last executing test programs: 10m12.948527369s ago: executing program 32 (id=122): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="180300000000000000000000000001008510000006000000180000000000000000000000000000003f00000000000000180000000000000000000000000000009500000000000000370300000100000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) eventfd2(0xfffff001, 0x801) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000200)="27030200dc0f14000e00603c0ff000000000ff840000000800000003125ce882cbf490d908f1523f0000000000", 0x2d}, {&(0x7f0000000640)="a652c4145f", 0x5}], 0x2}, 0x4005) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061108e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x104, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 9m40.569906172s ago: executing program 33 (id=378): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(r1, 0x407, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{0xffffffffffffffff, &(0x7f0000000100)='^/\x9f\x00', 0x80000, &(0x7f0000000140)={@_ha_fsid={[0xb, 0x7aa]}, {0x5, 0x1, 0x4, 0x10001}}, 0x100, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000240)=0x3}, {[0x0, 0x10000]}, 0x4, 0x1f, &(0x7f0000000280)=""/31}) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000080)='system_u:object_r:cpu_device_t:s0\x00', 0x22) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0xfea8, 0xa) syz_emit_ethernet(0xb6, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaa2caaaaaaaaaaaa8100100086dd60000000007c2b00fe8000000000000000000000000000aafe8000000000000000000000000000aa3c000000000000002b0000000000000004011004010800000000fffd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002000090780000040213120249c9e00300000048b2f57a13834b13fe06e2d4c3d90512000000040000000ce0000000ffffffa31312bfb66967f7907b3cf24edefecbe7fcc0131262b763bd8aa5e356e388f1484e69f8d6b054b6bf67a986355efc77e18ee3ba4eac00ec9c669562ff31309ee644dd46428ef2bc1ab7411dc7bf190a22937efb12074c6a519de54486adfbe6a05bad23e179fea90ef83d71776d7bee8cd3e5c06203e1fb73bb"], 0x0) 9m26.761114897s ago: executing program 34 (id=511): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x6, 0x0, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_io_uring_setup(0x10e, 0x0, 0x0, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r2) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x3c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd4}, 0x24000080) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r1) ustat(0x801, &(0x7f0000000240)) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x100000006, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) dup(0xffffffffffffffff) (async) syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_triestat\x00') write(0xffffffffffffffff, &(0x7f0000000000), 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x1f, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 9m19.689202132s ago: executing program 35 (id=565): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x1000, 0x3, 0x71}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 8m20.01877197s ago: executing program 36 (id=753): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}], [], 0x6b}}) 8m1.820264883s ago: executing program 37 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000000206010400000000000000000000000314000780080011400000000005001500070000000500010007000000050005000a00000005000400001c00000900020073797a31000000000d000300686173683a6e6574"], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x6, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x9, 0x5}, 0x986, 0xfc, 0x4, 0x9, 0x2000000081, 0x9, 0x5, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x7, 0x40, 0xe, 0x2, {{0x1b, 0x4, 0x0, 0x4, 0x6c, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @empty, {[@lsrr={0x83, 0x1b, 0x77, [@private=0xa010101, @loopback, @rand_addr=0x64010101, @empty, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}]}, @rr={0x7, 0xb, 0xa4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x2, 0xa, "6210febb7734c794"}, {0xf, 0x4, '(#'}, {0x7, 0x9, "0b7db23e92c761"}]}, @lsrr={0x83, 0x7, 0x31, [@empty]}, @rr={0x7, 0x7, 0x45, [@empty]}]}}}}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000800)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x2, 0x903, 0xffffffffffffffff, 0x0, 0x2e64}, {0x2, 0x4, 0x9, 0xa, 0x0, 0x100000000000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x2, 0x401, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', r1, r2, 0x4, 0x2, 0x2, 0xb}, 0x50) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x48, 0x4, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf05da09}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x840) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000101c0)=@base={0xc, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) ioctl$RTC_PIE_ON(r5, 0x7005) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000540)={0x0, 0x0, 0x5, 0x2, @vifc_lcl_ifindex, @remote}, 0x10) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x75a9}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x74, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 7m45.902213596s ago: executing program 4 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xdf1, &(0x7f0000000800)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0xdbb, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0, [{0x3c, 0x1b4, "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"}]}}}}}}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 7m44.950813809s ago: executing program 4 (id=1079): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@ipv6_delrule={0x38, 0x21, 0x100, 0x70bd29, 0x25dfdbef, {0xa, 0x0, 0x90, 0xc, 0xfd, 0x0, 0x0, 0x2, 0x10}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0x38}}, 0x20048014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c0000001a00010025bd7000fddbdf250a102006fc02fd0500310000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/233, 0xe9, 0x0, &(0x7f0000000400)=""/156, 0x9c}, &(0x7f00000004c0)=0x40) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x5, 0xffff}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r1 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806050000000000000000000a00000005000140"], 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 7m44.813609118s ago: executing program 4 (id=1080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42960, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) close(r2) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x74099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300fc5b280028c35781ea93d6f8e4c70f1c967ed081d6c9ae95188df7f3859bde978c8a2808c7125d8b8d71b2dc5e23c150dd2b181cb7fb8c72d362f296c1d6cdd0e625fea764e161cce0"], 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe, 0x3f}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 7m44.705641263s ago: executing program 1 (id=1084): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000380)="e30080670000ec67838717bd86dde148d0a2a75b8a1edd63f06309", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xd}, 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) 7m44.705020663s ago: executing program 1 (id=1085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000880)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'tunl0\x00', 0x0, 0x40, 0x1, 0x8000, 0x7, {{0x14, 0x4, 0x1, 0x2, 0x50, 0x65, 0x0, 0x6, 0x29, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xc9, 0x1, 0xa, [{@broadcast, 0x7}, {@broadcast, 0x9a}, {@dev={0xac, 0x14, 0x14, 0x1d}}, {@local, 0xfffffff9}, {@loopback, 0x7fffffff}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1}, {@empty}]}]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x0, 0x4, 0x3f73cff1, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x64, 0x0, 0x4c, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x5b, 0x3, [{0x0, 0xb, "39886595fb1709dfd0"}, {0x2, 0x6, "1577154f"}, {0x1, 0xa, "543eb9784dba1c3a"}, {0x5, 0x10, "6ce8154dab4898958d7e894de10f"}, {0x1, 0x11, "806bd40c9328c7b9b74e07030aef6b"}, {0x6, 0xa, "c48830893ce79a3a"}, {0x5, 0xf, "a7efc6f73c3abbf408a2c20190"}]}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000a80)="cf435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7, 0x7, 0x1, 0x5, {{0x2b, 0x4, 0x1, 0x9, 0xac, 0x65, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x3c, 0xb8, 0x1, 0xa, [{@rand_addr=0x64010100}, {@loopback, 0x6}, {@rand_addr=0x64010102, 0x8}, {@empty, 0x401}, {@empty, 0x2}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x6}]}, @timestamp_addr={0x44, 0x14, 0xa8, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x5}, {@broadcast, 0x4}]}, @timestamp={0x44, 0x10, 0xa0, 0x0, 0x1, [0x20000000, 0x6, 0x4]}, @generic={0x89, 0xb, "2bca0eb8238940a979"}, @generic={0x86, 0xf, "bf3cca7a65ab930241382297e5"}, @lsrr={0x83, 0xb, 0xc4, [@empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @generic={0x44, 0x10, "560e1a91cdcd19e52c38fc6d2780"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r16, 0x25, 0x2, @void}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1d0, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa89c0740c41a96a7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40}, 0x8080) 7m44.629613146s ago: executing program 4 (id=1086): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000001180)=[{0x6, 0x5, 0x5, 0x7ffc0001}]}) close_range(r0, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x22000402, &(0x7f0000000a40)={[{@dioread_lock}, {@noblock_validity}, {@discard}, {@discard}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@mb_optimize_scan}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4f1, &(0x7f0000000200)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x105400, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7e}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r1, 0x40000000007, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x2) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x4}, 0x0) r3 = semget(0x1, 0x3, 0x39c) semop(r3, 0x0, 0x0) semctl$SETALL(r3, 0x0, 0x11, 0x0) semctl$GETPID(r3, 0x2, 0xb, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x280088, 0x0, 0x7c, 0x0, &(0x7f0000001000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xbe2cd1427c94682b}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xb}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}, 0x1, 0x0, 0x0, 0x240080d3}, 0x80) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m44.571301292s ago: executing program 1 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) clock_nanosleep(0x2, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0xc4, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x9c, 0x12, 0x0, 0x1, @gretap={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x0, 0xa, 0x1}, @IFLA_GRE_OFLAGS={0x0, 0x3, 0xa50}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0xc4}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 7m44.492776014s ago: executing program 1 (id=1088): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@delqdisc={0x3f4, 0x25, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0xa, 0xfff1}, {0x5, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x50, 0x5}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x1d, 0x6, 0xb, 0x2, 0x59, 0xcff, 0x7}}, {0x12, 0x2, [0x3, 0x28f, 0x95, 0x3, 0x535, 0xd, 0x2]}}]}, @TCA_RATE={0x6, 0x5, {0x81}}, @qdisc_kind_options=@q_gred={{0x9}, {0x2bc, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_MAX_P={0x8, 0x4, 0x9}, @TCA_GRED_DPS={0x10, 0x3, {0x9, 0xf, 0x0, 0x6}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7fffffff}, @TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x6c6a, 0x4, 0x3, 0xa, 0x101, 0xb, 0x2, 0x2, 0x4, 0x8, 0x1e, 0x20, 0xfd, 0x5357b6d2, 0x7}}, @TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1, 0x1}}, @TCA_GRED_DPS={0x10, 0x3, {0xb, 0x800b, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1800, 0x2, 0x3, 0xe, 0xffff, 0x5, 0x7, 0x8, 0x3, 0x4, 0x1b, 0x1d, 0x16, 0xcf, 0x4000000, 0x6}}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xdf, 0x0, 0xf, 0x1, 0x0, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x4, 0x5, 0x1, 0x1, 0x2, 0x5, 0xa, 0x4}}, {0xc, 0x2, [0xfffd, 0x7, 0x200, 0xce]}}, {{0x1c, 0x1, {0x1f, 0x2, 0x7ff, 0x6, 0x0, 0x100, 0x7, 0x8}}, {0x14, 0x2, [0x8001, 0x6, 0xb6f, 0x3ff, 0x848d, 0x3, 0x6, 0x9]}}, {{0x1c, 0x1, {0x1, 0x2, 0x0, 0x8, 0x2, 0xcc, 0x7, 0xa}}, {0x18, 0x2, [0xffff, 0x64, 0x4, 0xffff, 0x4, 0x1, 0x0, 0x4, 0x7, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x3f4}}, 0x0) listen(r3, 0x2) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r6 = socket(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bd, &(0x7f0000000a00)="$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") r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x73) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000035c0), 0x0, 0x8000) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000d3700"/25], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x61, &(0x7f0000000380)=""/97, 0x41100, 0x74, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xe, 0x820, 0x200}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x2, 0xb, 0x2}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={0xffffffffffffffff, r9, 0x4, r10}, 0x10) getsockopt$sock_int(r6, 0x1, 0x9, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$getregset(0x4204, r11, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r12 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r2, &(0x7f0000000500), &(0x7f0000000540)=0xc) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 7m44.125363721s ago: executing program 1 (id=1090): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x80}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3c328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x14026, 0x45c, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, r0, 0x1000000d, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_pts(r7, 0x40601) ioctl$TIOCCONS(r8, 0x541d) mmap(&(0x7f0000147000/0x1000)=nil, 0x1000, 0x0, 0x110, r7, 0x5465d000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7m43.890723267s ago: executing program 4 (id=1091): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x80000000}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}]}}]}, 0x40}}, 0x4048000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000005400000095000810000000009500a50500000000", @ANYRES64=r2, @ANYRES64=r2, @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) recvfrom(r3, &(0x7f00000000c0)=""/116, 0x74, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x80000000}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}]}}]}, 0x40}}, 0x4048000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000005400000095000810000000009500a50500000000", @ANYRES64=r2, @ANYRES64=r2, @ANYRES64=r1], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10, 0x800) (async) recvfrom(r3, &(0x7f00000000c0)=""/116, 0x74, 0x0, 0x0, 0x0) (async) 7m43.470385101s ago: executing program 4 (id=1095): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x8, 0xc}) read$msr(r0, &(0x7f00000000c0)=""/182, 0xb6) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x20002000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r4], 0x1}, 0x58) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) write$sndseq(r0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r0, 0x0, &(0x7f0000000480)="9c5ee03191bc9124db3bea85fc72dd375ae941200daf976a201c6e89c095416234f8298c91b0b54ff90244d701d71ca1f5834d27c7a60c13adf41d6b32d031dfe74f1243ed6a95a454b8ed13307182ea7d60e042d5e7ff4ce5f15c30d5bd2a17b065faf90d75c71cadfd57b7deeb07260d11f958446b03ecd51e74c53bee6bf2f70c8dfe1cc39bf2b7da9b5fab689b06b99f0e486ba2ad349b093c5982adab68d1564d2fda793a6db358d7c77ed25f8a441f", 0xb2, 0x3, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="0400000004000000040000000b00040004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000000100d3807aed6552ff"], 0x50) setresuid(r5, r5, 0x0) setreuid(0xee01, r5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000d00)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095", @ANYRES8=r5, @ANYBLOB="2fb413e32868d639cc4bc377bbe36b3f59bf9798501bde9e0c14bc1a197d30847414bc7f01d606d0e35fc9085a6a4f453c3aa30110bf43e30dc0264916fe29f77a042dc3db17f3eab92af78bb2cc5f75a7afc0096c3bd56232e65f008a54557f0c7b77ac295ad8942369c72280e1e83461ad62a6e4b8bc6ecd53ff38cce1", @ANYBLOB="aba62d3ebb88be56ec9b7382548604815c8882e01645d4fb7fe39befb83c008b0e6bc72b179b877f7a584e3a04075ce15c1a5c5cbfa8d5c6e7a145ed7ebe7dd9fea2092e9e8d231f6c02ca0c2443f6cfbadb02ce00573e686ae3a0b0ee0ca00e88089cd9c682f2441d1486ead548b8e156588ca4a6c878fe442f86e720bc85b1f42c134053c58bf62f0ab1aedf40b53e83", @ANYRESDEC=r6, @ANYBLOB="d9b42283bdbcc6dde6c2", @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r0}, 0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000180)={0x0, 0xfffffffffffffe1a, &(0x7f0000000900)={&(0x7f0000000bc0)=ANY=[@ANYRES64=r4, @ANYRES8=0x0, @ANYBLOB="010000000000000004001b0000000c00228059fe00090000000000000000", @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x8001018}, 0x4000800) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf251500000000000300", @ANYRES32=0x0, @ANYBLOB="0a001a0008021100000000000a041a00080211000000000020ff0600080211e4ffffffff09001a00ffffffffffff00000a000624954cf0e3858c0008021100000000000a2afd2cfbf0b7978418689c51e69935d9e319d69467c0ebd0cf03108398f03df9765a8cea76f7e3f692c75c5fd75b978978d61daa1ef6130e0be6e48d59eca9eff6d728c02677a970949e61d891c29f10270b623a23a801a245b4d354a8bad972956e290d7d22d51bfb4eba03fb2eafaf3c053246cbbfd474ebac824ceafc84d2cbeaa420f59032494ffc953ee8d5e11ffc59eb30d39c96f8dd50"], 0x50}}, 0x20000000) setsockopt$inet6_int(r11, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r11, 0x29, 0x6, &(0x7f0000000480)=""/38, &(0x7f0000000080)=0x26) r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r12, 0xf, &(0x7f0000000340)={0x2, 0xffffffffffffffff}) ioctl$XFS_IOC_SWAPEXT(r10, 0xc0c0586d, &(0x7f0000000580)={0x0, r12, r9, 0x1, 0x8, '\x00', {0x9, 0x1, 0x0, 0x7, 0x8, 0x4, 0x7fff, 0x8, {0x14, 0x2}, {0xffffffff00000000, 0x3}, {0x1, 0x2102}, 0xd, 0x8, 0x2, 0xe, 0x1, 0x2, 0x5, 0xd, 0x3, 0x100, '\x00', 0xff, 0x8ad3, 0x4, 0x9}}) 7m43.438925103s ago: executing program 38 (id=1095): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffffffffffe, 0x8, 0xc}) read$msr(r0, &(0x7f00000000c0)=""/182, 0xb6) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000240)={0x20002000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[r4], 0x1}, 0x58) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) write$sndseq(r0, &(0x7f0000000040), 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r0, 0x0, &(0x7f0000000480)="9c5ee03191bc9124db3bea85fc72dd375ae941200daf976a201c6e89c095416234f8298c91b0b54ff90244d701d71ca1f5834d27c7a60c13adf41d6b32d031dfe74f1243ed6a95a454b8ed13307182ea7d60e042d5e7ff4ce5f15c30d5bd2a17b065faf90d75c71cadfd57b7deeb07260d11f958446b03ecd51e74c53bee6bf2f70c8dfe1cc39bf2b7da9b5fab689b06b99f0e486ba2ad349b093c5982adab68d1564d2fda793a6db358d7c77ed25f8a441f", 0xb2, 0x3, 0x1}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=ANY=[@ANYBLOB="0400000004000000040000000b00040004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100000000000000000000000000000100d3807aed6552ff"], 0x50) setresuid(r5, r5, 0x0) setreuid(0xee01, r5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000d00)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000c00000085000000a500000095", @ANYRES8=r5, @ANYBLOB="2fb413e32868d639cc4bc377bbe36b3f59bf9798501bde9e0c14bc1a197d30847414bc7f01d606d0e35fc9085a6a4f453c3aa30110bf43e30dc0264916fe29f77a042dc3db17f3eab92af78bb2cc5f75a7afc0096c3bd56232e65f008a54557f0c7b77ac295ad8942369c72280e1e83461ad62a6e4b8bc6ecd53ff38cce1", @ANYBLOB="aba62d3ebb88be56ec9b7382548604815c8882e01645d4fb7fe39befb83c008b0e6bc72b179b877f7a584e3a04075ce15c1a5c5cbfa8d5c6e7a145ed7ebe7dd9fea2092e9e8d231f6c02ca0c2443f6cfbadb02ce00573e686ae3a0b0ee0ca00e88089cd9c682f2441d1486ead548b8e156588ca4a6c878fe442f86e720bc85b1f42c134053c58bf62f0ab1aedf40b53e83", @ANYRESDEC=r6, @ANYBLOB="d9b42283bdbcc6dde6c2", @ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0xccee5849be245758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r0}, 0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000000180)={0x0, 0xfffffffffffffe1a, &(0x7f0000000900)={&(0x7f0000000bc0)=ANY=[@ANYRES64=r4, @ANYRES8=0x0, @ANYBLOB="010000000000000004001b0000000c00228059fe00090000000000000000", @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x8001018}, 0x4000800) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf251500000000000300", @ANYRES32=0x0, @ANYBLOB="0a001a0008021100000000000a041a00080211000000000020ff0600080211e4ffffffff09001a00ffffffffffff00000a000624954cf0e3858c0008021100000000000a2afd2cfbf0b7978418689c51e69935d9e319d69467c0ebd0cf03108398f03df9765a8cea76f7e3f692c75c5fd75b978978d61daa1ef6130e0be6e48d59eca9eff6d728c02677a970949e61d891c29f10270b623a23a801a245b4d354a8bad972956e290d7d22d51bfb4eba03fb2eafaf3c053246cbbfd474ebac824ceafc84d2cbeaa420f59032494ffc953ee8d5e11ffc59eb30d39c96f8dd50"], 0x50}}, 0x20000000) setsockopt$inet6_int(r11, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r11, 0x29, 0x6, &(0x7f0000000480)=""/38, &(0x7f0000000080)=0x26) r12 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8840, 0x0) fcntl$setownex(r12, 0xf, &(0x7f0000000340)={0x2, 0xffffffffffffffff}) ioctl$XFS_IOC_SWAPEXT(r10, 0xc0c0586d, &(0x7f0000000580)={0x0, r12, r9, 0x1, 0x8, '\x00', {0x9, 0x1, 0x0, 0x7, 0x8, 0x4, 0x7fff, 0x8, {0x14, 0x2}, {0xffffffff00000000, 0x3}, {0x1, 0x2102}, 0xd, 0x8, 0x2, 0xe, 0x1, 0x2, 0x5, 0xd, 0x3, 0x100, '\x00', 0xff, 0x8ad3, 0x4, 0x9}}) 7m43.322580967s ago: executing program 1 (id=1097): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0xffff, 0x0, @empty, 0x2}, 0x1c) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r2, 0x4010586e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_clone3(&(0x7f0000000300)={0x22800000, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x800, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="290000001800190f00003fffffffda060200000000e80001dd0000040d000600ea1100200005000000", 0x29}], 0x1) perf_event_open(&(0x7f00000003c0)={0x7, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9ec4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r4, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x102202, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x2, 0x0, 0xc0}, r3, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000003, 0x800, 0x10) (rerun: 64) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) (async) fcntl$setpipe(r6, 0x407, 0xb) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x6, 0x0) (async) fcntl$setpipe(r6, 0x407, 0xb) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) (async) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xd, 0xa, 0x81, 0x4b, 0x0, 0x54b94670, 0x2800, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc, 0x1, @perf_config_ext={0x7, 0x5}, 0x408, 0x5, 0x2, 0x4, 0x4, 0xfffffff3, 0x5, 0x0, 0x1, 0x0, 0x9}, r2, 0xa, r0, 