last executing test programs: 3m32.070426822s ago: executing program 32 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r1, 0x25, 0x8, @val=@iter={0x0}}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfd, 0x7fff0003}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2m51.713561204s ago: executing program 33 (id=1019): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = syz_io_uring_setup(0x5ca0, &(0x7f00000000c0)={0x0, 0x79bf, 0x1, 0x8000, 0xc00251}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x33, 0x4000, @fd_index=0x1, 0x5, 0x0, 0x0, 0x2, 0x1, {0x2}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0x0, &(0x7f0000000040)={0x4f, 0x2, 0x0, 0x7}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfda7, &(0x7f000000cf3d)=""/195, 0x0, 0x49, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x48) 2m48.257190655s ago: executing program 34 (id=1115): setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000000)={0x4, 0x3}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0) 2m45.822906265s ago: executing program 35 (id=1180): r0 = msgget$private(0x0, 0x421) msgsnd(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="0200e9ea"], 0x8, 0x0) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="03"], 0x8, 0x800) msgrcv(r0, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573682c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c756e695f786c6174653d302c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c00a56dc300a96c9b20f3fabdcb10cad696323259cc0500e5f91620d7b9dc000000000057c51b98cfb3b59f8db941abb77112000000b8ff"], 0x1, 0x250, &(0x7f0000000b80)="$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") truncate(&(0x7f0000002540)='./file2\x00', 0xe) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x40047211, &(0x7f00000002c0)) 2m34.676888019s ago: executing program 36 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 2m23.960170819s ago: executing program 37 (id=1571): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000540), 0x4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(0x0, 0x21) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0x7d6, 0x5}) 2m15.836073529s ago: executing program 38 (id=1635): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') getdents(r2, &(0x7f0000000240)=""/58, 0x3a) getdents(r2, 0xffffffffffffffff, 0x5a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}]}, &(0x7f0000000180)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) 1m54.393538358s ago: executing program 9 (id=1951): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m54.093873175s ago: executing program 9 (id=1954): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m53.019414697s ago: executing program 9 (id=1978): r0 = socket(0x10, 0x803, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfffffffc) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r1}, 0x38) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x1, 0x8061, 0x0) 1m52.787485811s ago: executing program 9 (id=1979): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x9}, 0x814, 0x0, 0x11000, 0x0, 0x2, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) timerfd_create(0x7, 0x80000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="e779a888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r8, @ANYBLOB="2e30d69b474aab"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x48880}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1c1202, 0x181) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r10, 0x7fffffffffffffff, 0x0) write(r9, &(0x7f0000004200), 0x0) sendfile(r9, r1, 0x0, 0x7ffff000) socket$can_bcm(0x1d, 0x2, 0x2) 1m52.313841708s ago: executing program 9 (id=1984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1m52.052947133s ago: executing program 9 (id=1992): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x143b7e, 0x1, @perf_bp={0x0, 0x2}, 0x961b, 0x800000, 0x43a1bd74, 0x2, 0x9, 0x9, 0xfffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x11, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x213e, 0x4) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="d479183d7d53f181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x20044811) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0xffffffffffffff4f}, 0xfffffffd}, {{&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000680)=""/242, 0xf2}, 0x800}], 0x2, 0x40010060, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, '4k\x00'}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x2, 0xa7d4, 0x2df}) 1m52.052773823s ago: executing program 39 (id=1992): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x143b7e, 0x1, @perf_bp={0x0, 0x2}, 0x961b, 0x800000, 0x43a1bd74, 0x2, 0x9, 0x9, 0xfffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x11, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x213e, 0x4) sendmmsg(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x7ffe}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000480)="d479183d7d53f181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x20044811) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0xffffffffffffff4f}, 0xfffffffd}, {{&(0x7f0000000080)=@vsock, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000000680)=""/242, 0xf2}, 0x800}], 0x2, 0x40010060, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0xfffff2d4, 0x200ffffe, 0x7, 0xffffffff, 0x1, '4k\x00'}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x2, 0xa7d4, 0x2df}) 1m10.712155163s ago: executing program 4 (id=2568): r0 = socket$pptp(0x18, 0x1, 0x2) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) r2 = syz_open_pts(r1, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000300)={0xff, 0x7, 0xff, 0x3f, 0x1, "ab5aa80d00", 0x1ff, 0x7}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000008095"], &(0x7f0000000040)='GPL\x00', 0x5, 0xfec, &(0x7f0000001e00)=""/4076, 0x0, 0x6}, 0x94) 1m10.656788066s ago: executing program 4 (id=2569): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 1m10.59407216s ago: executing program 1 (id=2570): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000004d46c000000ac1414a700000000000000000000000000000000000000009201000000000000060000000000100000000000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffff2000ffffff00000000000000000200000000000000feffffffffffffff02000000fcffffff400000002abd700003350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x4, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x40000000) ioprio_set$uid(0x0, 0x0, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x88}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x4, r6}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsmount(r7, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYRES32=r3], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fsmount(r7, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000012006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040012000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5500f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) 1m10.196574612s ago: executing program 4 (id=2573): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a000000"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000001a80001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000110000000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000010000000000000000000000003c00000000000000020008002c0013"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) 1m10.184303203s ago: executing program 1 (id=2574): r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfffffffffffffffb) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) write$binfmt_aout(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="08014001480300000b020000c70f0000a30000000080000000000000000000008df410495720a179cbcd9baf3e2a2de008e67d26c9138c1549a76f78154347f76b49d81783f6d520067c0eadf91e6093c6814af1ac61d6824301a865a9f6a9834b3ce1c7d5218fa3dd00"/617], 0x26d) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000003000000ff00000042"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r6}, 0x38) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd090387237ee530000000"], 0xfdef) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) 1m10.07128689s ago: executing program 4 (id=2576): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000249000/0x1000)=nil, &(0x7f00002ad000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00004dc000/0x2000)=nil, &(0x7f00001af000/0x4000)=nil, &(0x7f00006f7000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56a9, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) setresuid(0x0, 0xee00, 0x0) r2 = io_uring_setup(0x4b63, &(0x7f0000000300)={0x0, 0xbfffeffb, 0x10000, 0x0, 0x3cf}) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xc054) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000000050005000a000000057747d98fc38d0001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f"], 0x4c}}, 0x0) syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0x40f7b7, 0x10, 0x1, 0x287}, &(0x7f00000007c0)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x1a, 0x4) socket$inet(0x2, 0x80000, 0x9) 1m9.798420476s ago: executing program 4 (id=2579): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = socket$netlink(0x10, 0x3, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x1, r4, 0x0}]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100007"], 0x110}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x408}}, 0x20}, 0x1, 0x200000000000000, 0x0, 0x4}, 0x40cc040) 1m9.630358295s ago: executing program 4 (id=2584): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x100004, 0x12) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000200)) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x6, 0x3) r6 = dup(r3) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 1m9.406902799s ago: executing program 1 (id=2589): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x150, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x2}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x0, 0x40000000000004, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f, 0xffffffffffffffff}, {0x0, 0x7, 0xcc, 0x4}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x60, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xa0, 0x80, "92ef85d6e6f036131ca9bd79ef58d999d130683e"}}]}, 0x150}}, 0x20040084) r2 = getpgrp(0x0) capset(&(0x7f0000000380)={0x20071026, r2}, &(0x7f00000003c0)={0x9, 0x0, 0x4, 0x2006, 0xfffffffb}) pwritev2(r0, &(0x7f0000000340)=[{&(0x7f0000000940)="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", 0x1000}], 0x1, 0x0, 0x7, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f2, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xd0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x4, 0x2, 0x5], 0x2, 0x7}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x6, 0x7], 0x3}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x8}}}}, {{@ip={@multicast2, @broadcast, 0x0, 0xffffff00, 'veth0_virt_wifi\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0xc, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1m9.330614052s ago: executing program 1 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x44fc2, 0x1) close(r1) r2 = socket$inet6(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") creat(&(0x7f00000007c0)='./bus\x00', 0x182) (async) r3 = creat(&(0x7f00000007c0)='./bus\x00', 0x182) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000740)={0xc, r3, 0x6, 0x0, 0xa697, 0x3}) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) (async) mlock(&(0x7f0000325000/0x3000)=nil, 0x3000) 1m9.19852233s ago: executing program 1 (id=2593): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) (async) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in6=@local}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000000c0)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28) (async) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f0000000280)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 64) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)=""/199, 0xc7}], 0x1}, 0xfffffffd}], 0x1, 0x40000102, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="700000001900010000000000000000001d01000005000d0001000000150003000000000000000000f02d3f6aa0f998570000000015000200"], 0x70}}, 0x0) (async) r6 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) 1m9.061945428s ago: executing program 3 (id=2595): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000001a00850000000c000000b70700000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) 1m9.059494208s ago: executing program 3 (id=2596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="20f6c734e3d81107", 0x8) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x4015, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8080c61) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="2100000007000000080000006e00000005000000033efa52c9f808", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="20010000", @ANYRES16=r5, @ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000ac0), 0x2}, 0x100e64, 0xc7c, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9c7b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f00000006c0)="cb030000004c0b24676c6c71ae37efcedaf46242309766deb4e793f90000000000fb000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f3df056e4984e8b05ed2c4a920711fb4154b544672fc569e52bca80efaa99b0ea491c8999997c97c20517071900fdb72c92faadd3c304d838b1771aa94e1ef38983ac314bf11275d8b5099110a730139be654440b72eaf6c035dec41a", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000e00)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d802d9026ae0c11744eb1525c5195fd215d7a432497f35c2f2cfcd2b6336b26dfef0cb968c910ea2af5cdd4d58cc08535d5514", 0x3, 0x0, 0x3ff}, 0x23) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$loop(&(0x7f0000002100), 0x5, 0x200002) fstat(r7, &(0x7f0000002180)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000000100)) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000100)=0x892c327) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000440)={0x185800, 0x60, 0x8}, 0x18) pwritev(r9, &(0x7f0000000780)=[{&(0x7f0000000bc0)="24fec714e5ef0c6fb572f6739c3fe902e248b2ffec0b7839d342189827e048b738c2aed95ec917cbefa9dc54521c8da17b318838beae1e740d3b7333550a2bc775479e9a9d49115fa5b1edef476422d370b4668260106a92131308d971a17df911701c50b582f0bc238e05007016d489ff2afe8f962d98ebf2faff38919f22f744a814ce0e4460038931fb690a6d0860c26ff582e7cf30a3c0b5808965a225e55235c1ba152e6cdff91707c6443fae3a1f6c393bf26fa46ad72a429063f8396087e0abe6c312bfe2b27da6d10b4e75567f8bea0cd623464ad01fa2fd83b22ef98cf016691ec8", 0xe6}], 0x1, 0xffffffff, 0x3) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000009dbdf2508000100020000000800010002000000080001000000000008000100010000000800010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendto$inet6(r0, &(0x7f0000000400)="b0f1c3f43a1a3fd9825e0a677a", 0xd, 0x400c0d5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0xa2d7}, 0x1c) 1m9.03433529s ago: executing program 3 (id=2598): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)="ca", 0x1}], 0x2, 0x0) r3 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mq_timedreceive(r3, 0x0, 0x0, 0x200000000000000, 0x0) fcntl$setpipe(r2, 0x407, 0x5) syz_read_part_table(0x5ba, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) pipe2(&(0x7f0000001180), 0x4000) (async) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000000)='V', 0x1}, {&(0x7f0000000040)="ca", 0x1}], 0x2, 0x0) (async) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) (async) mq_timedreceive(r3, 0x0, 0x0, 0x200000000000000, 0x0) (async) fcntl$setpipe(r2, 0x407, 0x5) (async) syz_read_part_table(0x5ba, &(0x7f00000005c0)="$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") (async) 1m8.728100138s ago: executing program 3 (id=2600): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r2) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000805}, 0x804) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffa, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0x8}, r1, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f0000000180)='./file3\x00', &(0x7f0000000a00)='./bus/file0\x00') 1m8.718418748s ago: executing program 1 (id=2602): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b00040000000500050000000000"], 0x3c}}, 0x20000084) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r8 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r10, 0x4028}], 0x1, 0xffffffffffbffff8) dup2(r9, r10) timer_delete(r7) fcntl$setown(r9, 0x8, r8) tkill(r8, 0x13) socket(0x1, 0x4, 0x2) r11 = socket(0x10, 0x803, 0xe7d) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100037040000f600", @ANYRES32=r12, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r11) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="07910000", @ANYRES16=r13, @ANYBLOB="000127bd7000ffdbdf25140000000800170005000000080015000200000005000c0000000000080014000700000005000b000100000008000d000100000008000e00040000000800150003000000080013000d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 1m8.626232444s ago: executing program 40 (id=2602): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b00040000000500050000000000"], 0x3c}}, 0x20000084) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r6 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r6}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) r8 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r9, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r10, 0x4028}], 0x1, 0xffffffffffbffff8) dup2(r9, r10) timer_delete(r7) fcntl$setown(r9, 0x8, r8) tkill(r8, 0x13) socket(0x1, 0x4, 0x2) r11 = socket(0x10, 0x803, 0xe7d) sendmsg$SMC_PNETID_GET(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000100037040000f600", @ANYRES32=r12, @ANYBLOB="01f5050000000000300012800b00010067656e657665000020000280050004000100000014000700fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r11) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="07910000", @ANYRES16=r13, @ANYBLOB="000127bd7000ffdbdf25140000000800170005000000080015000200000005000c0000000000080014000700000005000b000100000008000d000100000008000e00040000000800150003000000080013000d000000"], 0x5c}, 0x1, 0x0, 0x0, 0x48000}, 0x1) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @loopback}}}], 0x20}}], 0x1, 0x80) 1m8.045863167s ago: executing program 3 (id=2608): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x84, 0x74, 0x0, 0x0, @time={0xe, 0x425}, {0xfd}, {0x7}, @raw32={[0x2, 0x6, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @time={0x0, 0x3}, {0xfd}, {0x3}, @note={0x81}}, {0x6, 0x7, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0x1, 0x2}, @connect={{0xf, 0x3}, {0x6, 0xb}}}, {0xf7, 0xf1, 0x0, 0x1, @tick, {0x70, 0x3c}, {0x1}, @quote={{0x5, 0x6}, 0x6}}], 0x70) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {}, {}, @result}], 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x78, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2243}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xef0911e}]}]}, 0x78}}, 0x40001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newnexthop={0x38, 0x68, 0x1, 0x70bd2a, 0x7ffffffc, {}, [@NHA_GROUP={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0x5}}, @NHA_ID={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1m7.785971692s ago: executing program 3 (id=2611): syz_read_part_table(0x1054, &(0x7f00000004c0)="$eJzsz8GJAjEYBeAXZnczuexOB+vFNrxagfUodmELlmQzIxkRpgER4fsOCXmB9/OHt2olSVkFU12u+nwPy7ndfeernJL/HDPP9TI9fnvUzX/D2Htu+3ZuydiS/CT5XTWXntRsVtMO15cuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4h4AAP//6BkJCQ==") r0 = open(&(0x7f0000000400)='./file0\x00', 0x1e7e43, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x5}, 0x100, 0x4, 0x8406, 0x5, 0x1, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x47}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x3, 0x2) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26070080) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x6, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1m7.785298803s ago: executing program 41 (id=2611): syz_read_part_table(0x1054, &(0x7f00000004c0)="$eJzsz8GJAjEYBeAXZnczuexOB+vFNrxagfUodmELlmQzIxkRpgER4fsOCXmB9/OHt2olSVkFU12u+nwPy7ndfeernJL/HDPP9TI9fnvUzX/D2Htu+3ZuydiS/CT5XTWXntRsVtMO15cuBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf4h4AAP//6BkJCQ==") r0 = open(&(0x7f0000000400)='./file0\x00', 0x1e7e43, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x5}, 0x100, 0x4, 0x8406, 0x5, 0x1, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x47}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xa) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x7c00, 0x3, 0x2) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x26070080) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x6, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 54.525881548s ago: executing program 42 (id=2584): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x100004, 0x12) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x20400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000200)) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet6(0xa, 0x6, 0x3) r6 = dup(r3) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 28.53771238s ago: executing program 0 (id=3108): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff81}, {0x7, 0x3, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200410d4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r7, 0x3b}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="0f63ef32c51837473b00008a6fc13029c1190cdcb2853ae095c9769990faa7f80deb4a2df1755ead44b9b2a67e44d656b41118cac15a777fd0336b53dc80d7022cfeb3c2ff22c36960f50eb868bbca1e03f4207e18af7749a79470ed88c20c62c150e34b6fa725073f34941565b7ccd787fdb7946b76b0c814195201", 0x7c}], 0x1}, 0x4) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xee1) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x44, 0x0, r9, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x625, 0x4c1, 0xc1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) 28.175391962s ago: executing program 0 (id=3110): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000002f) getpid() renameat2(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x2) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f00000063c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x110, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x9}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}], 0x1, 0x20040000) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000200)={0x0, 0x6, 0x1ff}, 0x8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x27, 0x4, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r7, 0x0, 0x489, &(0x7f0000000280)={{0x3c, @empty, 0x4e20, 0x1, 'nq\x00', 0x11, 0xfffffffa, 0x72}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x2, 0x3, 0xb, 0x8}}, 0x44) r8 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_INGRESS_BLOCK={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 28.02606903s ago: executing program 0 (id=3112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 28.02510585s ago: executing program 0 (id=3114): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc00, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) read(r0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000180)={0xa, 0x8, '\x00', 0x0, &(0x7f0000000080)=[0x0]}) 27.989881562s ago: executing program 0 (id=3115): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x5}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x3ff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfff}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x9, 0x1563cd996}, 0x100410, 0x200, 0x6, 0x2, 0xd, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x1) mlockall(0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280), 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="280000000000000029000000020000006b"], 0x28}}], 0x1, 0x4000000) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r5, 0x540a, 0x3) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000180)={0x8000, 0xfff9, 0x68d}, 0x8) io_setup(0x6, &(0x7f0000001380)) 27.657160122s ago: executing program 0 (id=3125): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000000240)=@delchain={0xd04, 0x65, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xfff1}, {0xa, 0xffff}}, [@f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xffffffff, 0x7}, {0x8000, 0x1, 0x80000000}, 0x16, 0x17, 0x2}}]}}, @f_rsvp6={{0xa}, {0xc94, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1ffe6, 0x8}}, @TCA_RSVP_POLICE={0x824, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x2, 0x3ff, 0x3d, 0x2, 0xf7, 0x7, 0xffff7fff, 0xfffffff9, 0x80, 0x10, 0x8, 0xf90, 0xb4e, 0x9, 0x8, 0x9, 0x6, 0xffffffc0, 0x4, 0x101, 0x14c1, 0x1, 0x0, 0x80000001, 0x4, 0x1ff, 0x7, 0x0, 0xffff, 0x2, 0xff, 0x2, 0x3, 0xbb, 0x0, 0x4, 0x100, 0x7, 0x7, 0x61, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x4, 0xffff, 0x7fb4, 0x3, 0x0, 0x9, 0xd819, 0x0, 0x9, 0x80000001, 0x7, 0x4dbc263c, 0x336d, 0xfffffffb, 0x1, 0x2, 0x1, 0x1, 0x685c, 0x100, 0x3, 0x200, 0xb9, 0x1, 0x8000, 0xffffffff, 0x924, 0x1, 0x4, 0x4, 0x4, 0xfffffffb, 0xff, 0x2, 0x3, 0x405, 0x0, 0x1000, 0xffff, 0xb, 0xffffffff, 0x5, 0x6, 0x4, 0x3, 0x3, 0xb66, 0x7fff, 0x5, 0x4, 0xe2b, 0x3, 0x8, 0x400, 0x20c3, 0x9, 0x469, 0x4, 0x8, 0x2, 0xfffffffb, 0x5, 0x0, 0x7, 0xfc, 0x4, 0x4, 0x4410, 0x788, 0x4, 0x0, 0xfffffffa, 0x0, 0x40, 0x5, 0x0, 0x9, 0x8, 0x1, 0x7f, 0x8, 0x5e83, 0x9, 0x8001, 0x3, 0x2, 0x0, 0x9, 0x2, 0x8, 0x5, 0x8001, 0x7, 0xa61f, 0x800, 0x1ff, 0x3, 0x9, 0xfffffc01, 0x100, 0xc9e6, 0x2, 0x5, 0x200, 0x0, 0x0, 0x5, 0x6, 0x2, 0x200, 0x0, 0x0, 0x4, 0x1, 0x9, 0x2, 0xffff, 0x3, 0x12, 0x6, 0x0, 0x8, 0x7, 0x2, 0x1, 0x80000001, 0x100, 0x3, 0x101, 0x7fff, 0x6, 0x7, 0x2, 0x3, 0x2, 0x9, 0x4, 0x2, 0x3f26406, 0xa, 0x10001, 0x5, 0x9, 0x4, 0x10, 0x4, 0x2, 0x3, 0x1, 0x5, 0x6, 0x6, 0x4, 0xae26, 0x3697, 0x3, 0x1, 0x8001, 0x7, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x4, 0x7, 0xd1, 0x8, 0x5, 0x7, 0x2, 0x7fffffff, 0xfffffffe, 0xb, 0x7, 0xd, 0x8, 0x6, 0x1, 0xd, 0x3, 0x8, 0x2, 0x532, 0xffffff3e, 0x6, 0xff, 0x5b96000, 0x4, 0x1, 0x5, 0x5, 0x4, 0x4, 0x3, 0x70ea, 0x10, 0xffffffff, 0x100, 0x4, 0xd, 0x1, 0xfff, 0x0, 0x7fff, 0xae, 0x416efdef, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc9e5, 0x80000001, 0x101, 0x0, 0xa9, 0x7, 0x4, 0x94, 0x49b, 0x7ff, 0x1, 0x81, 0xb8, 0x8001, 0x10, 0x3, 0x4, 0x991, 0xfffffffd, 0x7ff, 0x6, 0x5, 0x4, 0x8001, 0x3, 0x7, 0x5, 0xced, 0xfffffc00, 0x6, 0x101, 0x7fff, 0x8, 0x7, 0x1, 0x3, 0xb, 0x0, 0xb, 0x8, 0x7, 0x8d2, 0x80, 0x47e, 0x4918, 0xc43, 0x80000001, 0x4, 0x8, 0xfffffff9, 0x3, 0x6dbb, 0x6, 0xfffffff8, 0xe2, 0x3, 0x7, 0x9, 0x4, 0x1, 0x3, 0x0, 0xf3523b20, 0x6, 0x0, 0x2, 0x2, 0x80000000, 0x21dce07, 0x3ff, 0x4, 0x0, 0x6, 0x9, 0x10, 0x10000, 0x5, 0x2, 0x3, 0xe51, 0x8, 0x7fff, 0x5, 0x6, 0x80, 0x50, 0x9, 0x40, 0x0, 0x575e, 0x400, 0x9, 0x5, 0x9, 0x0, 0x6, 0x5c, 0x2, 0x40, 0x6, 0x6, 0x401, 0x0, 0x0, 0x401, 0x0, 0xfffffff3, 0x2, 0x4f478, 0x2, 0x5, 0x401, 0x6, 0x2, 0x6, 0x400, 0xffffffff, 0x1000, 0x8, 0x2, 0x96f3, 0x1ff, 0x6, 0x6, 0xffffffff, 0x2, 0x1, 0x1000, 0x3, 0x6, 0x40008001, 0x1ff, 0x3, 0x4a, 0xa, 0x8, 0x400, 0xffffffff, 0x0, 0xa, 0x7, 0x50000, 0xb, 0x2, 0x834, 0x1, 0x9, 0x2, 0x1, 0x2, 0x3, 0xffffffff, 0x8, 0x7, 0x8, 0x38f04e17, 0x9, 0x5, 0x81, 0x0, 0xaa02, 0x0, 0xa2, 0x9, 0x7fff, 0x3, 0xc, 0xfffffffe, 0x6, 0xa6, 0xd, 0x3, 0x7, 0x2f, 0x7, 0xce, 0x4db4acbc, 0x9, 0x0, 0xb01, 0x40, 0x4, 0x599, 0x5, 0x8, 0x8, 0x5, 0x8, 0xff, 0x2, 0x101, 0x0, 0xd104, 0x7fff, 0x9, 0x9, 0x30, 0x5, 0x380, 0x9, 0x7, 0x5, 0xa, 0xff, 0xfffffffc, 0x5, 0x1, 0x1, 0xe, 0x4, 0xfff, 0x1, 0x0, 0x401, 0x8, 0x4, 0x81, 0xb9c, 0x0, 0x6, 0x8, 0xa0, 0x8, 0x4, 0x8, 0x8, 0x9, 0x1, 0x8000, 0x0, 0x2, 0x6, 0x40, 0x0, 0x1, 0xcd0, 0x1, 0x10000, 0x0, 0x2, 0x5, 0xfffffffd, 0x50, 0x4, 0x54, 0x200, 0x200, 0x9, 0xffff8000, 0xb, 0x8000, 0x80, 0x2, 0x4, 0x1, 0x5]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x4a24, 0xa661}, {0x400000, 0x3, 0x101}, 0x37, 0xff}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x4, 0x32f, 0x681, {0x7, 0x0, 0xfffe, 0x11, 0x1, 0x5}, {0x0, 0x1, 0x1, 0x1ff, 0xfff7, 0xf}, 0xbe, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x5, 0x6, 0x1, 0xf6dc, 0x10001, 0x10000, 0xbfe4, 0x9, 0x8, 0x8, 0x1, 0x5, 0xffffffff, 0x4ab3689d, 0xfffffff8, 0x1000, 0x6, 0x2, 0x5acd, 0x9, 0x1, 0x5, 0x0, 0x99aa, 0x814, 0x4, 0x4, 0x2, 0x9, 0x3a, 0x5, 0xfffff000, 0x9, 0x7ff, 0x4, 0x6, 0x8, 0x9, 0xffffffff, 0x6, 0xffff8001, 0x0, 0x7, 0x0, 0x800, 0x0, 0x1, 0x0, 0x61, 0x10, 0x101, 0x4, 0xb4c1, 0xa, 0x81, 0x7fff, 0x15, 0x2, 0x0, 0x0, 0x8, 0x200, 0x1, 0x10001, 0x5, 0x4, 0x929, 0x1, 0x9, 0x7, 0x81, 0x8, 0x1000000, 0xfffffff8, 0x2be, 0xffffff00, 0x800, 0x6, 0x7fffffff, 0x0, 0x5, 0x5, 0x80, 0x3, 0x0, 0x4, 0x401, 0x9, 0xb, 0x81, 0x1, 0x7fffffff, 0x2, 0x2038, 0x3, 0xa4, 0x5, 0x101, 0x0, 0x6, 0x40, 0x3d95cac0, 0x2, 0x104d, 0x1000, 0x4cb, 0x239, 0x1, 0x7, 0x23, 0x3, 0x3941d18c, 0x3207, 0x5, 0x1, 0x0, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x8, 0x5, 0x40, 0x1, 0x1, 0x5, 0xfffffff7, 0xc42, 0x0, 0x5, 0x1, 0x7, 0x3, 0xe, 0x6, 0xfffffffb, 0xda, 0x3, 0xefffff92, 0xfffffc00, 0x4, 0x1, 0x401, 0x5, 0x8000, 0x9, 0x6, 0x708, 0x7fffffff, 0x1, 0x5b9449b5, 0x5, 0x8, 0xffffffff, 0x5, 0x5, 0xfffffff8, 0xa, 0x6, 0x7, 0x416, 0x8, 0x2, 0xf40000, 0x6, 0x8a87, 0x9, 0x6e, 0xfffff800, 0x7, 0x64ad, 0x0, 0xd, 0x6, 0x1, 0x3, 0xd, 0x5, 0x3, 0x6, 0x6, 0x3, 0x401, 0x6, 0x80000001, 0x9, 0x0, 0xfffffe00, 0x7, 0xfffffff7, 0xbfb6, 0x8000, 0x9, 0x7, 0xffffff54, 0x2, 0xd7ed, 0x5, 0x7, 0x0, 0x10000, 0x10001, 0x9, 0xc, 0x80000001, 0x5699, 0x698b, 0x4, 0xe6, 0x4, 0x7fffffff, 0xfe4a, 0x1, 0x800, 0xf, 0x8, 0x3, 0xfffffff7, 0x7, 0x400, 0x7fffffff, 0x0, 0x1, 0xffffffff, 0x8, 0x1, 0x65, 0x8, 0x8, 0x800, 0x4, 0x200, 0x2, 0x8000, 0x5, 0x9, 0x8, 0x9, 0x595, 0x4, 0x5, 0x1, 0x4, 0x3, 0x8, 0x4, 0x2]}]}]}}]}, 0xd04}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x9ac8e2a423508d1d, 0x7f9}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @authinfo={0x18, 0x84, 0x6, {0xe}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x208, 0x7, 0x7ff}}], 0x88, 0x8000}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x400a00, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.610827881s ago: executing program 43 (id=3125): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000000240)=@delchain={0xd04, 0x65, 0x2, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x4, 0xfff1}, {0xa, 0xffff}}, [@f_tcindex={{0xc}, {0x4}}, @f_rsvp6={{0xa}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0xffffffff, 0x7}, {0x8000, 0x1, 0x80000000}, 0x16, 0x17, 0x2}}]}}, @f_rsvp6={{0xa}, {0xc94, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x1ffe6, 0x8}}, @TCA_RSVP_POLICE={0x824, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xa1f}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x4, 0x2, 0x3ff, 0x3d, 0x2, 0xf7, 0x7, 0xffff7fff, 0xfffffff9, 0x80, 0x10, 0x8, 0xf90, 0xb4e, 0x9, 0x8, 0x9, 0x6, 0xffffffc0, 0x4, 0x101, 0x14c1, 0x1, 0x0, 0x80000001, 0x4, 0x1ff, 0x7, 0x0, 0xffff, 0x2, 0xff, 0x2, 0x3, 0xbb, 0x0, 0x4, 0x100, 0x7, 0x7, 0x61, 0x9, 0x7, 0x3ff, 0x2, 0x8, 0x4, 0xffff, 0x7fb4, 0x3, 0x0, 0x9, 0xd819, 0x0, 0x9, 0x80000001, 0x7, 0x4dbc263c, 0x336d, 0xfffffffb, 0x1, 0x2, 0x1, 0x1, 0x685c, 0x100, 0x3, 0x200, 0xb9, 0x1, 0x8000, 0xffffffff, 0x924, 0x1, 0x4, 0x4, 0x4, 0xfffffffb, 0xff, 0x2, 0x3, 0x405, 0x0, 0x1000, 0xffff, 0xb, 0xffffffff, 0x5, 0x6, 0x4, 0x3, 0x3, 0xb66, 0x7fff, 0x5, 0x4, 0xe2b, 0x3, 0x8, 0x400, 0x20c3, 0x9, 0x469, 0x4, 0x8, 0x2, 0xfffffffb, 0x5, 0x0, 0x7, 0xfc, 0x4, 0x4, 0x4410, 0x788, 0x4, 0x0, 0xfffffffa, 0x0, 0x40, 0x5, 0x0, 0x9, 0x8, 0x1, 0x7f, 0x8, 0x5e83, 0x9, 0x8001, 0x3, 0x2, 0x0, 0x9, 0x2, 0x8, 0x5, 0x8001, 0x7, 0xa61f, 0x800, 0x1ff, 0x3, 0x9, 0xfffffc01, 0x100, 0xc9e6, 0x2, 0x5, 0x200, 0x0, 0x0, 0x5, 0x6, 0x2, 0x200, 0x0, 0x0, 0x4, 0x1, 0x9, 0x2, 0xffff, 0x3, 0x12, 0x6, 0x0, 0x8, 0x7, 0x2, 0x1, 0x80000001, 0x100, 0x3, 0x101, 0x7fff, 0x6, 0x7, 0x2, 0x3, 0x2, 0x9, 0x4, 0x2, 0x3f26406, 0xa, 0x10001, 0x5, 0x9, 0x4, 0x10, 0x4, 0x2, 0x3, 0x1, 0x5, 0x6, 0x6, 0x4, 0xae26, 0x3697, 0x3, 0x1, 0x8001, 0x7, 0x8, 0x0, 0x8, 0x80000000, 0x7, 0x4, 0x7, 0xd1, 0x8, 0x5, 0x7, 0x2, 0x7fffffff, 0xfffffffe, 0xb, 0x7, 0xd, 0x8, 0x6, 0x1, 0xd, 0x3, 0x8, 0x2, 0x532, 0xffffff3e, 0x6, 0xff, 0x5b96000, 0x4, 0x1, 0x5, 0x5, 0x4, 0x4, 0x3, 0x70ea, 0x10, 0xffffffff, 0x100, 0x4, 0xd, 0x1, 0xfff, 0x0, 0x7fff, 0xae, 0x416efdef, 0x6, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc9e5, 0x80000001, 0x101, 0x0, 0xa9, 0x7, 0x4, 0x94, 0x49b, 0x7ff, 0x1, 0x81, 0xb8, 0x8001, 0x10, 0x3, 0x4, 0x991, 0xfffffffd, 0x7ff, 0x6, 0x5, 0x4, 0x8001, 0x3, 0x7, 0x5, 0xced, 0xfffffc00, 0x6, 0x101, 0x7fff, 0x8, 0x7, 0x1, 0x3, 0xb, 0x0, 0xb, 0x8, 0x7, 0x8d2, 0x80, 0x47e, 0x4918, 0xc43, 0x80000001, 0x4, 0x8, 0xfffffff9, 0x3, 0x6dbb, 0x6, 0xfffffff8, 0xe2, 0x3, 0x7, 0x9, 0x4, 0x1, 0x3, 0x0, 0xf3523b20, 0x6, 0x0, 0x2, 0x2, 0x80000000, 0x21dce07, 0x3ff, 0x4, 0x0, 0x6, 0x9, 0x10, 0x10000, 0x5, 0x2, 0x3, 0xe51, 0x8, 0x7fff, 0x5, 0x6, 0x80, 0x50, 0x9, 0x40, 0x0, 0x575e, 0x400, 0x9, 0x5, 0x9, 0x0, 0x6, 0x5c, 0x2, 0x40, 0x6, 0x6, 0x401, 0x0, 0x0, 0x401, 0x0, 0xfffffff3, 0x2, 0x4f478, 0x2, 0x5, 0x401, 0x6, 0x2, 0x6, 0x400, 0xffffffff, 0x1000, 0x8, 0x2, 0x96f3, 0x1ff, 0x6, 0x6, 0xffffffff, 0x2, 0x1, 0x1000, 0x3, 0x6, 0x40008001, 0x1ff, 0x3, 0x4a, 0xa, 0x8, 0x400, 0xffffffff, 0x0, 0xa, 0x7, 0x50000, 0xb, 0x2, 0x834, 0x1, 0x9, 0x2, 0x1, 0x2, 0x3, 0xffffffff, 0x8, 0x7, 0x8, 0x38f04e17, 0x9, 0x5, 0x81, 0x0, 0xaa02, 0x0, 0xa2, 0x9, 0x7fff, 0x3, 0xc, 0xfffffffe, 0x6, 0xa6, 0xd, 0x3, 0x7, 0x2f, 0x7, 0xce, 0x4db4acbc, 0x9, 0x0, 0xb01, 0x40, 0x4, 0x599, 0x5, 0x8, 0x8, 0x5, 0x8, 0xff, 0x2, 0x101, 0x0, 0xd104, 0x7fff, 0x9, 0x9, 0x30, 0x5, 0x380, 0x9, 0x7, 0x5, 0xa, 0xff, 0xfffffffc, 0x5, 0x1, 0x1, 0xe, 0x4, 0xfff, 0x1, 0x0, 0x401, 0x8, 0x4, 0x81, 0xb9c, 0x0, 0x6, 0x8, 0xa0, 0x8, 0x4, 0x8, 0x8, 0x9, 0x1, 0x8000, 0x0, 0x2, 0x6, 0x40, 0x0, 0x1, 0xcd0, 0x1, 0x10000, 0x0, 0x2, 0x5, 0xfffffffd, 0x50, 0x4, 0x54, 0x200, 0x200, 0x9, 0xffff8000, 0xb, 0x8000, 0x80, 0x2, 0x4, 0x1, 0x5]}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x5, 0x4a24, 0xa661}, {0x400000, 0x3, 0x101}, 0x37, 0xff}}, @TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x7, 0x4, 0x32f, 0x681, {0x7, 0x0, 0xfffe, 0x11, 0x1, 0x5}, {0x0, 0x1, 0x1, 0x1ff, 0xfff7, 0xf}, 0xbe, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x2, 0x5, 0x6, 0x1, 0xf6dc, 0x10001, 0x10000, 0xbfe4, 0x9, 0x8, 0x8, 0x1, 0x5, 0xffffffff, 0x4ab3689d, 0xfffffff8, 0x1000, 0x6, 0x2, 0x5acd, 0x9, 0x1, 0x5, 0x0, 0x99aa, 0x814, 0x4, 0x4, 0x2, 0x9, 0x3a, 0x5, 0xfffff000, 0x9, 0x7ff, 0x4, 0x6, 0x8, 0x9, 0xffffffff, 0x6, 0xffff8001, 0x0, 0x7, 0x0, 0x800, 0x0, 0x1, 0x0, 0x61, 0x10, 0x101, 0x4, 0xb4c1, 0xa, 0x81, 0x7fff, 0x15, 0x2, 0x0, 0x0, 0x8, 0x200, 0x1, 0x10001, 0x5, 0x4, 0x929, 0x1, 0x9, 0x7, 0x81, 0x8, 0x1000000, 0xfffffff8, 0x2be, 0xffffff00, 0x800, 0x6, 0x7fffffff, 0x0, 0x5, 0x5, 0x80, 0x3, 0x0, 0x4, 0x401, 0x9, 0xb, 0x81, 0x1, 0x7fffffff, 0x2, 0x2038, 0x3, 0xa4, 0x5, 0x101, 0x0, 0x6, 0x40, 0x3d95cac0, 0x2, 0x104d, 0x1000, 0x4cb, 0x239, 0x1, 0x7, 0x23, 0x3, 0x3941d18c, 0x3207, 0x5, 0x1, 0x0, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x0, 0x9, 0x2, 0x0, 0x8, 0x5, 0x40, 0x1, 0x1, 0x5, 0xfffffff7, 0xc42, 0x0, 0x5, 0x1, 0x7, 0x3, 0xe, 0x6, 0xfffffffb, 0xda, 0x3, 0xefffff92, 0xfffffc00, 0x4, 0x1, 0x401, 0x5, 0x8000, 0x9, 0x6, 0x708, 0x7fffffff, 0x1, 0x5b9449b5, 0x5, 0x8, 0xffffffff, 0x5, 0x5, 0xfffffff8, 0xa, 0x6, 0x7, 0x416, 0x8, 0x2, 0xf40000, 0x6, 0x8a87, 0x9, 0x6e, 0xfffff800, 0x7, 0x64ad, 0x0, 0xd, 0x6, 0x1, 0x3, 0xd, 0x5, 0x3, 0x6, 0x6, 0x3, 0x401, 0x6, 0x80000001, 0x9, 0x0, 0xfffffe00, 0x7, 0xfffffff7, 0xbfb6, 0x8000, 0x9, 0x7, 0xffffff54, 0x2, 0xd7ed, 0x5, 0x7, 0x0, 0x10000, 0x10001, 0x9, 0xc, 0x80000001, 0x5699, 0x698b, 0x4, 0xe6, 0x4, 0x7fffffff, 0xfe4a, 0x1, 0x800, 0xf, 0x8, 0x3, 0xfffffff7, 0x7, 0x400, 0x7fffffff, 0x0, 0x1, 0xffffffff, 0x8, 0x1, 0x65, 0x8, 0x8, 0x800, 0x4, 0x200, 0x2, 0x8000, 0x5, 0x9, 0x8, 0x9, 0x595, 0x4, 0x5, 0x1, 0x4, 0x3, 0x8, 0x4, 0x2]}]}]}}]}, 0xd04}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @prinfo={0x18, 0x84, 0x5, {0x9ac8e2a423508d1d, 0x7f9}}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010102}, @authinfo={0x18, 0x84, 0x6, {0xe}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x208, 0x7, 0x7ff}}], 0x88, 0x8000}, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x400a00, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x4004000) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.003434939s ago: executing program 8 (id=3403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.930893983s ago: executing program 8 (id=3404): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3.668106288s ago: executing program 8 (id=3406): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x6, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x6}, @enum64={0xd, 0x3, 0x0, 0x13, 0x1, 0x6, [{0x4, 0xb, 0xc3}, {0xb, 0x3, 0x2}, {0xa, 0x0, 0xc}]}, @float={0x10, 0x0, 0x0, 0x10, 0x8}, @int={0xc, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x27, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x30]}}, &(0x7f0000000100)=""/219, 0x7a, 0xdb, 0x1, 0x2}, 0x28) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x200a00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c000000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r4, 0x410, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000440)=0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)={0x158, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r3, 0x0, 0x0}, 0x10) 3.667634748s ago: executing program 8 (id=3407): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x10, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911012000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000040), 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 1.964845296s ago: executing program 6 (id=3438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'l\xf0F\xfeo\xb3\x04\x19\xb7\xbd\x8a\xfcP\r\xb6\x1d\xc7v\x06]\xe9\xdd\xa2W\x8b\fFsj\xc9\xd8\x1f\"\xd8\x1e]\xcc\xff]\x12\x85\xc8\xa8\x84K\xb3\x1e\x19\f.