last executing test programs: 6m20.68590995s ago: executing program 32 (id=54): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000400)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext, 0x10208}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x2, 0x40, 0x0, 0xf7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0xffffff39, 0x100) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300), &(0x7f00000003c0)=0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000002380)) syz_emit_ethernet(0x86, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x50, 0x3a, 0xff, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, 'J\a\x00', 0x0, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x4}, @ipv4={'\x00', '\xff\xff', @broadcast}, [@srh={0x33, 0x0, 0x4, 0x0, 0x9, 0x20, 0x2}, @hopopts={0x2f, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x8, {0x1, 0x0, 0xae, 0xfbff}}]}]}}}}}}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz7ENwjAUBNBLSEAwCzUzsEDmiViHwShp6fjIUeiogeK9wtJZd5YcfuqYbbLL/p3n5DDksqZHVVXfjx+G3a2d5yFJLZI+yZhs2oOLdlH305RubbVdqvKseSlM12/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+3SsAAP//iicZfA==") r6 = dup(r2) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x34, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) lseek(r0, 0x2000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x5c, 0x11, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0) 6m17.802415703s ago: executing program 33 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) 6m14.012170121s ago: executing program 34 (id=85): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x4000, 0x7, &(0x7f0000005000/0x4000)=nil) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffe84, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 6m1.767702656s ago: executing program 35 (id=116): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00f6d4cec5b7a3ac04000000000086b210c53ba450d4b8aa46d57300ac183f7afae3b48bd695ff9d18aad0252f7b5810e4e16985e1e4b21d5c10fb72b893740a7edcd5ccf1e8ae445e75de2fb5b2c355108a3b5970397480a6a008f241792f1a4ff75a3a04d61dc2b303527e11d7a0f814", @ANYRESOCT=r2, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x18b4dd456fe35638}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) eventfd(0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") setresuid(0x0, 0xee00, 0x0) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x2402) read(r6, &(0x7f0000000040)=""/135, 0x87) 5m45.668099494s ago: executing program 36 (id=214): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m45.622743476s ago: executing program 37 (id=215): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = io_uring_setup(0x1fbc, &(0x7f00000001c0)={0x0, 0xd2a, 0x100, 0x2, 0xea}) io_uring_register$IORING_REGISTER_FILES(r5, 0x23, &(0x7f0000000000), 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000040)={0x2, 0x5}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r6, 0x0, 0x0, 0x10000002fc) r7 = socket(0x10, 0x2, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r8, &(0x7f0000000240)='\x00', 0x34000, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 5m43.515498121s ago: executing program 38 (id=224): unshare(0x62040200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000044}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000500)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4002, 0x0, @empty, 0xbff}, @ib={0x1b, 0xffff, 0x1, {"9b04461285dc18ea7bdd58f6f80a9cb7"}, 0x5, 0x57, 0x3d7}}}, 0x118) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r1, r0, 0x26, 0x0, @void}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x3be}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r7, 0x0, 0x0, 0x1, 0x1}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x22d0, 0x20, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) getitimer(0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b82, 0x0, @perf_bp={0x0, 0x1}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a030400000000000000000a0000050900010073797a3100000000780004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c2008000240000000000c0001005241544545535400280001800b0001006f626a7265660000180002800900040059797a320000000008000340000000090900020073797a32"], 0xcc}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) 5m24.041015905s ago: executing program 39 (id=439): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x8, &(0x7f0000000280)) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) sendto$inet(r4, &(0x7f0000000140)="6fed", 0x2, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000200)={0x0, @rand_addr, @multicast1}, &(0x7f0000000240)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000280)=0x1) close(0x3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in6=@loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d6, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x70bd2d, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 4m12.757591664s ago: executing program 8 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}]}}}]}, 0x38}}, 0x0) 4m12.554583664s ago: executing program 8 (id=1087): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4080, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x0, 0x2, 0x10, 0x80000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000000000000beff00000900000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000015644072c0c712a778421cdb68dab0763b93330298c0206ecd08e7408dcd052d70f9ff69398a18e63dc69259a74fc15b113148e3cdf59b2d54290702294a0dc94a6651dabd7c77bd5a00309f5a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000840)='./file0\x00', 0x5210, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0xdd, 