2: detected capacity change from 0 to 2048 [ 391.147291][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1019'. [ 391.170383][ T8699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.187049][ T8706] netlink: 'syz.6.1019': attribute type 2 has an invalid length. [ 391.210439][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1019'. [ 391.295583][ T8706] netlink: 'syz.6.1019': attribute type 2 has an invalid length. [ 391.303370][ T8706] netlink: 'syz.6.1019': attribute type 1 has an invalid length. [ 391.400698][ T8699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1017: bg 0: block 234: padding at end of block bitmap is not set [ 391.473568][ T8699] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 378 with error 28 [ 391.539459][ T8699] EXT4-fs (loop2): This should not happen!! Data will be lost [ 391.539459][ T8699] [ 391.579574][ T8699] EXT4-fs (loop2): Total free blocks count 0 [ 391.619946][ T8699] EXT4-fs (loop2): Free/Dirty block details [ 391.646402][ T8699] EXT4-fs (loop2): free_blocks=0 [ 391.658383][ T8699] EXT4-fs (loop2): dirty_blocks=384 [ 391.663718][ T8699] EXT4-fs (loop2): Block reservation details [ 391.669839][ T8699] EXT4-fs (loop2): i_reserved_data_blocks=24 [ 391.967295][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.112893][ T8727] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8727 comm=syz.1.1032 [ 392.576048][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.608054][ T8743] netlink: 'syz.4.1025': attribute type 15 has an invalid length. [ 392.700036][ T8745] loop2: detected capacity change from 0 to 128 [ 392.762757][ T8748] netlink: 'syz.1.1026': attribute type 15 has an invalid length. [ 392.933095][ T8750] loop4: detected capacity change from 0 to 512 [ 392.943713][ T8750] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 392.961661][ T8750] EXT4-fs (loop4): 1 truncate cleaned up [ 392.981755][ T8750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.055497][ T28] audit: type=1400 audit(1772942465.484:1208): avc: denied { shutdown } for pid=8753 comm="syz.1.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 393.137605][ T8761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 393.523376][ T8765] netlink: 'syz.3.1030': attribute type 15 has an invalid length. [ 393.531822][ T8765] __nla_validate_parse: 4 callbacks suppressed [ 393.531837][ T8765] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1030'. [ 393.660848][ T8771] loop6: detected capacity change from 0 to 128 [ 393.684889][ T8771] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 393.798294][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.836865][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.508952][ T8782] loop1: detected capacity change from 0 to 2048 [ 394.524043][ T8778] loop2: detected capacity change from 0 to 512 [ 394.544990][ T8778] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 394.561112][ T5126] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.571903][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.589459][ T8790] netlink: 'syz.6.1040': attribute type 15 has an invalid length. [ 394.605614][ T8790] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1040'. [ 394.640266][ T8782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.664919][ T8778] EXT4-fs (loop2): 1 truncate cleaned up [ 394.688338][ T8796] netlink: 'syz.4.1041': attribute type 15 has an invalid length. [ 394.693392][ T8778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.696771][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1041'. [ 394.927243][ T8782] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1036: bg 0: block 234: padding at end of block bitmap is not set [ 395.010133][ T8801] dummy0 speed is unknown, defaulting to 1000 [ 395.047306][ T8782] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 230 with error 28 [ 395.064476][ T8801] xfrm0 speed is unknown, defaulting to 1000 [ 395.137322][ T8782] EXT4-fs (loop1): This should not happen!! Data will be lost [ 395.137322][ T8782] [ 395.173051][ T28] audit: type=1400 audit(1772942467.604:1209): avc: denied { write } for pid=8800 comm="syz.4.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 395.236314][ T8782] EXT4-fs (loop1): Total free blocks count 0 [ 395.276173][ T8782] EXT4-fs (loop1): Free/Dirty block details [ 395.316284][ T8782] EXT4-fs (loop1): free_blocks=0 [ 395.347295][ T8782] EXT4-fs (loop1): dirty_blocks=240 [ 395.400895][ T8782] EXT4-fs (loop1): Block reservation details [ 395.420886][ T8782] EXT4-fs (loop1): i_reserved_data_blocks=15 [ 395.610906][ T8801] lo speed is unknown, defaulting to 1000 [ 395.731113][ T8810] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1044'. [ 396.341271][ T8817] loop6: detected capacity change from 0 to 128 [ 396.659387][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.819263][ T28] audit: type=1400 audit(1772942469.274:1210): avc: denied { remount } for pid=8822 comm="syz.1.1048" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 397.158782][ T8825] loop6: detected capacity change from 0 to 1024 [ 397.218254][ T8825] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 397.235137][ T8825] System zones: 0-1, 3-8 [ 397.451876][ T8843] validate_nla: 1 callbacks suppressed [ 397.452016][ T8843] netlink: 'syz.1.1053': attribute type 15 has an invalid length. [ 397.520520][ T8825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 397.616467][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 397.654009][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.683242][ T8825] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.805314][ T8758] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 398.193722][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 398.597134][ T8848] loop1: detected capacity change from 0 to 512 [ 398.948851][ T8848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.961497][ T8848] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 399.104013][ T8851] rdma_rxe: rxe_newlink: failed to add lo [ 399.277917][ T8861] netlink: 'syz.6.1056': attribute type 15 has an invalid length. [ 399.309810][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1056'. [ 400.377380][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.399768][ T8872] loop4: detected capacity change from 0 to 2048 [ 400.456392][ T8872] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.560769][ T8888] netlink: 'syz.1.1069': attribute type 15 has an invalid length. [ 400.584790][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1069'. [ 400.620281][ T8876] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1061'. [ 400.770603][ T8872] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1059: bg 0: block 234: padding at end of block bitmap is not set [ 400.814281][ T8892] bridge_slave_1: entered allmulticast mode [ 400.869683][ T8892] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 400.946989][ T8872] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1868 with error 28 [ 400.947086][ T8872] EXT4-fs (loop4): This should not happen!! Data will be lost [ 400.947086][ T8872] [ 400.947198][ T8872] EXT4-fs (loop4): Total free blocks count 0 [ 400.947227][ T8872] EXT4-fs (loop4): Free/Dirty block details [ 400.947236][ T8872] EXT4-fs (loop4): free_blocks=0 [ 400.947248][ T8872] EXT4-fs (loop4): dirty_blocks=1872 [ 400.947257][ T8872] EXT4-fs (loop4): Block reservation details [ 400.947266][ T8872] EXT4-fs (loop4): i_reserved_data_blocks=117 [ 401.206260][ T8900] loop1: detected capacity change from 0 to 8192 [ 401.207502][ T8903] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 401.247233][ T8876] macvlan3: entered promiscuous mode [ 401.247256][ T8876] macvlan3: entered allmulticast mode [ 401.247328][ T8876] veth0_virt_wifi: entered allmulticast mode [ 401.351115][ T8900] netlink: 'syz.1.1063': attribute type 15 has an invalid length. [ 401.379966][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.516786][ T8930] netlink: 'syz.6.1070': attribute type 15 has an invalid length. [ 401.527800][ T28] audit: type=1400 audit(1772942473.984:1211): avc: denied { mount } for pid=8927 comm="syz.2.1067" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 401.550254][ T8932] tipc: Enabling of bearer rejected, failed to enable media [ 401.555906][ T8930] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1070'. [ 401.570868][ T8916] dummy0 speed is unknown, defaulting to 1000 [ 401.572942][ T8924] loop4: detected capacity change from 0 to 1024 [ 401.579610][ T8916] xfrm0 speed is unknown, defaulting to 1000 [ 401.624171][ T8938] netlink: 'syz.6.1071': attribute type 15 has an invalid length. [ 401.632619][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1071'. [ 401.692127][ T8924] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 401.728497][ T8924] System zones: 0-1, 3-8 [ 401.750324][ T8924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 401.765628][ T8924] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.854224][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 401.906466][ T8916] lo speed is unknown, defaulting to 1000 [ 401.946200][ T8949] loop6: detected capacity change from 0 to 512 [ 401.992932][ T8949] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 402.020981][ T8949] EXT4-fs (loop6): 1 truncate cleaned up [ 402.043780][ T8949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.941545][ T8976] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.954337][ T28] audit: type=1400 audit(1772942475.254:1212): avc: denied { create } for pid=8964 comm="syz.4.1075" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 405.635243][ T8988] loop2: detected capacity change from 0 to 128 [ 405.645404][ T8992] rdma_rxe: rxe_newlink: failed to add lo [ 405.684508][ T8989] tipc: Enabled bearer , priority 0 [ 405.691578][ T8989] syzkaller0: entered promiscuous mode [ 405.697401][ T8989] syzkaller0: entered allmulticast mode [ 405.713266][ T8989] tipc: Resetting bearer [ 405.749828][ T8986] tipc: Resetting bearer [ 405.793000][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.804300][ T8986] tipc: Disabling bearer [ 406.006308][ T9003] tipc: Enabled bearer , priority 0 [ 406.013793][ T9003] syzkaller0: entered promiscuous mode [ 406.021508][ T9003] syzkaller0: entered allmulticast mode [ 406.033128][ T9003] tipc: Resetting bearer [ 406.132438][ T9002] tipc: Resetting bearer [ 406.167880][ T9006] netlink: 'syz.1.1083': attribute type 15 has an invalid length. [ 406.184898][ T9002] tipc: Disabling bearer [ 406.228723][ T9006] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 406.548536][ T28] audit: type=1400 audit(1772942479.004:1213): avc: denied { create } for pid=9012 comm="syz.1.