@\xc7\x19Iqv;C\xcf=tN\xb3\xf9\xbb@\x8f\x9d\xfc\x9e\x19\xdeq\xa90\x03&'}, 0xffffff67, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff88, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40080, 0x4000}}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20040045) 1.857838313s ago: executing program 6 (id=3439): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x30, r2, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffa}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}}, 0x0) (async) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)={0x2000000d}) unshare(0x6a040000) 1.38134814s ago: executing program 6 (id=3441): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) pwrite64(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000803400000006000000000e0400000000000000000000000000000d04000000000000000000d701fd61b63fabcbdd920002040000000400000000000012"], 0x0, 0x52}, 0x28) 1.313820684s ago: executing program 6 (id=3442): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000140)='\xaa\xaa\xaa\xaa\xaa', 0x200102, &(0x7f0000000240)={@_ha_fsid={[0x2, 0x8]}, {0x4, 0x0, 0x4, 0x4de}}, 0x1000, &(0x7f0000000280), &(0x7f00000002c0)=0x10}, {[0xffffffff, 0x0, 0x0, 0xff]}, 0x2, 0x3e, &(0x7f0000000300)=""/62}) ioctl$LOOP_GET_STATUS(r4, 0x4c03, &(0x7f0000000400)) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x6005}, @void, @eth={@local, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0x6, 0x18, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0xe9}]}}}}}}}, 0x32) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e97742535e8b287fe3856295b753", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.298679935s ago: executing program 2 (id=3443): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1, {0x1, 0x1, 0x4}, 0xfd}, 0x18) setsockopt$packet_int(r1, 0x6a, 0x9, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x3995, 0x4cc, 0xffff, 0x9e02, 0x1, "8003e3ffff072000"}) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000010c0), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000002dc0)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, '$&)&*-%-\')]', 0x3a, '\xff\xff', 0x3a, './file0', 0x3a, [0x50, 0x50, 0x46, 0x46]}, 0x38) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x5, 0xe, 0x2, 0xf, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x53dc, &(0x7f0000000000)={0x0, 0x3532, 0x80, 0x3, 0x96}, &(0x7f0000000080), &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') socket$vsock_stream(0x28, 0x1, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42}, 0x4}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) close(r4) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}) mlock2(&(0x7f0000bf9000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1) 1.085835278s ago: executing program 6 (id=3445): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnexthop={0x38, 0x6a, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="ad21000000000000140003006e657464657673696d30000000000000080004000e04000034001680300001802c000c8014"], 0x70}, 0x1, 0x0, 0x0, 0x4048000}, 0x800) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000040), 0x0) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2800000071c3a4e6279c21a71ea17ccf579afe559e0ea2e105581eeb03edac8283737bafb8030d90c381b641f2679277ee5fc41405bbfd03ccf4dba44f5d4223c9edebbba348e797e0bd3c070021ea8207da3081e171d9433218a1621ec8dcc26e641cb8d3b6fe57a324dc17c833d0606b24aa4a1a307da83010d95373cd4f08c1d2ee6ca3327dcb0b35a769e8595d", @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002004e210a01010200000000000000000d0001007564703a73797a3100000000"], 0x54}}, 0x0) flock(r6, 0xa) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f00000000c0), 0x4) fcntl$lock(r9, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r9, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000002c0)=0x0) migrate_pages(r10, 0x8000000000000000, &(0x7f0000000300)=0xe, &(0x7f0000000340)=0xb) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000200)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.085626818s ago: executing program 5 (id=3446): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) close(0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r1) personality(0xfe47fef9f5ff7379) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) 1.054692379s ago: executing program 5 (id=3447): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 1.033048971s ago: executing program 5 (id=3448): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0x1134c, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005a000100000000000000000000000000040005803efbce655d9240bfa4"], 0x18}}, 0x0) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f00000001c0)=0x2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x1}], 0x1c) sendmmsg$inet6(r3, &(0x7f00000008c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)='x', 0x1}], 0x1}}], 0x2, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x4a}, 0x8) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) write$binfmt_aout(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/1696], 0x6a0) 869.83149ms ago: executing program 2 (id=3449): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xc8, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x3}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) dup(r4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYRES64=r3, @ANYRESDEC=r0], 0x3c}}, 0x0) 869.08767ms ago: executing program 2 (id=3450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000480)=[{0x0}, {&(0x7f00000003c0)="06c4daf10a7742e39e31ceefb1fcd2e5bc3f", 0x12}], 0x2) (fail_nth: 4) 653.060413ms ago: executing program 5 (id=3451): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x1023f0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x100000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0134658e92231e0e676b002cbd70100400000005000000080009000200000008000c00a80a0000060001000500000008000b0002000000"], 0x34}}, 0x20000034) 582.726776ms ago: executing program 5 (id=3452): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) io_setup(0x5d31, &(0x7f0000000080)=0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0xfff8, r1, 0x0, 0x0, 0x10001}]) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000538000480340001800a0001006c696d69740000002400028008000340000000030c00024000000000000080010c000140fffffffffffffffc0900010073797a30000000000900020073797a320000000014000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x20000852}, 0x0) close(0x3) ioctl$TIOCEXCL(r1, 0x540c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xccd, @empty, 0xfa4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x1, @mcast1, 0x2}}}, 0x108) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r8 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40e8662e, &(0x7f0000000000)={0x3f32, 0x40000000000001, 0x0, 0xb, 0x101, 0x905}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000540), 0x100, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000000c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@max_batch_time}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") r9 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) 534.14442ms ago: executing program 2 (id=3453): getrandom(&(0x7f0000000180)=""/279, 0xffffffffffffff8c, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181100, 0x0) write$tun(r0, &(0x7f00000002c0)={@void, @val={0x2, 0x3, 0x4be1, 0x0, 0x3, 0x7c}, @ipv4=@udp={{0x33, 0x4, 0x1, 0x24, 0x105, 0x64, 0x0, 0xfa, 0x11, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x20, 0xb5, 0x0, 0x8, [0x5, 0xfb8, 0x2, 0x8, 0x4, 0x4000000, 0x7]}, @rr={0x7, 0xf, 0x61, [@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2]}, @timestamp={0x44, 0x20, 0xcc, 0x0, 0x8, [0x200, 0x3, 0xb, 0x7d5, 0x8, 0x8, 0x200]}, @end, @rr={0x7, 0x13, 0xde, [@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x54, 0x60, 0x3, 0x5, [{@loopback, 0x7}, {@private=0xa010100, 0x1}, {@broadcast, 0x5}, {@multicast1, 0x8}, {@empty, 0x100}, {@multicast2, 0x7ff}, {@multicast1, 0x9}, {@broadcast, 0x8e}, {@broadcast, 0x4}, {@rand_addr=0x64010100}]}, @end]}}, {0x4e24, 0x4e20, 0x39, 0x0, @opaque="f171b4c86bd1d875ad502468d0d75b5dddf4c8292cfa48bc70b6baeac669e7c9cfb11b14bb3d5e70df1648affaa70680ee"}}}, 0x10f) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0xffffffffffffffff) move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x2) ptrace(0x10, r1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) shutdown(r3, 0x1) socket$nl_route(0x10, 0x3, 0x0) ptrace$poke(0x4, r1, &(0x7f00000011c0), 0xfffffffffffffffe) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000109000/0x2000)=nil, 0x2000, 0x1000004, 0x810, 0xffffffffffffffff, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x3000000, 0x30, 0xffffffffffffffff, 0x10000000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400842, 0x20) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0xad54f0a564aba2e2, 0x1c0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', r7, 0x0, 0x0, {0x0, r8}}) 492.436942ms ago: executing program 7 (id=3454): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a000000000061cff3f3b89a014300000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x12, '\x00', r0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 453.670194ms ago: executing program 2 (id=3455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x10000, 0x0, 0x0, 0xfffffffffffffffd}, {0xffffff7ffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0xc6b7a68558dd73a1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e00010000000000000000000000000000000000000000020040"], 0xb8}}, 0x0) 394.019438ms ago: executing program 2 (id=3456): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x783, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x109000) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) fadvise64(r0, 0x7f, 0x0, 0x4) 393.733318ms ago: executing program 7 (id=3457): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1e, 0x100000000}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 391.377948ms ago: executing program 5 (id=3458): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xfcf6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x80000001}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1ff, 0xc, 0x7, 0xffff, r2}, &(0x7f00000000c0)=0x10) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100000000000000000007000000", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x8, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r7 = memfd_create(&(0x7f0000000680)='\x00\xc7\x8c\xa3I6\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\b\x00\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R:\xf6\xff\xff\xff\xff\xff\xff\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8\'K\xb6o\x9a\x9e~\xf0|\xe6\xe4ZW\xbe2\xc9\xe4R$\xaa\x00U\x92\xd2\x99\xb8\x00Q\xe6\f\b\xcf\xdd\xdc+]\xe7\x87H\xcb\x9f\x91=\xe4K\xaf\xea\x14G\x19\r\xec6\xd4\xd0L\xb1UH_\xe8m\nP\x0f\xdcP\xcb\xd9\x0592\xcae\xec$gy!9\xf08\xf1V\x1a\xae\xbe\xb1\xc9\x9bB\x05\xcd\xc7\x9f\xe8\x19\x93\x87\xf4\n\x8e\x919\x9e\x15\x18\xb1\v\x81\x89\x17\x993>\x8d\xfd\xa3\x10\xb0\xcaRGTZS\x167.\x17\xcc\xc0P\xeb\x94fz\xfe\xf0\xdb\xa5x&\xff\f\xdc\xe0\x89|\xdaB\xc6Kp\xc0\xad\'\v\"V\x89I\xee\xef<\x17Z\xaf\xb4\x11\xf9\a\xfa\x9a\x97\x90\xf2\x01\'\xecCh\xd1g=\x96\x9f\xafk\x02\xd7\xb8\x8e\x81\xae(\xe6HNx\xedD\x9b\xc4\xc2\xe7&\xdb\x05\xac', 0xc) fsetxattr$security_selinux(r7, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x5, 0x7fd, &(0x7f0000001040)="$eJzs3U1oHPfZAPBnZMmRlfc1Ie+LX2NsZ+LkBRscZSU7CiKFZLMayZOsdsXuKtiEkphaDsZyE+IGah/q+JLS0hJ66jHJoZf2VHppKbTQHtpTob32Fgj0kLS0t5aAyszs2pL14S/FNunvJ6z5eub/f+av9TwaSTMbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAkjZlabSKJZt5aPJlurjHTac9vsX3Q3q/XTLboNyIp/sXoaOytVu393+ub9xSfDsX+aml/jBaT0bj88J5Hnvuf4aHB/lsktN2GN1p58dLl86eXl5fevpUWRrY9p+3y3V+uWfzRWNziyM5lrbzbzufrc1mad9vp9NRU7ekTs910Nm9m3VPdXjafNjpZvdfupIcbR9KJ6eljaTZ+qr3YmpupN7N0uFr57FOTtdpU+tL4QlbvdNutp18a7zZO5M1m3pordyw2FzHPFi/El/Ne2svq82l69tzy0rG1Ke1al2QRNLFmzecrq5f2P/nIJ+98/I9zS5M3O9zJ2uTkxMTk5MRUEhG12vD1Fc9MP/NsrTZcu0Gsi7inL1oeQNt8Boc7N9Sv/9GMPFqxGCcj3fCjETPRiXbMx/UX8OrtfYP6//9P//UPW/X7/qr6X1X5of17r2/eF2X9P1gtHdys/ld973xok5y/qI/SV4pPF+NSXI7zcTqWYzmW4u0vpL9k+9oa2t7M5iKLVuTRjXbkMR/1ck3aX5PGdEzFVNTitTgRs9GNNGYjj2Zk0Y1T0Y1eZOUrqhGdyKIevWhHJ9I4HI04EmlMxHRMx7FII4vxOBXtWIxWzMVM1MtWzsa5ctyP3ZDXnm+9/os3/vjJB+VXaxA0sdUQvxtRBv19i6B1xVz957ZFxG+37wQOd2FlUP8BAACAL62k/Ol7cf0/EgfKudm8mb26JubVz27ca7j49O49TBMAAAC4C+Vv/vdHUs3EgUiK6//a2qCfjJSTh+5DfgAAAMDdS8p77IqL/7F4rJob3C5Vu9+5AQAAANuj/LX/wWIyFnGlXOH6HwAAAL5kXvlZf+bGZ+x/PHjG7tDCQ8mv/hadzkhy/MOTTyYX6kVc/cKOar/+5JVrLfZm9w3uJqjamhq+/HCxPNzI9ieDBwV/3r+ZoHq0wL7ha7uvzeOFXdXaJEmKBK4ubJpArElgd/8oriVQLsX34vEq5vEz1fTMYEt1tGOzeTMbb7Sbz01Evb57qJed7L3z9XPfjPLwv9Oa353E2XPLS+Nfe3P5TJnL1aKVqxf6x7vuOYpb5LIyuJ3iwPqnGxdNjZQ3YvT7Hav6ra0+/qGLu4uZoRvHYIs+34tD/1XGHBqrYsfWHv9o0efE+GZHP1Yd38S6Ix9e/8KqsjjVXyqyuHb7yHvxRDXzxOEnqskGWUxulUUxFpOrs6jGLIZuY/w3ySIeiYgPHr9y8sBoRHbsZlkcu8ssAO6Xs+VTf4oqVJ2eqyr0r5VKUf87nZGdsabuVDvc6lkuKXu5yTv5jBSn/luq7v9c2eKMfriKOVx9PzG8b4O6UtvgjP7Wubd+1z+jH//xDz/86sHf//SO6/roIGTXYObR3zw8FGUWu/pZXO5v6Ywk379WSaqq+lGx/qNN++02J5NiCHd848JbsefipctPnbtw+o2lN5Z2RsRU7Xit9kyS9L94K+V3DGoPABs4FAerQr7pe+xs8i485TcAZURyfKur6h2RPHrtTwqKmvhmLMeZOFrebRARj23c79iqP0M4Gof6yW581Tq26h1ejm50VXclrsUWdbKKndw4dsN2j60asf/7wRf59QCAe+HQTerwpvX/ekRy9CbX3Wtr+ZEq9sggg81reUQ8f29HAwD+M2Sdz5Kx3reTTidfeG1ienqi3juRpZ124+W0k8/MZWne6mWdGK635rJ0odPutRvtZjHzSj6TddPu4sJCu9NLZ9uddKHdzU+W7/ye9t/6vZvN11u9vNFdaGb1bpY22q1evdFLZ/JuI11YfLGZd09knXLn7kLWyGfzRr2Xt1tpt73YaWTjadrNslWB+UzW6uWzeTHbShc6+Xy9czUimovzWTqTdRudfKHXrhoc9JW3Ztud+bLZv+y+36MNAA+Gi5cunz+9vLz09p3N/PlWgjfvfXTkXh4rAFC5XqU//e8bt/nhOwAAAAAAAAAAAAAAPBju8v6/9TO7trfB0a1iVq5ErN+UrKys3EYXu+ImMTurkdoR2ztQ92Tm6ra0MxQbjfODM5Nsvun1558/v9nuL17Ze+LWurjp/5ThiOjf6vrupzt//n616YU7Opyh29/rTxFxB32tJFvE3OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs4N8BAAD//2uxZPA=") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x240880) syz_emit_ethernet(0x96, &(0x7f0000000500)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @random="08aa12833f43", @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@x25={0x805, {0x2, 0x9, 0x1f, "d615aeba51992a2045c8c96ec9ee231b471294afbae3ed6eb607ea61c95fb4552c534add10c9fd1af47b0801f58bde42ec09962666dbe341bff73fd40ae2742f2578dfc7b974f57bd557505e828234ae608ee6c9df02d9ed97e249eab91e16806b0cffea90e2034d3130d7ecd0092eb3f5fd6eaed07e3e07f8dea0c30759355601"}}}}, &(0x7f0000000280)={0x0, 0x3, [0x1a1, 0x534, 0x12a, 0xaeb]}) 318.240792ms ago: executing program 7 (id=3459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x3, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x45, 0x0, 0x9, 0x1}, @datasec={0x5, 0x5, 0x0, 0xf, 0x2, [{0x2, 0x9, 0x3}, {0x4, 0x401, 0x1}, {0x4, 0x8, 0xfffffffd}, {0x3, 0x200, 0x4}, {0x5, 0x8, 0x5}], 'T4'}]}, {0x0, [0x61]}}, &(0x7f0000000400), 0x83, 0x0, 0x0, 0x10001}, 0x28) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x8, 0x77, &(0x7f0000000180)=""/119, 0x41100, 0x60, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r4, r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x4, 0x8, 0x9}, {0x3, 0x1, 0x7}, {0x1, 0x2, 0xe, 0x6}, {0x2, 0x4, 0x7, 0x1}, {0x0, 0x1, 0x5, 0x2}, {0x5, 0x3, 0xa, 0x6}], 0x10, 0x8}, 0x94) 242.996577ms ago: executing program 7 (id=3460): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000005a80)=@ethtool_eeprom={0xb, 0x1000, 0xceca}}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffc89, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x20, 0x7, 0x10000, 0x101, {{0xd, 0x4, 0x2, 0x17, 0x34, 0x67, 0x0, 0x8, 0x0, 0x0, @local, @rand_addr=0x64010102, {[@end, @generic={0x86, 0xb, "185c98a9eca5486c85"}, @noop, @timestamp={0x44, 0xc, 0x61, 0x0, 0x2, [0x1, 0x3b8c0]}, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x4e22, 0x0, 0x4e21, 0x3ff, 0xa, 0xd0, 0x20, 0x99, r2, r3}, {0x130, 0x7fe0000000000000, 0x3, 0x7, 0xc, 0x5, 0x7dd0, 0x3}, {0x81, 0x0, 0x2, 0xffff}, 0xa6, 0x6e6bb8, 0x1, 0x1, 0x3, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d2, 0x32}, 0x2, @in=@broadcast, 0x3505, 0x3, 0x1, 0x6, 0x1, 0x0, 0x3}}, 0xe8) 77.667406ms ago: executing program 7 (id=3464): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0xf4ff, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 0s ago: executing program 7 (id=3465): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB], 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010142, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00ffff00470000000a000000"]) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): d of device [ 223.361380][T14954] loop6: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 223.369601][T14959] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.398478][T14954] Buffer I/O error on dev loop6, logical block 57847, async page read [ 223.456117][T10731] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.471402][T10731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.504426][T10731] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.526121][T10731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.538033][T10731] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.546635][T10731] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.564708][T10731] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.588522][T10731] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.633553][T14985] syzkaller0: entered promiscuous mode [ 223.648853][T14985] syzkaller0: entered allmulticast mode [ 223.671629][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.709260][T14994] loop2: detected capacity change from 0 to 128 [ 223.738021][T14994] msdos: Bad value for 'gid' [ 223.743866][T14994] msdos: Bad value for 'gid' [ 223.770669][T14994] loop2: detected capacity change from 0 to 256 [ 223.790521][T14994] FAT-fs (loop2): Directory bread(block 64) failed [ 223.797467][T14994] FAT-fs (loop2): Directory bread(block 65) failed [ 223.804224][T14994] FAT-fs (loop2): Directory bread(block 66) failed [ 223.810823][T14994] FAT-fs (loop2): Directory bread(block 67) failed [ 223.821274][T14997] geneve2: entered promiscuous mode [ 223.828443][T14994] FAT-fs (loop2): Directory bread(block 68) failed [ 223.836086][T15002] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.845929][T14994] FAT-fs (loop2): Directory bread(block 69) failed [ 223.857911][T15002] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.867871][T14994] FAT-fs (loop2): Directory bread(block 70) failed [ 223.878004][T14994] FAT-fs (loop2): Directory bread(block 71) failed [ 223.891810][T14994] FAT-fs (loop2): Directory bread(block 72) failed [ 223.898671][T14994] FAT-fs (loop2): Directory bread(block 73) failed [ 223.899790][ T1675] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 34534 - 0 [ 223.906441][T15007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.927271][T15012] __nla_validate_parse: 1 callbacks suppressed [ 223.927288][T15012] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2934'. [ 223.931395][T10733] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 34534 - 0 [ 223.963756][T15007] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.964609][T10733] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 34534 - 0 [ 223.986150][T15002] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.008721][T15002] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.024267][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.033164][T15019] vfat: Unknown parameter '' [ 224.063258][T10733] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 34534 - 0 [ 224.152869][T15002] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.163252][T15002] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.243173][T15002] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.265926][T15030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=15030 comm=syz.7.2942 [ 224.288374][T15002] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.454716][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2945'. [ 224.494037][ T28] audit: type=1400 audit(1770900569.129:2553): avc: denied { relabelto } for pid=15037 comm="syz.2.2945" name="105" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.564302][ T28] audit: type=1400 audit(1770900569.159:2554): avc: denied { associate } for pid=15037 comm="syz.2.2945" name="105" dev="tmpfs" ino=576 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.597788][ T28] audit: type=1400 audit(1770900569.169:2555): avc: denied { remove_name } for pid=12711 comm="syz-executor" name="binderfs" dev="tmpfs" ino=580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.630846][T15052] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2950'. [ 224.635614][ T28] audit: type=1400 audit(1770900569.169:2556): avc: denied { rmdir } for pid=12711 comm="syz-executor" name="105" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 224.641774][T15049] syzkaller0: entered promiscuous mode [ 224.678459][T15053] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2950'. [ 224.705935][T15049] syzkaller0: entered allmulticast mode [ 224.771608][ T28] audit: type=1400 audit(1770900569.399:2557): avc: denied { unmount } for pid=15064 comm="syz.2.2954" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.963582][T15083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 224.992925][T15084] netlink: 'syz.2.2959': attribute type 10 has an invalid length. [ 225.077302][ T28] audit: type=1400 audit(1770900569.709:2558): avc: denied { map } for pid=15098 comm="syz.7.2965" path="socket:[47806]" dev="sockfs" ino=47806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 225.079102][T15100] netlink: 'syz.7.2965': attribute type 1 has an invalid length. [ 225.178306][T15100] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.207837][T15106] bond2: (slave syz_tun): making interface the new active one [ 225.230607][T15118] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 225.237160][T15118] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 225.266579][T15106] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 225.292362][T15118] vhci_hcd vhci_hcd.0: Device attached [ 225.298507][T15119] vhci_hcd: connection closed [ 225.298655][T10716] vhci_hcd vhci_hcd.5: stop threads [ 225.319258][T10716] vhci_hcd vhci_hcd.5: release socket [ 225.341687][T10716] vhci_hcd vhci_hcd.5: disconnect device [ 225.432481][T15145] syzkaller0: entered promiscuous mode [ 225.467059][T15145] syzkaller0: entered allmulticast mode [ 226.229660][T15172] netlink: 'syz.6.2979': attribute type 1 has an invalid length. [ 226.254688][T15165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 226.279674][T15165] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 226.288918][T15176] FAULT_INJECTION: forcing a failure. [ 226.288918][T15176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.294084][ T28] audit: type=1326 audit(1770900570.909:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15173 comm="syz.6.2981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 226.310492][T15176] CPU: 0 UID: 0 PID: 15176 Comm: syz.5.2980 Tainted: G W syzkaller #0 PREEMPT(full) [ 226.310523][T15176] Tainted: [W]=WARN [ 226.310530][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 226.310594][T15176] Call Trace: [ 226.310601][T15176] [ 226.310608][T15176] __dump_stack+0x1d/0x30 [ 226.310645][T15176] dump_stack_lvl+0x95/0xd0 [ 226.310669][T15176] dump_stack+0x15/0x1b [ 226.310690][T15176] should_fail_ex+0x263/0x280 [ 226.310720][T15176] should_fail+0xb/0x20 [ 226.310792][T15176] should_fail_usercopy+0x1a/0x20 [ 226.310823][T15176] _copy_to_user+0x20/0xa0 [ 226.310855][T15176] simple_read_from_buffer+0xb5/0x130 [ 226.310891][T15176] proc_fail_nth_read+0x10e/0x150 [ 226.310915][T15176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 226.310937][T15176] vfs_read+0x1ab/0x7f0 [ 226.310990][T15176] ? __rcu_read_unlock+0x4e/0x70 [ 226.311023][T15176] ? __fget_files+0x184/0x1c0 [ 226.311125][T15176] ? mutex_lock+0x57/0x90 [ 226.311151][T15176] ksys_read+0xdc/0x1a0 [ 226.311230][T15176] __x64_sys_read+0x40/0x50 [ 226.311256][T15176] x64_sys_call+0x2886/0x3020 [ 226.311285][T15176] do_syscall_64+0x12c/0x370 [ 226.311381][T15176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.311419][T15176] RIP: 0033:0x7f15b2d5c84e [ 226.311437][T15176] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 226.311456][T15176] RSP: 002b:00007f15b17eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.311478][T15176] RAX: ffffffffffffffda RBX: 00007f15b17ef6c0 RCX: 00007f15b2d5c84e [ 226.311494][T15176] RDX: 000000000000000f RSI: 00007f15b17ef0a0 RDI: 0000000000000005 [ 226.311545][T15176] RBP: 00007f15b17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 226.311635][T15176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.311648][T15176] R13: 00007f15b3016038 R14: 00007f15b3015fa0 R15: 00007ffd1838c748 [ 226.311685][T15176] [ 226.338026][T15178] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2977'. [ 226.365534][T15180] 9p: Bad value for 'rfdno' [ 226.624404][T15165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 226.635545][T15165] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 226.754636][T15165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 226.765450][T15165] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 226.845064][T15165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 226.856659][T15165] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 226.942471][T10718] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33229 - 0 [ 226.950935][T10718] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 226.993222][T10718] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33229 - 0 [ 227.001648][T10718] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.024128][T10718] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33229 - 0 [ 227.032915][T10718] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.044237][T10718] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33229 - 0 [ 227.052896][T10718] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 227.099585][T15196] syzkaller0: entered promiscuous mode [ 227.105454][T15196] syzkaller0: entered allmulticast mode [ 227.503643][T15215] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2993'. [ 227.539416][T15214] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2992'. [ 227.559774][T15217] set_capacity_and_notify: 2 callbacks suppressed [ 227.559791][T15217] loop6: detected capacity change from 0 to 512 [ 227.575440][T15217] ext4: Unknown parameter 'obj_user' [ 227.671484][T15198] loop7: detected capacity change from 0 to 512 [ 227.830096][T15228] loop7: detected capacity change from 0 to 512 [ 227.924696][T15241] loop7: detected capacity change from 0 to 512 [ 227.940359][T10731] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.953906][T10731] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.976904][T10731] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.977262][T15241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.987164][T10731] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.005960][T15241] ext4 filesystem being mounted at /50/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.067590][T10730] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.075911][T10730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.094310][T10730] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.107241][T10730] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.122891][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.316607][T15253] macsec0: entered promiscuous mode [ 228.316756][T15249] loop5: detected capacity change from 0 to 128 [ 228.336179][T15253] macsec0: entered allmulticast mode [ 228.342655][T15253] veth1_macvtap: entered allmulticast mode [ 228.421589][T15254] bio_check_eod: 2898 callbacks suppressed [ 228.421609][T15254] syz.5.3004: attempt to access beyond end of device [ 228.421609][T15254] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 228.428829][T15253] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.460422][T15254] syz.5.3004: attempt to access beyond end of device [ 228.460422][T15254] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 228.474433][T15256] netlink: 92 bytes leftover after parsing attributes in process `syz.7.3005'. [ 228.484551][T15254] syz.5.3004: attempt to access beyond end of device [ 228.484551][T15254] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 228.498333][T15254] syz.5.3004: attempt to access beyond end of device [ 228.498333][T15254] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 228.512110][T15254] syz.5.3004: attempt to access beyond end of device [ 228.512110][T15254] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 228.541449][T15254] syz.5.3004: attempt to access beyond end of device [ 228.541449][T15254] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 228.555261][T15254] syz.5.3004: attempt to access beyond end of device [ 228.555261][T15254] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 228.589286][T15253] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.654471][T15249] vlan0: entered promiscuous mode [ 228.662173][T15249] vlan0: entered allmulticast mode [ 228.668187][T15249] hsr_slave_1: entered allmulticast mode [ 228.737520][T15253] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.764626][T15258] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 228.771183][T15258] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.800534][T15258] vhci_hcd vhci_hcd.0: Device attached [ 228.807200][T15259] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 228.814568][T10716] vhci_hcd vhci_hcd.6: stop threads [ 228.820024][T10716] vhci_hcd vhci_hcd.6: release socket [ 228.836743][T10716] vhci_hcd vhci_hcd.6: disconnect device [ 228.918774][T15253] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.929562][T15262] loop5: detected capacity change from 0 to 512 [ 228.955510][T15262] EXT4-fs (loop5): 1 truncate cleaned up [ 228.962246][T15262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.976851][T15262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.985900][T15262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.017811][T15266] loop0: detected capacity change from 0 to 512 [ 229.031373][T15266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 229.042945][T15266] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.052045][T15266] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 229.097731][T15268] loop0: detected capacity change from 0 to 1024 [ 229.104528][T15268] EXT4-fs: Ignoring removed orlov option [ 229.135118][T15268] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.3009: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 229.153565][T15268] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 229.154023][T15268] EXT4-fs error (device loop0): ext4_quota_enable:7192: comm syz.0.3009: Bad quota inode: 4, type: 1 [ 229.174221][T15268] loop0: lost filesystem error report for type 5 error -117 [ 229.174498][T15268] EXT4-fs warning (device loop0): ext4_enable_quotas:7233: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.191472][T10716] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.196692][T15268] EXT4-fs (loop0): mount failed [ 229.215572][T15268] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3009'. [ 229.221534][T10716] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.239351][T10716] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.257075][T15271] loop0: detected capacity change from 0 to 1024 [ 229.260489][T10716] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.288209][T15273] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.300625][T15271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.330084][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 229.330101][ T28] audit: type=1400 audit(1770900573.959:2573): avc: denied { rmdir } for pid=15270 comm="syz.0.3010" name="control" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 229.368459][T12487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.444279][T15282] macsec0: entered promiscuous mode [ 229.465983][T15282] macsec0: entered allmulticast mode [ 229.476606][T15282] veth1_macvtap: entered allmulticast mode [ 229.515618][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.545414][T15290] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.564429][T15290] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 34534 - 0 [ 229.634597][T15290] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.645159][T15290] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 34534 - 0 [ 229.676133][T15297] program syz.7.3018 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.693919][T15297] loop7: detected capacity change from 0 to 512 [ 229.721596][T15290] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.740803][T15290] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 34534 - 0 [ 229.835202][T15310] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3023'. [ 229.852141][T15290] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.866050][T15290] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 34534 - 0 [ 229.879225][T15310] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.892476][T15310] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.907460][T15310] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3023'. [ 229.911144][ T28] audit: type=1400 audit(1770900574.539:2574): avc: denied { watch } for pid=15309 comm="syz.7.3023" path="/57/bus/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.978714][ T1675] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 34534 - 0 [ 229.993981][ T1675] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.013933][ T1675] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 34534 - 0 [ 230.022456][ T1675] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.023007][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.030712][ T1675] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 34534 - 0 [ 230.048126][ T1675] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.059799][ T1675] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 34534 - 0 [ 230.068562][ T1675] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 230.100094][ T28] audit: type=1400 audit(1770900574.729:2575): avc: denied { getopt } for pid=15318 comm="syz.7.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.123972][T15319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.132689][T15319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.351720][ T9001] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 230.357036][ T9001] loop6: p1 start 460800 is beyond EOD, truncated [ 230.363691][ T9001] loop6: p2 size 83886080 extends beyond EOD, truncated [ 230.372487][ T9001] loop6: p5 start 460800 is beyond EOD, truncated [ 230.378998][ T9001] loop6: p6 size 83886080 extends beyond EOD, truncated [ 230.390112][T15328] loop6: p1 p2 p3 < > p4 < p5 p6 > [ 230.395679][T15328] loop6: p1 start 460800 is beyond EOD, truncated [ 230.402565][T15328] loop6: p2 size 83886080 extends beyond EOD, truncated [ 230.411431][T15328] loop6: p5 start 460800 is beyond EOD, truncated [ 230.417884][T15328] loop6: p6 size 83886080 extends beyond EOD, truncated [ 230.498327][ T9144] udevd[9144]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 230.498381][ T9143] udevd[9143]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 230.511647][ T9001] udevd[9001]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 230.519613][ T8999] udevd[8999]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 230.544022][ T9144] udevd[9144]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 230.544229][ T9143] udevd[9143]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 230.545787][ T9001] udevd[9001]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 230.563811][ T8999] udevd[8999]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 230.773680][ T28] audit: type=1326 audit(1770900575.409:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 230.797686][ T28] audit: type=1326 audit(1770900575.409:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 230.821505][ T28] audit: type=1326 audit(1770900575.409:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 230.845102][ T28] audit: type=1326 audit(1770900575.409:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 230.869177][ T28] audit: type=1326 audit(1770900575.409:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 230.901446][ T28] audit: type=1326 audit(1770900575.429:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 230.932398][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3035'. [ 230.938274][ T28] audit: type=1326 audit(1770900575.429:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15339 comm="syz.7.3033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x7ffc0000 [ 231.098140][T15359] xt_hashlimit: size too large, truncated to 1048576 [ 231.107380][T15352] hub 2-0:1.0: USB hub found [ 231.112126][T15352] hub 2-0:1.0: 8 ports detected [ 231.510978][T15378] EXT4-fs: Ignoring removed oldalloc option [ 231.522972][T15382] syzkaller0: entered promiscuous mode [ 231.528549][T15382] syzkaller0: entered allmulticast mode [ 231.552513][T15378] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.3045: Parent and EA inode have the same ino 15 [ 231.603905][T15378] loop7: lost filesystem error report for type 5 error -117 [ 231.609958][T15378] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: comm syz.7.3045: Parent and EA inode have the same ino 15 [ 231.647749][T15378] loop7: lost filesystem error report for type 5 error -117 [ 231.654482][T15378] EXT4-fs (loop7): 1 orphan inode deleted [ 231.679825][T15378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.744549][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.084347][T15404] infiniband syz1: set active [ 232.089142][T15404] infiniband syz1: added syz_tun [ 232.095480][T15404] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 232.095827][T15404] infiniband syz1: Couldn't open port 1 [ 232.124048][T15404] RDS/IB: syz1: added [ 232.136414][T15404] smc: adding ib device syz1 with port count 1 [ 232.143247][T15404] smc: ib device syz1 port 1 has no pnetid [ 232.372940][T15410] lo speed is unknown, defaulting to 1000 [ 232.422688][T15410] geneve1 speed is unknown, defaulting to 1000 [ 232.679533][T15419] set_capacity_and_notify: 4 callbacks suppressed [ 232.679638][T15419] loop5: detected capacity change from 0 to 512 [ 232.782937][T15426] batman_adv: batadv0: Adding interface: dummy0 [ 232.790272][T15426] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.815817][T15426] batman_adv: batadv0: Interface activated: dummy0 [ 232.839596][T15424] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.949791][T15424] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.042637][T15438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=280 sclass=netlink_route_socket pid=15438 comm=syz.5.3056 [ 233.090410][T15424] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.171133][T15449] loop5: detected capacity change from 0 to 2048 [ 233.203303][T15449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.214579][T15424] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.216971][T15449] netlink: 'syz.5.3065': attribute type 6 has an invalid length. [ 233.237154][T15449] 9p: Bad value for 'source' [ 233.294011][T15453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3065'. [ 233.324953][T10731] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.335353][T15453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3065'. [ 233.383851][T10716] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.392277][T15453] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15453 comm=syz.5.3065 [ 233.434529][T10716] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.474751][T10716] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.008604][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.089907][T15482] loop0: detected capacity change from 0 to 512 [ 234.108561][T15482] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.3072: iget: immutable or append flags not allowed on symlinks [ 234.135759][T15482] loop0: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 234.135879][T15482] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3072: couldn't read orphan inode 17 (err -117) [ 234.157152][T15482] loop0: lost filesystem error report for type 5 error -117 [ 234.157600][T15482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.186973][T12487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.216962][T15487] 9p: Bad value for 'rfdno' [ 234.287085][T15492] 9p: Bad value for 'wfdno' [ 234.392273][T15485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15485 comm=syz.5.3071 [ 234.481408][T15495] can0: slcan on ptm0. [ 234.535217][T15499] loop0: detected capacity change from 0 to 512 [ 234.555343][T15499] EXT4-fs: Ignoring removed oldalloc option [ 234.575291][T15499] EXT4-fs (loop0): 1 truncate cleaned up [ 234.597934][T15499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.631428][T15493] can0 (unregistered): slcan off ptm0. [ 234.643817][T15499] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.3075: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 234.710635][T15499] EXT4-fs (loop0): Remounting filesystem read-only [ 234.784770][T15518] loop5: detected capacity change from 0 to 512 [ 234.793800][T12487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.809267][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 234.809283][ T28] audit: type=1400 audit(1770900579.449:2688): avc: denied { ioctl } for pid=15519 comm="syz.7.3080" path="socket:[49930]" dev="sockfs" ino=49930 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 234.850299][T15524] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 234.856884][T15524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 234.864875][T15524] vhci_hcd vhci_hcd.0: Device attached [ 234.871257][T15525] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 234.879815][T10716] vhci_hcd vhci_hcd.0: stop threads [ 234.885136][T10716] vhci_hcd vhci_hcd.0: release socket [ 234.890566][T10716] vhci_hcd vhci_hcd.0: disconnect device [ 234.927993][T15518] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 234.949183][T15518] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.984111][T15518] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 235.026535][T15518] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 