0x9) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x280, 0x0) write$snapshot(r3, &(0x7f00000003c0)="d9e90f2b8c385f48373010ce2371361dc741740c6bc7bd58b36608c0e05ebe73cee9b13550b2946c8451a6e19e9237861d64f8ee38096060672fd4d077e31ab0063397323f887cfe5d085d0980d3955b49eecd6ed66405366f34e823ca664e3b5241b86a32a550e0c3603da0", 0x6c) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x41fbdb234eae7418}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, r4, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x31}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x4000015) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000580)) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x402008}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x110, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x8}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5f3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x30000000}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x80c4}, 0x40040) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f00000007c0)={0x8}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r6 = perf_event_open(&(0x7f0000000940)={0x5, 0x80, 0xfe, 0xa1, 0x3, 0xff, 0x0, 0xf70e, 0xb6060, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000900), 0x1}, 0x2021, 0x6, 0x4, 0x8, 0x5, 0x1, 0x7fff, 0x0, 0x0, 0x0, 0xa3}, r2, 0x2, r0, 0xa) perf_event_open$cgroup(&(0x7f0000000840)={0x3, 0x80, 0x2, 0x0, 0x9, 0xb3, 0x0, 0xfffffffffffffffe, 0x200, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000800), 0x1}, 0x200, 0x0, 0xfffffffa, 0x3, 0x5a843af9, 0x1d3, 0x0, 0x0, 0x43e, 0x0, 0xcb6}, r5, 0x4, r6, 0x2) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x10, 0xea7}, &(0x7f0000000a00)=0x8) (async) r7 = socket(0x7, 0xa, 0x6) (async) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000a80)={0x14, 0x32, &(0x7f0000000a40)="46da2bca1d65a6318bb3090f57db2a0072c3d68840f402f8ce8e94b087a7810693ea9a1e9d95dc91914f28d9d9875fe22fbe"}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r4, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="c9688515448d"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x33}]}, 0x3c}, 0x1, 0x0, 0x0, 0x891}, 0x20000804) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000c00)={'HL\x00'}, &(0x7f0000000c40)=0x1e) (async) r9 = add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @desc2}, &(0x7f0000000d00)={0x0, "916a5880a881875b053ec28d55f7b8356105a1a06435310502d6ee601e3f3433c16f896c6c8753af8884290168a7345a43c0bbb305123c9bff9cc0c33365cdb7", 0x1b}, 0x48, 0xfffffffffffffff8) keyctl$reject(0x13, r9, 0xf37e6ad, 0x6fd, 0xfffffffffffffff8) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r4, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) close(r3) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000001080)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001040)={&(0x7f0000000ec0)={0x158, r4, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TX_RATES={0xf8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xffff, 0x2, 0x788, 0xfff, 0x800]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x4}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0x4}, {0x5}, {0x1, 0xa}, {0x2}, {}, {0x3, 0x8}, {0x4}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x4}, {0x6, 0xa}, {}, {0x1, 0x8}, {0x5, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x1d, 0x8001, 0xfffd, 0x4, 0xf, 0x9]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x3, 0x4}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x6, 0x7}, {0x4, 0x3}, {0x4, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0x7}, {0x5, 0x6}, {0x3, 0x2}, {0x2, 0x3}, {0x6, 0x4}, {0x7, 0x6}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x8}, {0x3, 0x7}, {0x3, 0x8}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x4, 0x5}, {0x7, 0x9}, {0x2, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x2, 0x9}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3142, 0x6, 0x2, 0x9, 0x78, 0x3b, 0x2, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9a, 0x229a, 0x3, 0x9, 0x0, 0x720a, 0x4, 0x800]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_HE_OBSS_PD={0x40, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "f34f69f83c7d1e3a"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "4a07a328b78ad567"}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xd}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "f52265efa255ae8c"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x75}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x158}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) getsockname$packet(r7, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001100)=0x14) (async, rerun: 32) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) (rerun: 32) 6m32.339411741s ago: executing program 5 (id=1640): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x5}, 0x102240, 0x10000, 0x0, 0x0, 0x2b5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) r3 = getuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_L}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@noextend}, {@access_any}, {@version_L}, {@version_9p2000}], [{@uid_eq={'uid', 0x3d, r3}}, {@euid_lt={'euid<', 0xee00}}, {@audit}]}}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) file_setattr(r0, 0x0, &(0x7f00000000c0)={0x1ba8, 0x99, 0x3, 0x3ff, 0x3f91}, 0x3, 0x1000) 6m32.280757938s ago: executing program 5 (id=1641): openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"e6d4fc5116305a249b0eae449065d1d3", 0x0, 0x0, {0xc0000000000000, 0x38f}, {0xbf, 0x101}, 0x0, [0xd, 0x2, 0xfffffffffffffff8, 0x4, 0x4, 0x20004, 0x58, 0x7, 0x40, 0x4, 0x401, 0xffffffffffffff7f, 0x6, 0x0, 0x2, 0x8d]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"e6d4fc5116305a249b0eae449065d1d3", 0x0, 0x0, {0xc0000000000000, 0x38f}, {0xbf, 0x101}, 0x0, [0xd, 0x2, 0xfffffffffffffff8, 0x4, 0x4, 0x20004, 0x58, 0x7, 0x40, 0x4, 0x401, 0xffffffffffffff7f, 0x6, 0x0, 0x2, 0x8d]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000140)={0x0, 0x8000000000000000, 0x2}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000540)={{r0}, r1, 0xa, @unused=[0x101, 0x59, 0xffff, 0x4], @devid=r2}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r3 = syz_open_dev$usbfs(&(0x7f0000001540), 0x0, 0xa0000) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000001580)=0x7) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000015c0)={0xc, 0x8}) sendmsg$AUDIT_GET(r0, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x10, 0x3e8, 0x20, 0x70bd2a, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, &(0x7f0000001700)={0x8000, 0x672, 0x2}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001740)=0x0) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000001780), 0x1003) (async) ptrace$ARCH_GET_FS(0x1e, r4, &(0x7f0000001780), 0x1003) ioctl$sock_netdev_private(r0, 0x89fb, &(0x7f00000017c0)="55405bd813d38c4c5fe30c4aa7f5") ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000001800)=0x5) r5 = fsmount(r0, 0x0, 0x7e) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000001840)={0x6, 'xfrm0\x00', {0x4}, 0xe46}) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001880)={0x0, 0xfff}, &(0x7f00000018c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001900)={r7, 0x80000}, &(0x7f0000001940)=0x8) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000001900)={r7, 0x80000}, &(0x7f0000001940)=0x8) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x5c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008815}, 0x4) ioctl$KDADDIO(r5, 0x4b34, 0x5) (async) ioctl$KDADDIO(r5, 0x4b34, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001b80)={'syztnl1\x00', &(0x7f0000001ac0)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x4, 0xf, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x64, 0x0, 0x20, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x1b, 0x57, [@remote, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x8, 0x0, 0x7, [0x800, 0x9, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xaf, [@empty, @remote]}, @generic={0x88, 0xe, "b7f76d58a81e79d973e49233"}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001b80)={'syztnl1\x00', &(0x7f0000001ac0)={'syztnl0\x00', 0x0, 0x1, 0x80, 0x4, 0xf, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x64, 0x0, 0x20, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, {[@noop, @rr={0x7, 0x1b, 0x57, [@remote, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0x8, 0x0, 0x7, [0x800, 0x9, 0x0]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0xaf, [@empty, @remote]}, @generic={0x88, 0xe, "b7f76d58a81e79d973e49233"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001c40)={'syztnl1\x00', &(0x7f0000001bc0)={'ip6gre0\x00', r8, 0x2f, 0x90, 0xf7, 0x2, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x80, 0x7, 0x6, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001c40)={'syztnl1\x00', &(0x7f0000001bc0)={'ip6gre0\x00', r8, 0x2f, 0x90, 0xf7, 0x2, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x80, 0x7, 0x6, 0x1}}) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000001c80), 0x840200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001cc0), 0x0, 0x0) io_uring_enter(r9, 0x6e31, 0x692e, 0x4, &(0x7f0000001d00)={[0x6]}, 0x8) (async) io_uring_enter(r9, 0x6e31, 0x692e, 0x4, &(0x7f0000001d00)={[0x6]}, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001dc0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x84, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x9, 0x5}, {0x2, 0x7}, {0x6}, {0x3, 0x5}, {0xfd, 0x4}, {0x5, 0x6}, {0x9, 0x1}, {0x1, 0x4}, {0x80, 0x7}], "758be4bcffcc3f77"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xb, 0x5}, {0x20}, {0xb, 0x2}, {0x14, 0x5}, {0x9, 0x2}, {0xb, 0x3}, {0x9, 0x1}, {0xdb, 0x5}, {0xe, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x6}], "649c051ffdc89cdc"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x1}, {0x80, 0x2}, {0x64, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0x2, 0x7}, {0x9, 0x1}, {0x4, 0x6}, {0x8, 0x2}], "58799f761b58099a"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e00)={0x84, r10, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x9, 0x5}, {0x2, 0x7}, {0x6}, {0x3, 0x5}, {0xfd, 0x4}, {0x5, 0x6}, {0x9, 0x1}, {0x1, 0x4}, {0x80, 0x7}], "758be4bcffcc3f77"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xb, 0x5}, {0x20}, {0xb, 0x2}, {0x14, 0x5}, {0x9, 0x2}, {0xb, 0x3}, {0x9, 0x1}, {0xdb, 0x5}, {0xe, 0x7}, {0x1, 0x2}, {0x5, 0x5}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x6}], "649c051ffdc89cdc"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x1}, {0x80, 0x2}, {0x64, 0x4}, {0x8, 0x7}, {0x6, 0x5}, {0x2, 0x7}, {0x9, 0x1}, {0x4, 0x6}, {0x8, 0x2}], "58799f761b58099a"}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) 6m32.153524019s ago: executing program 5 (id=1642): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) lseek(r0, 0x2f, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x0) (async) setitimer(0x1, &(0x7f0000000140)={{}, {0x0, 0x2710}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xde6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0xde6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) r4 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r4, r4, 0x4) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) (async) creat(&(0x7f0000000200)='./bus\x00', 0x268) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xf9, 0x553, &(0x7f00000009c0)="$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") open(&(0x7f00000000c0)='.\x00', 0x18000, 0x50) 6m31.979674999s ago: executing program 5 (id=1644): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x800) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000002f80)=[{{&(0x7f0000000300)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_ttl={{0x14, 0x0, 0x34, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9fe}}], 0x30}}], 0x1, 0x0) 6m31.638252591s ago: executing program 5 (id=1647): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}]) 6m31.555118792s ago: executing program 40 (id=1647): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}]) 4m13.304248639s ago: executing program 7 (id=2709): syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x80140) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0xfffffffffffffffe, 0x6, 0x80, @buffer={0x310, 0x0, 0x0}, &(0x7f0000000640)='\x00\x00\x00\x00\x00\x00', 0x0, 0x1, 0xe, 0xffffffffffffffff, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000040)=0x8000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x80) 4m13.107770683s ago: executing program 7 (id=2711): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) 4m12.997560938s ago: executing program 7 (id=2713): r0 = syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x8, &(0x7f0000000540)={[{@barrier}, {@debug}, {@user_xattr}]}, 0x1, 0x5b3, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x4}}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x10000}}]}}, 0x0, 0x56, 0x0, 0x1, 0x6}, 0x28) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',versi,\x00'/17]) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r5, @ANYRESOCT=r4], 0x15) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x130}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000003300)=ANY=[@ANYBLOB="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"/701], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x201, 0x0, &(0x7f00000000c0)="63d1ed8e64dc3f6d00000000b986", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x1000, 0x64, &(0x7f0000000f00)="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", &(0x7f00000002c0)=""/100, 0x26, 0x0, 0x1000, 0x1c, &(0x7f0000002300)="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", &(0x7f0000000200)="4e61711b71ebf703d37e7b8e8c2528b2140e29c7b4d6bf26413dd295", 0x5, 0x0, 0x7fffffff}, 0x50) setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000080)=@ccm_128={{0x303}, "13d313b3d0b2286a", "7588521bb552533c07c059fe6fb50bf3", "baeab386", "e244217ed21b589a"}, 0x28) sendmmsg$inet6(r1, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000000480)=""/140, 0x8c}, {&(0x7f0000000600)=""/176, 0xb0}], 0x3, 0x1ff, 0xe) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_COPY(r9, 0x4b72, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1c, 0x1c7, 0x0}) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xe2}], 0x1}, 0x40400) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 4m12.484301611s ago: executing program 7 (id=2718): r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000500)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000580)='net/udp\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r3, 0x28, 0x0, &(0x7f0000002140)=""/4110, &(0x7f00000000c0)=0x100e) unlinkat(r2, &(0x7f0000000000)='./cgroup\x00', 0x200) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x42, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048820}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") r4 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffff9, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) fstat(r4, &(0x7f00000003c0)) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000380)={[], [{@subj_role={'subj_role', 0x3d, '/dev/cpu/#/msr\x00'}}]}, 0x1, 0x564, &(0x7f0000000c00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x240182, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000240)={0x5, 0x0, 0x9, 0x8001, 0x1b, "c02106ab232fa64cb6b4b5e7dfcf53b0c1c748"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r6, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000040)=[{&(0x7f00000010c0)=""/4105, 0x1009}], 0x1, 0x3b, 0x0) 4m10.252975081s ago: executing program 7 (id=2730): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r0, r0, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lgetxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.selinux\x00', 0x0, 0x0) 4m9.289437471s ago: executing program 7 (id=2735): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x11, 0x800, 0x65) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) poll(&(0x7f00000000c0)=[{r0, 0x88}], 0x1, 0xfffffff7) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f000071b000/0x4000)=nil, 0x4000, 0x6) munlock(&(0x7f0000336000/0x3000)=nil, 0x3000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="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"/610], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) close_range(r1, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0xa8) openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x2000, 0x119) 4m9.260954215s ago: executing program 41 (id=2735): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket(0x11, 0x800, 0x65) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) poll(&(0x7f00000000c0)=[{r0, 0x88}], 0x1, 0xfffffff7) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f000071b000/0x4000)=nil, 0x4000, 0x6) munlock(&(0x7f0000336000/0x3000)=nil, 0x3000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="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"/610], 0x268}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) close_range(r1, 0xffffffffffffffff, 0x0) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0xa8) openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x2000, 0x119) 2m54.791553193s ago: executing program 2 (id=3310): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350902000003ffb06e000d0000000000b702000000000000739af0ff00000000c509000035000800c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffd50200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, 0x94) 2m52.952342402s ago: executing program 2 (id=3320): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000280)=@gcm_128={{0x304}, "77cd1b1000", "28852cbbbeba35380ee5190047169f9d", '\x00', "2ce6f8da8e55c437"}, 0x8a) (async) socket$packet(0x11, 0x2, 0x300) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file1\x00', 0x1008010, &(0x7f0000000100)={[{@nodots}, {@fat=@umask={'umask', 0x3d, 0x5}}, {@fat=@check_strict}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x11b2, &(0x7f0000002440)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m51.813506483s ago: executing program 2 (id=3325): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)={0x8040, 0x10, 0x6}, 0x18) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b8, 0x1d8, 0x1d8, 0x0, 0x1d8, 0xe8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff], [0xff0000ff, 0x4de325748c9179dc, 0xffffffff, 0xff000000], 'wlan1\x00', 'wlan0\x00', {}, {0xff}, 0x6, 0x0, 0x2, 0x4}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x5, 0x8, @ipv4=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e21}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff], 'veth1_macvtap\x00', 'erspan0\x00', {0xff}, {}, 0x87, 0x7f, 0x4, 0x2}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@mcast1, 0x33, 0x23, 0x8}}}, {{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0xffffffff, 0xffffffff, 0xff], 'pimreg\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x0, 0x49, 0x1, 0x54}, 0x0, 0x208, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x80000000, [0x64b3d7eb, 0x4], 0xd3, 0x21, 0x0, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @private1, @mcast2, @private1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x10}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x8, 0xffffffff, 0x7, 0x76be0f9b, 0x7, 0x8, 0x4, 0x733]}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5c, 0xf7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x9, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x653afb6a7eb5282b) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f00000002c0)={0xffff, 0xd, 0xe}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYBLOB="69692bb4065b9daba03afb5b38a81bf9515e015e8aa3f7681cc81656441c6f8d6d9b7bded3"], 0x1, 0x296, &(0x7f0000000740)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 2m51.481166836s ago: executing program 2 (id=3328): prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") llistxattr(0x0, &(0x7f00000001c0)=""/152, 0x98) r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3cd, 0xfffffffe, {0x0, 0x2, 0x1, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x2000000000000000, 0x4000000000000000}, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x198, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x150, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @common=@socket0={{0x20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x100, 0x7ff, 0x4, 'snmp_trap\x00', {0x6}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0xfffffffc, 0x8, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r4 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x6, 0x12200) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r4, 0xc3d33000) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m50.072366384s ago: executing program 2 (id=3333): set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x400, 0x3, 0x40, 0x9, 0x9, 0x3, 0x0, 0x2bee}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0xf2a, 0x0, 0x80}}, {0x4}}]}]}, 0x7c}}, 0x0) r2 = fsopen(&(0x7f0000000100)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='^(.(.\x00', &(0x7f0000000180)=')(}-&##\\:($^\x00', 0x0) 2m48.941529166s ago: executing program 2 (id=3343): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x22400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x1}, 0x100000, 0x7, 0x89, 0x6, 0x3ff, 0xcb, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, r0, 0x9) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb2000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000015000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000877000/0x1000)=nil, &(0x7f000082b000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a63000/0x1000)=nil, &(0x7f0000b35000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect(r3, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x80) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c000280080001401c0200000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002abd7000fcdbdf25010000001400040003000000070000000010000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0xef32, 0x1000, 0x1, 0x2dd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0xb4, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x8, 0x6}, {0xf, 0x5}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x80, 0x9, 0x8000, 0x1, 0x3, 0xff, 0x6}}, {0x10, 0x2, [0x5f79, 0x9, 0xfff, 0xfff9, 0x6, 0x8]}}, {{0x1c, 0x1, {0x5, 0x10, 0x3, 0x9, 0x2, 0x3, 0x6, 0x8}}, {0x14, 0x2, [0x9, 0xb74a, 0x100, 0x200, 0x0, 0x400, 0x70, 0xf0a]}}, {{0x1c, 0x1, {0xc6, 0x8, 0x8000, 0x0, 0x3, 0x400, 0x2, 0x3}}, {0xa, 0x2, [0x4, 0x1, 0xfff8]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0xe9}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40005}, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3402020}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000a14000126bd7000fcdbdf25210800150001000000"], 0x18}, 0x1, 0x0, 0x0, 0x440a0}, 0x8040) syz_clone(0x89930000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m48.925703602s ago: executing program 42 (id=3343): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x20) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x22400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x5, 0x1}, 0x100000, 0x7, 0x89, 0x6, 0x3ff, 0xcb, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, r0, 0x9) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) socket$inet(0x2, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$tmpfs(0x0, &(0x7f0000000000)='.