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 406.608383][ T9008] loop2: detected capacity change from 0 to 1024 [ 406.725783][ T9023] SET target dimension over the limit! [ 406.780480][ T9008] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 406.864534][ T9008] System zones: 0-1, 3-8 [ 406.936105][ T9008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.038066][ T9008] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.091161][ T9011] loop6: detected capacity change from 0 to 1024 [ 407.262916][ T9011] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 407.381381][ T9011] System zones: 0-1, 3-8 [ 407.571997][ T9031] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 407.939960][ T9089] loop4: detected capacity change from 0 to 512 [ 407.951487][ T9011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 407.967910][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.003684][ T9013] loop1: detected capacity change from 0 to 32768 [ 408.012674][ T9089] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1089: invalid indirect mapped block 256 (level 2) [ 408.033970][ T9011] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.053114][ T9089] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 408.053289][ T9089] EXT4-fs (loop4): 2 truncates cleaned up [ 408.062465][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 408.062487][ C0] EXT4-fs (loop4): initial error at time 1772942480: ext4_free_branches:1023: inode 11 [ 408.062537][ C0] EXT4-fs (loop4): last error at time 1772942480: ext4_free_branches:1023: inode 11 [ 408.111867][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 408.122440][ T9089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.628324][ T9095] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1089: bg 0: block 5: invalid block bitmap [ 408.644097][ T9095] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 408.656534][ T9095] EXT4-fs (loop4): This should not happen!! Data will be lost [ 408.656534][ T9095] [ 408.666286][ T9095] EXT4-fs (loop4): Total free blocks count 0 [ 408.672337][ T9095] EXT4-fs (loop4): Free/Dirty block details [ 408.678275][ T9095] EXT4-fs (loop4): free_blocks=0 [ 408.683291][ T9095] EXT4-fs (loop4): dirty_blocks=64 [ 408.688539][ T9095] EXT4-fs (loop4): Block reservation details [ 408.694549][ T9095] EXT4-fs (loop4): i_reserved_data_blocks=64 [ 410.339205][ T9108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1093'. [ 410.709408][ T9112] loop6: detected capacity change from 0 to 256 [ 412.458539][ T9112] FAT-fs (loop6): Directory bread(block 64) failed [ 412.502964][ T9112] FAT-fs (loop6): Directory bread(block 65) failed [ 412.509551][ T9112] FAT-fs (loop6): Directory bread(block 66) failed [ 412.518300][ T9112] FAT-fs (loop6): Directory bread(block 67) failed [ 412.525185][ T9112] FAT-fs (loop6): Directory bread(block 68) failed [ 412.532015][ T9112] FAT-fs (loop6): Directory bread(block 69) failed [ 412.538935][ T9112] FAT-fs (loop6): Directory bread(block 70) failed [ 412.551723][ T9112] FAT-fs (loop6): Directory bread(block 71) failed [ 412.558503][ T9112] FAT-fs (loop6): Directory bread(block 72) failed [ 412.565920][ T9112] FAT-fs (loop6): Directory bread(block 73) failed [ 412.731953][ T9114] tipc: Enabling of bearer rejected, failed to enable media [ 412.743195][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.761458][ T9116] netlink: 'syz.6.1097': attribute type 15 has an invalid length. [ 412.784711][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1097'. [ 412.859541][ T9123] tipc: Enabled bearer , priority 0 [ 412.866558][ T9123] syzkaller0: entered promiscuous mode [ 412.866586][ T9122] netlink: 'syz.4.1096': attribute type 15 has an invalid length. [ 412.872138][ T9123] syzkaller0: entered allmulticast mode [ 412.895674][ T9123] tipc: Resetting bearer [ 412.906932][ T9129] netlink: 764 bytes leftover after parsing attributes in process `syz.6.1099'. [ 412.916083][ T9122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1096'. [ 412.926158][ T9121] tipc: Resetting bearer [ 412.940987][ T9121] tipc: Disabling bearer [ 412.982000][ T9125] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 413.363954][ T9149] netlink: 'syz.3.1103': attribute type 15 has an invalid length. [ 413.417619][ T9149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1103'. [ 413.537625][ T9136] loop4: detected capacity change from 0 to 8192 [ 413.560875][ T28] audit: type=1326 audit(1772942486.014:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.602605][ T28] audit: type=1326 audit(1772942486.014:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.637963][ T28] audit: type=1326 audit(1772942486.014:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.669439][ T9161] audit: audit_backlog=65 > audit_backlog_limit=64 [ 413.676142][ T9161] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 413.683955][ T9161] audit: backlog limit exceeded [ 413.689213][ T28] audit: type=1326 audit(1772942486.014:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.717484][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 413.726902][ T28] audit: type=1326 audit(1772942486.014:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.751404][ T28] audit: type=1326 audit(1772942486.014:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.776452][ T28] audit: type=1326 audit(1772942486.014:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9135 comm="syz.4.1101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75bd88c799 code=0x7ffc0000 [ 413.930974][ T9176] loop1: detected capacity change from 0 to 512 [ 413.965477][ T9176] EXT4-fs: Ignoring removed i_version option [ 413.971533][ T9176] EXT4-fs: Ignoring removed bh option [ 414.035101][ T9172] loop2: detected capacity change from 0 to 512 [ 414.076155][ T9172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.116591][ T9167] syz.4.1101: attempt to access beyond end of device [ 414.116591][ T9167] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.155578][ T9167] Buffer I/O error on dev loop4, logical block 57847, async page read [ 414.179984][ T9167] syz.4.1101: attempt to access beyond end of device [ 414.179984][ T9167] loop4: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 414.248439][ T9167] Buffer I/O error on dev loop4, logical block 57847, async page read [ 414.506345][ T9176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.519985][ T9176] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 414.525836][ T9198] tipc: Enabling of bearer rejected, failed to enable media [ 414.567207][ T9172] EXT4-fs (loop2): 1 truncate cleaned up [ 414.596375][ T9172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.616302][ T9217] netlink: 'syz.6.1111': attribute type 15 has an invalid length. [ 415.632335][ T9217] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1111'. [ 415.668518][ T9213] ipvlan1: entered allmulticast mode [ 415.674057][ T9213] dummy0: entered allmulticast mode [ 415.724609][ T9215] dummy0 speed is unknown, defaulting to 1000 [ 415.731075][ T9215] xfrm0 speed is unknown, defaulting to 1000 [ 415.761816][ T9223] netlink: 'syz.3.1112': attribute type 15 has an invalid length. [ 415.778934][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1112'. [ 415.793709][ T9213] xt_recent: Unsupported userspace flags (000000b1) [ 415.853060][ T9215] lo speed is unknown, defaulting to 1000 [ 415.936649][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.958054][ T9235] netlink: 'syz.4.1115': attribute type 15 has an invalid length. [ 415.966848][ T9235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1115'. [ 415.988907][ T9228] IPv6: sit1: Disabled Multicast RS [ 416.021602][ T9237] tipc: Enabled bearer , priority 0 [ 416.036285][ T9237] syzkaller0: entered promiscuous mode [ 416.042192][ T9237] syzkaller0: entered allmulticast mode [ 416.056306][ T9237] tipc: Resetting bearer [ 416.109847][ T9236] tipc: Resetting bearer [ 416.134195][ T9251] netlink: 'syz.3.1118': attribute type 15 has an invalid length. [ 416.162318][ T9236] tipc: Disabling bearer [ 416.170165][ T9251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1118'. [ 416.245279][ T9264] loop1: detected capacity change from 0 to 164 [ 416.259247][ T9265] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 416.318651][ T9264] serio: Serial port ptm0 [ 416.340516][ T9259] debugfs: 'ttyS3' already exists in 'caif_serial' [ 