0x2e9, &(0x7f0000000a40)="$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") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffee1, &(0x7f0000000d40)=[{&(0x7f00000001c0)="13", 0x1}, {&(0x7f0000000800)="04fec201000000000000002190090a12", 0x10}, {&(0x7f0000003cc0)="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", 0x1000}], 0x3}, 0x0) sendmsg$rds(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x10000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000a00)={[0x3]}, 0x8) fsconfig$FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000001c0)='M', &(0x7f00000009c0)='./file2\x00', r6) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000780)='./file0/file0\x00', 0x10004, &(0x7f0000000700)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}], [{@fowner_gt={'fowner>', 0xee00}}, {@dont_measure}, {@fscontext={'fscontext', 0x3d, 'root'}}]}, 0x1, 0x65c, &(0x7f0000005340)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 4m12.091799318s ago: executing program 8 (id=1093): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB="814c"], 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x20, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@map_idx_val={0x18, 0x16, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}}, @map_fd={0x18, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x9, 0x68, &(0x7f00000007c0)=""/104, 0x41100, 0x0, '\x00', r0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x0, 0x10, 0x3}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="7589d70300", 0xfe07, 0xfffffffffffffffe) (fail_nth: 3) 4m11.211502831s ago: executing program 8 (id=1098): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x6, 0x232, &(0x7f0000000640)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000000000001"], 0x4c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x11220, 0x2, 0x9, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x2, 0x2, 0x88, &(0x7f0000000580)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socket(0x15, 0x800, 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x7ffffffe) ptrace$pokeuser(0x6, r5, 0x358, 0xfffffffffffffff8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x270, 0x258, 0x258, 0x270, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connbytes={{0x38}, {[], 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0xa}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r4, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c0003800600010000000000080002000200000006080300a7aa0000080001"], 0x5c}}, 0x20000000) 4m10.980577602s ago: executing program 8 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 4m10.858787058s ago: executing program 8 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m10.858469818s ago: executing program 40 (id=1102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m52.583029493s ago: executing program 1 (id=1231): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="cc", 0x1, 0xfffffffffffffffd) keyctl$revoke(0x3, r0) add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)='q', 0x1, 0xfffffffffffffffd) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r2 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x5, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r7, r6, 0x80000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r5}, 0x38) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000340)='user\x00', 0x4000, &(0x7f0000000380)={@_ha_fsid={[0x4, 0x7f]}, {0x5, 0x1, 0x2, 0x1}}, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x100}) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x12, 0x10, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0x9b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x54, 0x1000, &(0x7f0000000580)=""/4096, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x35, r2, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r3, r4, 0x3, &(0x7f0000000480)=[r5, r8, r9, r10], &(0x7f0000001580)=[{0x2, 0x4, 0x4, 0x4}, {0x0, 0x2, 0x4, 0x4}, {0x200, 0x3, 0x6}]}, 0x94) 3m52.563185705s ago: executing program 1 (id=1232): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x100b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000380)=@hci={0x1f, 0x5965, 0x31}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000040)="c2e512c476edbffe2d1000008100", 0xe}], 0x1}, 0x4000080) (fail_nth: 3) 3m51.744556745s ago: executing program 1 (id=1240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x27, 0x80805, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) fsopen(&(0x7f0000000080)='proc\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc}, [@map_fd={0x18, 0x2}, @jmp={0x5, 0x0, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @ldst={0x2, 0x3, 0x6, 0x8, 0xb, 0x4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, @map_fd={0x18, 0x7}]}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7b"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@nat={'nat\x00', 0x670, 0x5, 0x690, 0x0, 0x348, 0xfeffffff, 0x540, 0x348, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x42}, 0x0, 0x308, 0x348, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3c, "672aa37433823e2ec551dffef2f50b7e14d5905c77d37ba9f2eb3a8b53e8"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @port=0xfffe}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0xffffff00, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6f0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) 3m50.564794113s ago: executing program 1 (id=1252): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)='./file0/../file0\x00', 0x11, 0x3) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 3m50.242600149s ago: executing program 1 (id=1253): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10400, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e1e}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="7ddb889a", 0xfffffcda}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 3m50.071930598s ago: executing program 1 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x3f, 0x0, {0xa, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6}}, 0x1c}}, 0x80) 3m50.055058159s ago: executing program 41 (id=1255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newrule={0x1c, 0x18, 0x409, 0x3f, 0x0, {0xa, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6}}, 0x1c}}, 0x80) 2m54.232842003s ago: executing program 4 (id=1716): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc010, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20003, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[], 0xb, 0x21f, &(0x7f0000000940)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)) io_setup(0x1ff, &(0x7f0000000440)=0x0) ftruncate(r1, 0x81fe) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) io_submit(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000000206050000000000fffff0000004000005000100060000000900020073797a320000000005000400000000000c000780080012000e00000011000300686173683a69700000ffffffffffff000500050002"], 0x58}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000007a00010600000004fddbdf250700005d9800"], 0x18}], 0x1, 0x0, 0x0, 0x40000}, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000a80)={r7, 0x0, "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"}, &(0x7f0000000180)=0xfebd) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000480)={r8, @in={{0x2, 0x4e20, @local}}, 0x5, 0x3}, &(0x7f0000000100)=0x90) write$cgroup_int(r0, &(0x7f0000000040)=0xfe8e, 0x12) 2m53.987724835s ago: executing program 4 (id=1723): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="d2b23a11", 0x4}], 0x100000000000034d}, 0x10) 2m53.47992466s ago: executing program 4 (id=1729): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) unshare(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) setresuid(0xee01, r0, r0) r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xd, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}}}, 0x48) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2m51.939837036s ago: executing program 4 (id=1733): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000340)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@jqfmt_vfsv0}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447cf2) open(&(0x7f00000002c0)='./file1\x00', 0x147102, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) sendmsg$sock(r1, &(0x7f0000001000)={&(0x7f00000004c0)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)="4f4f65d7bea127a91137db8d1adf8dd07d3c0e57f2130099206a2d94bb7b8b803e3bfa4780ca840a0bbae8a2902c1284dc67dfebe27638fd320e0780c65da536", 0x40}, {&(0x7f00000005c0)="2cfe7abbed51e49a55b3fb0d4bf912dca4ddb15485de04761f40ecf817207e77e91613b24a1cada97b69960ffee75aa031912821f74d1502f460a041080eb2a2fcb27ac5e683d49ab44856490ba4e1812cb19341d26cd27b59cb8df811f4cc90768759f8a1a9be3beae0da722b875a1065b760f09b9198f3", 0x78}, {&(0x7f0000000640)="b9f1c07627c35e625e9ce5458eae3c82845f6b37c7d8c513e89d8ad7c81f8903af7116532b83262d30a00d43853d47f919240adf6bca2e09ce5cf92e0d87e975ee446c3c6d1a20f8034fc84f7ff6ca79de399fd06b5e21cedff63cbb5db98efac85c57574f66dfe609a138ce3771885619719579614bf78925497d192b19785df55afc777e23d39b8c7c09512d9e79e21c6ef4f660e530e720e113dc2102bc97df3ecd1bbb158b4f8a2becf22feec5c263989a463b9e6f10f69fb5f6ff80ed2510306a16939f2100562cb86848ad189ba837e9096ca54631593e03c0129a5908d2cfb041c801b073e3942a38010a3cb64fdc394b795160e4", 0xf8}, {&(0x7f0000000740)="94430c9d26f369d2906090ce0e4f5e2536369b08ca52739259c0dea7eb5e63389a52d06d57bf283e14d26a9d440bcdd511b31e90d49f904a99e1fe9d9ba0c96771f02ad8510a304a11dc8f55c3dd8e0675aa868db5a544dcd0a66a302d5d5af3acfc223aa587120c2ab44f870c45b5d40e54442c8143917a8d9abfd296172549656c22d0b74b71ec646c93704fdc953c71d344e7f948e6e47acfb7f3473d7006110b22e2f8226cbd59cd1f8758903118ee693be249685c7adb72ae288ce8", 0xbe}, {&(0x7f0000000800)="86eb695143a1d3958dbb69f31b02599d9990ad00a9ed974a02", 0x19}, {&(0x7f0000000840)="fe893bbfe90f0bbed2aadd61356a1f011fab229e16c6956654cbe18de6a5b204f8c199a05841f734ce6f5bb0348f64132fa30f670faca3ad25dbc472c2f2b9f0069d74272b973c49d36025345573586dd1e138d34e9a26b762", 0x59}, {&(0x7f0000000ec0)="4083fede1678a0516b7eac89e5945cdb0f6857963d4988a35cd1054b7c918b5b7694f0455e6f26fabf8b7f46a765ba039305cc8fc943a0825a39a5bf04f34ad4037a6270a9d08c9c2dde48dbf259e4a611c1ed03372569cfa2b31ceadc5650582f9b9d3facd5c449f9bdbad53eb4225194f0b0f79605bf8508d69cc031c23c28b7efed664ecced76a7f836aaa6bfb4ca415194322d2179cd8a0f4283c3d81b34e084458e3c991b85b712eda35aa565156dd611a1d608da685d63f1282cc6a0", 0xbf}], 0x7, &(0x7f0000000f80)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xfeb0}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x60}, 0x44000) fcntl$addseals(r2, 0x409, 0xe) r3 = dup(r2) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r4, 0x100, 0x0) getdents64(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x5, 0x1) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x2, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x800, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10001}, 0x44) socket$inet(0x2, 0x800, 0x6) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000300)={0xc45, 0xffffffff, 0x1}) write$cgroup_int(r0, &(0x7f0000000080)=0x4, 0x12) mq_getsetattr(r3, &(0x7f00000003c0)={0x74a6, 0x1, 0x4, 0xb1}, &(0x7f0000000400)) 2m50.988040434s ago: executing program 4 (id=1741): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xeb}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f500000000000800000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x1000, &(0x7f0000001cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0xffffffff, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r2 = socket$pppoe(0x18, 0x1, 0x0) getsockopt(r2, 0x1, 0xb, 0x0, &(0x7f00000016c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000680)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 2m50.883164509s ago: executing program 4 (id=1742): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="d2b23a11", 0x4}], 0x100000000000034d}, 0x10) 2m50.85887834s ago: executing program 42 (id=1742): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x28, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="a4"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="d2b23a11", 0x4}], 0x100000000000034d}, 0x10) 1m38.010994247s ago: executing program 7 (id=2339): semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x8, 0x3400}], 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x172831) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xb, 0x5, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sync() r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xffdffffd, 0x2, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x446, &(0x7f0000000500)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r10, 0xffffffff80000200, 0x0, 0x0) 1m37.186736188s ago: executing program 7 (id=2345): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010026bd700000020000020000df0b00010001"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r2, 0x2, 0xa1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x40c0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000000)=0xc, 0x4) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) 1m36.967673568s ago: executing program 7 (id=2350): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0x1, 0x3, 0x7fffffffffffffff}) 1m36.899991942s ago: executing program 7 (id=2352): socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0xfffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {0x2}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xbf, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0xf, "0062007d82000000000000002240f7ffffff00"}) r5 = syz_open_pts(r4, 0x0) r6 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000004c0)='\x02;\xe5\b\x00\x00\x9c\x00\x00\x00\x00\x00\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) dup3(r5, r4, 0x0) open(0x0, 0x4c27e, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850) inotify_init1(0x0) r8 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m35.92295994s ago: executing program 7 (id=2356): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) socketpair(0x10, 0x3, 0x12, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xa100, 0xc8, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syncfs(0xffffffffffffffff) r3 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee6, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 1m35.498666241s ago: executing program 7 (id=2360): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sendmsg$IPSET_CMD_HEADER(r1, 0x0, 0x8c6197715522630e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, 0x1, "e8db8b1f8b2efc5bedcdacfba162bcb394a143fcb6866bb4681143e6377a7050", 0x800, 0x1f, 0x9, 0x8}, 0x3c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000507000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r0, 0x1743d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x2000008, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) unshare(0x22020600) r10 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x38b2, 0x8000, 0x3, 0x89}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r10, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m35.498457962s ago: executing program 43 (id=2360): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6}, 0x0) sendmsg$IPSET_CMD_HEADER(r1, 0x0, 0x8c6197715522630e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x1f}, @multicast1, 0x1, "e8db8b1f8b2efc5bedcdacfba162bcb394a143fcb6866bb4681143e6377a7050", 0x800, 0x1f, 0x9, 0x8}, 0x3c) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000507000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, r0, 0x1743d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x2000008, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x7, &(0x7f0000000180)={0x1, 0x0, 0x12, 0x10}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) unshare(0x22020600) r10 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x38b2, 0x8000, 0x3, 0x89}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) io_uring_enter(r10, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10.31911628s ago: executing program 9 (id=3018): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x81) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x2000008}) unlink(&(0x7f0000000280)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x82, 0x0) 9.305040189s ago: executing program 9 (id=3025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipmr_delroute={0x1c, 0x19, 0x5, 0x70bd29, 0x25dfdbfc, {0x80, 0x80, 0x10, 0x1, 0xfc, 0x0, 0xff, 0x2, 0x1000}}, 0x1c}}, 0x4400c8c0) ftruncate(r2, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000700)={'netdevsim0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x81) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@deltaction={0x128, 0x31, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x20040084) r7 = socket(0x1a, 0x3, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r8, 0x227b, &(0x7f00000001c0)=0x2001) r9 = fcntl$dupfd(r8, 0x0, r8) write$usbip_server(r9, &(0x7f0000000240)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x401}, {0x8}}, 