\x00', &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000bb2000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000015000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000877000/0x1000)=nil, &(0x7f000082b000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a63000/0x1000)=nil, &(0x7f0000b35000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect(r3, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x80) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c000280080001401c0200000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}}, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002abd7000fcdbdf25010000001400040003000000070000000010000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0xef32, 0x1000, 0x1, 0x2dd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0xb4, 0x24, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x8, 0x6}, {0xf, 0x5}}, [@TCA_STAB={0x88, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x80, 0x9, 0x8000, 0x1, 0x3, 0xff, 0x6}}, {0x10, 0x2, [0x5f79, 0x9, 0xfff, 0xfff9, 0x6, 0x8]}}, {{0x1c, 0x1, {0x5, 0x10, 0x3, 0x9, 0x2, 0x3, 0x6, 0x8}}, {0x14, 0x2, [0x9, 0xb74a, 0x100, 0x200, 0x0, 0x400, 0x70, 0xf0a]}}, {{0x1c, 0x1, {0xc6, 0x8, 0x8000, 0x0, 0x3, 0x400, 0x2, 0x3}}, {0xa, 0x2, [0x4, 0x1, 0xfff8]}}]}, @TCA_RATE={0x6, 0x5, {0x8, 0xe9}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40005}, 0x800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x3402020}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000a14000126bd7000fcdbdf25210800150001000000"], 0x18}, 0x1, 0x0, 0x0, 0x440a0}, 0x8040) syz_clone(0x89930000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.508862714s ago: executing program 3 (id=4200): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170a010400000000ffffffdf020000000900020073797a30040000000900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000140)={&(0x7f00000000c0)=0x7, 0x5, &(0x7f0000000d80)=[{}, {}, {}], &(0x7f0000000100)}) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x4, 0x80, 0x2000000, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)={0x30d080, 0x10, 0x1}, 0x0, 0x18, 0x0, 0x12345}) syz_io_uring_submit(r4, r2, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x59, 0x2004, @fd=r0, 0x9, &(0x7f0000000340)=[{&(0x7f0000000440)="9637e7e23f9bf6b81bfcbe21d8652b9c17474a3056fbff6ebc643a76dbb555a17165cecd6de40fe76f2a47dbcef198bde19ddf0dadc84a09d6050da3087fee1984db767aeea530f91100"/86, 0x56}, {&(0x7f0000001500)}], 0x2, 0x0, 0x1, {0x2}}) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(r6, &(0x7f0000000340), 0x2000011a) socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r7, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c69666163"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000014000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 5.805445327s ago: executing program 0 (id=4262): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xf}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x9, 0xfffffff7, 0x1000, 0xd, 0x0, 0x74f, 0x3, 0xffffff65}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x3, 0xfff1}, {0xd, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x2, 0x0) 5.559624891s ago: executing program 3 (id=4264): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x12, r2, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x3, 0x64, 0x68, 0xfffd, 0xaf, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}, @dev={0xac, 0x14, 0x14, 0x42}}, {0x22, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xa}, "c7cc00c0d400b13bb482c04b32022504651c9d9319fd37a3d9d4d48e985051375a798fafe663e9652d175f645853c5d64f37cc0d8c5ed25126abcf60f51ae8d2c82b08ec53cf44a0"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) pwrite64(r3, 0x0, 0x0, 0xcfb9) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x5, 0x1, 0xfffffec7, &(0x7f0000000100)="d4", 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x50) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002c80)=[{0x0}, {&(0x7f0000001980)=""/233, 0x94}], 0x2}, 0x10001}], 0x1, 0x40000000, 0x0) 5.20446093s ago: executing program 0 (id=4265): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@nodioread_nolock}, {@noquota}, {@nogrpid}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x3}}], 0x1, 0x4880) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0500000004000000540f00000d00000000000000791e653a74683a2280b62178bd67bf38d1af4e2d578be453ea76644d5e57d8d5ce70d0478693e2168e9a4265b5b2d4ee471c8cdbda99363560f8b951173673da1e44923fb90469ba6931ec71245d3e986401f2ab86a473ac25e2acf8e61bfe02ea734906bbc427fdd64644b433", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000100)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200), 0x10) pwrite64(r0, &(0x7f0000000240)="32d11ee96333d50f31cc277d0291e7c8456d941da5b9991717bb8c84a194d2b133ecd8772c228a287b13b651fce32549f9c9eb422a87c48c8de3a3884fb452c479be571c5a860f972d03ec7600ce7dc1ecec87fb43a91a157803d63c723c3bcbb0c5b692b31d64d0dc9ef19179e696f3858ddb7e6e5453b12d8faaf788217062afedb47b0c6ccd39fc65ae53f01ae14926c96d2011c9b54ab83da411b5fc53e25330be6f13", 0xfffffffffffffd63, 0x402) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) getpgid(0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x3) ioctl$sock_TIOCINQ(r6, 0x541b, 0x0) ftruncate(r2, 0x100) syz_read_part_table(0x5ca, &(0x7f0000000bc0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r7, 0x10, 0x6, 0x10001) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0400", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4.509365221s ago: executing program 3 (id=4268): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff21}, 0x24040) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) syz_io_uring_setup(0x10d4, 0x0, &(0x7f00000000c0), 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0xfffffffffffffffc, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfff7fffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@remote, 0x4, 0x6c}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2, 0xa, 0x2) (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1, 0x0, 0x3ff) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x7ff}, &(0x7f0000000400)=0x90) (rerun: 32) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000580)=r3, 0x4) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x6, &(0x7f0000000200)=[{0x9, 0x92, 0x0, 0x4}, {0x10, 0x5b, 0x3, 0x9}, {0x8ffa, 0x6, 0x42, 0x9}, {0xffb, 0x48, 0x6}, {0x4, 0xea, 0x8, 0x80000000}, {0x2, 0x0, 0x3, 0x8}]}) (async) setitimer(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044851}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000014800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616ef856ee75c387218b"]) (async, rerun: 64) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (rerun: 64) write$P9_RSYMLINK(r7, &(0x7f0000000080)={0x14, 0x11, 0x2, {0x1, 0x0, 0x7}}, 0x14) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.256685013s ago: executing program 3 (id=4270): r0 = syz_usbip_server_init(0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xffffff80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x19}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 4.129522724s ago: executing program 0 (id=4273): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d010900500011"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x68, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r8, 0x80646}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private0}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0xd8, 0x10, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x10, 0x200}, [@IFLA_AF_SPEC={0xb8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}, @AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}, {0x8, 0xf, 0x0, 0x0, 0x5}, {0x8, 0x4, 0x0, 0x0, 0x20}, {0x8, 0xd, 0x0, 0x0, 0x6}, {0x8, 0x6}, {0x8, 0x3, 0x0, 0x0, 0x5}, {0x8, 0xb, 0x0, 0x0, 0x3}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}, @AF_MPLS={0x4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0x0, 0xfff1}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0) dup2(r9, r0) (async) dup2(r9, r0) 2.701737988s ago: executing program 8 (id=4275): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4120}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1800fbfbffffffffffff00000000000008001fe1e0000001a0004e84"], 0x32) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x1b0, 0x1b0, 0xffffffff, 0x1b0, 0x2f8, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x178, 0x1b0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@unspec=@limit={{0x48}, {0x5, 0xb8e, 0x3, 0x80000000, 0x7f, 0x0, 0x5}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x48}}, 0x0) 2.581560661s ago: executing program 6 (id=4276): r0 = timerfd_create(0x7, 0x80000) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\bO9\x1b\x11\rv0<\xe5\xe2\xad\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9ds\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8ex\x00\x00\x00\xc7%\xb0\x0f(Ff\xb0\x9f\xab\xb0\xae#\xbdd\xaa\f\xd2\xfb t?\xc3\x1f\xb1\xcf\x1e\xac\xa8\xebC\xab\xc3v\xd6\xc1\x0f9$\x95\xd3e(E1m\a\xfd\x9d\xb39\xfd\xfdp\xcf\xc5s\x9b2\x00\xcbnF\xceg\xbdd\x9br\x95e\x9d,\xc4fP-\xae\\{\xf9\x01\x10\t\x00\v\xcb\xfcv\xa6\xfd\x19\xabI', 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r1, 0x7, 0x86, 0x3a}) io_uring_enter(0xffffffffffffffff, 0x11f1, 0x18da, 0x9, &(0x7f00000005c0)={[0x1]}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) read(r0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x6, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000fb972ef0175b8cc492a567730ca7eebc54fdd7d1ceaab49c173aa93f7d08a280c9ff4ffb5a97dd6186f77ed18edbccde9cf11e6f0f4049c5aadc05e489362183bfc55773ca4ce5ec50cfc0d17cf66de75894b5bb4058d81dfd5f4c36d641377349eb9186aada628292facfa1324a724551c492cfc68125528d10096431fe770036d32c231f0af13973e3cfe004d934bc6cd66dc5764af4", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf25070000000800030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4044091}, 0x20000000) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000700)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="b40000002bd43fe132dc61566f61dfeff2db6469479cb67392c697fbabae2ea372d1231d345686c4be3f3ba0cb02e0897f27a5dc27c2939bb80b6c0992d032371385715d51541f8305f174e728b8e7d308dff968274551f98b1ac422db2d20564600864c50ff57e03aaf90f80435ced4ca7ae8e4ad06688c46c4587c3362c203585e38327403afb9c465e96e755d30aab94ea0ed184a95bd730d3aae963d1a18fd997a0a1966e8444eaf0f65", @ANYRESDEC, @ANYBLOB="00002bbd7000fddbdf250900000008000400010000006400068014000400fc02000000000000000000000000000008000300ac1414bb14000400fe8000000000000000000000000000bb140004002001000000000000000000000000000014000400000000000000000000000000000000000800060000000000050005000c0000000500050007000000080002000300000008000400ff00000008000400030000000c000680080003007f000001"], 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x84046000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x29, 0x1, 0x0, 0x5, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={&(0x7f0000000640), 0x3}, 0x1820, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netstat\x00') pread64(r7, &(0x7f0000000000)=""/25, 0x19, 0xb6) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x1a, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0xfffffffffffffded}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0xd4a90af4f12bbdcb) 2.560781785s ago: executing program 3 (id=4277): r0 = socket$kcm(0x21, 0x2, 0x2) unshare(0x66000080) openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) syz_usb_connect(0x5, 0x5c, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x88, 0xcd, 0x9d, 0x8, 0x2100, 0x9e55, 0xe1a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x6, 0x8f, 0x60, 0x5}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x21}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000"], 0xe0}}, 0x0) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fsmount(r4, 0x0, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="c021", 0x2}], 0x1) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x18}, 0x0) 2.470053845s ago: executing program 0 (id=4278): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x8801) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x74, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4, 0x71}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000894) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r13, 0x1, 0x34, &(0x7f00000000c0)=r12, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 2.320294081s ago: executing program 9 (id=4279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r1 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x500, 0x18, 0xffffffff00000000, 0xfffffffffe000001}) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x27dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x804) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xd, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x22, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x200100) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xf2a, 0x4) r5 = io_uring_setup(0x1b7a, &(0x7f0000000040)={0x0, 0xf2e1, 0x1f480, 0xfffffffc, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) io_uring_enter(r5, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='tranfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000001001400000000080000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100007cffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) 2.196209422s ago: executing program 8 (id=4280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008084}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006140)=@delchain={0x1c, 0x5f, 0x333, 0x200, 0x200, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x7, 0xe}}}, 0x24}}, 0x8810) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0xd9}, 0x0) 2.001459728s ago: executing program 8 (id=4281): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc0ed4840, &(0x7f00000005c0)={[{@nobarrier}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nodelalloc}, {@quota}, {@nouid32}, {@noload}]}, 0xf5, 0x48e, &(0x7f0000000640)="$eJzs3MtvFVUYAPBvprel5SGI+ICAVsFIfLS0PGRhYjSasNBo1AXGVb0tBClgoCZCiKILjHFhSNwblyb+Ba50Y9SViS5xb0iIYQO6MNfMnZk+bu/tg164hfv7JcM9Zx6c890zZ3rmzLQBdK3B7J8kYn1EXI6IjRFRadxhMP+4ce189Z9r56tJ1Gpv/p1kh8X1a+erxX9RXzLr8hW1WpFf06Tci+9EjE1OTpwu8sNTJ94fPnP23DPHTowdnTj638nRgwf37d3Rd2B0f1vizOK6vu2jU9u3Hnr70qvVw5fe/eW7rL7ri+1lHO00mH+7TT3e7sI6bMOsdFLpYEVYlqzdeovlctR6emJgetvGePnTjlYOuNUqzX4+Fy7UgLtYNlAHulH5gz67/y2XxcYLbRx7dNzVF/KIsrhvFEu+pRJpsU9vw/1tO/VHxOEL/36dLXGL5iEAAGb7IRv/PN1s/JfGA7P2u6d4hrIpIu6NiM0RcV9EbImI+yPq+z4YEQ8ts/zGJyTzxz/plTnZWs8yS1hYNv57rni2NXf8V47+YlNPkdtQj783OXJscmJP8Z3sjt41WX5kziFz/fjS7182rvuimGYfnDX+y5as/LkRplcaJ+jGx6bGVh557uonEdsqzeJPpgf6SURsjYhtN1nGsSe/3d5qW7P4y7HwotpwJ1L7JuKJvP0vREP8pWT+88mJ/PnkyLMHRvcP98fkxJ7h8qyY79ffLr7eqvwVxd8GWfuvbXr+5/Fn94hJf8SZs+eO15/XnrmJQv78rJq02LSliL+3Zfzzz//qroi+5K16uq/cq/jsS17JPgbK9R+OTU2dHp05tszXP0fy+HfvnIl/LGb6/+b89iySP96YPn5HRDwcEY8UbfdoRDwWETsXCP/nF3e912pb6/ZfYFa+jbL4xxdo/+ySl6Vm2n/5iZ7jP33fqvzaoud/1v776qndxZqlXP+WWsGVfHcAAABwp0jr78An6dB0Ok2HhvJ3+LfE2rQSEU8dOfXByfH8XflN0ZuWM10bZ82HjhRzw2V+tCG/t5g3/qpnoJ4fqp6aHO908NDl1rXo/5m/2vuoBViN7qo3+oBl0f+he+n/0L30f+hez3e6AkBn9DVf/fHtrgfQEcsf//ffknoAt5/7f+he+j90L/0fulLL341PV/Qr/3dqorI6qtE0MbA6qlEmIl10n3SVVHVpidc+z7vEaqlPmags+Y9Z3GRiTdNNTS8Xh9bf3ssTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiv0fAAD//8Vm3Bk=") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc0ed4840, &(0x7f00000005c0)={[{@nobarrier}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nodelalloc}, {@quota}, {@nouid32}, {@noload}]}, 0xf5, 0x48e, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) unshare(0x62040200) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x1eb4, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) (async) r2 = syz_io_uring_setup(0x1eb4, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x1, 0x2}}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680}) socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) accept(r3, 0x0, &(0x7f0000000140)) (async) accept(r3, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000040005"], 0xd0}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$key(0xf, 0x3, 0x2) r8 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000100)) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) open$dir(0x0, 0x80002, 0x100) 1.520552658s ago: executing program 6 (id=4282): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000000)=0xfffffffffffffdd5) 1.411193523s ago: executing program 6 (id=4283): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 1.281642813s ago: executing program 6 (id=4284): socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xa0470a, &(0x7f0000000380)={[{}, {@quota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1ff}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv0}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048841}, 0x8000) 1.275410322s ago: executing program 0 (id=4285): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x800) r0 = syz_io_uring_setup(0x10b4, &(0x7f0000000040)={0x0, 0x1c6, 0x400, 0x5, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001200050104000000ffdbdf25050019"], 0x94}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x28, 0x0, 0x0) 1.101021882s ago: executing program 9 (id=4286): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000500), 0x12) r3 = perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x59, 0xd, 0xc, 0x2, 0x0, 0x4, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x10400, 0x5, 0x6f54db07, 0x0, 0xb3e6, 0x7049, 0xff, 0x0, 0x7, 0x0, 0x100000001}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x8) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0xff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300"], 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) fsmount(r1, 0x1, 0x80) r6 = fsopen(&(0x7f0000000140)='pstore\x00', 0x0) write$rfkill(r1, &(0x7f00000001c0)={0x10, 0x3, 0x1, 0x1}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000867696590025bd7000f5dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1028040003000000140003006970366772657461703000000000000008000d00fbffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r8 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r9 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) fallocate(r8, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x500, 0x0, 0x0, 0x0, 0x0, r9, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r9}]) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r6, 0x0, 0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r12, r12) r13 = openat$cgroup(r11, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x170, r14, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2334}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2da85963}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd86c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9be5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x338f2eeb}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7703}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71f7602}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7177b169}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4818}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa101}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1122}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f725875}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1731}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xed01}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32af}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71c4400d}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb3e2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x716a95f4}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fa3b91f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x572}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x215ad663}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfa54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x204ff74d}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2eb2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2bb1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3394}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x75a90e3f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33e5be2d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x40605c17}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc41}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x15004083}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66a6b1f6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd59}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x170}}, 0x404c003) syz_clone3(&(0x7f0000000080)={0x201800000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r13}}, 0x58) 1.097775601s ago: executing program 8 (id=4287): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x11, 0x6}, 0x10) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000001, 0xdb}, 0x9c) (async) sendmsg$inet6(r5, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x8004, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x40054) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0x4e, 0xffffff85, 0xa9}, 0x9c) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x43, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x147042, 0x0) read(r7, &(0x7f0000001400)=""/4096, 0x1000) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000001a40)={r8, 0xffffffffffffffff, 0x7, 0xfffffc48, 0x0, 0x3, 0x2, 0x0, 0x4, 0x7ff, 0x1, 0xa31e, 'syz1\x00'}) (async) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r11, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x7}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x3) (async) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ip_tables_matches\x00') (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x12, &(0x7f0000000040)=@raw=[@ringbuf_query, @ldst={0x2, 0x1, 0x3, 0xa, 0x0, 0x4, 0x1}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_val={0x18, 0xb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0xd, 0x4, 0x81c}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x1, r3, r5, r6, r7, r8, r10, r11, r12, r13], &(0x7f0000000500)=[{0x5, 0x1, 0x0, 0x1}, {0x2, 0x5, 0x9, 0x7}, {0x5, 0x2, 0x10, 0xa}, {0x2, 0x5, 0xf, 0x7}, {0x1, 0x5, 0xe}], 0x10, 0xfffffffe}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001040)='\'f', 0x2}], 0x1}, 0x4091) setsockopt$sock_attach_bpf(r14, 0x1, 0x10, &(0x7f0000001280), 