416.435746][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.511925][ T9283] sctp: [Deprecated]: syz.2.1122 (pid 9283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.511925][ T9283] Use struct sctp_sack_info instead [ 416.583490][ T9291] tipc: Enabled bearer , priority 0 [ 416.598892][ T9291] syzkaller0: entered promiscuous mode [ 416.608058][ T9291] syzkaller0: entered allmulticast mode [ 416.637158][ T9297] netlink: 'syz.1.1124': attribute type 15 has an invalid length. [ 416.637517][ T9283] Invalid ELF header magic: != ELF [ 416.655365][ T9297] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1124'. [ 416.665941][ T9291] tipc: Resetting bearer [ 416.673328][ T9290] tipc: Resetting bearer [ 416.682700][ T9290] tipc: Disabling bearer [ 416.789477][ T9312] netlink: 'syz.2.1127': attribute type 15 has an invalid length. [ 416.864580][ T9302] loop1: detected capacity change from 0 to 512 [ 416.872021][ T9317] netlink: 'syz.2.1128': attribute type 15 has an invalid length. [ 416.906369][ T9302] EXT4-fs: Ignoring removed orlov option [ 416.913460][ T9302] EXT4-fs: Ignoring removed mblk_io_submit option [ 416.983983][ T9302] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.1125: corrupted in-inode xattr: e_value size too large [ 417.018933][ T9302] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 417.024734][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 417.041134][ C1] EXT4-fs (loop1): initial error at time 1772942489: ext4_iget_extra_inode:5025: inode 15 [ 417.045886][ T9302] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1125: couldn't read orphan inode 15 (err -117) [ 417.051374][ C1] EXT4-fs (loop1): last error at time 1772942489: ext4_iget_extra_inode:5025: inode 15 [ 417.132207][ T9333] tipc: Started in network mode [ 417.134887][ T9302] loop1: lost filesystem error report for type 5 error -117 [ 417.155300][ T9333] tipc: Node identity 02c7872c224d, cluster identity 4711 [ 417.182192][ T9333] tipc: Enabled bearer , priority 0 [ 417.195301][ T9338] syzkaller0: entered promiscuous mode [ 417.200796][ T9338] syzkaller0: entered allmulticast mode [ 417.227491][ T9333] tipc: Resetting bearer [ 417.239415][ T9302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.266048][ T9331] tipc: Resetting bearer [ 417.307441][ T9331] tipc: Disabling bearer [ 417.415920][ T9302] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 12: comm syz.1.1125: lblock 3 mapped to illegal pblock 12 (length 1) [ 417.432453][ T9340] loop6: detected capacity change from 0 to 512 [ 417.497351][ T9340] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 417.550145][ T9340] EXT4-fs (loop6): 1 truncate cleaned up [ 417.582216][ T9340] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.675577][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.689152][ T9362] loop2: detected capacity change from 0 to 512 [ 417.750182][ T9362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.777342][ T9362] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.942507][ T9366] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 418.426273][ T9384] validate_nla: 1 callbacks suppressed [ 418.426302][ T9384] netlink: 'syz.1.1136': attribute type 15 has an invalid length. [ 418.625896][ T9384] __nla_validate_parse: 3 callbacks suppressed [ 418.625910][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1136'. [ 418.938642][ T9397] tipc: Enabled bearer , priority 0 [ 418.945798][ T9397] syzkaller0: entered promiscuous mode [ 418.951285][ T9397] syzkaller0: entered allmulticast mode [ 419.625969][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.984901][ T9397] tipc: Resetting bearer [ 420.001138][ T10] tipc: Node number set to 787395664 [ 420.006753][ T9408] netlink: 'syz.2.1139': attribute type 15 has an invalid length. [ 420.157773][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1139'. [ 420.171851][ T9396] tipc: Resetting bearer [ 420.183002][ T9396] tipc: Disabling bearer [ 420.232463][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.244903][ T9411] netlink: 'syz.4.1140': attribute type 15 has an invalid length. [ 420.263552][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1140'. [ 420.322577][ T9416] netlink: 'syz.2.1143': attribute type 15 has an invalid length. [ 420.329918][ T9418] tipc: Enabled bearer , priority 0 [ 420.337948][ T9418] syzkaller0: entered promiscuous mode [ 420.343498][ T9418] syzkaller0: entered allmulticast mode [ 420.349335][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 420.360403][ T9418] tipc: Resetting bearer [ 420.386940][ T9414] tipc: Resetting bearer [ 420.397755][ T9414] tipc: Disabling bearer [ 420.416721][ T9425] tipc: Enabled bearer , priority 0 [ 420.427326][ T9425] syzkaller0: entered promiscuous mode [ 420.432898][ T9425] syzkaller0: entered allmulticast mode [ 420.462222][ T9425] tipc: Resetting bearer [ 420.470982][ T9424] tipc: Resetting bearer [ 420.486803][ T9424] tipc: Disabling bearer [ 422.215760][ T9444] IPv6: sit2: Disabled Multicast RS [ 422.221855][ T9444] sit2: entered allmulticast mode [ 422.230093][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1147'. [ 422.466394][ T9464] netlink: 'syz.2.1152': attribute type 15 has an invalid length. [ 422.484850][ T9463] netlink: 'syz.4.1149': attribute type 15 has an invalid length. [ 422.643209][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1152'. [ 422.666277][ T9463] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 422.689698][ T9470] netlink: 'syz.6.1153': attribute type 15 has an invalid length. [ 422.732659][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1153'. [ 422.852254][ T9481] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1150'. [ 422.864354][ T9481] hub 8-0:1.0: USB hub found [ 422.869472][ T9481] hub 8-0:1.0: 8 ports detected [ 423.190887][ T9488] netlink: 'syz.2.1157': attribute type 15 has an invalid length. [ 423.226188][ T9487] loop0: detected capacity change from 0 to 16384 [ 423.256113][ T9488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1157'. [ 423.442895][ T9505] loop2: detected capacity change from 0 to 512 [ 423.471210][ T9505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.495473][ T9505] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.597753][ T28] kauditd_printk_skb: 201 callbacks suppressed [ 423.597767][ T28] audit: type=1400 audit(1772942496.054:1416): avc: denied { load_policy } for pid=9503 comm="syz.2.1159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 423.648107][ T9505] SELinux: failed to load policy [ 423.702129][ T9514] netlink: 'syz.4.1160': attribute type 15 has an invalid length. [ 423.715085][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.725174][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1160'. [ 423.831292][ T9523] loop4: detected capacity change from 0 to 512 [ 423.862247][ T9523] EXT4-fs: Ignoring removed nomblk_io_submit option [ 423.881580][ T9523] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 423.905093][ T9523] EXT4-fs (loop4): 1 truncate cleaned up [ 423.915761][ T9523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 423.948655][ T9534] loop6: detected capacity change from 0 to 1024 [ 424.022985][ T9534] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 424.042135][ T9519] loop2: detected capacity change from 0 to 512 [ 424.053280][ T9534] System zones: 0-1, 3-8 [ 424.088194][ T9534] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.105295][ T9519] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 424.229069][ T9534] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.248562][ T28] audit: type=1400 audit(1772942496.624:1417): avc: denied { connect } for pid=9522 comm="syz.4.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 424.724263][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.763361][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 424.802392][ T9561] netlink: 'syz.4.1165': attribute type 15 has an invalid length. [ 424.815020][ T9561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1165'. [ 424.868692][ T9568] netlink: 'syz.4.1168': attribute type 15 has an invalid length. [ 424.878153][ T9568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1168'. [ 424.960196][ T9569] sctp: [Deprecated]: syz.6.1166 (pid 9569) Use of int in maxseg socket option. [ 424.960196][ T9569] Use struct sctp_assoc_value instead [ 424.994284][ T23] usb usb8-port1: attempt power cycle [ 425.045650][ T9573] netlink: 'syz.4.1169': attribute type 15 has an invalid length. [ 425.053504][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1169'. [ 425.157876][ T9579] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 425.178034][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1167'. [ 425.426072][ T9585] loop4: detected capacity change from 0 to 512 [ 425.468012][ T9585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.513080][ T9585] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.644924][ T9591] netlink: 'syz.3.1173': attribute type 15 has an invalid length. [ 425.661121][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1173'. [ 425.717470][ T9585] SELinux: failed to load policy [ 425.899664][ T9596] netlink: 'syz.2.1174': attribute type 15 has an invalid length. [ 425.917527][ T9597] netlink: 'syz.3.1175': attribute type 15 has an invalid length. [ 425.930335][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1174'. [ 425.941115][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.950915][ T9597] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 426.136222][ T9606] netlink: 'syz.3.1178': attribute type 15 has an invalid