0x30) read$usbmon(r9, &(0x7f0000000500)=""/136, 0x88) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)=@delqdisc={0x24, 0x25, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xfff1}, {0xfff4, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001005}, 0x20040080) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000300)) 8.47002581s ago: executing program 5 (id=3033): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="010000000a0000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) 8.410828844s ago: executing program 5 (id=3034): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x104b18, 0x3, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x420000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) wait4(0x0, 0x0, 0xe000000b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000209000b0073797a31000000000900010073797a300000000008000a4000000004"], 0x250}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) mlock2(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) 8.368138325s ago: executing program 9 (id=3036): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) fstatfs(r0, &(0x7f0000000500)=""/167) 8.310860559s ago: executing program 9 (id=3038): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000100)=0x54273e79, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0x12) 8.29042152s ago: executing program 5 (id=3039): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000e00000059078ac1414ff0a01010089020000002000001c07e83eeee24d215f1ad8d29cac6bd886c0d3b77ff09819fea349febd44ec5336f955ca368eca4ac1266fdc6df557ad5f3155883da923fbb3ca14fef51aba9288b3a03d54c1cfb9c3ea45eb169191c9e6452ea4bed5691c8a3857752912143a3b1a983704b6ae48261b0d96a0e9841323b59d30e22e", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f30ec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x6, 0x0, 0x0, 0x4, 0x0, 0x5a1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100060808004149004001040800", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) symlink(&(0x7f0000002680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2000000, 0x0) sendto$inet(r4, &(0x7f0000000800)="1e7400f0e9ff2adbb9eb1c779ebb21bf74e430ba8c067ce7e7fc0e699ff487a4304a48cf37e68b1b31e90764aaa3169caab9e9270d9d393748e88839f68f5a392837c1b46d5b3741a570245af0ff87e9247495762741d7b1d5934b177fe70547dc8c847f7be7a65aff0dc4a45ac0433856671731765318d8d73b1a2cd32b5311bed92cf16fe149aeb1e38008327ebf1e9327c3362bf60936342ac5ee2b336301bf4220cc740d014e4872831a563832297bcbfef2a641f55d77b60fefec9c79", 0xbf, 0x24000805, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 8.048973962s ago: executing program 5 (id=3042): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x400, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) epoll_create(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 7.664118851s ago: executing program 9 (id=3043): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01cfb989400000000025130000001800018014000200"], 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 6.984659634s ago: executing program 9 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 6.984550364s ago: executing program 44 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}}, 0x0) 5.896524848s ago: executing program 5 (id=3064): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@rand_addr, @private}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x0, 0x9, 0x41, @mcast1, @private0, 0x10, 0x8, 0xffffffff, 0x400}}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000010400000200fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="98e40000210600000500210010"], 0x44}, 0x1, 0x0, 0x0, 0x4cc51}, 0x4054) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newlink={0x80, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x5}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x1}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x5}, @IFLA_MACSEC_ENCRYPT={0x5, 0x7, 0x3}, @IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e20}, @IFLA_MACSEC_PROTECT={0x5, 0x8, 0x5}]}}}, @IFLA_LINK={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f00000000c0)='THAWED\x00', 0x7) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r4, 0x400455c8, 0x0) syz_usb_connect(0x1, 0x36, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 5.787329224s ago: executing program 0 (id=3068): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=@newsa={0xf0, 0x10, 0x2, 0x0, 0x4, {{@in=@multicast1, @in=@empty, 0x0, 0x6159, 0x2, 0x0, 0xa4c363adf7e42e4f, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6c}, @in6=@private1, {0x0, 0x40, 0x5, 0x0, 0x4000}, {0x8, 0x0, 0x14, 0x100000400000000}, {0x0, 0x1ff}, 0x0, 0x3506, 0xa, 0x0, 0xfe, 0x60}}, 0xf0}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x4, {@in6_addr=@local, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r4, r4, 0x0, 0x8) syz_clone3(&(0x7f0000001c00)={0x18c00c080, 0x0, 0x0, 0x0, {0x800200}, &(0x7f0000001a80), 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086610, &(0x7f00000004c0)={@desc={0x1, 0x0, @desc1}}) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000001c80)={{r8}, r9, 0x14, @unused=[0x2707, 0xc03, 0x6, 0x100], @name="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"}) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000400)={0x7, [0x35, 0xff5b, 0x5, 0x90, 0x9, 0xffff, 0x7]}, &(0x7f0000000480)=0x12) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r12) r13 = geteuid() getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x200002, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@privport}, {@msize={'msize', 0x3d, 0x2}}, {@cachetag={'cachetag', 0x3d, 'gretap\x00'}}, {@debug={'debug', 