0x4) (async) recvmsg$unix(r14, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) 885.654283ms ago: executing program 8 (id=4288): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x2}, &(0x7f00000000c0)=0x28) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000440)={0x0, 0x5c2d, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000240)=0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x6, 0x0, 0x5f92, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) getsockopt(r0, 0x200000000114, 0x271e, &(0x7f0000032580)=""/102390, &(0x7f0000000040)=0x18ff6) 753.445993ms ago: executing program 3 (id=4289): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0xfffffffc, 0x0, 0x7}, {0x2, 0x0, 0xfffffffc, 0x5}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000140)=r5, 0xfffffffffffffd07) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="9bfe180082ffff5f55b4ce6d00"/24], 0x0, 0x4872, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc6e, 0x0, 0x0, 0x0}, 0x94) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x560b, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) mmap(&(0x7f00001b9000/0x1000)=nil, 0x1000, 0x4, 0x8010, r1, 0x91502000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x140341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') 634.367096ms ago: executing program 9 (id=4290): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xb}}, './file0\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001300050000000000feffffffeaffffffd26a9ae0316e362c0007d5d78ca2607c22bc193ccf7f6a83ec0fe0916d8d98a11b64c8e7749eae3a683fa2f111335fe56e8ae72f8a3c71e389", @ANYRES32=r6, @ANYBLOB='\x000\x00\x00\x00\x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800c) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r10 = socket(0x400000000010, 0x3, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x5, 0xfff3}, {0x0, 0x7}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000e91fab123154924fd33ab5bfab5157509cfd516e8d32a7325eb03429986e1e0151654c236e924bd213d6866396202c2ae99c", @ANYRES16=r4, @ANYBLOB="020025bd7000ffdbdf250100000008000300", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08003b00faffffff050038000100000005002d000100000005002d00000000000500380001000000050037000100000005003500090000000500380001000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x4040052) r13 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff, 0x9}, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r13, 0x2405, &(0x7f00000001c0)=0x56831409) (async) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) (async) pread64(0xffffffffffffffff, &(0x7f0000002240)=""/237, 0xed, 0x6a) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01002abd7000fcdbdf250200000014000180080006000400000008000700", @ANYRES32=0x0, @ANYBLOB="0a555436ce718240d5653ccc4308f032cf9e03000000000000003ade02024005abd38f740e4f7a959d3b18e8c3c2e725b5af48"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x14) r15 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r16, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r15, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@getchain={0x2c, 0x66, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x7, 0xc}, {0xb, 0x8}, {0x1, 0xffe0}}, [{0x8, 0xb, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r14, @ANYBLOB="000226bd70000500df250400000008000300040000003c02068016ec05004e2400cc78053a78d59f5500140004000000000000000000000000000000000014000480050002000800000300ac1414aa080007000000006416017fa523352dfb0182ebe92ac1f526d7bca5cee8547c59cf4dce8636dd8ff0e62a7b0654f3f2b18e4cd9577b0d007755a28c10fafacd786591e60152b687a383e1d31462318576260b1cd43b9086ff407fd35bbd802384c0a0a2d00b8a5b9b5573f34341b64232bedbcd9c92ba2f79b938a43b4fed66a4d643c27f75432bc417500a8ec9cc7ca1932aed07897e4b98497d90062acc3fa7fca8f975dd1c21dad1f36e9d1bbc302bb0264f36234cef75b20eabec4c00"/292, @ANYRES32=r16, @ANYBLOB="080003000400000008000200080000000c000680060001000a0000003800068006000100010000000500020005000000050002000900000014000400ff020000000000000000000000000001060005004e2200000500050005000000"], 0xd0}, 0x1, 0x0, 0x0, 0x860}, 0x1000) 529.623872ms ago: executing program 9 (id=4291): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r2, 0x0, 0xfffffffffffffffd}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x41bb, 0x4) prctl$PR_SCHED_CORE(0x2a, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1f}}, 0x1c, 0x0}}], 0x1, 0x4000001) 512.915148ms ago: executing program 8 (id=4292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x6b65, 0x80001) ioctl$BLKGETZONESZ(r1, 0x80041284, &(0x7f00000000c0)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6ef68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x8080) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 435.29699ms ago: executing program 9 (id=4293): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$isdn(0x22, 0x3, 0x1cf7ba25e3b395f4) listen(r0, 0x8) (async) listen(r0, 0x8) 370.081575ms ago: executing program 6 (id=4294): r0 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents64(r0, 0x0, 0x59) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fcfff1ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x43, &(0x7f0000000000), 0xff7b) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20009090) 223.471432ms ago: executing program 9 (id=4295): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x44015, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x14}, 0x204, 0x1, 0x43a1bd76, 0x6, 0x1, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf940, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4000, @fd_index=0x9, 0x8, 0x0, 0x0, 0x1, 0x1, {0x3, r7}}) io_uring_enter(r4, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@jqfmt_vfsv0}, {@inode_readahead_blks}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@nouid32}]}, 0x2, 0x47f, &(0x7f0000000340)="$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") r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r8, r8, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="7800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000048644aa5de42cda31b0100000050001280090001e2ce42b0f38241470040000280340003800c00010001000080070000f80600000000000000f8ffffff0c0001080000ff0c000100120300000000008006000100fc0f0000080b05000000000000", @ANYRES32=r11, @ANYBLOB], 0x78}}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000001000000090002000200000000000000", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r11, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 977.96µs ago: executing program 6 (id=4296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x4}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040011) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x200, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_IKEY={0x8, 0x4, 0xb344}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1797}, @IFLA_GRE_OKEY={0x8, 0x5, 0x7}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x4a}]}}}]}, 0x64}, 0x1, 0x2000000000000000}, 0x40000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB="d1e7ff141bb412aa034ce2f75b98b174bc841f46e574c49ffb944dce48fdddf568986fde49d5e8a8426c2d34e2b53293e9c6f3407f29de97a5762f6e1c6b6e768c50226e10d236ca372d724bc9b7f111517366bcd61589bac1b9ca606364f3cb54db78b00e9f83d3c3bea481f3a91898bf265a50025939ee4cc7ccec1a3d7e5ab1e8a570500300000000000000003c035c4af57975a4a108127777e7ac67a21f680dd2cf908b4e50e6b643d932189075d4d0e875a79db196d691f7b8bd8f1f", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf252300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x89}, 0x40) r6 = socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_udp_int(r6, 0x11, 0xb, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r7, 0x3, 0x0) getdents64(r7, 0x0, 0x22) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c001}, 0x24000) timerfd_create(0x4, 0x800) bind$inet(r6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) truncate(&(0x7f0000000040)='./file1\x00', 0xa) fallocate(r8, 0x1, 0x8e13, 0x8ffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x40, 0x0) 0s ago: executing program 0 (id=4297): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000002"], 0x38}, 0x300, 0x0, 0x0, 0x8800}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="dbaa00fe00010000711012000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) kernel console output (not intermixed with test programs): avc_audit_post_callback+0x10/0x10 [ 555.410957][T20293] ? __pfx_avc_audit_pre_callback+0x10/0x10 [ 555.417493][T20293] ? common_lsm_audit+0x97/0x230 [ 555.422898][T20293] ? avc_perm_nonode+0xcb/0xe0 [ 555.427927][T20293] ? slow_avc_audit+0x14c/0x190 [ 555.433313][T20293] ? avc_has_perm+0x144/0x190 [ 555.438723][T20293] ? avc_has_perm+0x17b/0x190 [ 555.443566][T20293] ? selinux_bpf_prog_load+0x197/0x1c0 [ 555.449137][T20293] ? security_bpf_prog_load+0x9e/0x140 [ 555.454816][T20293] bpf_prog_load+0xf76/0x1140 [ 555.459846][T20293] ? security_bpf+0x2b/0x90 [ 555.464845][T20293] __sys_bpf+0x505/0x7e0 [ 555.469467][T20293] __x64_sys_bpf+0x41/0x50 [ 555.474507][T20293] x64_sys_call+0x10cb/0x3020 [ 555.479384][T20293] do_syscall_64+0x12c/0x370 [ 555.484446][T20293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.490667][T20293] RIP: 0033:0x7f5085fec799 [ 555.495588][T20293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.516257][T20293] RSP: 002b:00007f5084a47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.525195][T20293] RAX: ffffffffffffffda RBX: 00007f5086265fa0 RCX: 00007f5085fec799 [ 555.533495][T20293] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 555.541895][T20293] RBP: 00007f5086082bd9 R08: 0000000000000000 R09: 0000000000000000 [ 555.550298][T20293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.558740][T20293] R13: 00007f5086266038 R14: 00007f5086265fa0 R15: 00007fff43ece5c8 [ 555.567196][T20293] [ 555.570405][T20293] ---[ end trace 0000000000000000 ]--- [ 555.597439][T20300] netlink: 'syz.6.3735': attribute type 2 has an invalid length. [ 555.668240][T20296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3734'. [ 555.743382][T20296] siw: device registration error -23 [ 556.338281][T20316] netlink: 2 bytes leftover after parsing attributes in process `syz.8.3736'. [ 556.540785][T20322] netlink: 80 bytes leftover after parsing attributes in process `syz.9.3742'. [ 556.564079][T20322] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3742'. [ 556.595555][T20322] geneve0: entered allmulticast mode [ 557.219562][T20343] xt_CT: You must specify a L4 protocol and not use inversions on it [ 557.313896][T20342] loop3: detected capacity change from 0 to 1024 [ 557.388776][T20342] EXT4-fs: Ignoring removed nomblk_io_submit option [ 557.503629][T20342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.915386][T20350] ip6_vti0 speed is unknown, defaulting to 1000 [ 558.195893][T20350] lo speed is unknown, defaulting to 1000 [ 558.271331][T11489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.379611][T20350] xfrm0 speed is unknown, defaulting to 1000 [ 558.466790][T20356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3751'. [ 558.562108][ T7798] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.584111][ T7798] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.606367][T20357] loop0: detected capacity change from 0 to 2048 [ 558.645294][ T7798] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.703667][ T7798] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 558.736457][T20357] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.775181][T20356] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #12: comm syz.0.3751: corrupted in-inode xattr: e_name out of bounds [ 558.869167][ T28] kauditd_printk_skb: 580 callbacks suppressed [ 558.869181][ T28] audit: type=1400 audit(2000000599.402:30238): avc: denied { write } for pid=20355 comm="syz.0.3751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 558.897445][T20356] EXT4-fs (loop0): Remounting filesystem read-only [ 558.972018][ T28] audit: type=1400 audit(2000000599.402:30239): avc: denied { allowed } for pid=20360 comm="syz.3.3750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 559.002618][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.034062][T20369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3754'. [ 559.053261][ T28] audit: type=1400 audit(2000000599.402:30240): avc: denied { create } for pid=20360 comm="syz.3.3750" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 559.137633][T20369] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3754'. [ 559.142896][T20370] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.149612][T20373] audit: audit_backlog=65 > audit_backlog_limit=64 [ 559.159865][ T28] audit: type=1400 audit(2000000599.432:30241): avc: denied { read write } for pid=19364 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.194853][T20373] audit: audit_lost=521 audit_rate_limit=0 audit_backlog_limit=64 [ 559.212954][T20373] audit: backlog limit exceeded [ 559.227956][ T28] audit: type=1400 audit(2000000599.432:30242): avc: denied { open } for pid=19364 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 559.237682][T20370] audit: audit_lost=522 audit_rate_limit=0 audit_backlog_limit=64 [ 559.264386][T20375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3755'. [ 559.603502][T20398] loop3: detected capacity change from 0 to 128 [ 559.648067][T20399] loop8: detected capacity change from 0 to 512 [ 559.926622][T20399] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 560.000366][T20399] System zones: 1-20 [ 560.157367][T20399] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.242151][T20428] loop0: detected capacity change from 0 to 512 [ 560.396774][T20427] ip6_vti0 speed is unknown, defaulting to 1000 [ 561.123239][T20427] lo speed is unknown, defaulting to 1000 [ 561.371351][T20427] xfrm0 speed is unknown, defaulting to 1000 [ 561.671541][T20436] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3766'. [ 562.022868][T20442] batadv_slave_1: entered promiscuous mode [ 562.094914][T20443] Cannot find del_set index 29 as target [ 562.109571][T20440] batadv_slave_1: left promiscuous mode [ 563.021059][T20506] loop6: detected capacity change from 0 to 128 [ 563.102657][T20506] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 563.141367][T20506] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.311792][T18674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 563.540972][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3779'. [ 563.665307][T20526] ip6_vti0 speed is unknown, defaulting to 1000 [ 563.667251][T20531] loop6: detected capacity change from 0 to 512 [ 563.758839][T20526] lo speed is unknown, defaulting to 1000 [ 563.772477][T20531] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 563.802521][T20531] EXT4-fs (loop6): mount failed [ 563.885649][ T28] kauditd_printk_skb: 1060 callbacks suppressed [ 563.885663][ T28] audit: type=1400 audit(2000620636.413:31298): avc: denied { create } for pid=20535 comm="syz.6.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 563.887057][T20526] xfrm0 speed is unknown, defaulting to 1000 [ 563.906991][ T28] audit: type=1400 audit(2000620636.433:31299): avc: denied { create } for pid=20535 comm="syz.6.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 563.982324][ T28] audit: type=1400 audit(2000620636.473:31300): avc: denied { bpf } for pid=20535 comm="syz.6.3783" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 564.023631][ T28] audit: type=1400 audit(2000620636.483:31301): avc: denied { open } for pid=20535 comm="syz.6.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 564.108285][ T28] audit: type=1400 audit(2000620636.483:31302): avc: denied { perfmon } for pid=20535 comm="syz.6.3783" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 564.169982][ T28] audit: type=1400 audit(2000620636.483:31303): avc: denied { kernel } for pid=20535 comm="syz.6.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 564.212331][ T28] audit: type=1400 audit(2000620636.483:31304): avc: denied { tracepoint } for pid=20535 comm="syz.6.3783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 564.247772][T20545] loop0: detected capacity change from 0 to 512 [ 564.257467][ T28] audit: type=1400 audit(2000620636.603:31305): avc: denied { read write } for pid=15672 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.258664][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3785'. [ 564.273714][T20545] EXT4-fs: Ignoring removed bh option [ 564.312103][ T28] audit: type=1400 audit(2000620636.603:31306): avc: denied { open } for pid=15672 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.322288][T20545] EXT4-fs: inline encryption not supported [ 564.352510][T20544] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3785'. [ 564.377190][ T28] audit: type=1400 audit(2000620636.603:31307): avc: denied { ioctl } for pid=15672 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 564.432673][T20545] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 564.435344][T20550] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3786'. [ 564.510849][T20545] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 564.572476][T20545] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3784: bg 0: block 248: padding at end of block bitmap is not set [ 564.654215][T20545] loop0: lost filesystem error report for type 5 error -117 [ 564.654400][T20545] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.3784: Failed to acquire dquot type 1 [ 564.673152][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 564.673170][ C0] EXT4-fs (loop0): last error at time 2000620637: ext4_validate_block_bitmap:441 [ 564.712340][T20545] loop0: lost filesystem error report for type 5 error -117 [ 564.724729][T20545] EXT4-fs (loop0): 1 truncate cleaned up [ 564.738527][T20558] loop6: detected capacity change from 0 to 128 [ 564.750311][T20545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 565.089225][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 565.793569][T20585] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3798'. [ 565.835720][T20585] loop3: detected capacity change from 0 to 256 [ 565.849401][T20585] FAT-fs (loop3): Directory bread(block 64) failed [ 565.864891][T20590] loop0: detected capacity change from 0 to 1024 [ 565.884082][T20590] EXT4-fs: Ignoring removed orlov option [ 565.887734][T20585] FAT-fs (loop3): Directory bread(block 65) failed [ 565.918721][T20592] loop6: detected capacity change from 0 to 1024 [ 565.929689][T20590] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 565.941985][T20592] EXT4-fs: Ignoring removed oldalloc option [ 565.952318][T20585] FAT-fs (loop3): Directory bread(block 66) failed [ 565.970594][T20592] EXT4-fs: Ignoring removed bh option [ 565.979359][T20585] FAT-fs (loop3): Directory bread(block 67) failed [ 565.993336][T20585] FAT-fs (loop3): Directory bread(block 68) failed [ 566.002370][T20585] FAT-fs (loop3): Directory bread(block 69) failed [ 566.008959][T20585] FAT-fs (loop3): Directory bread(block 70) failed [ 566.023961][T20590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.053045][T20592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.104446][T20600] netlink: 'syz.9.3802': attribute type 1 has an invalid length. [ 566.122414][T20585] FAT-fs (loop3): Directory bread(block 71) failed [ 566.139810][T20585] FAT-fs (loop3): Directory bread(block 72) failed [ 566.170063][T20585] FAT-fs (loop3): Directory bread(block 73) failed [ 566.226753][T20590] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 566.237043][T20600] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 566.403382][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.431286][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.569273][T20613] loop3: detected capacity change from 0 to 512 [ 566.577280][T20613] EXT4-fs: Ignoring removed nobh option [ 566.584029][T20613] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.639191][T20613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 566.657220][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.682945][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.705435][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.733827][T20608] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 566.741106][T20613] EXT4-fs (loop3): 1 truncate cleaned up [ 566.762704][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.769295][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.776516][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.783029][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.789814][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.796446][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.802944][T20608] dummy0 speed is unknown, defaulting to 1000 [ 566.818420][T20624] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3807'. [ 566.867328][T20613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.936929][T20629] loop0: detected capacity change from 0 to 128 [ 567.143937][T20605] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3800: Allocating blocks 1-17 which overlap fs metadata [ 567.168217][T20592] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4222: comm syz.6.3800: Allocating blocks 1-17 which overlap fs metadata [ 567.314090][T18674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.456299][T20635] loop6: detected capacity change from 0 to 1024 [ 567.483650][T20635] EXT4-fs: Ignoring removed i_version option [ 567.513206][T20635] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 567.628973][T20637] ip6_vti0 speed is unknown, defaulting to 1000 [ 567.711134][T20611] syz.3.3803 (20611) used greatest stack depth: 5968 bytes left [ 567.853419][T11489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.908871][T20637] lo speed is unknown, defaulting to 1000 [ 567.934852][T20641] msdos: Unknown parameter '' [ 568.152505][T20647] set_capacity_and_notify: 1 callbacks suppressed [ 568.152519][T20647] loop8: detected capacity change from 0 to 2048 [ 568.235455][T20647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.262412][T20652] loop3: detected capacity change from 0 to 256 [ 568.301916][T20637] xfrm0 speed is unknown, defaulting to 1000 [ 568.426938][T20637] dummy0 speed is unknown, defaulting to 1000 [ 568.430917][T20647] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 568.509594][T20647] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 732 with error 28 [ 568.564208][T20647] EXT4-fs (loop8): This should not happen!! Data will be lost [ 568.564208][T20647] [ 568.604239][T20647] EXT4-fs (loop8): Total free blocks count 0 [ 568.610316][T20647] EXT4-fs (loop8): Free/Dirty block details [ 568.666564][T20647] EXT4-fs (loop8): free_blocks=2415919104 [ 568.682662][T20647] EXT4-fs (loop8): dirty_blocks=736 [ 568.697815][T20647] EXT4-fs (loop8): Block reservation details [ 568.723254][T20660] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3817'. [ 568.724863][T20659] loop6: detected capacity change from 0 to 128 [ 568.752310][T20647] EXT4-fs (loop8): i_reserved_data_blocks=46 [ 568.893877][ T28] kauditd_printk_skb: 560 callbacks suppressed [ 568.893890][ T28] audit: type=1400 audit(2000620641.423:31866): avc: denied { prog_load } for pid=20657 comm="syz.6.