length. [ 426.159016][ T9604] loop4: detected capacity change from 0 to 1024 [ 426.195676][ T9606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'. [ 426.217696][ T9604] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 426.292275][ T9604] System zones: 0-1, 3-8 [ 426.341863][ T9604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 426.477529][ T9604] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.508807][ T9603] loop2: detected capacity change from 0 to 8192 [ 426.585065][ T3307] loop2: p1 < > p2 p4 < p5 > [ 426.595402][ T3307] loop2: partition table partially beyond EOD, truncated [ 426.633028][ T3307] loop2: p1 start 134217728 is beyond EOD, truncated [ 426.655632][ T3307] loop2: p2 size 591360 extends beyond EOD, truncated [ 426.693604][ T3307] loop2: p5 size 591360 extends beyond EOD, truncated [ 426.721605][ T9603] loop2: p1 < > p2 p4 < p5 > [ 426.743452][ T9603] loop2: partition table partially beyond EOD, truncated [ 426.781972][ T9603] loop2: p1 start 134217728 is beyond EOD, truncated [ 426.815165][ T23] usb usb8-port1: unable to enumerate USB device [ 426.834370][ T9613] dummy0 speed is unknown, defaulting to 1000 [ 426.841184][ T9603] loop2: p2 size 591360 extends beyond EOD, truncated [ 426.894161][ T9613] xfrm0 speed is unknown, defaulting to 1000 [ 426.903766][ T9616] netlink: 'syz.1.1180': attribute type 15 has an invalid length. [ 426.916081][ T9603] loop2: p5 size 591360 extends beyond EOD, truncated [ 426.962082][ T9616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 426.995220][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 427.436703][ T9625] netlink: 'syz.4.1181': attribute type 15 has an invalid length. [ 427.926017][ T9631] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 428.021999][ T9627] loop6: detected capacity change from 0 to 512 [ 428.033614][ T9613] lo speed is unknown, defaulting to 1000 [ 428.080127][ T9627] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 428.199434][ T9627] EXT4-fs (loop6): 1 truncate cleaned up [ 428.232095][ T9627] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.386141][ T9642] netlink: 'syz.2.1186': attribute type 15 has an invalid length. [ 429.869516][ T9642] __nla_validate_parse: 1 callbacks suppressed [ 429.869544][ T9642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1186'. [ 430.142378][ T9648] netlink: 'syz.4.1188': attribute type 15 has an invalid length. [ 430.182833][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1188'. [ 430.204764][ T9650] netlink: 'syz.2.1189': attribute type 15 has an invalid length. [ 430.235412][ T9650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1189'. [ 430.255956][ T9646] loop1: detected capacity change from 0 to 512 [ 430.436995][ T9646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.470812][ T9659] netlink: 764 bytes leftover after parsing attributes in process `syz.2.1191'. [ 430.480055][ T9646] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.618331][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 430.659805][ T9663] macvlan2: entered promiscuous mode [ 430.673707][ T9663] macvlan2: entered allmulticast mode [ 430.691636][ T9663] veth0_virt_wifi: entered allmulticast mode [ 430.711604][ T9665] bridge_slave_1: left allmulticast mode [ 430.728488][ T9665] bridge_slave_1: left promiscuous mode [ 430.728626][ T9665] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.730497][ T9665] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 430.773374][ T9646] SELinux: failed to load policy [ 430.806185][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.876863][ T9667] netlink: 'syz.1.1192': attribute type 15 has an invalid length. [ 430.876955][ T9667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 431.029475][ T9672] loop1: detected capacity change from 0 to 512 [ 431.082367][ T9672] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 431.222341][ T9672] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 431.251057][ T9672] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1193: bad orphan inode 4 [ 431.293608][ T9672] loop1: lost filesystem error report for type 5 error -117 [ 431.293782][ T9672] EXT4-fs (loop1): 1 orphan inode deleted [ 431.301141][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 431.301158][ C1] EXT4-fs (loop1): initial error at time 1772942503: ext4_orphan_get:1417 [ 431.301196][ C1] EXT4-fs (loop1): last error at time 1772942503: ext4_orphan_get:1417 [ 431.344891][ T9680] tipc: Enabled bearer , priority 0 [ 431.362127][ T9680] syzkaller0: entered promiscuous mode [ 431.367770][ T9680] syzkaller0: entered allmulticast mode [ 431.385425][ T9680] tipc: Resetting bearer [ 431.398434][ T9679] tipc: Resetting bearer [ 431.414981][ T9672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.435707][ T9679] tipc: Disabling bearer [ 431.703071][ T9686] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 4: comm syz.1.1193: lblock 0 mapped to illegal pblock 4 (length 1) [ 432.498898][ T28] audit: type=1400 audit(1772942504.154:1418): avc: denied { create } for pid=9670 comm="syz.1.1193" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 432.555178][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.617997][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1198'. [ 432.629400][ T9683] loop4: detected capacity change from 0 to 164 [ 432.674395][ T9692] netlink: 'syz.2.1199': attribute type 15 has an invalid length. [ 432.684660][ T9683] ISOFS: unable to read i-node block [ 432.823546][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1199'. [ 432.857737][ T9699] netlink: 'syz.3.1201': attribute type 15 has an invalid length. [ 432.866101][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1201'. [ 432.989506][ T9704] netlink: 'syz.3.1203': attribute type 15 has an invalid length. [ 432.997599][ T9704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1203'. [ 433.184446][ T9683] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 433.202942][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.213588][ T28] audit: type=1400 audit(1772942505.674:1419): avc: denied { mounton } for pid=9691 comm="syz.2.1199" path="/220/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 433.645637][ T9714] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 435.504334][ T9728] __nla_validate_parse: 1 callbacks suppressed [ 435.504350][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1209'. [ 435.550705][ T9733] loop2: detected capacity change from 0 to 1024 [ 435.596255][ T9733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 435.616713][ T9728] loop4: detected capacity change from 0 to 256 [ 435.625317][ T9733] System zones: 0-1, 3-8 [ 435.630109][ T9733] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.690124][ T9733] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.999313][ T9741] tipc: Enabled bearer , priority 0 [ 436.011641][ T9741] syzkaller0: entered promiscuous mode [ 436.023158][ T9741] syzkaller0: entered allmulticast mode [ 436.050505][ T9741] tipc: Resetting bearer [ 436.067356][ T9740] tipc: Resetting bearer [ 436.073858][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 436.094598][ T9740] tipc: Disabling bearer [ 436.103091][ T9743] netlink: 'syz.2.1212': attribute type 15 has an invalid length. [ 436.111227][ T9743] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1212'. [ 436.196138][ T9747] loop1: detected capacity change from 0 to 512 [ 436.205383][ T9747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.234819][ T9747] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.245676][ T3418] usb usb8-port1: attempt power cycle [ 436.297717][ T9745] loop2: detected capacity change from 0 to 512 [ 436.314679][ T9745] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 436.474110][ T9747] SELinux: failed to load policy [ 436.495256][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.598131][ T9757] loop1: detected capacity change from 0 to 128 [ 436.757569][ T9759] loop2: detected capacity change from 0 to 128 [ 436.787373][ T9759] vfat: Unknown parameter '' [ 437.609050][ T28] audit: type=1326 audit(1772942510.054:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 437.658196][ T9757] loop1: detected capacity change from 0 to 512 [ 437.693595][ T9757] journal_path: Non-blockdev passed as './file2' [ 437.734176][ T9757] EXT4-fs: error: could not find journal device path [ 437.764086][ T28] audit: type=1326 audit(1772942510.054:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 437.812830][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1216'. [ 437.854750][ T9766] tipc: Enabling of bearer rejected, failed to enable media [ 437.873836][ T9757] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1216'. [ 437.893067][ T28] audit: type=1326 audit(1772942510.054:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 437.997085][ T28] audit: type=1326 audit(1772942510.054:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.092160][ T9772] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 438.130768][ T28] audit: type=1326 audit(1772942510.054:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.184347][ T9779] loop1: detected capacity change from 0 to 1024 [ 438.255046][ T3418] usb usb8-port1: unable to enumerate USB device [ 438.265431][ T9779] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 438.311607][ T28] audit: type=1326 audit(1772942510.054:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.355159][ T9779] System zones: 0-1, 3-8 [ 438.405749][ T9779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 438.426354][ T9787] netlink: 'syz.4.1223': attribute type 15 has an invalid length. [ 438.435724][ T28] audit: type=1326 audit(1772942510.064:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.439363][ T9779] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.475637][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1223'. [ 438.484815][ T9789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9789 comm=syz.6.1224 [ 438.551018][ T28] audit: type=1326 audit(1772942510.064:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.589652][ T9789] loop6: detected capacity change from 0 to 1024 [ 438.596294][ T9792] netlink: 'syz.4.1225': attribute type 15 has an invalid length. [ 438.604466][ T9792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1225'. [ 438.651726][ T9789] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1224: bad orphan inode 134217728 [ 438.654786][ T28] audit: type=1326 audit(1772942510.064:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.727186][ T9789] loop6: lost filesystem error report for type 5 error -117 [ 438.728242][ T9789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.757849][ T28] audit: type=1326 audit(1772942510.064:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9756 comm="syz.1.1216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 438.955302][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 439.041524][ T9802] dummy0 speed is unknown, defaulting to 1000 [ 439.077828][ T9802] xfrm0 speed is unknown, defaulting to 1000 [ 439.090106][ T9810] loop1: detected capacity change from 0 to 1024 [ 439.175926][ T9812] tipc: Enabling of bearer rejected, failed to enable media [ 439.214823][ T9810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 439.242628][ T9810] System zones: 0-1, 3-8 [ 439.284205][ T9810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 439.315004][ T9820] 9p: Bad value for 'rfdno' [ 439.345052][ T9808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 439.386364][ T9810] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.423394][ T9808] EXT4-fs (loop4): 1 truncate cleaned up [ 439.515603][ T9808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.611245][ T9802] lo speed is unknown, defaulting to 1000 [ 440.603667][ T9833] netlink: 'syz.2.1235': attribute type 15 has an invalid length. [ 440.634086][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1235'. [ 440.665051][ T9830] bond1: (slave lo): Releasing backup interface [ 440.687606][ T9830] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 440.721463][ T9830] bridge_slave_0: left allmulticast mode [ 440.727616][ T9830] bridge_slave_0: left promiscuous mode [ 440.735470][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.764957][ T9830] bridge_slave_1: left allmulticast mode [ 440.770867][ T9830] bridge_slave_1: left promiscuous mode [ 440.778783][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.807340][ T9830] bond0: (slave bond_slave_0): Releasing backup interface [ 440.861372][ T9830] bond_slave_0: left promiscuous mode [ 440.868243][ T9830] bond_slave_0: left allmulticast mode [ 440.885018][ T9830] bond0: (slave bond_slave_1): Releasing backup interface [ 440.910937][ T9830] bond_slave_1: left promiscuous mode [ 440.918275][ T9830] bond_slave_1: left allmulticast mode [ 440.932487][ T9830] team0: Port device team_slave_0 removed [ 440.947387][ T9830] team0: Port device team_slave_1 removed [ 440.955354][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.964794][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 440.983119][ T9830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.995417][ T9830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.028231][ T23] lo speed is unknown, defaulting to 1000 [ 441.053223][ T23] syU×: Port: 1 Link DOWN [ 441.095239][ T3417] lo speed is unknown, defaulting to 1000 [ 441.145567][ T9837] netlink: 'syz.2.1237': attribute type 15 has an invalid length. [ 441.197449][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 441.418464][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.766512][ T9845] set_capacity_and_notify: 1 callbacks suppressed [ 441.766528][ T9845] loop6: detected capacity change from 0 to 1024 [ 441.893885][ T9847] loop1: detected capacity change from 0 to 128 [ 442.257892][ T9845] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 442.282157][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.293375][ T9845] System zones: 0-1, 3-8 [ 442.305424][ T9845] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 442.337327][ T9845] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.374065][ T9853] pimreg: entered allmulticast mode [ 442.439150][ T9856] loop4: detected capacity change from 0 to 1024 [ 442.452421][ T9856] EXT4-fs: Ignoring removed nobh option [ 442.473335][ T9856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 442.528067][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 442.529069][ T9856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.703327][ T9862] loop6: detected capacity change from 0 to 1024 [ 442.738486][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 442.738504][ T28] audit: type=1400 audit(1772942515.194:1468): avc: denied { create } for pid=9864 comm="syz.3.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 442.770377][ T9867] tipc: Enabled bearer , priority 0 [ 442.779873][ T9867] syzkaller0: entered promiscuous mode [ 442.788917][ T9867] syzkaller0: entered allmulticast mode [ 442.795889][ T9862] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 442.808890][ T9862] System zones: 0-1, 3-8 [ 442.817430][ T9862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 442.830755][ T9862] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.846224][ T9867] tipc: Resetting bearer [ 442.905055][ T9865] tipc: Resetting bearer [ 442.970589][ T9865] tipc: Disabling bearer [ 443.247396][ T9881] netlink: 'syz.3.1248': attribute type 15 has an invalid length. [ 443.272438][ T9881] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1248'. [ 443.342429][ T9882] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9882 comm=syz.1.1247 [ 443.479701][ T4533] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 443.600809][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.784838][ T9886] netlink: 'syz.3.1251': attribute type 15 has an invalid length. [ 443.794967][ T9886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1251'. [ 443.817342][ T9885] dummy0 speed is unknown, defaulting to 1000 [ 443.832016][ T9885] xfrm0 speed is unknown, defaulting to 1000 [ 443.837233][ T9891] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1249'. [ 443.863957][ T28] audit: type=1400 audit(1772942516.314:1469): avc: denied { shutdown } for pid=9883 comm="syz.6.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.127205][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1253'. [ 444.295251][ T9899] dummy0 speed is unknown, defaulting to 1000 [ 444.314461][ T9900] xt_recent: Unsupported userspace flags (000000b1) [ 444.674385][ T9901] dummy0 speed is unknown, defaulting to 1000 [ 444.971616][ T9896] loop1: detected capacity change from 0 to 512 [ 444.986437][ T9896] vfat: Unknown parameter '˙˙' [ 445.044130][ T9899] xfrm0 speed is unknown, defaulting to 1000 [ 445.047364][ T9888] loop4: detected capacity change from 0 to 512 [ 445.169591][ T9896] loop1: detected capacity change from 0 to 512 [ 445.180507][ T9888] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 445.214127][ T9888] EXT4-fs (loop4): 1 truncate cleaned up [ 445.230859][ T9888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.474163][ T9885] lo speed is unknown, defaulting to 1000 [ 445.480137][ T9901] xfrm0 speed is unknown, defaulting to 1000 [ 445.697285][ T9899] lo speed is unknown, defaulting to 1000 [ 445.951234][ T9908] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.1255'. [ 445.960522][ T9908] netlink: zone id is out of range [ 445.965658][ T9908] netlink: zone id is out of range [ 445.970962][ T9908] netlink: zone id is out of range [ 445.984889][ T9908] netlink: set zone limit has 8 unknown bytes [ 446.130727][ T9901] lo speed is unknown, defaulting to 1000 [ 446.507488][ T9915] tipc: Enabling of bearer rejected, failed to enable media [ 447.146839][ T9925] netlink: 'syz.6.1260': attribute type 15 has an invalid length. [ 447.224223][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1260'. [ 447.302578][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.333046][ T9928] loop1: detected capacity change from 0 to 1024 [ 447.506293][ T9932] netlink: 'syz.6.1263': attribute type 15 has an invalid length. [ 447.514221][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1263'. [ 447.611039][ T9928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 447.617345][ T9930] netlink: 'syz.4.1262': attribute type 15 has an invalid length. [ 447.637326][ T9928] System zones: [ 447.640540][ T28] audit: type=1400 audit(1772942520.094:1470): avc: denied { setopt } for pid=9936 comm="syz.3.