235.055462][T15518] EXT4-fs error (device loop5): ext4_acquire_dquot:6998: comm syz.5.3079: Failed to acquire dquot type 1 [ 235.084633][T15518] loop5: lost filesystem error report for type 5 error -117 [ 235.086744][T15518] EXT4-fs (loop5): Remounting filesystem read-only [ 235.109106][T15518] EXT4-fs (loop5): 1 truncate cleaned up [ 235.115032][T10730] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 235.125816][T15548] 9p: Bad value for 'rfdno' [ 235.130488][T10730] Quota error (device loop5): write_blk: dquota write failed [ 235.139742][T10730] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 235.150785][T10730] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 235.181107][T10730] Quota error (device loop5): write_blk: dquota write failed [ 235.190433][T10730] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 235.202777][T10730] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 235.213298][T10730] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 235.216192][T15561] loop2: detected capacity change from 0 to 128 [ 235.223139][T15518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 235.241439][T15562] 9p: Bad value for 'wfdno' [ 235.262317][T15561] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.264893][T15565] netlink: 'syz.6.3090': attribute type 1 has an invalid length. [ 235.282455][T15561] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.306285][T15565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.321258][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 235.360731][T15565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 235.378169][T15565] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 235.389151][T12711] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.401559][T15576] loop7: detected capacity change from 0 to 512 [ 235.402478][T15575] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3090'. [ 235.409533][T15576] EXT4-fs: Ignoring removed nobh option [ 235.423713][T15565] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 235.451233][T15576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.464819][T15576] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.492985][T15585] loop6: detected capacity change from 0 to 164 [ 235.509401][T15575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3090'. [ 235.568525][T15565] gretap1: entered promiscuous mode [ 235.575212][T15571] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.641831][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.650838][T15571] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.650845][T15576] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.650989][T15576] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.692530][T15580] syzkaller0: entered promiscuous mode [ 235.698030][T15580] syzkaller0: entered allmulticast mode [ 235.709302][T15575] macvlan2: entered promiscuous mode [ 235.714755][T15575] macvlan2: entered allmulticast mode [ 235.725132][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.725687][T15589] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.748049][T15589] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.757385][T15589] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.757962][ T28] audit: type=1400 audit(1770900580.389:2689): avc: denied { write } for pid=15570 comm="syz.7.3092" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.793275][T15576] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.811018][T15583] loop0: detected capacity change from 0 to 32768 [ 235.838629][T15589] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.861562][T15571] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 235.866760][ T28] audit: type=1400 audit(1770900580.439:2690): avc: denied { read } for pid=15570 comm="syz.7.3092" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 235.876179][T15589] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.901605][T15594] loop6: detected capacity change from 0 to 512 [ 235.913594][T15594] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 235.936990][T15571] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.964610][T15576] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 235.981148][T15594] EXT4-fs (loop6): 1 truncate cleaned up [ 236.006590][T15599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3098'. [ 236.024391][T15594] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.131859][T13279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.149620][T15606] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.3101'. [ 236.171027][T15576] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 236.184844][T15576] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 236.194125][T15606] netlink: zone id is out of range [ 236.199293][T15606] netlink: zone id is out of range [ 236.205058][T15606] netlink: zone id is out of range [ 236.211696][T15606] netlink: zone id is out of range [ 236.216836][T15606] netlink: zone id is out of range [ 236.226332][T15606] netlink: zone id is out of range [ 236.231954][T15576] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3092: corrupted xattr block 32: bad e_name length [ 236.245867][T15606] netlink: zone id is out of range [ 236.261120][T15606] netlink: zone id is out of range [ 236.286967][T15606] netlink: zone id is out of range [ 236.292600][T15606] netlink: zone id is out of range [ 236.299855][T15611] 9p: Bad value for 'rfdno' [ 236.393881][T15607] lo speed is unknown, defaulting to 1000 [ 236.396495][T15615] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3103'. [ 236.426889][T15617] tipc: Can't bind to reserved service type 0 [ 236.477978][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.527685][T15607] geneve1 speed is unknown, defaulting to 1000 [ 236.534560][T15623] syzkaller0: entered promiscuous mode [ 236.542303][T15623] syzkaller0: entered allmulticast mode [ 236.546180][T15625] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 236.554463][T15625] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.562390][T15625] vhci_hcd vhci_hcd.0: Device attached [ 236.569328][T15628] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 236.576954][T10716] vhci_hcd vhci_hcd.7: stop threads [ 236.583593][T10716] vhci_hcd vhci_hcd.7: release socket [ 236.595677][T10716] vhci_hcd vhci_hcd.7: disconnect device [ 236.634648][T15632] EXT4-fs: Ignoring removed nobh option [ 236.643822][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3109'. [ 236.659606][T15632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.665975][T15633] vxlan0: entered promiscuous mode [ 236.684744][T15632] EXT4-fs (loop0): 1 truncate cleaned up [ 236.691649][T10716] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.731449][T10716] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.740370][T15632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.752814][T10716] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.769378][T10716] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 236.906656][T12487] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.109163][T15654] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3116'. [ 237.120275][T15646] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.303612][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.404137][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3123'. [ 237.464448][T15676] netlink: 105116 bytes leftover after parsing attributes in process `syz.7.3123'. [ 237.487875][T15685] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3127'. [ 237.520322][T15687] FAT-fs (loop6): bogus number of FAT sectors [ 237.538898][T15687] FAT-fs (loop6): Can't find a valid FAT filesystem [ 237.664016][T15699] EXT4-fs: Ignoring removed orlov option [ 237.667217][T15693] lo speed is unknown, defaulting to 1000 [ 237.691829][T15699] EXT4-fs (loop7): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 237.766680][T15699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.886114][T15709] netlink: 'syz.2.3134': attribute type 1 has an invalid length. [ 237.902835][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.026101][T15713] set_capacity_and_notify: 4 callbacks suppressed [ 238.026118][T15713] loop7: detected capacity change from 0 to 4096 [ 238.039339][T15709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.087244][T15713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.110470][T15711] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 238.166016][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.175146][T15711] bond2: entered allmulticast mode [ 238.182711][T15693] geneve1 speed is unknown, defaulting to 1000 [ 238.199625][ T3422] kernel read not supported for file /vcs (pid: 3422 comm: kworker/0:7) [ 238.484365][T15743] hub 2-0:1.0: USB hub found [ 238.489076][T15743] hub 2-0:1.0: 8 ports detected [ 238.604344][T15761] loop2: detected capacity change from 0 to 256 [ 238.625282][T15761] FAT-fs (loop2): bogus sectors per cluster 0 [ 238.632081][T15761] FAT-fs (loop2): Can't find a valid FAT filesystem [ 238.760446][T15769] loop6: detected capacity change from 0 to 1024 [ 238.772180][T15769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.784034][T15766] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 238.795627][T15766] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 238.804747][T15769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.879186][T13279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.905950][T15774] SELinux: Context ›Y7 is not valid (left unmapped). [ 238.971890][T15766] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 238.992503][T15766] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.030497][T15774] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 239.042533][T15774] bond2 (unregistering): Released all slaves [ 239.110329][T15766] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 239.121425][T15766] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.267110][T15780] loop5: detected capacity change from 0 to 512 [ 239.272410][T15766] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 239.290520][T15766] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.299811][T15780] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 239.317508][T15780] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 239.337240][T15780] EXT4-fs (loop5): 1 truncate cleaned up [ 239.343585][T15780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.392276][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.568931][T10718] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33229 - 0 [ 239.579591][T15790] hub 2-0:1.0: USB hub found [ 239.584383][T15790] hub 2-0:1.0: 8 ports detected [ 239.602406][T15793] loop6: detected capacity change from 0 to 164 [ 239.635346][T10718] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.646177][T15793] rock: directory entry would overflow storage [ 239.652965][T10716] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33229 - 0 [ 239.677739][T15795] loop7: detected capacity change from 0 to 1024 [ 239.691428][T10716] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.710132][T15793] rock: sig=0x4f50, size=4, remaining=3 [ 239.733493][T15778] lo speed is unknown, defaulting to 1000 [ 239.740011][T10718] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33229 - 0 [ 239.749013][T10718] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.761463][T15793] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 239.768996][T10718] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33229 - 0 [ 239.781783][T10718] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 239.804422][T15795] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 239.821469][T15795] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.888142][T15778] geneve1 speed is unknown, defaulting to 1000 [ 240.152042][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 240.259677][T15817] loop5: detected capacity change from 0 to 1024 [ 240.381648][T15817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.507325][T15828] __nla_validate_parse: 4 callbacks suppressed [ 240.507368][T15828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'. [ 240.537147][T15829] can: request_module (can-proto-0) failed. [ 240.543745][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3166'. [ 240.608586][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.670342][T15828] wireguard0: entered promiscuous mode [ 240.707423][T15828] wireguard0: entered allmulticast mode [ 240.715106][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3167'. [ 240.719242][T15838] loop2: detected capacity change from 0 to 512 [ 240.772319][T15840] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3169'. [ 240.772994][T15838] ext4: Unknown parameter 'noacl' [ 240.885508][T15845] loop5: detected capacity change from 0 to 512 [ 240.891839][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 240.891856][ T28] audit: type=1326 audit(1770900585.519:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 240.901741][T15845] EXT4-fs: Ignoring removed bh option [ 240.933372][T15844] netlink: 'syz.6.3171': attribute type 3 has an invalid length. [ 240.941394][T15846] netlink: 'syz.6.3171': attribute type 3 has an invalid length. [ 240.949225][T15845] EXT4-fs: inline encryption not supported [ 240.982639][T15845] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 240.999440][T15854] tmpfs: Bad value for 'mpol' [ 241.009188][ T28] audit: type=1326 audit(1770900585.519:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.038727][T15857] loop6: detected capacity change from 0 to 512 [ 241.054972][T15857] EXT4-fs: Ignoring removed orlov option [ 241.062078][T15845] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 241.081192][T15857] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 241.089638][ T28] audit: type=1326 audit(1770900585.559:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f306518bce2 code=0x7ffc0000 [ 241.131565][ T28] audit: type=1326 audit(1770900585.559:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f306518bce2 code=0x7ffc0000 [ 241.155351][ T28] audit: type=1326 audit(1770900585.559:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.156840][T15857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 241.179065][ T28] audit: type=1326 audit(1770900585.559:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.179098][ T28] audit: type=1326 audit(1770900585.559:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.179127][ T28] audit: type=1326 audit(1770900585.559:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.179153][ T28] audit: type=1326 audit(1770900585.559:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.179217][ T28] audit: type=1326 audit(1770900585.559:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15843 comm="syz.6.3171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 241.317966][T15845] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3170: bg 0: block 248: padding at end of block bitmap is not set [ 241.332830][T15857] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.3175: corrupted in-inode xattr: e_value size too large [ 241.347777][T15845] loop5: lost filesystem error report for type 5 error -117 [ 241.348131][T15845] EXT4-fs error (device loop5): ext4_acquire_dquot:6998: comm syz.5.3170: Failed to acquire dquot type 1 [ 241.367029][T15857] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 241.367301][T15857] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.3175: couldn't read orphan inode 15 (err -117) [ 241.388983][T15845] loop5: lost filesystem error report for type 5 error -117 [ 241.389637][T15845] EXT4-fs (loop5): 1 truncate cleaned up [ 241.404047][T15845] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 241.416612][T15857] loop6: lost filesystem error report for type 5 error -117 [ 241.417968][T15857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.459043][T15842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.468694][T15842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.647884][T15845] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.3170: deleted inode referenced: 12 [ 241.871539][T13279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.943202][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3180'. [ 241.991546][T15878] 9p: Bad value for 'rfdno' [ 242.253419][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 242.494391][T15881] hub 2-0:1.0: USB hub found [ 242.499126][T15881] hub 2-0:1.0: 8 ports detected [ 242.597452][T15894] netlink: 642 bytes leftover after parsing attributes in process `syz.2.3186'. [ 242.652238][T15896] syzkaller0: entered promiscuous mode [ 242.663740][T15896] syzkaller0: entered allmulticast mode [ 242.688763][T15898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.713523][T15898] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3188: Allocating blocks 449-513 which overlap fs metadata [ 242.891078][T15903] EXT4-fs: Invalid commit interval 609405260, must be smaller than 21474836 [ 242.947781][T15907] lo speed is unknown, defaulting to 1000 [ 243.003876][ T3413] IPVS: starting estimator thread 0... [ 243.023646][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3192'. [ 243.046668][T15912] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3192'. [ 243.070517][T15907] geneve1 speed is unknown, defaulting to 1000 [ 243.071712][T15915] lo speed is unknown, defaulting to 1000 [ 243.121711][T15914] IPVS: using max 2352 ests per chain, 117600 per kthread [ 243.141071][T15920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3194'. [ 243.218331][T15915] geneve1 speed is unknown, defaulting to 1000 [ 243.225167][T15916] lo speed is unknown, defaulting to 1000 [ 243.392730][T15927] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3197'. [ 243.402332][T15924] hub 2-0:1.0: USB hub found [ 243.407009][T15924] hub 2-0:1.0: 8 ports detected [ 243.445003][T15916] geneve1 speed is unknown, defaulting to 1000 [ 243.500587][T15932] 9p: Bad value for 'rfdno' [ 243.533466][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.702923][T15949] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 243.709495][T15949] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 243.739942][T15949] vhci_hcd vhci_hcd.0: Device attached [ 243.770433][T15950] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 243.781607][T10718] vhci_hcd vhci_hcd.6: stop threads [ 243.790147][T10718] vhci_hcd vhci_hcd.6: release socket [ 243.802183][T10718] vhci_hcd vhci_hcd.6: disconnect device [ 244.007749][T15967] set_capacity_and_notify: 3 callbacks suppressed [ 244.007767][T15967] loop5: detected capacity change from 0 to 1024 [ 244.021701][T15967] EXT4-fs: Ignoring removed orlov option [ 244.031559][T15967] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 244.053797][T15967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.069736][T15966] program syz.5.3210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.150495][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.214240][T15973] hub 2-0:1.0: USB hub found [ 244.218988][T15973] hub 2-0:1.0: 8 ports detected [ 244.280490][T15977] loop5: detected capacity change from 0 to 1024 [ 244.291732][ C0] net_ratelimit: 14 callbacks suppressed [ 244.291748][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.318000][T15977] EXT4-fs: Mount option(s) incompatible with ext3 [ 244.474495][T15984] loop5: detected capacity change from 0 to 512 [ 244.494386][T15981] loop7: detected capacity change from 0 to 4096 [ 244.530029][T15984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.559153][T15981] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 244.577967][T15981] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.591488][T15984] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.733320][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.817300][T16006] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 244.838357][T16015] ip6t_REJECT: ECHOREPLY is not supported [ 244.889855][T16018] 9p: Bad value for 'rfdno' [ 244.890728][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.945906][T16020] hub 