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.010585][ T28] audit: type=1400 audit(2000620641.423:31867): avc: denied { bpf } for pid=20657 comm="syz.6.3816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.061877][ T28] audit: type=1400 audit(2000620641.463:31868): avc: denied { prog_load } for pid=20657 comm="syz.6.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.120033][ T4229] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 732 with error 28 [ 569.146438][ T28] audit: type=1400 audit(2000620641.473:31869): avc: denied { bpf } for pid=20657 comm="syz.6.3816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.232432][ T28] audit: type=1400 audit(2000620641.473:31870): avc: denied { perfmon } for pid=20657 comm="syz.6.3816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.469223][T20666] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3819'. [ 569.522351][ T28] audit: type=1400 audit(2000620641.473:31871): avc: denied { prog_load } for pid=20657 comm="syz.6.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.579039][ T28] audit: type=1400 audit(2000620641.473:31872): avc: denied { perfmon } for pid=20657 comm="syz.6.3816" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.604240][ T28] audit: type=1400 audit(2000620641.473:31873): avc: denied { bpf } for pid=20657 comm="syz.6.3816" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 569.631417][ T7802] kworker/u8:22: attempt to access beyond end of device [ 569.631417][ T7802] loop6: rw=8388609, sector=171, nr_sectors = 1 limit=128 [ 569.662298][ T7802] Buffer I/O error on dev loop6, logical block 171, lost async page write [ 569.706138][ T28] audit: type=1400 audit(2000620641.473:31874): avc: denied { prog_run } for pid=20657 comm="syz.6.3816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 569.737446][T20669] audit: audit_backlog=65 > audit_backlog_limit=64 [ 570.079541][T20691] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3827'. [ 570.127458][T20696] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3829'. [ 570.585822][T20694] loop6: detected capacity change from 0 to 1024 [ 570.720210][T20694] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 570.744369][T20694] System zones: 0-1, 3-36 [ 570.773406][T20694] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3828: bad orphan inode 134217728 [ 570.802551][T20694] loop6: lost filesystem error report for type 5 error -117 [ 570.808042][T20694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.852092][T20711] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3832'. [ 571.763928][T18674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.747374][T20742] loop8: detected capacity change from 0 to 1024 [ 573.026417][T20742] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 573.056387][T20742] System zones: 0-1, 3-8 [ 573.113897][T20742] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 573.187326][T20742] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.305131][T20759] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3846'. [ 573.660770][T20770] loop3: detected capacity change from 0 to 128 [ 573.852783][ T7802] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 112: padding at end of block bitmap is not set [ 573.874609][ T7802] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 573.897725][ T7802] EXT4-fs (loop8): This should not happen!! Data will be lost [ 573.897725][ T7802] [ 573.909463][ T28] kauditd_printk_skb: 506 callbacks suppressed [ 573.909475][ T28] audit: type=1400 audit(2000620646.443:32334): avc: denied { create } for pid=20767 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 573.950341][ T7802] EXT4-fs (loop8): Total free blocks count 0 [ 573.957270][ T7802] EXT4-fs (loop8): Free/Dirty block details [ 573.963353][ T7802] EXT4-fs (loop8): free_blocks=0 [ 573.969130][ T28] audit: type=1400 audit(2000620646.443:32335): avc: denied { setopt } for pid=20767 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.004065][ T7802] EXT4-fs (loop8): dirty_blocks=16 [ 574.009197][ T7802] EXT4-fs (loop8): Block reservation details [ 574.024561][ T7802] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 574.039398][ T28] audit: type=1400 audit(2000620646.443:32336): avc: denied { connect } for pid=20767 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 574.062579][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 574.076904][ T28] audit: type=1400 audit(2000620646.453:32337): avc: denied { read write } for pid=18674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 574.106965][T20787] tmpfs: Bad value for 'mpol' [ 574.141072][ T28] audit: type=1400 audit(2000620646.453:32338): avc: denied { open } for pid=18674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 574.197744][ T28] audit: type=1400 audit(2000620646.453:32339): avc: denied { ioctl } for pid=18674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 574.278036][ T28] audit: type=1400 audit(2000620646.473:32340): avc: denied { write } for pid=20767 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.348617][T20793] openvswitch: netlink: Message has 4 unknown bytes. [ 574.355594][ T28] audit: type=1400 audit(2000620646.473:32341): avc: denied { write } for pid=20767 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.429950][ T28] audit: type=1400 audit(2000620646.473:32342): avc: denied { write } for pid=20767 comm="syz.0.3849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.504094][T20785] audit: audit_backlog=65 > audit_backlog_limit=64 [ 575.431428][T20809] loop6: detected capacity change from 0 to 256 [ 575.546936][T20809] program syz.6.3861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.745055][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3864'. [ 575.951741][T20823] loop0: detected capacity change from 0 to 164 [ 578.335181][ T4229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.422679][ T4229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 33863 - 0 [ 578.531665][T20862] loop6: detected capacity change from 0 to 512 [ 578.592027][T20862] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.3878: ea_inode with extended attributes [ 578.635937][ T4229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.667721][T20862] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 578.672264][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 578.687854][ C1] EXT4-fs (loop6): initial error at time 2000620651: ext4_xattr_inode_iget:441: inode 11 [ 578.689939][ T4229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 33863 - 0 [ 578.697699][ C1] EXT4-fs (loop6): last error at time 2000620651: ext4_xattr_inode_iget:441: inode 11 [ 578.719658][T20862] EXT4-fs (loop6): Remounting filesystem read-only [ 578.742360][T20867] syz_tun: entered promiscuous mode [ 578.754623][T20862] EXT4-fs warning (device loop6): ext4_evict_inode:275: xattr delete (err -30) [ 578.772370][T20862] EXT4-fs (loop6): 1 orphan inode deleted [ 578.787100][T20867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3875'. [ 578.803959][T20862] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.895348][ T4229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.907948][T18674] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 578.922981][ T28] kauditd_printk_skb: 459 callbacks suppressed [ 578.922993][ T28] audit: type=1400 audit(2000620651.453:32788): avc: denied { create } for pid=20858 comm="syz.9.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 578.950041][ T4229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 33863 - 0 [ 578.982307][ T28] audit: type=1400 audit(2000620651.463:32790): avc: denied { map_create } for pid=20858 comm="syz.9.3877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.048567][ T28] audit: type=1400 audit(2000620651.453:32789): avc: denied { map_create } for pid=20869 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.122463][ T4229] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.147879][ T28] audit: type=1400 audit(2000620651.493:32791): avc: denied { map_create } for pid=20869 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.182386][ T4229] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 33863 - 0 [ 579.222036][ T28] audit: type=1400 audit(2000620651.493:32792): avc: denied { map_read map_write } for pid=20869 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.293079][ T28] audit: type=1400 audit(2000620651.503:32793): avc: denied { prog_load } for pid=20869 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.321324][T20883] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 579.359650][ T28] audit: type=1400 audit(2000620651.503:32794): avc: denied { bpf } for pid=20869 comm="syz.0.3879" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.382083][T20883] syzkaller0: entered promiscuous mode [ 579.397601][T20899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3884'. [ 579.402321][T20883] syzkaller0: entered allmulticast mode [ 579.443093][T20897] raw_sendmsg: syz.0.3884 forgot to set AF_INET. Fix it! [ 579.453531][ T28] audit: type=1400 audit(2000620651.503:32795): avc: denied { prog_load } for pid=20869 comm="syz.0.3879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 579.467902][T20901] loop8: detected capacity change from 0 to 512 [ 579.489347][T20901] audit: audit_backlog=65 > audit_backlog_limit=64 [ 579.523947][ T28] audit: type=1400 audit(2000620651.503:32796): avc: denied { perfmon } for pid=20869 comm="syz.0.3879" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 579.641796][T20901] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.697650][T20893] ip6_vti0 speed is unknown, defaulting to 1000 [ 579.730717][T20901] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.109500][T20918] tmpfs: Bad value for 'mpol' [ 580.138602][ T4229] bond1 (unregistering): (slave gretap1): Releasing active interface [ 580.325608][T20921] loop6: detected capacity change from 0 to 8192 [ 580.335780][ T4229] bond0 (unregistering): Released all slaves [ 580.351427][ T4229] bond1 (unregistering): Released all slaves [ 580.360723][ T4229] bond2 (unregistering): Released all slaves [ 580.370460][ T4229] bond3 (unregistering): (slave veth3): Releasing active interface [ 580.389201][ T4229] bond3 (unregistering): Released all slaves [ 580.397616][ T6948] loop6: p1 < > p2 p4 < p5 > [ 580.402464][ T6948] loop6: partition table partially beyond EOD, truncated [ 580.412049][ T4229] bond4 (unregistering): Released all slaves [ 580.430225][ T6948] loop6: p1 start 134217728 is beyond EOD, truncated [ 580.446037][T20893] lo speed is unknown, defaulting to 1000 [ 580.451843][ T6948] loop6: p2 size 591360 extends beyond EOD, truncated [ 580.514603][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.518104][T20902] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.547644][ T6948] loop6: p5 size 591360 extends beyond EOD, truncated [ 580.568901][ T4229] tipc: Left network mode [ 580.722307][T20921] loop6: p1 < > p2 p4 < p5 > [ 580.747813][T20921] loop6: partition table partially beyond EOD, truncated [ 580.765922][T20938] delete_channel: no stack [ 580.770379][T20938] delete_channel: no stack [ 580.831772][T20921] loop6: p1 start 134217728 is beyond EOD, truncated [ 580.890826][T20921] loop6: p2 size 591360 extends beyond EOD, truncated [ 581.016771][T20921] loop6: p5 size 591360 extends beyond EOD, truncated [ 581.042844][T20893] xfrm0 speed is unknown, defaulting to 1000 [ 581.282516][T20902] lo speed is unknown, defaulting to 1000 [ 581.327709][T20893] dummy0 speed is unknown, defaulting to 1000 [ 581.448940][T20959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3896'. [ 581.679203][T20902] xfrm0 speed is unknown, defaulting to 1000 [ 581.745369][T20968] loop0: detected capacity change from 0 to 512 [ 581.905890][T20902] dummy0 speed is unknown, defaulting to 1000 [ 582.043809][ T4229] hsr_slave_0: left promiscuous mode [ 582.328658][ T7332] udevd[7332]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 582.350305][ T7354] udevd[7354]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 582.378990][ T6948] udevd[6948]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 582.851700][T20992] loop6: detected capacity change from 0 to 128 [ 582.909340][T20992] FAT-fs (loop6): bogus number of directory entries (65286) [ 582.932881][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3903'. [ 582.942341][T20992] FAT-fs (loop6): Can't find a valid FAT filesystem [ 583.083987][ T4229] IPVS: stop unused estimator thread 0... [ 583.994926][ T28] kauditd_printk_skb: 1096 callbacks suppressed [ 583.994948][ T28] audit: type=1400 audit(2000620656.523:33885): avc: denied { create } for pid=21043 comm="syz.9.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.034903][T21044] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3909'. [ 584.071094][T21044] netlink: 'syz.9.3909': attribute type 1 has an invalid length. [ 584.099520][T21044] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3909'. [ 584.121582][ T28] audit: type=1400 audit(2000620656.563:33886): avc: denied { write } for pid=21043 comm="syz.9.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.265906][ T28] audit: type=1400 audit(2000620656.793:33887): avc: denied { create } for pid=21046 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 584.439909][ T28] audit: type=1400 audit(2000620656.953:33888): avc: denied { prog_load } for pid=21046 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 584.553975][ T28] audit: type=1400 audit(2000620656.953:33889): avc: denied { bpf } for pid=21046 comm="syz.9.3910" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 584.659962][T21014] loop3: detected capacity change from 0 to 128 [ 584.659976][T21038] loop8: detected capacity change from 0 to 1764 [ 584.678572][T21035] loop6: detected capacity change from 0 to 128 [ 584.775656][T21038] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 584.796199][ T28] audit: type=1400 audit(2000620656.953:33890): avc: denied { open } for pid=21046 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 584.835229][ T28] audit: type=1400 audit(2000620656.953:33891): avc: denied { perfmon } for pid=21046 comm="syz.9.3910" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 585.077902][ T28] audit: type=1400 audit(2000620656.953:33892): avc: denied { kernel } for pid=21046 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 585.449286][ T28] audit: type=1400 audit(2000620656.963:33893): avc: denied { write } for pid=21046 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 585.559218][T21014] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 585.584415][ T28] audit: type=1400 audit(2000620657.063:33894): avc: denied { setopt } for pid=21046 comm="syz.9.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 585.659574][T21014] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 585.731784][T21070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.756391][T21014] netlink: 'syz.3.3904': attribute type 2 has an invalid length. [ 585.815236][T21014] netlink: 'syz.3.3904': attribute type 8 has an invalid length. [ 585.838136][T21070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.866698][T21014] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3904'. [ 585.888131][T21071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.935072][T21072] loop8: detected capacity change from 0 to 512 [ 585.962484][T21071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.994120][T21072] EXT4-fs: Ignoring removed bh option [ 586.048764][T21072] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.3913: dx entry: limit 0 != root limit 125 [ 586.084202][T21072] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.3913: Corrupt directory, running e2fsck is recommended [ 586.155645][T21072] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #2: block 8: comm syz.8.3913: lblock 11 mapped to illegal pblock 8 (length 1) [ 586.175533][T11489] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 586.212319][T21072] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 586.212468][T21072] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 586.229819][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 586.229839][ C0] EXT4-fs (loop8): initial error at time 2000620658: ext4_map_blocks:776: inode 2: block 8 [ 586.229880][ C0] EXT4-fs (loop8): last error at time 2000620658: ext4_map_blocks:776: inode 2: block 8 [ 586.342814][T21072] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.592083][T21084] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3915'. [ 587.075515][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.233224][T21105] loop8: detected capacity change from 0 to 1024 [ 587.360219][T21105] loop8: detected capacity change from 0 to 128 [ 587.439343][T21114] loop3: detected capacity change from 0 to 8192 [ 588.240251][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3926'. [ 588.290818][T21131] loop8: detected capacity change from 0 to 512 [ 588.318854][T21131] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 588.367042][T21131] EXT4-fs (loop8): 1 truncate cleaned up [ 588.394244][T21131] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.612184][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.709422][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3931'. [ 588.756376][T21154] gtp1: entered promiscuous mode [ 588.783463][T21154] gtp1: entered allmulticast mode [ 588.887169][T21163] loop8: detected capacity change from 0 to 128 [ 588.947297][T21164] loop0: detected capacity change from 0 to 1024 [ 588.974504][T21164] EXT4-fs: Ignoring removed bh option [ 589.053532][ T28] kauditd_printk_skb: 488 callbacks suppressed [ 589.053547][ T28] audit: type=1400 audit(2000620661.583:34317): avc: denied { allowed } for pid=21165 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 589.087970][T21164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.124377][ T28] audit: type=1400 audit(2000620661.613:34318): avc: denied { prog_load } for pid=21165 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.167604][ T28] audit: type=1400 audit(2000620661.613:34319): avc: denied { bpf } for pid=21165 comm="syz.9.3934" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.218147][T21169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3930'. [ 589.232267][ T28] audit: type=1400 audit(2000620661.613:34320): avc: denied { perfmon } for pid=21165 comm="syz.9.3934" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.265223][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.269348][ T28] audit: type=1400 audit(2000620661.613:34321): avc: denied { prog_load } for pid=21165 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.294157][ T28] audit: type=1400 audit(2000620661.633:34322): avc: denied { bpf } for pid=21165 comm="syz.9.3934" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.362437][ T28] audit: type=1400 audit(2000620661.643:34323): avc: denied { bpf } for pid=21165 comm="syz.9.3934" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 589.443545][T21176] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3935'. [ 589.471046][ T28] audit: type=1400 audit(2000620661.643:34324): avc: denied { prog_run } for pid=21165 comm="syz.9.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 589.517524][T21180] xt_policy: neither incoming nor outgoing policy selected [ 589.538228][ T28] audit: type=1400 audit(2000620661.663:34325): avc: denied { mount } for pid=21162 comm="syz.0.3933" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 589.600961][ T28] audit: type=1400 audit(2000620661.663:34326): avc: denied { read write } for pid=21162 comm="syz.0.3933" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 589.633007][T21176] veth0_to_bond: entered promiscuous mode [ 589.758479][T21183] loop3: detected capacity change from 0 to 256 [ 589.841223][T21183] FAT-fs (loop3): Directory bread(block 64) failed [ 589.847815][T21183] FAT-fs (loop3): Directory bread(block 65) failed [ 589.854564][T21183] FAT-fs (loop3): Directory bread(block 66) failed [ 589.861094][T21183] FAT-fs (loop3): Directory bread(block 67) failed [ 589.867799][T21183] FAT-fs (loop3): Directory bread(block 68) failed [ 589.874418][T21183] FAT-fs (loop3): Directory bread(block 69) failed [ 589.881048][T21183] FAT-fs (loop3): Directory bread(block 70) failed [ 589.887601][T21183] FAT-fs (loop3): Directory bread(block 71) failed [ 589.894236][T21183] FAT-fs (loop3): Directory bread(block 72) failed [ 589.900756][T21183] FAT-fs (loop3): Directory bread(block 73) failed [ 589.998484][T21182] lo: left promiscuous mode [ 590.003817][T21182] lo: left allmulticast mode [ 590.055382][T21182] geneve2: left promiscuous mode [ 590.075704][T21182] bond1: (slave veth3): Releasing active interface [ 590.117930][T21182] bond5: left promiscuous mode [ 590.133724][T21182] bridge5: left promiscuous mode [ 590.179500][ T3406] lo speed is unknown, defaulting to 1000 [ 590.201186][ T3406] syU×: Port: 1 Link DOWN [ 590.212054][ T7798] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.427952][ T3406] lo speed is unknown, defaulting to 1000 [ 590.441749][ T7798] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.470290][T21176] loop0: detected capacity change from 0 to 1024 [ 590.614930][ T7798] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.793119][ T7798] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.912186][ T1627] tipc: Subscription rejected, illegal request [ 591.311700][T21176] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3935: bad orphan inode 134217728 [ 591.342329][T21176] loop0: lost filesystem error report for type 5 error -117 [ 591.352261][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 591.366016][ C1] EXT4-fs (loop0): initial error at time 2000620663: ext4_orphan_get:1417 [ 591.374542][ C1] EXT4-fs (loop0): last error at time 2000620663: ext4_orphan_get:1417 [ 591.388902][T21176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.461261][T21176] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.3935: corrupted in-inode xattr: bad e_name length [ 591.564635][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.719200][T21210] loop0: detected capacity change from 0 to 512 [ 591.749725][T21210] EXT4-fs error (device loop0): ext4_quota_enable:7192: comm syz.0.3944: inode #50331648: comm syz.0.3944: iget: illegal inode # [ 591.786684][T21210] loop0: lost filesystem error report for type 5 error -117 [ 591.787373][T21210] EXT4-fs error (device loop0): ext4_quota_enable:7195: comm syz.0.3944: Bad quota inode: 50331648, type: 2 [ 591.794820][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 591.794840][ C0] EXT4-fs (loop0): initial error at time 2000620664: ext4_quota_enable:7192 [ 591.794859][ C0] EXT4-fs (loop0): last error at time 2000620664: ext4_quota_enable:7192 [ 591.852157][T21206] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3943'. [ 591.918112][T21210] loop0: lost filesystem error report for type 5 error -117 [ 591.918300][T21210] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=50331648). Please run e2fsck to fix. [ 591.956855][T21210] EXT4-fs (loop0): mount failed [ 592.215224][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 592.265300][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.274255][T21227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 592.283432][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.290911][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.299181][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.306677][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.317507][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.326482][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.334009][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.341437][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.348910][ T6391] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 592.359305][ T6391] hid-generic 0000:0000:0004.0003: hidraw0: HID v0.03 Device [syz0] on syz1 [ 592.371532][T21227] loop6: detected capacity change from 0 to 1024 [ 592.384903][T21227] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 592.397819][T21227] System zones: 0-1, 3-36 [ 592.408825][T21227] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3948: bad orphan inode 134217728 [ 592.447476][T21227] loop6: lost filesystem error report for type 5 error -117 [ 592.447899][T21227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.715987][T21238] loop8: detected capacity change from 0 to 2048 [ 592.755117][T21243] loop3: detected capacity change from 0 to 128 [ 592.779545][T21243] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.797221][T18674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.802946][T21243] ext4 filesystem being mounted at /445/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.833125][T21238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 592.961631][T21238] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.994509][T21254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.034509][T21254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.072053][T11489] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 593.094340][T21256] netlink: 'syz.6.3953': attribute type 1 has an invalid length. [ 593.111731][T21256] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 593.261660][T21268] loop3: detected capacity change from 0 to 128 [ 593.312831][T21273] loop6: detected capacity change from 0 to 256 [ 593.471795][T21276] syzkaller0: entered promiscuous mode [ 593.503680][T21276] syzkaller0: entered allmulticast mode [ 594.062652][ T28] kauditd_printk_skb: 647 callbacks suppressed [ 594.062691][ T28] audit: type=1326 audit(2000620666.593:34975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f16fcb5c799 code=0x7ffc0000 [ 594.142698][T21276] ip6_vti0 speed is unknown, defaulting to 1000 [ 594.182554][ T28] audit: type=1326 audit(2000620666.633:34976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f16fcb5c799 code=0x7ffc0000 [ 594.239963][ T28] audit: type=1326 audit(2000620666.633:34977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f16fcb5c799 code=0x7ffc0000 [ 594.264655][ T28] audit: type=1326 audit(2000620666.633:34978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21300 comm="syz.9.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f16fcb5c799 code=0x7ffc0000 [ 594.302065][T21306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 594.310515][T21306] audit: audit_lost=570 audit_rate_limit=0 audit_backlog_limit=64 [ 594.318987][T21306] audit: backlog limit exceeded [ 594.325213][T21306] audit: audit_backlog=65 > audit_backlog_limit=64 [ 594.335982][T21306] audit: audit_lost=571 audit_rate_limit=0 audit_backlog_limit=64 [ 594.344944][T21306] audit: backlog limit exceeded [ 594.368539][T21276] lo speed is unknown, defaulting to 1000 [ 594.419281][T21276] xfrm0 speed is unknown, defaulting to 1000 [ 594.550200][T21276] dummy0 speed is unknown, defaulting to 1000 [ 594.636712][T21315] loop6: detected capacity change from 0 to 128 [ 594.694694][T21315] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 594.752622][T21315] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.819874][T18674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 594.829805][T21322] loop0: detected capacity change from 0 to 164 [ 594.870152][T21322] iso9660: Unknown parameter '000' [ 595.013555][T21327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21327 comm=syz.9.3970 [ 595.148075][ T3406] IPVS: starting estimator thread 0... [ 595.272472][T21336] IPVS: using max 2448 ests per chain, 122400 per kthread [ 596.111778][T21353] loop0: detected capacity change from 0 to 128 [ 596.122116][T21337] loop8: detected capacity change from 0 to 512 [ 596.247239][T21337] EXT4-fs error (device loop8): ext4_map_blocks:776: inode #11: block 530: comm syz.8.3974: lblock 4 mapped to illegal pblock 530 (length 1) [ 596.274420][T21353] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 596.332429][T21337] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 596.332627][T21337] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 596.354734][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 596.354754][ C0] EXT4-fs (loop8): initial error at time 2000620668: ext4_map_blocks:776: inode 11: block 530 [ 596.354816][ C0] EXT4-fs (loop8): last error at time 2000620668: ext4_map_blocks:776: inode 11: block 530 [ 596.408353][T21353] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.516967][T21363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21363 comm=syz.9.3981 [ 596.573734][T21337] EXT4-fs (loop8): 1 orphan inode deleted [ 596.595089][T21337] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.780789][T15672] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 597.075394][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.222274][T21402] sctp: [Deprecated]: syz.8.3987 (pid 21402) Use of int in maxseg socket option. [ 597.222274][T21402] Use struct sctp_assoc_value instead [ 597.337643][T21408] loop0: detected capacity change from 0 to 2048 [ 597.409397][T21412] netlink: 'syz.8.3992': attribute type 2 has an invalid length. [ 597.434018][T21415] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3991'. [ 597.450826][T21408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.475600][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3992'. [ 597.698882][T21431] loop6: detected capacity change from 0 to 128 [ 597.791424][T21435] tmpfs: Bad value for 'mpol' [ 597.823875][T21436] xt_cgroup: xt_cgroup: no path or classid specified [ 597.913594][T21408] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3989: bg 0: block 234: padding at end of block bitmap is not set [ 598.037749][T21408] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 606 with error 28 [ 598.045288][T21431] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 598.087632][T21431] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.111067][T21408] EXT4-fs (loop0): This should not happen!! Data will be lost [ 598.111067][T21408] [ 598.123441][T21408] EXT4-fs (loop0): Total free blocks count 0 [ 598.205163][T21408] EXT4-fs (loop0): Free/Dirty block details [ 598.211613][T21408] EXT4-fs (loop0): free_blocks=0 [ 598.299722][T21408] EXT4-fs (loop0): dirty_blocks=608 [ 598.329928][T21408] EXT4-fs (loop0): Block reservation details [ 598.352367][T21408] EXT4-fs (loop0): i_reserved_data_blocks=38 [ 598.439246][T18674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.500247][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.815625][T21487] loop8: detected capacity change from 0 to 1024 [ 598.824888][T21487] EXT4-fs (loop8): bad geometry: first data block 0 is beyond end of filesystem (0) [ 599.080458][ T28] kauditd_printk_skb: 1154 callbacks suppressed [ 599.080473][ T28] audit: type=1400 audit(2000620671.603:36123): avc: denied { allowed } for pid=21493 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 599.161607][ T28] audit: type=1400 audit(2000620671.643:36124): avc: denied { create } for pid=21493 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.262314][ T28] audit: type=1400 audit(2000620671.643:36125): avc: denied { create } for pid=21493 comm="syz.0.4003" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 599.342631][ T28] audit: type=1400 audit(2000620671.643:36126): avc: denied { read write } for pid=18674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.402355][ T28] audit: type=1400 audit(2000620671.643:36127): avc: denied { open } for pid=18674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.472287][ T28] audit: type=1400 audit(2000620671.643:36128): avc: denied { ioctl } for pid=18674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 599.522282][ T28] audit: type=1400 audit(2000620671.653:36129): avc: denied { create } for pid=21493 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.582461][ T28] audit: type=1400 audit(2000620671.663:36130): avc: denied { connect } for pid=21493 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.632369][ T28] audit: type=1400 audit(2000620671.673:36131): avc: denied { connect } for pid=21493 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.674185][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4004'. [ 599.702297][ T28] audit: type=1400 audit(2000620671.673:36132): avc: denied { setopt } for pid=21493 comm="syz.0.4003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 599.732438][T21496] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4004'. [ 599.743290][T21496] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4004'. [ 599.832523][T21502] loop0: detected capacity change from 0 to 256 [ 599.952710][T21502] FAT-fs (loop0): Directory bread(block 64) failed [ 599.961670][T21502] FAT-fs (loop0): Directory bread(block 65) failed [ 599.986696][T21502] FAT-fs (loop0): Directory bread(block 66) failed [ 600.098115][T21502] FAT-fs (loop0): Directory bread(block 67) failed [ 600.129574][T21502] FAT-fs (loop0): Directory bread(block 68) failed [ 600.205753][T21502] FAT-fs (loop0): Directory bread(block 69) failed [ 600.222935][T21502] FAT-fs (loop0): Directory bread(block 70) failed [ 600.236379][T21502] FAT-fs (loop0): Directory bread(block 71) failed [ 600.275347][T21502] FAT-fs (loop0): Directory bread(block 72) failed [ 600.302961][T21502] FAT-fs (loop0): Directory bread(block 73) failed [ 601.461076][T21527] loop8: detected capacity change from 0 to 512 [ 601.532654][T21527] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 603.013251][T21549] loop8: detected capacity change from 0 to 128 [ 603.081310][T21550] loop3: detected capacity change from 0 to 1024 [ 603.103923][T21550] EXT4-fs: Ignoring removed oldalloc option [ 603.109906][T21550] EXT4-fs: dax option not supported [ 603.181219][T21552] ip6_vti0 speed is unknown, defaulting to 1000 [ 603.406624][T21552] lo speed is unknown, defaulting to 1000 [ 603.533349][T21552] xfrm0 speed is unknown, defaulting to 1000 [ 603.627207][T21552] dummy0 speed is unknown, defaulting to 1000 [ 603.986613][T21569] loop3: detected capacity change from 0 to 4096 [ 603.995085][T21572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4024'. [ 604.096417][ T28] kauditd_printk_skb: 327 callbacks suppressed [ 604.096432][ T28] audit: type=1400 audit(2000620676.623:36460): avc: denied { read write } for pid=15672 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.140245][T21575] loop0: detected capacity change from 0 to 1024 [ 604.181986][ T28] audit: type=1400 audit(2000620676.623:36461): avc: denied { open } for pid=15672 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.262053][T21575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.344396][ T28] audit: type=1400 audit(2000620676.623:36462): avc: denied { ioctl } for pid=15672 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.411218][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.472416][ T28] audit: type=1400 audit(2000620676.653:36463): avc: denied { read write } for pid=21574 comm="syz.0.4025" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.527068][ T28] audit: type=1400 audit(2000620676.653:36464): avc: denied { open } for pid=21574 comm="syz.0.4025" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 604.577558][T21591] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.582853][T21582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 604.610519][T21591] audit: audit_lost=575 audit_rate_limit=0 audit_backlog_limit=64 [ 604.612501][T21582] audit: audit_lost=576 audit_rate_limit=0 audit_backlog_limit=64 [ 604.627311][ T28] audit: type=1400 audit(2000620676.653:36465): avc: denied { ioctl } for pid=21574 comm="syz.0.4025" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 605.015729][T21601] loop6: detected capacity change from 0 to 256 [ 605.033434][T21601] vfat: Unknown parameter '18446744073709551615ÿÿÿÿ' [ 605.146947][T21601] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.359680][T21601] lo speed is unknown, defaulting to 1000 [ 605.570829][T21601] xfrm0 speed is unknown, defaulting to 1000 [ 605.780356][T21601] dummy0 speed is unknown, defaulting to 1000 [ 606.521588][T21605] loop0: detected capacity change from 0 to 512 [ 606.660536][T21605] ext3: Unknown parameter 'dont_hash' [ 606.793661][T21608] loop3: detected capacity change from 0 to 512 [ 606.882570][T21608] EXT4-fs (loop3): 1 truncate cleaned up [ 606.891890][T21608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.299554][ T4229] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 465: padding at end of block bitmap is not set [ 607.336427][ T4229] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 607.382277][ T4229] EXT4-fs (loop3): This should not happen!! Data will be lost [ 607.382277][ T4229] [ 607.424743][ T4229] EXT4-fs (loop3): Total free blocks count 0 [ 607.430778][ T4229] EXT4-fs (loop3): Free/Dirty block details [ 607.463026][ T4229] EXT4-fs (loop3): free_blocks=0 [ 607.473050][ T4229] EXT4-fs (loop3): dirty_blocks=2061 [ 607.492284][ T4229] EXT4-fs (loop3): Block reservation details [ 607.510391][ T4229] EXT4-fs (loop3): i_reserved_data_blocks=2061 [ 607.534939][ T118] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 2048 with error 28 [ 607.670145][T21633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4041'. [ 607.989364][T21658] loop0: detected capacity change from 0 to 512 [ 608.018648][T21655] netlink: 'syz.6.4045': attribute type 32 has an invalid length. [ 608.033583][T21658] EXT4-fs: Ignoring removed bh option [ 608.050961][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4045'. [ 608.062855][T21658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e118, mo2=0002] [ 608.074323][T21658] System zones: 1-12 [ 608.084618][T21658] EXT4-fs (loop0): 1 truncate cleaned up [ 608.087742][T21655] bond2: option coupled_control: invalid value (29) [ 608.098020][T21658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.103590][T21657] loop3: detected capacity change from 0 to 128 [ 608.113206][T21661] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4045'. [ 608.155996][T21655] bond2 (unregistering): Released all slaves [ 608.403628][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.516936][T21671] loop0: detected capacity change from 0 to 128 [ 608.565087][T21671] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 608.633209][T21651] IPv6: NLM_F_CREATE should be specified when creating new route [ 608.645468][T21651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 608.653533][T21651] IPv6: NLM_F_CREATE should be set when creating new route [ 608.673118][T21671] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.693847][T21681] audit_log_start: 535 callbacks suppressed [ 609.693860][T21681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.706384][T21681] audit: audit_lost=585 audit_rate_limit=0 audit_backlog_limit=64 [ 609.714241][T21681] audit: backlog limit exceeded [ 609.719119][T21681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 609.725638][T21681] audit: audit_lost=586 audit_rate_limit=0 audit_backlog_limit=64 [ 609.733523][T21681] audit: backlog limit exceeded [ 609.892379][ T28] audit: type=1400 audit(2000620681.503:36975): avc: denied { execmem } for pid=21675 comm="syz.3.4051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 609.923829][T15672] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.954854][ T28] audit: type=1400 audit(2000620681.653:36976): avc: denied { open } for pid=21673 comm="syz.6.4050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 610.442350][T21681] audit: audit_backlog=65 > audit_backlog_limit=64 [ 610.448903][T21681] audit: audit_lost=587 audit_rate_limit=0 audit_backlog_limit=64 [ 611.470360][T21705] No such timeout policy "syz0" [ 611.511450][T21708] loop3: detected capacity change from 0 to 256 [ 611.571852][T21708] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 611.790262][T21710] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4058'. [ 611.845331][T21713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4060'. [ 611.893539][T21709] wireguard1: entered promiscuous mode [ 611.901890][T21716] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 611.918859][T21709] wireguard1: entered allmulticast mode [ 611.964914][T21716] FAT-fs (loop3): Filesystem has been set read-only [ 611.981908][T21716] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 612.029828][T21717] netlink: 'syz.0.4060': attribute type 21 has an invalid length. [ 612.032618][T21708] ipvlan1: entered promiscuous mode [ 612.043172][T21708] ipvlan1: entered allmulticast mode [ 612.048613][T21708] veth0_vlan: entered allmulticast mode [ 612.058512][T21717] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4060'. [ 612.138503][T21726] loop8: detected capacity change from 0 to 128 [ 612.153959][T21723] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.166404][T21726] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.193579][T21726] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.211433][T21723] lo speed is unknown, defaulting to 1000 [ 612.252678][T21723] xfrm0 speed is unknown, defaulting to 1000 [ 612.268830][T19364] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.390420][T21723] dummy0 speed is unknown, defaulting to 1000 [ 614.454291][T21755] ip6_vti0 speed is unknown, defaulting to 1000 [ 614.618807][T21755] lo speed is unknown, defaulting to 1000 [ 614.654341][T21755] xfrm0 speed is unknown, defaulting to 1000 [ 614.707318][ T28] kauditd_printk_skb: 671 callbacks suppressed [ 614.707332][ T28] audit: type=1400 audit(2000620687.233:37635): avc: denied { create } for pid=21763 comm="syz.9.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 614.782706][ T28] audit: type=1400 audit(2000620687.233:37636): avc: denied { read write } for pid=19364 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 614.842418][ T28] audit: type=1400 audit(2000620687.233:37637): avc: denied { open } for pid=19364 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 614.922351][ T28] audit: type=1400 audit(2000620687.233:37638): avc: denied { ioctl } for pid=19364 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 614.941414][T21776] loop8: detected capacity change from 0 to 128 [ 614.956907][T21755] dummy0 speed is unknown, defaulting to 1000 [ 614.984082][T21777] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4076'. [ 615.003834][ T28] audit: type=1400 audit(2000620687.273:37639): avc: denied { prog_load } for pid=21763 comm="syz.9.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 615.025736][ T28] audit: type=1400 audit(2000620687.273:37640): avc: denied { bpf } for pid=21763 comm="syz.9.4072" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 615.026122][T21776] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.050125][ T28] audit: type=1400 audit(2000620687.273:37641): avc: denied { prog_load } for pid=21763 comm="syz.9.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 615.079778][ T28] audit: type=1400 audit(2000620687.273:37642): avc: denied { open } for pid=21763 comm="syz.9.