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 447.750966][ T9928] 0-1, 3-8 [ 447.766956][ T9930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1262'. [ 448.795224][ T9928] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 448.797167][ T9949] netlink: 'syz.4.1268': attribute type 15 has an invalid length. [ 449.093676][ T9928] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.417709][ T9949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1268'. [ 450.644089][ T9968] netlink: 'syz.6.1273': attribute type 15 has an invalid length. [ 450.655184][ T9786] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 450.677607][ T9968] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1273'. [ 450.725148][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 450.750982][ T9971] netlink: 'syz.4.1274': attribute type 15 has an invalid length. [ 450.780976][ T9971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 451.521600][ T9989] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1275'. [ 451.545060][ T9989] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1275'. [ 451.564000][ T9989] netlink: 'syz.1.1275': attribute type 5 has an invalid length. [ 451.574374][ T9976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1275'. [ 451.590629][ T9989] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1275'. [ 451.669133][ T9993] netlink: 'syz.1.1279': attribute type 15 has an invalid length. [ 451.698632][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1279'. [ 451.823987][ T9998] netlink: 'syz.4.1281': attribute type 15 has an invalid length. [ 451.843502][T10000] loop1: detected capacity change from 0 to 512 [ 451.855476][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1281'. [ 451.890949][T10000] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 451.975616][T10006] netlink: 'syz.4.1283': attribute type 15 has an invalid length. [ 451.990697][T10000] ext4 filesystem being mounted at /247/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.024884][T10006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1283'. [ 452.081919][T10009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1284'. [ 452.133911][T10010] SELinux: policydb magic number 0x8 does not match expected magic number 0xf97cff8c [ 452.197465][T10010] SELinux: failed to load policy [ 452.249155][T10013] loop4: detected capacity change from 0 to 1024 [ 452.266517][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.316123][T10013] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 452.324254][T10013] System zones: 0-1, 3-8 [ 452.370192][T10017] validate_nla: 1 callbacks suppressed [ 452.370213][T10017] netlink: 'syz.1.1286': attribute type 15 has an invalid length. [ 452.386177][T10013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 452.440423][T10017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1286'. [ 452.456090][T10013] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 452.537238][T10021] netlink: 'syz.1.1287': attribute type 15 has an invalid length. [ 452.562215][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1287'. [ 452.644461][T10024] loop1: detected capacity change from 0 to 512 [ 452.680972][T10024] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1288: invalid indirect mapped block 256 (level 2) [ 452.717855][T10024] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 452.718943][T10024] EXT4-fs (loop1): 2 truncates cleaned up [ 452.728236][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 452.728254][ C0] EXT4-fs (loop1): initial error at time 1772942525: ext4_free_branches:1023: inode 11 [ 452.728286][ C0] EXT4-fs (loop1): last error at time 1772942525: ext4_free_branches:1023: inode 11 [ 452.799874][T10024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.049901][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 453.223170][T10024] gretap0: entered promiscuous mode [ 453.384815][ T28] audit: type=1400 audit(1772942525.774:1471): avc: denied { bind } for pid=10040 comm="syz.4.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 454.128412][T10050] netlink: 'syz.3.1293': attribute type 15 has an invalid length. [ 454.191726][T10052] netlink: 'syz.3.1294': attribute type 15 has an invalid length. [ 454.215550][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.242727][T10054] netlink: 'syz.4.1295': attribute type 15 has an invalid length. [ 454.303938][T10057] loop1: detected capacity change from 0 to 512 [ 454.330736][T10059] netlink: 'syz.3.1297': attribute type 15 has an invalid length. [ 454.355144][T10057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.412379][T10057] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.616773][T10067] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 454.801661][T10057] SELinux: failed to load policy [ 454.854655][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.955412][T10072] netlink: 'syz.4.1298': attribute type 15 has an invalid length. [ 455.256278][T10079] loop4: detected capacity change from 0 to 512 [ 455.328976][T10079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 455.364831][ T28] audit: type=1326 audit(1772942527.814:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 455.422037][T10079] EXT4-fs (loop4): 1 truncate cleaned up [ 455.453476][T10079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.466910][ T28] audit: type=1326 audit(1772942527.814:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 455.562468][T10088] netlink: 'syz.1.1304': attribute type 15 has an invalid length. [ 456.383719][ T28] audit: type=1326 audit(1772942527.814:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 456.418227][ T28] audit: type=1326 audit(1772942527.814:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 456.523238][ T28] audit: type=1326 audit(1772942527.814:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 456.606760][T10098] __nla_validate_parse: 7 callbacks suppressed [ 456.606781][T10098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1305'. [ 456.639935][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.657938][ T28] audit: type=1326 audit(1772942527.814:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 456.814945][T10102] netlink: 'syz.2.1307': attribute type 15 has an invalid length. [ 457.164809][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1307'. [ 457.212052][T10098] bond4: entered promiscuous mode [ 457.217295][T10098] bond4: entered allmulticast mode [ 457.222737][T10098] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.230724][ T28] audit: type=1326 audit(1772942527.814:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 457.366848][T10120] netlink: 'syz.2.1310': attribute type 15 has an invalid length. [ 457.378827][T10118] loop4: detected capacity change from 0 to 512 [ 457.399499][ T28] audit: type=1326 audit(1772942527.814:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 457.406333][T10120] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1310'. [ 457.443772][ T28] audit: type=1326 audit(1772942527.814:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10082 comm="syz.3.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f6d1517c799 code=0x7ffc0000 [ 457.637405][T10118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.742124][T10127] netlink: 'syz.1.1312': attribute type 15 has an invalid length. [ 457.831422][T10118] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.856806][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'. [ 458.155789][T10137] loop1: detected capacity change from 0 to 512 [ 458.194203][T10118] SELinux: failed to load policy [ 458.218120][T10138] siw: device registration error -23 [ 458.251647][T10137] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 458.285258][T10137] EXT4-fs (loop1): 1 truncate cleaned up [ 458.292347][T10137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.377750][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.596556][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 458.596573][ T28] audit: type=1400 audit(1772942531.054:1510): avc: denied { create } for pid=10136 comm="syz.1.1315" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 458.665223][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.987886][T10152] netlink: 'syz.2.1320': attribute type 15 has an invalid length. [ 459.094048][T10152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1320'. [ 459.352667][T10159] netlink: 'syz.2.1321': attribute type 15 has an invalid length. [ 459.384462][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1321'. [ 459.493484][T10163] raw_sendmsg: syz.2.1322 forgot to set AF_INET. Fix it! [ 459.554994][T10157] loop1: detected capacity change from 0 to 1024 [ 459.642600][T10157] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 459.687432][T10157] System zones: 0-1, 3-36 [ 459.735199][T10157] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.1319: bad orphan inode 134217728 [ 459.783812][T10157] loop1: lost filesystem error report for type 5 error -117 [ 459.784692][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 459.798468][ C1] EXT4-fs (loop1): initial error at time 1772942532: ext4_orphan_get:1417 [ 459.807023][ C1] EXT4-fs (loop1): last error at time 1772942532: ext4_orphan_get:1417 [ 459.834273][T10157] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.142340][T10172] netlink: 'syz.3.1325': attribute type 15 has an invalid length. [ 460.171188][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1325'. [ 460.198151][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.595632][T10199] netlink: 'syz.3.1331': attribute type 15 has an invalid length. [ 461.788914][T10199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 461.834468][T10206] netlink: 'syz.3.1333': attribute type 15 has an invalid length. [ 461.871698][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 461.980540][T10211] netlink: 'syz.3.1334': attribute type 15 has an invalid length. [ 462.005412][T10211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1334'. [ 462.177965][ T28] audit: type=1400 audit(1772942534.634:1511): avc: denied { ioctl } for pid=10216 comm="syz.6.1336" path="socket:[24636]" dev="sockfs" ino=24636 