2-0:1.0: USB hub found [ 244.950691][T16020] hub 2-0:1.0: 8 ports detected [ 244.962463][T16022] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 244.969039][T16022] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 244.997062][T16022] vhci_hcd vhci_hcd.0: Device attached [ 245.018453][T16023] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 245.032927][T10732] vhci_hcd vhci_hcd.7: stop threads [ 245.040141][T10732] vhci_hcd vhci_hcd.7: release socket [ 245.049987][T10732] vhci_hcd vhci_hcd.7: disconnect device [ 245.169035][T16034] blkio.reset_stats is deprecated [ 245.179428][T16034] loop6: detected capacity change from 0 to 512 [ 245.190075][T16034] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 245.198257][T16034] EXT4-fs (loop6): orphan cleanup on readonly fs [ 245.205573][T16034] EXT4-fs error (device loop6): ext4_acquire_dquot:6998: comm syz.6.3229: Failed to acquire dquot type 1 [ 245.217134][T16034] loop6: lost filesystem error report for type 5 error -5 [ 245.217654][T16034] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3229: bg 0: block 40: padding at end of block bitmap is not set [ 245.239480][T16034] loop6: lost filesystem error report for type 5 error -117 [ 245.239881][T16034] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 245.256637][T16034] loop6: lost filesystem error report for type 5 error -117 [ 245.257274][T16034] EXT4-fs (loop6): 1 truncate cleaned up [ 245.271111][T16034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.301851][T16034] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.446423][T16050] tun0: tun_chr_ioctl cmd 1074025675 [ 245.451832][T16050] tun0: persist enabled [ 245.456120][T16050] tun0: tun_chr_ioctl cmd 1074025675 [ 245.461490][T16050] tun0: persist disabled [ 245.546422][T16058] loop7: detected capacity change from 0 to 512 [ 245.566486][T16060] __nla_validate_parse: 2 callbacks suppressed [ 245.566530][T16060] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3239'. [ 245.622773][T16061] loop2: detected capacity change from 0 to 512 [ 245.659642][T16061] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.678757][T16061] EXT4-fs (loop2): orphan cleanup on readonly fs [ 245.721068][T16061] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3237: Allocating blocks 41-42 which overlap fs metadata [ 245.739963][T16072] team0 (unregistering): Port device team_slave_0 removed [ 245.802892][T16072] team0 (unregistering): Port device team_slave_1 removed [ 245.879737][T16061] loop2: lost filesystem error report for type 5 error -117 [ 245.879981][T16061] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.3237: Allocating blocks 41-42 which overlap fs metadata [ 245.896026][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3243'. [ 245.931379][T16061] loop2: lost filesystem error report for type 5 error -117 [ 245.931629][T16061] __quota_error: 44 callbacks suppressed [ 245.931645][T16061] Quota error (device loop2): write_blk: dquota write failed [ 245.984344][T16061] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 246.008030][T16061] EXT4-fs error (device loop2): ext4_acquire_dquot:6998: comm syz.2.3237: Failed to acquire dquot type 1 [ 246.031408][T16061] loop2: lost filesystem error report for type 5 error -117 [ 246.031638][T16061] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 246.069105][T16061] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3237: corrupted inode contents [ 246.104360][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.105502][T16061] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.3237: mark_inode_dirty error [ 246.147051][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.147269][T16061] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3237: corrupted inode contents [ 246.218765][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.218967][T16061] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.3237: mark_inode_dirty error [ 246.281414][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.281598][T16061] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3237: corrupted inode contents [ 246.382071][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.382544][T16061] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 246.433198][T16061] loop2: lost filesystem error report for type 5 error -117 [ 246.433391][T16061] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.3237: corrupted inode contents [ 246.481348][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.481594][T16061] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.3237: mark_inode_dirty error [ 246.531106][ T28] audit: type=1400 audit(1770900591.159:2763): avc: denied { create } for pid=16086 comm="syz.7.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 246.548344][T16061] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 246.575365][T16061] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 246.629540][T16061] loop2: lost filesystem error report for type 5 error -117 [ 246.629875][T16061] EXT4-fs (loop2): 1 truncate cleaned up [ 246.662615][T16061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 246.664106][T16096] syzkaller0: entered promiscuous mode [ 246.701386][T16096] syzkaller0: entered allmulticast mode [ 246.711474][T16098] loop7: detected capacity change from 0 to 512 [ 246.729806][T16098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 246.802488][T16098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.825207][T16098] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.841753][T16098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3250'. [ 246.872362][T16104] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3251'. [ 246.956628][T16109] 9p: Bad value for 'rfdno' [ 246.979567][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.006515][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.040607][T16115] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3255'. [ 247.056332][T16113] hub 2-0:1.0: USB hub found [ 247.061235][T16113] hub 2-0:1.0: 8 ports detected [ 247.268024][ T28] audit: type=1326 audit(1770900591.849:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 247.345393][ T28] audit: type=1326 audit(1770900591.849:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 247.464525][ T28] audit: type=1326 audit(1770900591.849:2766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f306514c84e code=0x7ffc0000 [ 247.565750][ T28] audit: type=1326 audit(1770900591.849:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 247.599707][ T28] audit: type=1326 audit(1770900591.849:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 247.624048][ T28] audit: type=1326 audit(1770900591.849:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 247.647744][ T28] audit: type=1326 audit(1770900591.849:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.6.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306518bf79 code=0x7ffc0000 [ 247.689987][T16140] syzkaller0: entered promiscuous mode [ 247.695571][T16140] syzkaller0: entered allmulticast mode [ 247.752827][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3262'. [ 247.799129][T16144] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 247.805687][T16144] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 247.832111][T16144] vhci_hcd vhci_hcd.0: Device attached [ 247.850713][T16145] vhci_hcd: connection closed [ 247.850771][T10730] vhci_hcd vhci_hcd.5: stop threads [ 247.862214][T10730] vhci_hcd vhci_hcd.5: release socket [ 247.867650][T10730] vhci_hcd vhci_hcd.5: disconnect device [ 247.962587][T16152] loop2: detected capacity change from 0 to 512 [ 248.028883][T16152] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3266: invalid block [ 248.050904][T16152] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.051121][T16152] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3266: invalid indirect mapped block 4294967295 (level 1) [ 248.186850][T16152] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.356255][T16158] hub 2-0:1.0: USB hub found [ 248.408298][T16158] hub 2-0:1.0: 8 ports detected [ 248.585411][T16152] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.3266: invalid indirect mapped block 4294967295 (level 1) [ 248.611421][T16152] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.611958][T16152] EXT4-fs (loop2): 2 truncates cleaned up [ 248.631930][T16152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.645452][T16161] loop6: detected capacity change from 0 to 512 [ 248.653857][T16161] EXT4-fs: Ignoring removed i_version option [ 248.659946][T16161] EXT4-fs: Ignoring removed bh option [ 248.679704][T16161] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 248.679807][T16161] EXT4-fs: failed to create workqueue [ 248.709906][T16161] EXT4-fs (loop6): mount failed [ 248.745415][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.872344][T16181] 9p: Bad value for 'rfdno' [ 248.957139][T16196] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 248.963692][T16196] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 248.991441][T16196] vhci_hcd vhci_hcd.0: Device attached [ 249.002890][T16197] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 249.020135][T10731] vhci_hcd vhci_hcd.7: stop threads [ 249.038642][T10731] vhci_hcd vhci_hcd.7: release socket [ 249.050572][T16168] macsec2: entered allmulticast mode [ 249.062363][T10731] vhci_hcd vhci_hcd.7: disconnect device [ 249.065962][T16205] loop6: detected capacity change from 0 to 512 [ 249.071972][T16168] dummy0: entered allmulticast mode [ 249.085455][T16205] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 249.102761][T16205] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3281: invalid indirect mapped block 4294967295 (level 0) [ 249.119096][T16205] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 249.121243][T16205] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.3281: invalid indirect mapped block 4294967295 (level 1) [ 249.145436][T16205] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 249.146541][T16205] EXT4-fs (loop6): 1 orphan inode deleted [ 249.171658][T16205] EXT4-fs (loop6): 1 truncate cleaned up [ 249.181827][T16205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.226767][T10716] Bluetooth: hci0: Frame reassembly failed (-84) [ 249.230824][T16209] syzkaller0: entered promiscuous mode [ 249.238688][T16209] syzkaller0: entered allmulticast mode [ 249.246969][T16213] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3282'. [ 249.247137][T13279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.501289][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.510575][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.569722][T16237] 9p: Bad value for 'rfdno' [ 249.639155][T16244] loop7: detected capacity change from 0 to 2048 [ 249.655092][T16244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.667549][T16244] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.679587][T16244] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3292: bg 0: block 345: padding at end of block bitmap is not set [ 249.694275][T16244] EXT4-fs (loop7): Remounting filesystem read-only [ 249.700844][T16244] EXT4-fs warning (device loop7): ext4_xattr_inode_lookup_create:1607: inode #18: comm syz.7.3292: cleanup dec ref error -117 [ 249.734155][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.727999][T16255] syzkaller0: entered promiscuous mode [ 250.735459][T16255] syzkaller0: entered allmulticast mode [ 250.894025][T16257] netlink: 'syz.7.3296': attribute type 1 has an invalid length. [ 250.953224][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 250.953243][ T28] audit: type=1400 audit(1770900595.589:2803): avc: denied { map } for pid=16261 comm="syz.7.3298" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 251.013926][T16265] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 251.020488][T16265] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 251.028788][T16265] vhci_hcd vhci_hcd.0: Device attached [ 251.035144][T16266] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 251.042410][T10716] vhci_hcd vhci_hcd.7: stop threads [ 251.047864][T10716] vhci_hcd vhci_hcd.7: release socket [ 251.053924][T10716] vhci_hcd vhci_hcd.7: disconnect device [ 251.251421][ T3629] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.279506][T16269] 9p: Bad value for 'rfdno' [ 251.870283][T16279] loop7: detected capacity change from 0 to 512 [ 251.913587][T16279] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.960296][T16279] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #17: comm syz.7.3303: inode has both inline data and extents flags [ 251.974640][T16279] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 251.976269][T16279] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3303: couldn't read orphan inode 17 (err -117) [ 251.998988][T16279] loop7: lost filesystem error report for type 5 error -117 [ 252.011205][T16279] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.104885][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.166753][T16286] batadv_slave_1: entered promiscuous mode [ 252.252785][T16288] futex_wake_op: syz.5.3305 tries to shift op by -1; fix this program [ 252.376900][T16285] batadv_slave_1: left promiscuous mode [ 252.389268][T16292] syzkaller0: entered promiscuous mode [ 252.394846][T16292] syzkaller0: entered allmulticast mode [ 252.492639][T16296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3309'. [ 252.521212][T16300] netlink: 'syz.7.3310': attribute type 21 has an invalid length. [ 252.546313][T10733] smc: removing ib device syz1 [ 252.563666][T16297] lo speed is unknown, defaulting to 1000 [ 252.578993][T16307] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3309'. [ 252.607579][T16300] netlink: 'syz.7.3310': attribute type 1 has an invalid length. [ 252.615761][T16300] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3310'. [ 252.625844][ T3422] syz1: Port: 1 Link DOWN [ 252.634682][ T28] audit: type=1400 audit(1770900597.269:2804): avc: denied { connect } for pid=16294 comm="syz.6.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 252.634875][T16297] geneve1 speed is unknown, defaulting to 1000 [ 252.677899][T16313] 9p: Bad value for 'rfdno' [ 252.718246][T16318] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 252.724861][T16318] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 252.734018][T16318] vhci_hcd vhci_hcd.0: Device attached [ 252.758834][T16320] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 252.768376][ T1675] vhci_hcd vhci_hcd.2: stop threads [ 252.777257][ T1675] vhci_hcd vhci_hcd.2: release socket [ 252.790392][ T1675] vhci_hcd vhci_hcd.2: disconnect device [ 252.799581][T16301] lo speed is unknown, defaulting to 1000 [ 252.885324][T16301] geneve1 speed is unknown, defaulting to 1000 [ 253.006057][T16327] loop5: detected capacity change from 0 to 8192 [ 253.033381][T16301] chnl_net:caif_netlink_parms(): no params data found [ 253.110519][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.126907][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.134198][T16301] bridge_slave_0: entered allmulticast mode [ 253.140889][T16301] bridge_slave_0: entered promiscuous mode [ 253.147703][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.154926][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.162136][T16301] bridge_slave_1: entered allmulticast mode [ 253.168653][T16301] bridge_slave_1: entered promiscuous mode [ 253.175042][T16333] loop5: detected capacity change from 0 to 8192 [ 253.187194][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.197873][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.218743][T16301] team0: Port device team_slave_0 added [ 253.225787][T16301] team0: Port device team_slave_1 added [ 253.248977][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.268820][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.303944][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.332592][T10731] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.364031][T10731] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.394950][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.407677][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.443113][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.444462][T16353] 9p: Bad value for 'rfdno' [ 253.490190][T16352] syzkaller0: entered promiscuous mode [ 253.505422][T16352] syzkaller0: entered allmulticast mode [ 253.512063][T16358] futex_wake_op: syz.5.3325 tries to shift op by -1; fix this program [ 253.532530][T10731] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.542606][T10731] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.569222][ T28] audit: type=1400 audit(1770900598.199:2805): avc: denied { setopt } for pid=16359 comm="syz.6.3326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 253.595423][T16301] hsr_slave_0: entered promiscuous mode [ 253.601901][T16301] hsr_slave_1: entered promiscuous mode [ 253.607978][T16301] debugfs: 'hsr0' already exists in 'hsr' [ 253.614588][T16301] Cannot create hsr debugfs directory [ 253.632364][T10731] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.642234][T10731] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.672159][T16364] FAULT_INJECTION: forcing a failure. [ 253.672159][T16364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.685641][T16364] CPU: 0 UID: 0 PID: 16364 Comm: syz.7.3327 Tainted: G W syzkaller #0 PREEMPT(full) [ 253.685706][T16364] Tainted: [W]=WARN [ 253.685714][T16364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 253.685728][T16364] Call Trace: [ 253.685734][T16364] [ 253.685741][T16364] __dump_stack+0x1d/0x30 [ 253.685765][T16364] dump_stack_lvl+0x95/0xd0 [ 253.685785][T16364] dump_stack+0x15/0x1b [ 253.685859][T16364] should_fail_ex+0x263/0x280 [ 253.685892][T16364] should_fail+0xb/0x20 [ 253.685915][T16364] should_fail_usercopy+0x1a/0x20 [ 253.685959][T16364] _copy_from_user+0x1c/0xb0 [ 253.685996][T16364] __sys_bpf+0x183/0x7e0 [ 253.686078][T16364] __x64_sys_bpf+0x41/0x50 [ 253.686109][T16364] x64_sys_call+0x10cb/0x3020 [ 253.686139][T16364] do_syscall_64+0x12c/0x370 [ 253.686176][T16364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.686198][T16364] RIP: 0033:0x7f96f188bf79 [ 253.686217][T16364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.686237][T16364] RSP: 002b:00007f96f02df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 253.686303][T16364] RAX: ffffffffffffffda RBX: 00007f96f1b05fa0 RCX: 00007f96f188bf79 [ 253.686319][T16364] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 253.686335][T16364] RBP: 00007f96f02df090 R08: 0000000000000000 R09: 0000000000000000 [ 253.686382][T16364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.686394][T16364] R13: 00007f96f1b06038 R14: 00007f96f1b05fa0 R15: 00007ffc7c852908 [ 253.686452][T16364] [ 253.859851][T16367] netlink: 'syz.6.3328': attribute type 1 has an invalid length. [ 253.891184][T10731] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.904649][T10731] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.993694][T16380] lo speed is unknown, defaulting to 1000 [ 254.017340][T10731] bridge_slave_1: left allmulticast mode [ 254.024661][T10731] bridge_slave_1: left promiscuous mode [ 254.030430][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.042854][ T28] audit: type=1400 audit(1770900598.679:2806): avc: denied { watch } for pid=16371 comm="syz.2.3330" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 254.068707][T10731] bridge_slave_0: left allmulticast mode [ 254.074483][T10731] bridge_slave_0: left promiscuous mode [ 254.080282][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.293951][T10731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.304263][T10731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.314314][T10731] bond0 (unregistering): Released all slaves [ 254.322143][T10731] bond1 (unregistering): Released all slaves [ 254.330312][T10731] bond2 (unregistering): Released all slaves [ 254.339151][T10731] bond3 (unregistering): (slave veth3): Releasing active