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 615.099314][ T28] audit: type=1400 audit(2000620687.273:37643): avc: denied { bpf } for pid=21763 comm="syz.9.4072" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 615.120100][ T28] audit: type=1400 audit(2000620687.273:37644): avc: denied { perfmon } for pid=21763 comm="syz.9.4072" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 615.153191][T21776] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.356768][T21790] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4077'. [ 616.370848][T21795] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4079'. [ 616.413202][T19364] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.880767][T21823] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4087'. [ 617.053280][T21830] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4090'. [ 617.377489][T21823] loop8: detected capacity change from 0 to 256 [ 617.672148][T21835] xt_CT: You must specify a L4 protocol and not use inversions on it [ 617.709956][T21836] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4091'. [ 617.731375][T21823] FAT-fs (loop8): Directory bread(block 64) failed [ 617.740094][T21836] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4091'. [ 617.750490][T21823] FAT-fs (loop8): Directory bread(block 65) failed [ 617.810702][T21836] netlink: 'syz.9.4091': attribute type 6 has an invalid length. [ 617.861879][T21823] FAT-fs (loop8): Directory bread(block 66) failed [ 617.881475][T21842] loop6: detected capacity change from 0 to 128 [ 617.887969][T21823] FAT-fs (loop8): Directory bread(block 67) failed [ 617.896554][T21823] FAT-fs (loop8): Directory bread(block 68) failed [ 617.903923][T21823] FAT-fs (loop8): Directory bread(block 69) failed [ 617.946448][T21839] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4092'. [ 617.982760][T21842] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 617.982889][T21823] FAT-fs (loop8): Directory bread(block 70) failed [ 618.004415][T21842] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.022419][T21823] FAT-fs (loop8): Directory bread(block 71) failed [ 618.030128][T21823] FAT-fs (loop8): Directory bread(block 72) failed [ 618.041907][T21823] FAT-fs (loop8): Directory bread(block 73) failed [ 618.162963][T18674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 618.172050][T21851] loop0: detected capacity change from 0 to 128 [ 618.212328][T21851] syz.0.4095: attempt to access beyond end of device [ 618.212328][T21851] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 618.265198][T21851] syz.0.4095: attempt to access beyond end of device [ 618.265198][T21851] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 618.767363][T21874] loop6: detected capacity change from 0 to 256 [ 618.862028][T21895] loop8: detected capacity change from 0 to 128 [ 618.874993][T21886] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4104'. [ 618.914304][T21895] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 618.945321][T21895] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.034436][T21901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4107'. [ 619.104129][T19364] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 619.290719][T21912] loop6: detected capacity change from 0 to 1024 [ 619.333822][T21912] EXT4-fs: inline encryption not supported [ 619.455351][T21912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.532345][T21922] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4114'. [ 619.762412][ T28] kauditd_printk_skb: 846 callbacks suppressed [ 619.762428][ T28] audit: type=1400 audit(2000620693.227:38491): avc: denied { execmem } for pid=21933 comm="syz.0.4117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 619.808382][ T28] audit: type=1400 audit(2000620693.247:38492): avc: denied { search } for pid=21936 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 619.835532][ T28] audit: type=1400 audit(2000620693.247:38493): avc: denied { read } for pid=21936 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 619.878342][ T28] audit: type=1400 audit(2000620693.247:38494): avc: denied { read open } for pid=21936 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.559406][T18674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.572286][ T28] audit: type=1400 audit(2000620693.247:38495): avc: denied { getattr } for pid=21936 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 620.607000][ T28] audit: type=1400 audit(2000620693.257:38496): avc: denied { search } for pid=21940 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.630255][ T28] audit: type=1400 audit(2000620693.257:38497): avc: denied { search } for pid=21940 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.654803][ T28] audit: type=1400 audit(2000620693.257:38498): avc: denied { search } for pid=21940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.679195][ T28] audit: type=1400 audit(2000620693.267:38499): avc: denied { search } for pid=21940 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 620.706196][ T28] audit: type=1400 audit(2000620693.337:38500): avc: denied { search } for pid=21941 comm="sed" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 621.582771][ T1031] IPVS: starting estimator thread 0... [ 621.591444][T21984] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 621.675859][T21998] IPVS: using max 2304 ests per chain, 115200 per kthread [ 621.826704][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4128'. [ 621.862100][T22011] loop8: detected capacity change from 0 to 256 [ 622.108370][T22018] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4132'. [ 622.425789][T22024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4134'. [ 622.546970][T22018] loop8: detected capacity change from 0 to 256 [ 622.613009][T22018] FAT-fs (loop8): Directory bread(block 64) failed [ 622.631765][T22018] FAT-fs (loop8): Directory bread(block 65) failed [ 622.658005][T22018] FAT-fs (loop8): Directory bread(block 66) failed [ 622.682552][T22018] FAT-fs (loop8): Directory bread(block 67) failed [ 622.692485][T22031] loop0: detected capacity change from 0 to 128 [ 622.706159][T22018] FAT-fs (loop8): Directory bread(block 68) failed [ 622.715204][T22018] FAT-fs (loop8): Directory bread(block 69) failed [ 622.752162][T22018] FAT-fs (loop8): Directory bread(block 70) failed [ 622.760043][T22018] FAT-fs (loop8): Directory bread(block 71) failed [ 622.768522][T22018] FAT-fs (loop8): Directory bread(block 72) failed [ 622.776138][T22031] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.789152][T22018] FAT-fs (loop8): Directory bread(block 73) failed [ 622.797238][T22031] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.854499][T15672] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 623.420690][T22041] loop8: detected capacity change from 0 to 128 [ 623.897513][T22053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=22053 comm=syz.8.4139 [ 623.955921][T22041] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5129 sclass=netlink_audit_socket pid=22041 comm=syz.8.4139 [ 624.319205][T22073] loop8: detected capacity change from 0 to 128 [ 624.327914][T22072] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4149'. [ 624.369854][T22073] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 624.405786][T22073] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.606641][T19364] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 624.726748][T22082] ip6_vti0 speed is unknown, defaulting to 1000 [ 624.750630][T22091] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4152'. [ 624.816196][ T28] kauditd_printk_skb: 821 callbacks suppressed [ 624.816211][ T28] audit: type=1400 audit(2000620698.347:39322): avc: denied { module_request } for pid=22089 comm="syz.8.4152" kmod="snd-card--1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 624.921357][ T28] audit: type=1400 audit(2000620698.397:39323): avc: denied { create } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.942267][ T28] audit: type=1400 audit(2000620698.397:39324): avc: denied { write } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.963742][ T28] audit: type=1400 audit(2000620698.397:39325): avc: denied { read } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 624.985061][ T28] audit: type=1400 audit(2000620698.407:39326): avc: denied { read } for pid=22089 comm="syz.8.4152" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 625.006815][ T28] audit: type=1400 audit(2000620698.407:39327): avc: denied { open } for pid=22089 comm="syz.8.4152" path="net:[4026532392]" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 625.080143][T22082] lo speed is unknown, defaulting to 1000 [ 625.182878][ T28] audit: type=1400 audit(2000620698.417:39328): avc: denied { create } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.205193][ T28] audit: type=1400 audit(2000620698.417:39329): avc: denied { write } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.357918][T22105] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4156'. [ 625.546973][T22082] xfrm0 speed is unknown, defaulting to 1000 [ 625.789002][ T28] audit: type=1400 audit(2000620698.417:39330): avc: denied { read } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.809826][ T28] audit: type=1400 audit(2000620698.437:39331): avc: denied { write } for pid=22089 comm="syz.8.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 625.925376][T22082] dummy0 speed is unknown, defaulting to 1000 [ 626.629753][ T3527] kernel read not supported for file [fscontext] (pid: 3527 comm: kworker/0:7) [ 626.828858][T22130] loop8: detected capacity change from 0 to 512 [ 626.893703][T22130] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4162: invalid indirect mapped block 256 (level 2) [ 626.939468][T22130] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 626.939818][T22130] EXT4-fs (loop8): 2 truncates cleaned up [ 626.948985][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 626.949006][ C1] EXT4-fs (loop8): initial error at time 2000620700: ext4_free_branches:1023: inode 11 [ 626.949030][ C1] EXT4-fs (loop8): last error at time 2000620700: ext4_free_branches:1023: inode 11 [ 627.002682][T22130] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.072449][T22149] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4166'. [ 627.086872][T22149] loop3: detected capacity change from 0 to 256 [ 627.122690][T22149] FAT-fs (loop3): Directory bread(block 64) failed [ 627.129265][T22149] FAT-fs (loop3): Directory bread(block 65) failed [ 627.135910][T22149] FAT-fs (loop3): Directory bread(block 66) failed [ 627.142488][T22149] FAT-fs (loop3): Directory bread(block 67) failed [ 627.149002][T22149] FAT-fs (loop3): Directory bread(block 68) failed [ 627.155663][T22149] FAT-fs (loop3): Directory bread(block 69) failed [ 627.162322][T22149] FAT-fs (loop3): Directory bread(block 70) failed [ 627.168824][T22149] FAT-fs (loop3): Directory bread(block 71) failed [ 627.175475][T22149] FAT-fs (loop3): Directory bread(block 72) failed [ 627.181977][T22149] FAT-fs (loop3): Directory bread(block 73) failed [ 627.259675][T22154] loop0: detected capacity change from 0 to 136 [ 628.811901][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.260187][T22186] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 629.677589][T22193] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4174'. [ 629.956100][T22196] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4170'. [ 630.035670][ T28] kauditd_printk_skb: 432 callbacks suppressed [ 630.035685][ T28] audit: type=1400 audit(2000620703.377:39764): avc: denied { read } for pid=22187 comm="syz.8.4170" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 630.252940][ T28] audit: type=1400 audit(2000620703.377:39765): avc: denied { open } for pid=22187 comm="syz.8.4170" path="net:[4026532392]" dev="nsfs" ino=4026532392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 630.281827][ T28] audit: type=1400 audit(2000620703.377:39766): avc: denied { create } for pid=22187 comm="syz.8.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 630.302074][ T28] audit: type=1400 audit(2000620703.377:39767): avc: denied { getopt } for pid=22187 comm="syz.8.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 630.324814][ T28] audit: type=1400 audit(2000620703.427:39768): avc: denied { prog_load } for pid=22187 comm="syz.8.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 630.375748][ T28] audit: type=1400 audit(2000620703.437:39769): avc: denied { bpf } for pid=22187 comm="syz.8.4170" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.419846][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4175'. [ 630.454420][ T28] audit: type=1400 audit(2000620703.437:39770): avc: denied { prog_load } for pid=22187 comm="syz.8.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 630.500004][ T28] audit: type=1400 audit(2000620703.437:39771): avc: denied { bpf } for pid=22187 comm="syz.8.4170" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.541356][ T28] audit: type=1400 audit(2000620703.437:39772): avc: denied { open } for pid=22187 comm="syz.8.4170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 630.622348][ T28] audit: type=1400 audit(2000620703.437:39773): avc: denied { perfmon } for pid=22187 comm="syz.8.4170" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 630.707602][T22193] loop3: detected capacity change from 0 to 256 [ 630.884994][T22217] loop8: detected capacity change from 0 to 512 [ 630.938688][T22193] FAT-fs (loop3): Directory bread(block 64) failed [ 630.954529][T22217] EXT4-fs (loop8): can't mount with commit=, fs mounted w/o journal [ 630.970259][T22193] FAT-fs (loop3): Directory bread(block 65) failed [ 630.994256][T22193] FAT-fs (loop3): Directory bread(block 66) failed [ 631.006641][T22193] FAT-fs (loop3): Directory bread(block 67) failed [ 631.045768][T22193] FAT-fs (loop3): Directory bread(block 68) failed [ 631.073307][T22230] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4185'. [ 631.082632][T22193] FAT-fs (loop3): Directory bread(block 69) failed [ 631.089645][T22193] FAT-fs (loop3): Directory bread(block 70) failed [ 631.126698][T22193] FAT-fs (loop3): Directory bread(block 71) failed [ 631.168825][T22193] FAT-fs (loop3): Directory bread(block 72) failed [ 631.192102][T22193] FAT-fs (loop3): Directory bread(block 73) failed [ 631.299803][T22242] loop8: detected capacity change from 0 to 1024 [ 631.371825][T22242] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 631.447417][T22242] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.513267][T22247] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4188'. [ 631.861145][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4190'. [ 631.907490][T22252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4190'. [ 631.926080][T22230] loop6: detected capacity change from 0 to 256 [ 632.000859][T22242] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4189: bg 0: block 112: padding at end of block bitmap is not set [ 632.026495][T22242] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.4189: Freeing blocks not in datazone - block = 0, count = 16 [ 632.119030][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 632.224335][T22230] FAT-fs (loop6): Directory bread(block 64) failed [ 632.250189][T22230] FAT-fs (loop6): Directory bread(block 65) failed [ 632.270716][T22256] loop8: detected capacity change from 0 to 512 [ 632.282996][T22230] FAT-fs (loop6): Directory bread(block 66) failed [ 632.302454][T22230] FAT-fs (loop6): Directory bread(block 67) failed [ 632.325126][T22230] FAT-fs (loop6): Directory bread(block 68) failed [ 632.332417][T22230] FAT-fs (loop6): Directory bread(block 69) failed [ 632.344374][T22256] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4192: invalid indirect mapped block 256 (level 2) [ 632.358494][T22256] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 632.363227][T22230] FAT-fs (loop6): Directory bread(block 70) failed [ 632.372304][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 632.386342][ C1] EXT4-fs (loop8): initial error at time 2000620705: ext4_free_branches:1023: inode 11 [ 632.396822][ C1] EXT4-fs (loop8): last error at time 2000620705: ext4_free_branches:1023: inode 11 [ 632.411827][T22256] EXT4-fs (loop8): Remounting filesystem read-only [ 632.422965][T22230] FAT-fs (loop6): Directory bread(block 71) failed [ 632.430166][T22230] FAT-fs (loop6): Directory bread(block 72) failed [ 632.457267][T22260] loop0: detected capacity change from 0 to 1024 [ 632.465514][T22256] EXT4-fs (loop8): 2 truncates cleaned up [ 632.471637][T22256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.483591][T22230] FAT-fs (loop6): Directory bread(block 73) failed [ 632.494544][T22262] netlink: 260 bytes leftover after parsing attributes in process `syz.9.4195'. [ 632.538637][T22260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.554810][T22260] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4194'. [ 632.604538][T22260] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003 [ 632.676235][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.818526][T22270] loop6: detected capacity change from 0 to 128 [ 632.867850][T22270] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 632.902988][T22270] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 633.169093][T22270] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.224141][T22278] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4192'. [ 633.872146][T22282] ip6_vti0 speed is unknown, defaulting to 1000 [ 633.890449][T22290] loop0: detected capacity change from 0 to 512 [ 633.917296][T22270] lo speed is unknown, defaulting to 1000 [ 633.999835][T22290] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 634.096602][T22290] EXT4-fs (loop0): mount failed [ 634.218342][T22290] loop0: detected capacity change from 0 to 1024 [ 634.258836][T22290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 634.283254][T22290] System zones: 0-1, 3-8 [ 634.322912][T22290] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 634.355868][T22290] ext4 filesystem being mounted at /312/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.408352][T22290] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.4201: Freeing blocks not in datazone - block = 0, count = 16 [ 634.605851][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.648626][ T4229] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 634.673697][ T118] bond0 (unregistering): Released all slaves [ 634.680118][ T4229] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 634.683883][ T118] bond1 (unregistering): Released all slaves [ 634.702849][ T118] bond2 (unregistering): Released all slaves [ 634.709601][ T4229] EXT4-fs (loop0): This should not happen!! Data will be lost [ 634.709601][ T4229] [ 634.717663][ T118] bond3 (unregistering): Released all slaves [ 634.719917][ T4229] EXT4-fs (loop0): Total free blocks count 0 [ 634.731949][ T4229] EXT4-fs (loop0): Free/Dirty block details [ 634.739123][ T4229] EXT4-fs (loop0): free_blocks=16 [ 634.744965][ T4229] EXT4-fs (loop0): dirty_blocks=16 [ 634.750152][ T4229] EXT4-fs (loop0): Block reservation details [ 634.756516][ T4229] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 634.763215][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 634.764182][ T118] bond4 (unregistering): Released all slaves [ 634.824776][ T118] bond5 (unregistering): Released all slaves [ 634.835073][ T118] bond6 (unregistering): Released all slaves [ 634.839744][T22302] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4204'. [ 634.858590][T22270] xfrm0 speed is unknown, defaulting to 1000 [ 634.864686][T22282] lo speed is unknown, defaulting to 1000 [ 635.023913][T22270] dummy0 speed is unknown, defaulting to 1000 [ 635.050473][T22282] xfrm0 speed is unknown, defaulting to 1000 [ 635.057535][ T28] kauditd_printk_skb: 485 callbacks suppressed [ 635.057550][ T28] audit: type=1400 audit(2000620708.587:40258): avc: denied { create } for pid=22312 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.140387][ T28] audit: type=1400 audit(2000620708.617:40259): avc: denied { getopt } for pid=22312 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.145551][T22282] dummy0 speed is unknown, defaulting to 1000 [ 635.182538][T12122] smc: removing ib device syz2 [ 635.182722][T22283] lo speed is unknown, defaulting to 1000 [ 635.207331][ T28] audit: type=1400 audit(2000620708.617:40260): avc: denied { connect } for pid=22312 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.246004][ T28] audit: type=1400 audit(2000620708.617:40261): avc: denied { bind } for pid=22312 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 635.271904][ T28] audit: type=1400 audit(2000620708.617:40262): avc: denied { read } for pid=22312 comm="syz.0.4205" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.299655][T22310] audit: audit_backlog=65 > audit_backlog_limit=64 [ 635.304131][ T28] audit: type=1400 audit(2000620708.617:40263): avc: denied { open } for pid=22312 comm="syz.0.4205" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 635.316473][T22310] audit: audit_lost=592 audit_rate_limit=0 audit_backlog_limit=64 [ 635.330305][ T28] audit: type=1400 audit(2000620708.617:40264): avc: denied { create } for pid=22312 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 635.339694][T22310] audit: backlog limit exceeded [ 635.441996][T22328] loop0: detected capacity change from 0 to 256 [ 635.457353][T22328] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 635.696094][T22283] xfrm0 speed is unknown, defaulting to 1000 [ 635.702538][T22328] lo speed is unknown, defaulting to 1000 [ 635.753048][T22342] geneve2: entered promiscuous mode [ 635.767308][T22342] geneve2: entered allmulticast mode [ 635.829364][T22283] dummy0 speed is unknown, defaulting to 1000 [ 635.912541][T22328] xfrm0 speed is unknown, defaulting to 1000 [ 636.073180][T22283] chnl_net:caif_netlink_parms(): no params data found [ 636.074353][T22364] netlink: 45349 bytes leftover after parsing attributes in process `syz.8.4211'. [ 636.089920][T22328] dummy0 speed is unknown, defaulting to 1000 [ 636.091384][T22364] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 636.109410][T22364] 0ªX¹¦Dö»: entered allmulticast mode [ 636.242625][T22283] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.249766][T22283] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.258832][T22283] bridge_slave_0: entered allmulticast mode [ 636.266357][T22283] bridge_slave_0: entered promiscuous mode [ 636.277114][T22283] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.285181][T22283] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.293158][T22283] bridge_slave_1: entered allmulticast mode [ 636.299825][T22283] bridge_slave_1: entered promiscuous mode [ 636.313280][ T118] tipc: Left network mode [ 636.327308][T22283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.344743][T22283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.385728][T18674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 636.484590][T22390] loop6: detected capacity change from 0 to 128 [ 636.546619][ T4231] smc: removing ib device syU× [ 636.629535][T22283] team0: Port device team_slave_0 added [ 636.693002][T22283] team0: Port device team_slave_1 added [ 636.783025][T22283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.810231][T22283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.895114][T22283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.920263][T22283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.952325][T22283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.037510][T22423] loop0: detected capacity change from 0 to 512 [ 637.041951][T22283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.070091][T22423] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 637.152652][T22423] EXT4-fs (loop0): 1 truncate cleaned up [ 637.222529][T22423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 637.364113][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.508952][T22283] hsr_slave_0: entered promiscuous mode [ 637.547368][T22283] hsr_slave_1: entered promiscuous mode [ 637.566073][T22442] loop6: detected capacity change from 0 to 2048 [ 637.572794][T22283] debugfs: 'hsr0' already exists in 'hsr' [ 637.594113][T22463] loop8: detected capacity change from 0 to 1024 [ 637.597314][T22283] Cannot create hsr debugfs directory [ 637.622136][T22463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 637.634552][T22463] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.635538][T22464] loop0: detected capacity change from 0 to 512 [ 637.671328][ T118] IPVS: stop unused estimator thread 0... [ 637.685099][T22442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.710328][T22462] xfrm0 speed is unknown, defaulting to 1000 [ 637.809513][T18674] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.994281][T22462] dummy0 speed is unknown, defaulting to 1000 [ 638.207868][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4227'. [ 638.251259][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4227'. [ 639.435522][T22514] loop0: detected capacity change from 0 to 256 [ 639.454627][T22514] FAT-fs (loop0): Directory bread(block 64) failed [ 639.461159][T22514] FAT-fs (loop0): Directory bread(block 65) failed [ 639.467923][T22514] FAT-fs (loop0): Directory bread(block 66) failed [ 639.474461][T22514] FAT-fs (loop0): Directory bread(block 67) failed [ 639.481237][T22514] FAT-fs (loop0): Directory bread(block 68) failed [ 639.492943][T22514] FAT-fs (loop0): Directory bread(block 69) failed [ 639.499536][T22514] FAT-fs (loop0): Directory bread(block 70) failed [ 639.526544][T22514] FAT-fs (loop0): Directory bread(block 71) failed [ 639.539786][T22514] FAT-fs (loop0): Directory bread(block 72) failed [ 639.547036][T22514] FAT-fs (loop0): Directory bread(block 73) failed [ 639.662202][T22468] kexec: Could not allocate control_code_buffer [ 639.683014][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 639.938396][T22521] loop8: detected capacity change from 0 to 8192 [ 639.949004][T22523] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4232'. [ 639.964247][T22523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4232'. [ 639.975035][T22521] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 639.982999][T22523] netlink: 'syz.6.4232': attribute type 2 has an invalid length. [ 640.066214][ T28] kauditd_printk_skb: 1367 callbacks suppressed [ 640.066245][ T28] audit: type=1400 audit(2000620713.597:41632): avc: denied { getattr } for pid=22526 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=515 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 640.136129][ T28] audit: type=1400 audit(2000620713.597:41633): avc: denied { perfmon } for pid=22522 comm="syz.6.4232" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 640.167416][ T28] audit: type=1400 audit(2000620713.607:41634): avc: denied { kernel } for pid=22522 comm="syz.6.