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 462.295089][ T28] audit: type=1400 audit(1772942534.634:1512): avc: denied { write } for pid=10216 comm="syz.6.1336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 462.462502][T10220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1338'. [ 462.587115][T10224] loop4: detected capacity change from 0 to 128 [ 462.624000][ T28] audit: type=1400 audit(1772942535.074:1513): avc: denied { bind } for pid=10221 comm="syz.2.1337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 462.665004][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 462.867422][T10229] netlink: 'syz.2.1339': attribute type 15 has an invalid length. [ 462.894778][T10229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1339'. [ 463.185199][ T28] audit: type=1400 audit(1772942535.634:1514): avc: denied { name_bind } for pid=10232 comm="syz.6.1341" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 463.200274][T10235] xt_limit: Overflow, try lower: 65536/2147483648 [ 463.388711][ T28] audit: type=1326 audit(1772942535.844:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10243 comm="syz.2.1343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42c922c799 code=0x0 [ 463.456830][T10247] loop4: detected capacity change from 0 to 1024 [ 463.463448][T10246] netlink: 'syz.6.1344': attribute type 15 has an invalid length. [ 463.473263][T10246] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1344'. [ 463.489464][T10247] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 463.497754][T10247] System zones: 0-1, 3-8 [ 463.520522][T10247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 463.545467][T10253] netlink: 'syz.6.1345': attribute type 15 has an invalid length. [ 463.593960][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1345'. [ 463.603054][T10247] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.818289][ T28] audit: type=1400 audit(1772942536.274:1516): avc: denied { getopt } for pid=10243 comm="syz.2.1343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.170366][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 464.608444][T10271] netlink: 'syz.6.1350': attribute type 15 has an invalid length. [ 464.617433][T10271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1350'. [ 464.696238][T10272] dummy0 speed is unknown, defaulting to 1000 [ 464.703035][T10272] xfrm0 speed is unknown, defaulting to 1000 [ 464.838896][T10272] lo speed is unknown, defaulting to 1000 [ 465.105615][T10273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1349'. [ 466.235157][T10282] netlink: 'syz.6.1352': attribute type 10 has an invalid length. [ 466.243096][T10282] macvlan1: entered allmulticast mode [ 466.248717][T10282] veth1_vlan: entered allmulticast mode [ 466.290853][T10282] macvlan1: entered promiscuous mode [ 466.305594][T10282] team0: Port device macvlan1 added [ 467.562639][T10295] netlink: 'syz.4.1356': attribute type 15 has an invalid length. [ 467.570531][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1356'. [ 468.815357][T10316] loop4: detected capacity change from 0 to 256 [ 470.795384][T10327] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 470.805516][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 470.826462][T10327] bond2: entered promiscuous mode [ 470.843445][T10327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 470.926507][T10327] vlan3: entered promiscuous mode [ 470.937930][T10327] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 470.981260][T10329] bridge1: entered promiscuous mode [ 471.005444][T10329] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 471.111007][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1363'. [ 471.316808][T10349] netlink: 'syz.1.1371': attribute type 15 has an invalid length. [ 471.324953][T10349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1371'. [ 471.474231][T10352] bridge_slave_0: left allmulticast mode [ 471.479960][T10352] bridge_slave_0: left promiscuous mode [ 471.485775][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.242033][T10352] bond0: (slave bridge_slave_1): Releasing backup interface [ 472.262411][T10352] bond0: (slave bond_slave_0): Releasing backup interface [ 472.273886][T10352] bond0: (slave bond_slave_1): Releasing backup interface [ 472.285014][T10352] team0: Port device team_slave_0 removed [ 472.293140][T10352] team0: Port device team_slave_1 removed [ 472.299431][T10352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.310259][T10352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.318508][T10352] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.611958][T10362] 9pnet_fd: p9_fd_create_unix (10362): problem connecting socket: ./file0: -2 [ 472.694489][T10359] bridge_slave_0: left allmulticast mode [ 472.958923][T10359] bridge_slave_0: left promiscuous mode [ 473.206904][T10371] loop4: detected capacity change from 0 to 512 [ 473.264257][T10371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.276929][T10371] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.352617][T10361] netlink: 'syz.6.1374': attribute type 13 has an invalid length. [ 473.385159][T10359] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.475694][T10359] bridge_slave_1: left allmulticast mode [ 473.496508][T10359] bridge_slave_1: left promiscuous mode [ 473.515505][T10359] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.547009][T10359] bond0: (slave bond_slave_0): Releasing backup interface [ 473.581320][T10359] bond0: (slave bond_slave_1): Releasing backup interface [ 473.670268][T10359] team0: Port device team_slave_0 removed [ 473.694317][T10359] team0: Port device team_slave_1 removed [ 473.705713][T10359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.713247][T10359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.722090][T10359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.729635][T10359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.738922][T10359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 473.792505][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.799424][T10361] bridge_slave_1: entered promiscuous mode [ 473.835535][T10361] bridge0: port 3(vlan2) entered blocking state [ 473.841910][T10361] bridge0: port 3(vlan2) entered forwarding state [ 473.850993][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.862293][T10387] loop1: detected capacity change from 0 to 512 [ 473.862635][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.877874][T10361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 473.894636][T10387] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1378: inode has both inline data and extents flags [ 473.923838][T10387] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 473.924875][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 473.941936][ C0] EXT4-fs (loop1): initial error at time 1772942802: ext4_orphan_get:1391: inode 15 [ 473.952615][ C0] EXT4-fs (loop1): last error at time 1772942802: ext4_orphan_get:1391: inode 15 [ 473.963191][T10387] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1378: couldn't read orphan inode 15 (err -117) [ 473.975368][T10387] loop1: lost filesystem error report for type 5 error -117 [ 473.976005][T10387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.009173][T10390] loop4: detected capacity change from 0 to 512 [ 474.029801][T10384] bridge_slave_1: entered promiscuous mode [ 474.037914][T10384] bridge_slave_1: entered allmulticast mode [ 474.075621][ T3417] Process accounting resumed [ 474.080619][T10390] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 474.090131][T10384] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 474.125793][T10390] EXT4-fs (loop4): 1 truncate cleaned up [ 474.142415][T10390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.169083][T10397] pimreg: entered allmulticast mode [ 474.175471][T10397] pimreg: left allmulticast mode [ 474.697640][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.406614][T10418] blktrace: Concurrent blktraces are not allowed on loop12 [ 475.643905][T10422] netlink: 'syz.3.1387': attribute type 15 has an invalid length. [ 475.652082][T10422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1387'. [ 476.347190][T10431] dummy0 speed is unknown, defaulting to 1000 [ 476.363875][T10431] xfrm0 speed is unknown, defaulting to 1000 [ 477.101430][T10431] lo speed is unknown, defaulting to 1000 [ 477.329848][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.525720][T10407] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1384'. [ 477.549571][T10407] gretap0: entered promiscuous mode [ 477.572033][ T28] audit: type=1400 audit(1772942806.024:1517): avc: denied { create } for pid=10447 comm="syz.3.1395" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 477.821071][T10451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1393'. [ 480.177577][T10467] loop1: detected capacity change from 0 to 256 [ 480.468020][T10469] netlink: 'syz.2.1399': attribute type 15 has an invalid length. [ 480.764217][T10473] loop4: detected capacity change from 0 to 1024 [ 480.771985][T10469] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 480.865841][T10473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 480.907275][T10473] System zones: 0-1, 3-8 [ 480.936359][T10473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 480.989233][T10473] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.216638][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 483.073901][T10501] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 