interface [ 254.348641][T10731] bond3 (unregistering): Released all slaves [ 254.356714][T16380] geneve1 speed is unknown, defaulting to 1000 [ 254.356800][ T23] geneve1 speed is unknown, defaulting to 1000 [ 254.363642][ T23] syz0: Port: 1 Link DOWN [ 254.395981][T10731] tipc: Disabling bearer [ 254.403954][T10731] tipc: Left network mode [ 254.429626][T16411] 9p: Bad value for 'rfdno' [ 254.479556][T10731] hsr_slave_0: left promiscuous mode [ 254.485661][T10731] hsr_slave_1: left promiscuous mode [ 254.491820][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.499385][T10731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.508126][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.516819][T10731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.532995][T10731] batman_adv: batadv0: Interface deactivated: dummy0 [ 254.543881][T10731] batman_adv: batadv0: Removing interface: dummy0 [ 254.554239][T10731] veth1_macvtap: left allmulticast mode [ 254.560040][T10731] veth1_macvtap: left promiscuous mode [ 254.573241][T10731] veth0_macvtap: left promiscuous mode [ 254.578838][T10731] veth1_vlan: left promiscuous mode [ 254.589810][T10731] veth0_vlan: left promiscuous mode [ 254.690804][T16435] netlink: 'syz.5.3336': attribute type 1 has an invalid length. [ 254.732995][T10731] team0 (unregistering): Port device team_slave_1 removed [ 254.749068][T10731] team0 (unregistering): Port device team_slave_0 removed [ 254.847520][T16435] bond1: entered promiscuous mode [ 254.868519][T16435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.922911][T16447] bond1: (slave bridge3): making interface the new active one [ 254.930473][T16447] bridge3: entered promiscuous mode [ 254.940795][T16447] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 255.054725][T16472] 9p: Bad value for 'rfdno' [ 255.123972][T16482] FAULT_INJECTION: forcing a failure. [ 255.123972][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 255.175658][T16482] CPU: 1 UID: 0 PID: 16482 Comm: syz.7.3342 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.175770][T16482] Tainted: [W]=WARN [ 255.175789][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.175801][T16482] Call Trace: [ 255.175808][T16482] [ 255.175817][T16482] __dump_stack+0x1d/0x30 [ 255.175843][T16482] dump_stack_lvl+0x95/0xd0 [ 255.175866][T16482] dump_stack+0x15/0x1b [ 255.175897][T16482] should_fail_ex+0x263/0x280 [ 255.175935][T16482] should_failslab+0x8c/0xb0 [ 255.175965][T16482] __kmalloc_cache_node_noprof+0x6b/0x470 [ 255.176005][T16482] ? __get_vm_area_node+0x106/0x1d0 [ 255.176092][T16482] __get_vm_area_node+0x106/0x1d0 [ 255.176141][T16482] __vmalloc_node_range_noprof+0x291/0x12b0 [ 255.176241][T16482] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 255.176271][T16482] ? selinux_file_open+0x2e6/0x330 [ 255.176375][T16482] ? __rcu_read_unlock+0x4e/0x70 [ 255.176411][T16482] ? avc_has_perm_noaudit+0xab/0x130 [ 255.176441][T16482] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 255.176485][T16482] __vmalloc_noprof+0xa4/0xf0 [ 255.176544][T16482] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 255.176616][T16482] bpf_prog_alloc_no_stats+0x47/0x390 [ 255.176718][T16482] ? bpf_prog_alloc+0x2a/0x150 [ 255.176748][T16482] bpf_prog_alloc+0x3c/0x150 [ 255.176815][T16482] bpf_prog_load+0x506/0x1140 [ 255.176868][T16482] ? security_bpf+0x2b/0x90 [ 255.176901][T16482] __sys_bpf+0x505/0x7e0 [ 255.177045][T16482] __x64_sys_bpf+0x41/0x50 [ 255.177116][T16482] x64_sys_call+0x10cb/0x3020 [ 255.177144][T16482] do_syscall_64+0x12c/0x370 [ 255.177251][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.177276][T16482] RIP: 0033:0x7f96f188bf79 [ 255.177294][T16482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.177314][T16482] RSP: 002b:00007f96f02df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.177344][T16482] RAX: ffffffffffffffda RBX: 00007f96f1b05fa0 RCX: 00007f96f188bf79 [ 255.177360][T16482] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 255.177373][T16482] RBP: 00007f96f02df090 R08: 0000000000000000 R09: 0000000000000000 [ 255.177455][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.177469][T16482] R13: 00007f96f1b06038 R14: 00007f96f1b05fa0 R15: 00007ffc7c852908 [ 255.177489][T16482] [ 255.180811][T16482] syz.7.3342: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 255.217872][T16487] futex_wake_op: syz.6.3344 tries to shift op by -1; fix this program [ 255.322207][T16482] ,cpuset=/,mems_allowed=0 [ 255.456480][T16482] CPU: 1 UID: 0 PID: 16482 Comm: syz.7.3342 Tainted: G W syzkaller #0 PREEMPT(full) [ 255.456514][T16482] Tainted: [W]=WARN [ 255.456528][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 255.456541][T16482] Call Trace: [ 255.456548][T16482] [ 255.456624][T16482] __dump_stack+0x1d/0x30 [ 255.456652][T16482] dump_stack_lvl+0x95/0xd0 [ 255.456727][T16482] dump_stack+0x15/0x1b [ 255.456757][T16482] warn_alloc+0x145/0x1c0 [ 255.456794][T16482] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 255.456907][T16482] ? selinux_file_open+0x2e6/0x330 [ 255.456940][T16482] ? __rcu_read_unlock+0x4e/0x70 [ 255.456970][T16482] ? avc_has_perm_noaudit+0xab/0x130 [ 255.457020][T16482] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 255.457052][T16482] __vmalloc_noprof+0xa4/0xf0 [ 255.457142][T16482] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 255.457172][T16482] bpf_prog_alloc_no_stats+0x47/0x390 [ 255.457202][T16482] ? bpf_prog_alloc+0x2a/0x150 [ 255.457279][T16482] bpf_prog_alloc+0x3c/0x150 [ 255.457309][T16482] bpf_prog_load+0x506/0x1140 [ 255.457369][T16482] ? security_bpf+0x2b/0x90 [ 255.457400][T16482] __sys_bpf+0x505/0x7e0 [ 255.457495][T16482] __x64_sys_bpf+0x41/0x50 [ 255.457647][T16482] x64_sys_call+0x10cb/0x3020 [ 255.457729][T16482] do_syscall_64+0x12c/0x370 [ 255.457831][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.457856][T16482] RIP: 0033:0x7f96f188bf79 [ 255.457875][T16482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.457895][T16482] RSP: 002b:00007f96f02df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 255.457917][T16482] RAX: ffffffffffffffda RBX: 00007f96f1b05fa0 RCX: 00007f96f188bf79 [ 255.458007][T16482] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 255.458022][T16482] RBP: 00007f96f02df090 R08: 0000000000000000 R09: 0000000000000000 [ 255.458037][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.458051][T16482] R13: 00007f96f1b06038 R14: 00007f96f1b05fa0 R15: 00007ffc7c852908 [ 255.458070][T16482] [ 255.458078][T16482] Mem-Info: [ 255.675352][T16482] active_anon:27685 inactive_anon:2 isolated_anon:0 [ 255.675352][T16482] active_file:26223 inactive_file:2627 isolated_file:0 [ 255.675352][T16482] unevictable:0 dirty:141 writeback:0 [ 255.675352][T16482] slab_reclaimable:4249 slab_unreclaimable:39677 [ 255.675352][T16482] mapped:35183 shmem:17575 pagetables:5472 [ 255.675352][T16482] sec_pagetables:0 bounce:0 [ 255.675352][T16482] kernel_misc_reclaimable:0 [ 255.675352][T16482] free:1817593 free_pcp:8867 free_cma:0 [ 255.721077][T16482] Node 0 active_anon:110740kB inactive_anon:8kB active_file:104892kB inactive_file:10508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:140732kB dirty:564kB writeback:0kB shmem:70300kB kernel_stack:5040kB pagetables:21888kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.751780][T16482] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.782216][T16482] lowmem_reserve[]: 0 2880 7858 7858 [ 255.790484][T16482] Node 0 DMA32 free:2945812kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949340kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 255.830429][T16482] lowmem_reserve[]: 0 0 4978 4978 [ 255.835802][T16482] Node 0 Normal free:4310764kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110536kB inactive_anon:8kB active_file:104892kB inactive_file:10520kB unevictable:0kB writepending:576kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:31288kB local_pcp:7496kB free_cma:0kB [ 255.894195][T16482] lowmem_reserve[]: 0 0 0 0 [ 255.909607][T16482] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.927173][T16482] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 1*32kB (M) 4*64kB (M) 1*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2945812kB [ 255.944692][T16482] Node 0 Normal: 5211*4kB (UME) 3223*8kB (UME) 1266*16kB (UM) 514*32kB (UME) 183*64kB (UME) 149*128kB (UM) 143*256kB (UM) 112*512kB (UM) 103*1024kB (UME) 72*2048kB (UME) 940*4096kB (UM) = 4311236kB [ 255.980031][T16514] loop2: detected capacity change from 0 to 128 [ 255.981022][T16516] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.003586][T16482] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 256.025615][T16482] 46413 total pagecache pages [ 256.030316][T16482] 3 pages in swap cache [ 256.038498][T16482] Free swap = 124984kB [ 256.045167][T16527] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3346'. [ 256.070977][T16482] Total swap = 124996kB [ 256.076107][T16482] 2097051 pages RAM [ 256.079945][T16482] 0 pages HighMem/MovableOnly [ 256.106846][T16482] 81316 pages reserved [ 256.120744][T16301] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.173388][T16301] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.194657][T16301] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.240750][T16516] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.334221][T16301] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.345692][T16545] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 256.356021][T16545] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.372304][T16531] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3347'. [ 256.403292][T16516] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.450736][T16545] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 256.462851][T16545] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.505109][T16516] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.650265][T16514] vlan2: entered promiscuous mode [ 256.657841][T16514] hsr_slave_1: entered promiscuous mode [ 256.670097][T16514] vlan2: entered allmulticast mode [ 256.676759][T16514] hsr_slave_1: entered allmulticast mode [ 256.702598][T16545] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 256.720486][T16545] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.754436][T10716] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.808616][T16545] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 256.818959][T16545] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.838058][T10731] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.857170][T10716] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.892875][T10716] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.903273][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.920096][T16590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 256.944931][T16590] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.969190][T16604] loop7: detected capacity change from 0 to 512 [ 256.971664][T16605] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3349'. [ 256.977679][T16604] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.030063][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.037673][T10716] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 34534 - 0 [ 257.045996][T10716] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.061595][T10716] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 34534 - 0 [ 257.087872][T10716] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.109472][T10718] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 34534 - 0 [ 257.119198][T10718] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.161331][T16590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 257.176130][T16590] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.217257][T16644] IPVS: set_ctl: invalid protocol: 46 172.20.20.170:20001 [ 257.332718][T10730] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.339837][T10730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.368027][T10730] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 34534 - 0 [ 257.379416][T10730] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.397680][T10733] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.404817][T10733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.419297][T16660] futex_wake_op: syz.7.3356 tries to shift op by -1; fix this program [ 257.494939][T16667] loop6: detected capacity change from 0 to 512 [ 257.515461][T16590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 257.528804][T16590] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.554437][T16667] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 257.563609][T16667] EXT4-fs (loop6): orphan cleanup on readonly fs [ 257.572665][T16667] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 4294967295 out of range 0-7 [ 257.583677][T16667] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 257.594029][T16667] EXT4-fs error (device loop6): ext4_acquire_dquot:6998: comm syz.6.3358: Failed to acquire dquot type 1 [ 257.605420][T16667] loop6: lost filesystem error report for type 5 error -117 [ 257.606161][T16667] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3358: corrupted inode contents [ 257.663042][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.663191][T16667] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.3358: mark_inode_dirty error [ 257.695597][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.695807][T16667] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3358: corrupted inode contents [ 257.699586][T16590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 257.705451][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.741616][T16590] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 257.741830][T16667] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.3358: mark_inode_dirty error [ 257.780756][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.781029][T16667] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3358: corrupted inode contents [ 257.806149][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.807401][T16667] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 257.812259][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.823767][T16667] loop6: lost filesystem error report for type 5 error -117 [ 257.835819][T16677] loop5: detected capacity change from 0 to 32768 [ 257.851585][T16667] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.3358: corrupted inode contents [ 257.861380][T10716] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33229 - 0 [ 257.872540][T10716] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.874042][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.882802][T10716] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33229 - 0 [ 257.900531][T16667] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.3358: mark_inode_dirty error [ 257.903890][ T9001] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 257.913287][T16667] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 257.917174][T16667] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 257.921506][ T9001] loop5: p1 start 460800 is beyond EOD, [ 257.926758][T16667] loop6: lost filesystem error report for type 5 error -117 [ 257.939848][T10716] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 257.941690][T16667] EXT4-fs (loop6): 1 truncate cleaned up [ 257.948153][ T9001] truncated [ 257.957257][T16667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 257.962601][ T9001] loop5: p2 size 83886080 extends beyond EOD, [ 257.971194][T10730] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33229 - 0 [ 257.993005][ T9001] truncated [ 257.997899][ T9001] loop5: p5 start 460800 is beyond EOD, truncated [ 258.007403][T10730] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 258.018089][T16694] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3359'. [ 258.028102][ T9001] loop5: p6 size 83886080 extends beyond EOD, truncated [ 258.037501][T10730] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33229 - 0 [ 258.054435][T10730] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 258.062996][T16677] loop5: p1 p2 p3 < > p4 < p5 p6 > [ 258.068534][T16677] loop5: p1 start 460800 is beyond EOD, truncated [ 258.075418][T16677] loop5: p2 size 83886080 extends beyond EOD, truncated [ 258.091626][T16677] loop5: p5 start 460800 is beyond EOD, truncated [ 258.099327][T16677] loop5: p6 size 83886080 extends beyond EOD, truncated [ 258.149829][T16699] lo speed is unknown, defaulting to 1000 [ 258.190234][T16667] IPVS: length: 109 != 176959756384 [ 258.258787][T13279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 258.312098][T16716] loop6: detected capacity change from 0 to 512 [ 258.364432][T16716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.418827][T16716] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.457944][T16301] veth0_vlan: entered promiscuous mode [ 258.458430][ T9001] udevd[9001]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 258.467824][ T8999] udevd[8999]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 258.475318][ T9143] udevd[9143]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 258.484395][T16717] netlink: 'syz.6.3362': attribute type 1 has an invalid length. [ 258.501867][ T9144] udevd[9144]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 258.525831][T16741] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.545220][ T9144] udevd[9144]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 258.545493][ T9001] udevd[9001]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 258.561708][ T8999] udevd[8999]: inotify_add_watch(7, /dev/loop5p6, 10) failed: No such file or directory [ 258.566779][ T9143] udevd[9143]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 258.602790][T16301] veth1_vlan: entered promiscuous mode [ 258.610716][T16716] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 258.629514][T16716] ip6erspan0: entered promiscuous mode [ 258.641731][T16751] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3367'. [ 258.677894][T16717] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 258.716529][T16741] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.758207][T13279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.782521][T16301] veth0_macvtap: entered promiscuous mode [ 258.792423][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3371'. [ 258.806707][T16301] veth1_macvtap: entered promiscuous mode [ 258.845565][T16741] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.869681][T16772] syzkaller0: entered promiscuous mode [ 258.877182][T16772] syzkaller0: entered allmulticast mode [ 258.887628][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.002371][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.010372][T16741] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.023555][T16786] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 259.033766][T16786] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.054126][T10733] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.065973][T10733] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.076488][T10733] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.089569][T10733] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.115962][T16786] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 259.126774][T16795] loop2: detected capacity change from 0 to 2048 [ 259.128033][T16786] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.165322][T10718] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.194308][T16786] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 259.205991][ T9001] Alternate GPT is invalid, using primary GPT. [ 259.212407][ T9001] loop2: p1 p2 p3 [ 259.213212][T16786] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.242487][T16795] Alternate GPT is invalid, using primary GPT. [ 259.249019][T16795] loop2: p1 p2 p3 [ 259.259186][T10718] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.282412][T16806] loop8: detected capacity change from 0 to 512 [ 259.295191][T16806] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 