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 640.242377][ T28] audit: type=1400 audit(2000620713.617:41635): avc: denied { create } for pid=22522 comm="syz.6.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 640.297998][T22525] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.315524][T22525] audit: audit_lost=593 audit_rate_limit=0 audit_backlog_limit=64 [ 640.324170][ T28] audit: type=1400 audit(2000620713.617:41636): avc: denied { write } for pid=22522 comm="syz.6.4232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 640.353413][T22540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.362274][T22525] audit: backlog limit exceeded [ 640.370396][T22523] audit: audit_backlog=65 > audit_backlog_limit=64 [ 640.373186][T22540] loop0: detected capacity change from 0 to 512 [ 640.423162][T22523] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4232'. [ 640.445508][T22540] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 640.464001][T22540] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 640.499123][T22540] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4234: Corrupt directory, running e2fsck is recommended [ 640.544195][T22540] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 640.556279][T22540] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.4234: corrupted in-inode xattr: e_name out of bounds [ 640.614157][T22523] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.659960][T22540] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 640.661064][T22540] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.4234: couldn't read orphan inode 15 (err -117) [ 640.670293][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 640.670312][ C1] EXT4-fs (loop0): initial error at time 2000620714: ext4_iget_extra_inode:5025: inode 15 [ 640.670362][ C1] EXT4-fs (loop0): last error at time 2000620714: ext4_iget_extra_inode:5025: inode 15 [ 640.708454][T22540] loop0: lost filesystem error report for type 5 error -117 [ 640.733149][T22540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.777730][T22523] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.828110][T22283] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 640.835048][T22540] netlink: 'syz.0.4234': attribute type 3 has an invalid length. [ 640.850236][T22540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4234'. [ 640.863563][T22283] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 640.909057][T22523] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.931981][T22559] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 640.957428][T22559] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 640.983796][T22283] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 640.998574][T22283] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 641.012531][T22559] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4234: Corrupt directory, running e2fsck is recommended [ 641.019929][T22540] IPVS: set_ctl: invalid protocol: 60 88.0.31.0:775 [ 641.081914][T22523] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.082580][T22540] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 641.142499][T22540] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 641.162052][ T4229] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.172874][ T4229] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.183641][T22540] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.4234: Corrupt directory, running e2fsck is recommended [ 641.199873][ T4229] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.222462][ T4229] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.337502][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.383190][T22591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.580085][T22591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.749149][T22597] dvmrp0: entered allmulticast mode [ 641.815985][T22591] bond_slave_0: entered promiscuous mode [ 641.821843][T22591] bond_slave_1: entered promiscuous mode [ 641.918768][T22604] loop0: detected capacity change from 0 to 256 [ 641.928305][T22604] vfat: Unknown parameter 'io™sarset' [ 642.037964][T22591] vlan2: entered promiscuous mode [ 642.071662][T22591] bond0: entered promiscuous mode [ 642.265527][T22283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.328424][T22283] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.383496][T12122] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.390666][T12122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.412482][T22610] loop8: detected capacity change from 0 to 512 [ 642.420366][T22610] EXT4-fs: Ignoring removed nobh option [ 642.498806][T22610] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 642.518487][T12122] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.525567][T12122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.571272][T22610] EXT4-fs (loop8): 1 truncate cleaned up [ 642.577552][T22610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.600927][T22283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 642.611361][T22283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 642.931743][T22643] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4247'. [ 642.940792][T22283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 643.057989][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.321899][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4244'. [ 643.511413][T22283] veth0_vlan: entered promiscuous mode [ 643.527823][T22283] veth1_vlan: entered promiscuous mode [ 643.541329][T22283] veth0_macvtap: entered promiscuous mode [ 643.661980][T22687] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 643.909254][T22689] loop8: detected capacity change from 0 to 1024 [ 643.917260][T22689] EXT4-fs: inline encryption not supported [ 643.943276][T22689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.583275][T22283] veth1_macvtap: entered promiscuous mode [ 644.669673][T22283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.725816][T22283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.821141][T12122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.855778][T12122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.896146][T12122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.932325][T12122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.121376][ T28] kauditd_printk_skb: 1199 callbacks suppressed [ 645.121467][ T28] audit: type=1400 audit(2000620718.647:42820): avc: denied { allowed } for pid=22702 comm="syz.3.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 645.241616][ T28] audit: type=1400 audit(2000620718.687:42821): avc: denied { create } for pid=22702 comm="syz.3.4200" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.298681][T22704] loop3: detected capacity change from 0 to 512 [ 645.342447][ T28] audit: type=1400 audit(2000620718.687:42822): avc: denied { map } for pid=22702 comm="syz.3.4200" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.403686][T22704] EXT4-fs: Ignoring removed bh option [ 645.409113][T22704] EXT4-fs: inline encryption not supported [ 645.472676][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.516920][T22704] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 645.536395][ T28] audit: type=1400 audit(2000620718.687:42823): avc: denied { read write } for pid=22702 comm="syz.3.4200" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 645.609750][ T28] audit: type=1400 audit(2000620718.747:42824): avc: denied { open } for pid=22702 comm="syz.3.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 645.653208][T22710] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.659730][T22710] audit: audit_lost=600 audit_rate_limit=0 audit_backlog_limit=64 [ 645.683059][T22706] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.689796][T22706] audit: audit_lost=601 audit_rate_limit=0 audit_backlog_limit=64 [ 645.700696][T22712] audit: audit_backlog=65 > audit_backlog_limit=64 [ 645.775544][T22704] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 645.834082][T22704] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4200: bg 0: block 248: padding at end of block bitmap is not set [ 645.867029][T22704] loop3: lost filesystem error report for type 5 error -117 [ 645.867248][T22704] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4200: Failed to acquire dquot type 1 [ 645.868269][T22723] loop8: detected capacity change from 0 to 128 [ 645.882253][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 645.898540][ C1] EXT4-fs (loop3): last error at time 2000620719: ext4_validate_block_bitmap:441 [ 645.906182][T22704] loop3: lost filesystem error report for type 5 error -117 [ 645.924331][T22704] EXT4-fs (loop3): 1 truncate cleaned up [ 645.938210][T22723] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.958409][T22723] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.980988][T22704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 646.248145][ T7802] tipc: Subscription rejected, illegal request [ 646.320638][T22704] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4200'. [ 646.323256][T19364] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.443575][T22746] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 646.639791][T22762] loop0: detected capacity change from 0 to 1024 [ 646.659183][T22762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 646.672535][T22762] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.697843][T22760] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.4258: lblock 3 mapped to illegal pblock 3 (length 3) [ 646.715308][T22760] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 646.727654][T22760] EXT4-fs (loop0): This should not happen!! Data will be lost [ 646.727654][T22760] [ 647.778089][ T118] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 647.838757][T22800] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4263'. [ 647.842326][ T118] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 647.896223][ T118] EXT4-fs (loop0): This should not happen!! Data will be lost [ 647.896223][ T118] [ 647.896913][T22798] loop8: detected capacity change from 0 to 4096 [ 647.926349][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 647.958836][T22798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.033483][T22283] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 648.078072][T22798] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4261: corrupted inode contents [ 648.117306][T22798] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.4261: mark_inode_dirty error [ 648.182130][T22798] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4261: corrupted inode contents [ 648.215744][T22798] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.4261: mark_inode_dirty error [ 648.282220][T22798] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4261: corrupted inode contents [ 648.356185][T22798] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #15: comm syz.8.4261: mark_inode_dirty error [ 648.406004][T22798] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4261: corrupted inode contents [ 648.447620][T22809] loop0: detected capacity change from 0 to 1024 [ 648.448446][T22800] loop6: detected capacity change from 0 to 256 [ 648.462472][T22798] EXT4-fs error (device loop8): ext4_truncate:4587: inode #15: comm syz.8.4261: mark_inode_dirty error [ 648.513178][T22809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 648.542004][T22809] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 648.554075][T22798] EXT4-fs error (device loop8) in ext4_setattr:5983: Corrupt filesystem [ 648.593286][T22805] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.4261: corrupted inode contents [ 648.636566][T22800] FAT-fs (loop6): Directory bread(block 64) failed [ 648.643592][T22800] FAT-fs (loop6): Directory bread(block 65) failed [ 648.654579][T22800] FAT-fs (loop6): Directory bread(block 66) failed [ 648.661374][T22800] FAT-fs (loop6): Directory bread(block 67) failed [ 648.670080][T19364] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 648.670136][T22800] FAT-fs (loop6): Directory bread(block 68) failed [ 648.670370][T19364] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 648.680001][T22800] FAT-fs (loop6): Directory bread(block 69) failed [ 648.702954][T19364] EXT4-fs warning (device loop8): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 648.703177][T22800] FAT-fs (loop6): Directory bread(block 70) failed [ 648.720271][T22800] FAT-fs (loop6): Directory bread(block 71) failed [ 648.726356][T19364] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.727512][T22800] FAT-fs (loop6): Directory bread(block 72) failed [ 648.743605][T22800] FAT-fs (loop6): Directory bread(block 73) failed [ 648.839830][T22809] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.4265: lblock 0 mapped to illegal pblock 0 (length 6) [ 648.891770][T22814] xfrm0 speed is unknown, defaulting to 1000 [ 648.968263][T22814] dummy0 speed is unknown, defaulting to 1000 [ 648.982173][T22816] loop6: detected capacity change from 0 to 128 [ 649.030748][T22816] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.100555][T22816] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.370385][T22832] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 649.376932][T22832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 649.409465][T22832] vhci_hcd vhci_hcd.0: Device attached [ 649.470675][T15672] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 649.551183][T18674] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.582371][ T1031] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 649.937860][ T1031] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 649.957955][T22839] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.965224][T22839] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.451867][T22839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.462553][T22833] vhci_hcd: connection reset by peer [ 650.492131][T22839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.541899][ T118] vhci_hcd vhci_hcd.3: stop threads [ 650.550543][ T118] vhci_hcd vhci_hcd.3: release socket [ 650.564461][ T28] kauditd_printk_skb: 775 callbacks suppressed [ 650.564481][ T28] audit: type=1400 audit(2000620724.097:43594): avc: denied { read write } for pid=18674 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 650.603655][ T118] vhci_hcd vhci_hcd.3: disconnect device [ 650.670749][ T28] audit: type=1400 audit(2000620724.127:43595): avc: denied { read write open } for pid=18674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 650.754180][ T28] audit: type=1400 audit(2000620724.127:43596): avc: denied { ioctl } for pid=18674 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 650.800978][T22846] veth1_virt_wifi: entered allmulticast mode [ 650.821970][T22847] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4273'. [ 650.898582][ T1627] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.919484][ T1627] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.952555][ T28] audit: type=1400 audit(2000620724.157:43597): avc: denied { map_create } for pid=22851 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 651.019392][ T1627] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.064987][T22847] veth1_virt_wifi: left allmulticast mode [ 651.079805][ T1627] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.121939][ T28] audit: type=1400 audit(2000620724.157:43598): avc: denied { perfmon } for pid=22851 comm="syz.6.4274" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 651.146295][T22855] Cannot find del_set index 2 as target [ 651.173548][T22863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.223895][ T28] audit: type=1400 audit(2000620724.157:43599): avc: denied { map_read map_write } for pid=22851 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 651.262811][ T28] audit: type=1400 audit(2000620724.157:43600): avc: denied { prog_load } for pid=22851 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 651.291148][T22859] xfrm0 speed is unknown, defaulting to 1000 [ 651.372271][ T28] audit: type=1400 audit(2000620724.157:43601): avc: denied { bpf } for pid=22851 comm="syz.6.4274" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 651.382564][T22863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 651.445628][T22863] audit: audit_backlog=65 > audit_backlog_limit=64 [ 651.459684][ T28] audit: type=1400 audit(2000620724.167:43602): avc: denied { prog_run } for pid=22851 comm="syz.6.4274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 651.555304][T22879] 9p: Bad value for 'wfdno' [ 651.630818][T22880] loop8: detected capacity change from 0 to 512 [ 651.682717][T22880] EXT4-fs (loop8): failed to initialize system zone (-117) [ 651.702317][T22880] EXT4-fs (loop8): mount failed [ 652.226710][T22859] dummy0 speed is unknown, defaulting to 1000 [ 652.241597][T22881] xfrm0 speed is unknown, defaulting to 1000 [ 652.364493][T22894] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4285'. [ 652.382933][T22881] dummy0 speed is unknown, defaulting to 1000 [ 652.549928][T22892] loop6: detected capacity change from 0 to 512 [ 652.706030][T22892] EXT4-fs (loop6): 1 truncate cleaned up [ 652.721882][T22892] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.163171][T22920] hub 8-0:1.0: USB hub found [ 653.188618][T22923] syzkaller0: entered promiscuous mode [ 653.195394][T22920] hub 8-0:1.0: 8 ports detected [ 653.196285][ T7802] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:22: bg 0: block 465: padding at end of block bitmap is not set [ 653.224553][T22923] syzkaller0: entered allmulticast mode [ 653.237517][ T7802] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 653.252625][ T7802] EXT4-fs (loop6): This should not happen!! Data will be lost [ 653.252625][ T7802] [ 653.263610][ T7802] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 796 with error 28 [ 653.281438][ T7802] EXT4-fs (loop6): This should not happen!! Data will be lost [ 653.281438][ T7802] [ 653.292954][T22923] netlink: 'syz.8.4292': attribute type 21 has an invalid length. [ 653.300831][T22923] netlink: 'syz.8.4292': attribute type 1 has an invalid length. [ 653.308685][ T7802] EXT4-fs (loop6): Total free blocks count 0 [ 653.315475][ T7802] EXT4-fs (loop6): Free/Dirty block details [ 653.321378][ T7802] EXT4-fs (loop6): free_blocks=0 [ 653.326873][ T7802] EXT4-fs (loop6): dirty_blocks=800 [ 653.332330][T22923] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4292'. [ 653.342176][ T7802] EXT4-fs (loop6): Block reservation details [ 653.466593][T22933] sock: sock_set_timeout: `syz.6.4294' (pid 22933) tries to set negative timeout [ 653.638949][ C1] ================================================================== [ 653.647169][ C1] BUG: KCSAN: data-race in __perf_event_overflow / __perf_event_set_bpf_prog [ 653.656218][ C1] [ 653.658536][ C1] write to 0xffff88811b04deb8 of 8 bytes by task 22932 on cpu 0: [ 653.666254][ C1] __perf_event_set_bpf_prog+0x419/0x470 [ 653.671903][ C1] perf_ioctl+0x92e/0x15d0 [ 653.676343][ C1] __se_sys_ioctl+0xce/0x140 [ 653.680944][ C1] __x64_sys_ioctl+0x43/0x50 [ 653.685539][ C1] x64_sys_call+0x1563/0x3020 [ 653.690216][ C1] do_syscall_64+0x12c/0x370 [ 653.694799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.700689][ C1] [ 653.703001][ C1] read to 0xffff88811b04deb8 of 8 bytes by interrupt on cpu 1: [ 653.710530][ C1] __perf_event_overflow+0x252/0x920 [ 653.715812][ C1] perf_swevent_hrtimer+0x28d/0x310 [ 653.720999][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 653.726186][ C1] hrtimer_interrupt+0x269/0x810 [ 653.731114][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 653.736999][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 653.742634][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 653.748603][ C1] preempt_schedule_irq+0x28/0x50 [ 653.753707][ C1] raw_irqentry_exit_cond_resched+0x4b/0x60 [ 653.759593][ C1] irqentry_exit+0x91/0x520 [ 653.764109][ C1] sysvec_apic_timer_interrupt+0x44/0x80 [ 653.769746][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 653.775716][ C1] __sanitizer_cov_trace_pc+0x3b/0x70 [ 653.781081][ C1] io_submit_sqes+0x5b9/0x1270 [ 653.785839][ C1] __se_sys_io_uring_enter+0x1c9/0xf50 [ 653.791307][ C1] __x64_sys_io_uring_enter+0x78/0x90 [ 653.796686][ C1] x64_sys_call+0x1e16/0x3020 [ 653.801370][ C1] do_syscall_64+0x12c/0x370 [ 653.806004][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.811890][ C1] [ 653.814201][ C1] value changed: 0x0000000000000000 -> 0xffffc900033a7000 [ 653.821289][ C1] [ 653.823596][ C1] Reported by Kernel Concurrency Sanitizer on: [ 653.829733][ C1] CPU: 1 UID: 0 PID: 22930 Comm: syz.9.4295 Tainted: G W syzkaller #0 PREEMPT(full) [ 653.840664][ C1] Tainted: [W]=WARN [ 653.844449][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.854584][ C1] ================================================================== [ 653.877302][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 653.969143][T22932] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4295'. [ 654.003572][T22937] tipc: Enabling of bearer rejected, failed to enable media [ 654.045519][T22937] loop6: detected capacity change from 0 to 128 [ 654.162362][T22937] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 654.170192][T22937] FAT-fs (loop6): Filesystem has been set read-only [ 655.032346][ T1031] usb 7-1: enqueue for inactive port 0 [ 655.037840][ T1031] usb 7-1: enqueue for inactive port 0 [ 655.112381][ T1031] vhci_hcd vhci_hcd.3: vhci_device speed not set