483.463714][T10512] netlink: 'syz.3.1413': attribute type 15 has an invalid length. [ 483.622870][T10512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1413'. [ 483.777346][T10524] netlink: 'syz.4.1412': attribute type 15 has an invalid length. [ 483.807217][T10524] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1412'. [ 483.977118][T10532] loop4: detected capacity change from 0 to 1024 [ 484.018590][T10532] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 484.054558][T10532] System zones: 0-1, 3-8 [ 484.073738][T10532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 484.139280][T10532] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.779870][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 485.227187][T10555] siw: device registration error -23 [ 485.252355][T10555] loop4: detected capacity change from 0 to 512 [ 486.697096][T10559] netlink: 'syz.2.1424': attribute type 15 has an invalid length. [ 486.724144][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 486.888175][ T28] audit: type=1326 audit(1772942815.344:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.005044][ T28] audit: type=1326 audit(1772942815.374:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.053102][ T28] audit: type=1326 audit(1772942815.374:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.094065][ T28] audit: type=1326 audit(1772942815.374:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.176560][T10571] netlink: 'syz.6.1429': attribute type 63 has an invalid length. [ 487.184473][T10571] lo: entered promiscuous mode [ 487.190151][T10571] lo: entered allmulticast mode [ 487.233116][ T28] audit: type=1326 audit(1772942815.384:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.257509][ T28] audit: type=1326 audit(1772942815.384:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.282237][ T28] audit: type=1326 audit(1772942815.384:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.307439][ T28] audit: type=1326 audit(1772942815.384:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.331965][ T28] audit: type=1326 audit(1772942815.384:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.356155][ T28] audit: type=1326 audit(1772942815.384:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="syz.1.1427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49bb79c799 code=0x7ffc0000 [ 487.423448][T10573] netlink: 'syz.6.1430': attribute type 15 has an invalid length. [ 487.434058][T10573] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1430'. [ 487.956675][T10578] loop4: detected capacity change from 0 to 512 [ 488.491489][T10578] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1426: invalid indirect mapped block 256 (level 2) [ 488.846119][T10578] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 488.846789][T10578] EXT4-fs (loop4): 2 truncates cleaned up [ 488.855986][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 488.856018][ C0] EXT4-fs (loop4): initial error at time 1772942817: ext4_free_branches:1023: inode 11 [ 488.856050][ C0] EXT4-fs (loop4): last error at time 1772942817: ext4_free_branches:1023: inode 11 [ 488.994931][T10578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.032081][T10594] tipc: Enabled bearer , priority 0 [ 489.072438][T10594] syzkaller0: entered promiscuous mode [ 489.210729][T10594] syzkaller0: entered allmulticast mode [ 489.283125][T10591] tipc: Resetting bearer [ 489.313339][T10591] tipc: Disabling bearer [ 489.386179][T10602] netlink: 'syz.3.1436': attribute type 15 has an invalid length. [ 489.394030][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1436'. [ 489.567690][T10578] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1426'. [ 489.616543][T10585] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 489.642467][T10612] xt_limit: Overflow, try lower: 65536/2147483648 [ 489.665010][T10578] gretap0: entered promiscuous mode [ 489.721751][T10614] siw: device registration error -23 [ 490.179671][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.358687][T10621] loop4: detected capacity change from 0 to 512 [ 490.460116][T10621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 490.555822][T10621] EXT4-fs (loop4): 1 truncate cleaned up [ 490.572520][T10621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.653248][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1442'. [ 490.663178][T10639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1442'. [ 490.713041][T10639] geneve2: entered promiscuous mode [ 490.718857][T10639] geneve2: entered allmulticast mode [ 490.747727][ T83] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.777579][ T83] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.874056][ T83] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.959696][ T83] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.715608][T10647] tipc: Enabling of bearer rejected, failed to enable media [ 492.206021][ T28] kauditd_printk_skb: 176 callbacks suppressed [ 492.206037][ T28] audit: type=1326 audit(1772942820.524:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10641 comm="syz.6.1445" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa36c799 code=0x0 [ 492.345672][T10650] bond0: (slave bridge_slave_1): Releasing backup interface [ 492.362928][T10650] bridge_slave_1: left allmulticast mode [ 492.369407][T10650] bridge_slave_1: left promiscuous mode [ 492.386925][T10650] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.558574][T10631] loop1: detected capacity change from 0 to 2048 [ 492.807164][T10631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.351410][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.547460][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.553854][T10674] netlink: 'syz.1.1461': attribute type 15 has an invalid length. [ 494.578685][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 494.700367][T10676] loop4: detected capacity change from 0 to 1024 [ 494.738515][T10676] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 494.748408][T10676] System zones: 0-1, 3-36 [ 494.759742][T10680] xt_limit: Overflow, try lower: 65536/2147483648 [ 494.768379][T10676] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1450: bad orphan inode 134217728 [ 494.794961][T10676] loop4: lost filesystem error report for type 5 error -117 [ 494.815024][T10676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.837395][T10681] loop1: detected capacity change from 0 to 4096 [ 494.844262][T10681] EXT4-fs: Ignoring removed bh option [ 494.858896][T10681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.880561][T10681] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.928449][T10681] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.981674][T10681] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.034746][T10683] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1451'. [ 495.049031][T10683] gretap0: entered promiscuous mode [ 495.059524][T10681] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.160441][ T5132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.184447][ T5132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.211859][ T5132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.234918][ T5132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.294374][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.608600][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.405433][T10709] siw: device registration error -23 [ 496.411716][T10709] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 496.427992][T10709] loop1: detected capacity change from 0 to 512 [ 496.718815][ T3001] ================================================================== [ 496.727015][ T3001] BUG: KCSAN: data-race in d_delete / path_lookupat [ 496.733673][ T3001] [ 496.736133][ T3001] read-write to 0xffff888100778840 of 4 bytes by task 3307 on cpu 0: [ 496.744229][ T3001] d_delete+0xbe/0xe0 [ 496.748255][ T3001] d_delete_notify+0x32/0x100 [ 496.752957][ T3001] vfs_unlink+0x289/0x490 [ 496.757310][ T3001] filename_unlinkat+0x1e2/0x410 [ 496.762274][ T3001] __se_sys_unlink+0x2b/0xe0 [ 496.766889][ T3001] __x64_sys_unlink+0x1f/0x30 [ 496.771586][ T3001] x64_sys_call+0x2eb6/0x3020 [ 496.776301][ T3001] do_syscall_64+0x12c/0x370 [ 496.780913][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.786829][ T3001] [ 496.789174][ T3001] read to 0xffff888100778840 of 4 bytes by task 3001 on cpu 1: [ 496.796739][ T3001] path_lookupat+0x1d8/0x500 [ 496.801358][ T3001] filename_lookup+0x190/0x390 [ 496.806153][ T3001] do_readlinkat+0x74/0x2f0 [ 496.810724][ T3001] __x64_sys_readlink+0x47/0x60 [ 496.815604][ T3001] x64_sys_call+0x2b51/0x3020 [ 496.820312][ T3001] do_syscall_64+0x12c/0x370 [ 496.824919][ T3001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.830835][ T3001] [ 496.833165][ T3001] value changed: 0x00300180 -> 0x00004080 [ 496.838898][ T3001] [ 496.841237][ T3001] Reported by Kernel Concurrency Sanitizer on: [ 496.847419][ T3001] CPU: 1 UID: 0 PID: 3001 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 496.857862][ T3001] Tainted: [W]=WARN [ 496.861683][ T3001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.871749][ T3001] ================================================================== [ 496.974228][T10716] loop1: detected capacity change from 0 to 512 [ 497.022501][T10716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 497.100327][T10716] EXT4-fs (loop1): 1 truncate cleaned up [ 497.125412][T10716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.780876][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.