259.306182][T16806] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #15: block 1803188595: comm syz.8.3307: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 259.322893][T16806] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 259.324895][T16786] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 33229 - 0 [ 259.332121][T16806] EXT4-fs (loop8): mount failed [ 259.357612][T16786] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.392846][T10731] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.418250][T10731] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.573314][T16823] loop8: detected capacity change from 0 to 128 [ 259.695849][T16834] loop7: detected capacity change from 0 to 1024 [ 259.705584][T16834] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 259.718264][T16834] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.3385: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 259.739136][T16834] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 259.739241][T16834] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3385: couldn't read orphan inode 11 (err -117) [ 259.761351][T16834] loop7: lost filesystem error report for type 5 error -117 [ 259.763308][T16834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.766353][T16832] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 259.796931][T16834] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3385: Invalid block bitmap block 0 in block_group 0 [ 259.810964][T16834] Quota error (device loop7): write_blk: dquota write failed [ 259.811695][T16840] netlink: 112 bytes leftover after parsing attributes in process `syz.6.3384'. [ 259.818867][T16832] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.851449][T16834] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 259.862264][T16834] EXT4-fs error (device loop7): ext4_acquire_dquot:6998: comm syz.7.3385: Failed to acquire dquot type 0 [ 259.889184][T16836] loop8: detected capacity change from 0 to 8192 [ 259.901704][T16836] vfat: Unknown parameter 'Ä©ªŸ‡Ì”ãï¶Ii$VF<§J¦­Kõ Ë' [ 259.914963][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.975617][T16842] macsec0: entered promiscuous mode [ 259.995036][T16842] macsec0: entered allmulticast mode [ 260.005687][T16842] veth1_macvtap: entered allmulticast mode [ 260.040752][T16852] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.059198][T16832] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 260.070076][T16832] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.107035][T16842] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3388'. [ 260.163906][T16832] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 260.174885][T16832] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.234188][T16852] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.272761][T16832] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 34534 - 0 [ 260.284228][T16832] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 260.340324][T16854] can0: slcan on ptm0. [ 260.364156][ T9001] loop7: p1 p2 p3 [ 260.375449][T16856] loop7: p1 p2 p3 [ 260.387094][T16852] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.404598][T16853] can0 (unregistered): slcan off ptm0. [ 260.414139][ T28] audit: type=1400 audit(1770900605.039:2807): avc: denied { write } for pid=16855 comm="syz.7.3400" name="loop7p1" dev="devtmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.453562][T16856] lo speed is unknown, defaulting to 1000 [ 260.483899][ T28] audit: type=1400 audit(1770900605.039:2808): avc: denied { open } for pid=16855 comm="syz.7.3400" path="/dev/loop7p1" dev="devtmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.539774][ T28] audit: type=1400 audit(1770900605.039:2809): avc: denied { ioctl } for pid=16855 comm="syz.7.3400" path="/dev/loop7p1" dev="devtmpfs" ino=1687 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 260.568930][T16852] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.690205][T10718] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.713195][T10716] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.731075][T10718] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.755255][T10718] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.820023][ T28] audit: type=1326 audit(1770900605.449:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16897 comm="syz.7.3396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f188bf79 code=0x0 [ 260.866567][ T3422] kernel write not supported for file [eventfd] (pid: 3422 comm: kworker/0:7) [ 261.000323][T16914] set_capacity_and_notify: 1 callbacks suppressed [ 261.000335][T16914] loop8: detected capacity change from 0 to 1024 [ 261.033061][T16914] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.049634][T16914] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 261.069739][T10731] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 34534 - 0 [ 261.079382][T10731] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.080185][T16301] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.091236][T10731] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 34534 - 0 [ 261.105683][T10731] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.123166][T10730] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 34534 - 0 [ 261.138437][T10730] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.163171][T10731] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 34534 - 0 [ 261.173926][T10731] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.202115][T16923] FAULT_INJECTION: forcing a failure. [ 261.202115][T16923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.215301][T16923] CPU: 1 UID: 0 PID: 16923 Comm: syz.6.3405 Tainted: G W syzkaller #0 PREEMPT(full) [ 261.215376][T16923] Tainted: [W]=WARN [ 261.215384][T16923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 261.215398][T16923] Call Trace: [ 261.215405][T16923] [ 261.215412][T16923] __dump_stack+0x1d/0x30 [ 261.215437][T16923] dump_stack_lvl+0x95/0xd0 [ 261.215538][T16923] dump_stack+0x15/0x1b [ 261.215562][T16923] should_fail_ex+0x263/0x280 [ 261.215644][T16923] should_fail+0xb/0x20 [ 261.215675][T16923] should_fail_usercopy+0x1a/0x20 [ 261.215706][T16923] _copy_from_iter+0x328/0xea0 [ 261.215770][T16923] tun_get_user+0x15f/0x27c0 [ 261.215795][T16923] ? __rcu_read_unlock+0x4e/0x70 [ 261.215831][T16923] ? ref_tracker_alloc+0x1f2/0x2f0 [ 261.215925][T16923] tun_chr_write_iter+0x15e/0x210 [ 261.215948][T16923] do_iter_readv_writev+0x4fd/0x5a0 [ 261.215978][T16923] vfs_writev+0x2e1/0x900 [ 261.216036][T16923] do_writev+0xe9/0x210 [ 261.216071][T16923] __x64_sys_writev+0x45/0x50 [ 261.216159][T16923] x64_sys_call+0x1c0c/0x3020 [ 261.216182][T16923] do_syscall_64+0x12c/0x370 [ 261.216276][T16923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.216297][T16923] RIP: 0033:0x7f306518bf79 [ 261.216312][T16923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.216329][T16923] RSP: 002b:00007f3063be7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 261.216357][T16923] RAX: ffffffffffffffda RBX: 00007f3065405fa0 RCX: 00007f306518bf79 [ 261.216370][T16923] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 261.216382][T16923] RBP: 00007f3063be7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.216393][T16923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.216405][T16923] R13: 00007f3065406038 R14: 00007f3065405fa0 R15: 00007ffc789452d8 [ 261.216425][T16923] [ 261.437616][T16928] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.507239][T16929] netlink: 112 bytes leftover after parsing attributes in process `syz.8.3407'. [ 261.519077][T16936] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=16936 comm=syz.6.3409 [ 261.580431][T16928] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.608604][T16940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3410'. [ 261.617585][T16943] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3410'. [ 261.755082][T16928] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.810535][T16953] loop5: detected capacity change from 0 to 1024 [ 261.822701][T10730] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 33229 - 0 [ 261.831161][T10730] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.840127][T10730] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 33229 - 0 [ 261.848527][T10730] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.851786][T16953] EXT4-fs: Ignoring removed bh option [ 261.901370][T10716] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 33229 - 0 [ 261.909734][T10716] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.931029][T10716] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 33229 - 0 [ 261.942221][T16953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.951142][T10716] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.970935][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'. [ 262.014620][T16928] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.015615][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.039196][T16961] netlink: 'syz.6.3419': attribute type 1 has an invalid length. [ 262.094291][T16961] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.139150][T16964] loop5: detected capacity change from 0 to 1024 [ 262.158894][T16964] EXT4-fs: Ignoring removed orlov option [ 262.237514][T16964] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 262.273464][T16951] loop7: detected capacity change from 0 to 512 [ 262.285735][T16964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.342728][T16988] netlink: 'syz.2.3426': attribute type 21 has an invalid length. [ 262.353347][T16988] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3426'. [ 262.398701][T16951] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 262.420211][T16951] System zones: 0-2, 18-18, 34-34 [ 262.427469][T16951] EXT4-fs (loop7): too many log groups per flexible block group [ 262.436069][T16951] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 262.455103][T16951] EXT4-fs (loop7): mount failed [ 262.537912][T17007] loop7: detected capacity change from 0 to 128 [ 262.545030][T17007] EXT4-fs: Ignoring removed nobh option [ 262.566358][T17007] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 262.579499][T17007] ext4 filesystem being mounted at /159/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 262.610165][ T28] audit: type=1400 audit(1770900607.239:2811): avc: denied { execute } for pid=17006 comm="syz.7.3430" path="/159/mnt/file1" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 262.689288][T14109] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.729236][T17009] loop2: detected capacity change from 0 to 1024 [ 262.733593][T17013] loop7: detected capacity change from 0 to 512 [ 262.735675][ T28] audit: type=1400 audit(1770900607.359:2812): avc: denied { watch } for pid=17012 comm="syz.7.3432" path="/syzcgroup/unified/syz7" dev="cgroup2" ino=222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 262.766251][T17013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 262.782841][T17009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.793667][T17013] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.811615][T17013] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.850187][T14109] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.964833][T13240] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.971360][T17026] can0: slcan on ttyS3. [ 263.022490][T17026] can0 (unregistered): slcan off ttyS3. [ 263.094434][T17042] can0: slcan on ttyS3. [ 263.202541][T17052] lo speed is unknown, defaulting to 1000 [ 263.212048][T17025] can0 (unregistered): slcan off ttyS3. [ 263.695434][T17062] loop7: detected capacity change from 0 to 512 [ 263.788622][T12711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.819591][T17073] __nla_validate_parse: 2 callbacks suppressed [ 263.819608][T17073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3442'. [ 263.859888][T17082] binfmt_misc: register: failed to install interpreter file ./file0 [ 263.964570][T17086] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3444'. [ 264.017905][T17090] tipc: Started in network mode [ 264.022913][T17090] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 264.031826][T17090] tipc: Enabling of bearer rejected, failed to enable media [ 264.065618][T17094] futex_wake_op: syz.5.3448 tries to shift op by -1; fix this program [ 264.217111][T17102] FAULT_INJECTION: forcing a failure. [ 264.217111][T17102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.230458][T17102] CPU: 0 UID: 0 PID: 17102 Comm: syz.2.3450 Tainted: G W syzkaller #0 PREEMPT(full) [ 264.230495][T17102] Tainted: [W]=WARN [ 264.230503][T17102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 264.230518][T17102] Call Trace: [ 264.230526][T17102] [ 264.230534][T17102] __dump_stack+0x1d/0x30 [ 264.230614][T17102] dump_stack_lvl+0x95/0xd0 [ 264.230650][T17102] dump_stack+0x15/0x1b [ 264.230674][T17102] should_fail_ex+0x263/0x280 [ 264.230706][T17102] should_fail+0xb/0x20 [ 264.230734][T17102] should_fail_usercopy+0x1a/0x20 [ 264.230842][T17102] _copy_to_user+0x20/0xa0 [ 264.230879][T17102] simple_read_from_buffer+0xb5/0x130 [ 264.230962][T17102] proc_fail_nth_read+0x10e/0x150 [ 264.230988][T17102] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.231012][T17102] vfs_read+0x1ab/0x7f0 [ 264.231077][T17102] ? __rcu_read_unlock+0x4e/0x70 [ 264.231115][T17102] ? __fget_files+0x184/0x1c0 [ 264.231147][T17102] ? mutex_lock+0x57/0x90 [ 264.231249][T17102] ksys_read+0xdc/0x1a0 [ 264.231351][T17102] __x64_sys_read+0x40/0x50 [ 264.231393][T17102] x64_sys_call+0x2886/0x3020 [ 264.231424][T17102] do_syscall_64+0x12c/0x370 [ 264.231495][T17102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.231521][T17102] RIP: 0033:0x7fe0859bc84e [ 264.231540][T17102] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.231560][T17102] RSP: 002b:00007fe084456fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.231676][T17102] RAX: ffffffffffffffda RBX: 00007fe0844576c0 RCX: 00007fe0859bc84e [ 264.231692][T17102] RDX: 000000000000000f RSI: 00007fe0844570a0 RDI: 0000000000000005 [ 264.231708][T17102] RBP: 00007fe084457090 R08: 0000000000000000 R09: 0000000000000000 [ 264.231722][T17102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.231737][T17102] R13: 00007fe085c76038 R14: 00007fe085c75fa0 R15: 00007ffc29781c78 [ 264.231797][T17102] [ 264.431791][T17104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=280 sclass=netlink_route_socket pid=17104 comm=syz.7.3440 [ 264.459834][T17107] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3451'. [ 264.517402][T17112] loop5: detected capacity change from 0 to 128 [ 264.534114][T17112] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 264.555693][T17112] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.589575][ T28] audit: type=1400 audit(1770900609.219:2813): avc: denied { shutdown } for pid=17111 comm="syz.2.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 264.663513][T13240] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.678382][T17122] loop2: detected capacity change from 0 to 2048 [ 264.714425][T17122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.728007][T17122] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.805970][T10733] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.849761][T10733] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.877412][T17133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3456: bg 0: block 345: padding at end of block bitmap is not set [ 264.899160][T10733] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.918560][T17133] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 498 with error 117 [ 264.935687][ T28] audit: type=1400 audit(1770900609.559:2814): avc: denied { nosuid_transition } for pid=17134 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 264.963457][T17126] rock: directory entry would overflow storage [ 264.965432][T10733] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.969641][T17126] rock: sig=0x4654, size=5, remaining=4 [ 264.988162][T17133] EXT4-fs (loop2): This should not happen!! Data will be lost [ 264.988162][T17133] [ 265.018781][T17145] hub 2-0:1.0: USB hub found [ 265.036811][ T28] audit: type=1400 audit(1770900609.559:2815): avc: denied { transition } for pid=17134 comm="syz.7.3460" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 265.077096][T17145] hub 2-0:1.0: 8 ports detected [ 265.082455][T10730] ================================================================== [ 265.090560][T10730] BUG: KCSAN: data-race in xas_find_marked / xas_init_marks [ 265.097868][T10730] [ 265.100189][T10730] read-write to 0xffff88810b6ef6c0 of 8 bytes by task 17133 on cpu 0: [ 265.108337][T10730] xas_init_marks+0x18a/0x320 [ 265.113026][T10730] xas_store+0x3cf/0xce0 [ 265.117276][T10730] __filemap_remove_folio+0x1f1/0x300 [ 265.122655][T10730] __remove_mapping+0x390/0x4c0 [ 265.127504][T10730] remove_mapping+0x22/0x90 [ 265.132006][T10730] mapping_try_invalidate+0x293/0x430 [ 265.137380][T10730] generic_fadvise+0x40b/0x460 [ 265.142154][T10730] __x64_sys_fadvise64+0xcb/0x110 [ 265.147188][T10730] x64_sys_call+0x242b/0x3020 [ 265.151872][T10730] do_syscall_64+0x12c/0x370 [ 265.156472][T10730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.162367][T10730] [ 265.164686][T10730] read to 0xffff88810b6ef6c0 of 8 bytes by task 10730 on cpu 1: [ 265.172311][T10730] xas_find_marked+0x213/0x620 [ 265.177092][T10730] filemap_get_folios_tag+0xfa/0x510 [ 265.182389][T10730] mpage_prepare_extent_to_map+0x328/0xc50 [ 265.188209][T10730] ext4_do_writepages+0x6fe/0x2800 [ 265.193326][T10730] ext4_writepages+0x18f/0x320 [ 265.198103][T10730] do_writepages+0x1c6/0x310 [ 265.202698][T10730] __writeback_single_inode+0x80/0x6e0 [ 265.208161][T10730] writeback_sb_inodes+0x4f4/0xb70 [ 265.213275][T10730] wb_writeback+0x24e/0x5b0 [ 265.217785][T10730] wb_workfn+0x194/0x960 [ 265.222027][T10730] process_scheduled_works+0x4cd/0x9d0 [ 265.227491][T10730] worker_thread+0x581/0x770 [ 265.232093][T10730] kthread+0x22a/0x280 [ 265.236171][T10730] ret_from_fork+0x150/0x360 [ 265.240783][T10730] ret_from_fork_asm+0x1a/0x30 [ 265.245553][T10730] [ 265.247872][T10730] value changed: 0xfffffffffffffff8 -> 0xffffffffffff8000 [ 265.254976][T10730] [ 265.257294][T10730] Reported by Kernel Concurrency Sanitizer on: [ 265.263448][T10730] CPU: 1 UID: 0 PID: 10730 Comm: kworker/u8:30 Tainted: G W syzkaller #0 PREEMPT(full) [ 265.274648][T10730] Tainted: [W]=WARN [ 265.278446][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 265.288501][T10730] Workqueue: writeback wb_workfn (flush-7:2) [ 265.294491][T10730] ================================================================== [ 265.332453][T10730] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 514 with max blocks 1 with error 28 [ 265.369463][ T28] audit: type=1400 audit(1770900609.559:2816): avc: denied { entrypoint } for pid=17134 comm="syz.7.3460" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1534 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 265.408675][T10730] EXT4-fs (loop2): This should not happen!! Data will be lost [ 265.408675][T10730] [ 265.429667][ T28] audit: type=1400 audit(1770900609.559:2817): avc: denied { noatsecure } for pid=17134 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 265.434543][T10730] EXT4-fs (loop2): Total free blocks count 0 [ 265.456730][T10730] EXT4-fs (loop2): Free/Dirty block details [ 265.462765][T10730] EXT4-fs (loop2): free_blocks=0 [ 265.468642][ T28] audit: type=1400 audit(1770900609.559:2818): avc: denied { map_create } for pid=17134 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.473961][T10730] EXT4-fs (loop2): dirty_blocks=16 [ 265.488592][ T28] audit: type=1400 audit(1770900609.559:2819): avc: denied { prog_load } for pid=17134 comm="syz.7.3460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.497141][T10730] EXT4-fs (loop2): Block reservation details [ 265.513072][ T28] audit: type=1400 audit(1770900609.569:2820): avc: denied { read write } for pid=17125 comm="syz.5.3458" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1