0x3d, 0x81}}, {@msize={'msize', 0x3d, 0x3}}, {@loose}, {@debug={'debug', 0x3d, 0x6}}, {@version_9p2000}, {@msize={'msize', 0x3d, 0x7d0}}, {@cache_mmap}], [{@fowner_lt={'fowner<', r12}}, {@uid_gt={'uid>', r13}}, {@euid_gt={'euid>', r14}}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '\x00\x00\x11\x11\"\"33'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@hash}]}}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x804) 5.682664669s ago: executing program 0 (id=3071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b6, 0x8, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) io_setup(0x239f, &(0x7f0000000380)) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0xdf68, 0x2, 0x3, 0x10f}, 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) fallocate(r7, 0x1, 0xffc, 0x9) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000a40)="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", 0x68b}, {&(0x7f0000000480)='E', 0x1}], 0x2) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r8, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xf000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty=0xe0000000}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x620b}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) sigaltstack(0x0, 0x0) 4.773909394s ago: executing program 0 (id=3074): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x1345, 0x400, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) epoll_create(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20003, 0x0, 0x0, 0x0, 0x0, 0x2001000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 3.01982492s ago: executing program 5 (id=3085): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000001000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0920000000000035090100000000009500000000000000bf020000000000007b9af8ff00000000b5090800000000007b9af0ff00000000bd0000000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9100000000000056070000000000002400000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.902999126s ago: executing program 6 (id=3086): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e010000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500200000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="48456c5bd7cd77074181460000f4", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) 2.902537327s ago: executing program 6 (id=3087): r0 = socket$rxrpc(0x21, 0x2, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x3}, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1446}, @TCA_FLOW_MASK={0x8, 0x6, 0x7c8c}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = syz_io_uring_setup(0x1eb4, &(0x7f00000000c0)={0x0, 0xb89d, 0x800, 0x1, 0x2de}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, 0x0, 0x1) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd00011100"], 0xfdef) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) connect$rxrpc(r0, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @empty, 0x7}}, 0x24) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000080)={0x268c, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) connect$rxrpc(r0, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) fcntl$dupfd(r6, 0x0, r6) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) 2.532374665s ago: executing program 0 (id=3088): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000140)={@rand_addr=0x51420305, @broadcast}, 0x8) syz_emit_ethernet(0x4f, &(0x7f0000000a80)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '-\x00', 0x19, 0x84, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], "a5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"}}}}}, 0x0) r2 = mq_open(&(0x7f0000000000)='\\*\x00', 0x42, 0x142, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x5b87, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) r6 = getpgid(0x0) ioprio_set$pid(0x2, r6, 0x6003) io_uring_enter(r3, 0xd44, 0x44c1, 0x7, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=@newlink={0x44, 0x10, 0x801, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x29064}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x5a}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000840)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) 2.472667408s ago: executing program 0 (id=3089): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) pipe(&(0x7f0000000d00)) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x101, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180), 0xc) socket$inet6(0xa, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 2.389226452s ago: executing program 2 (id=3090): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}, {@nolazytime}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000100)=0x54273e79, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) write$cgroup_int(r2, &(0x7f0000000080)=0x4, 0x12) 2.315824735s ago: executing program 6 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x19105d55dfc078f, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x800454e0, 0x0) r3 = syz_io_uring_setup(0x1eb4, &(0x7f00000000c0)={0x0, 0xb89d, 0x800, 0x1, 0x2de}, &(0x7f00000001c0), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000240)="9c67c3", 0x3, 0x1, 0x2}}, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)={0x40, r5, 0x7c7d1e7b9dfaf2c3, 0x70bd2c, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x40d5}, 0x20008000) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, &(0x7f0000002040)={0x0, 0x989680}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x0, 0x5, 0x0, 'queue1\x00'}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x4, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 2.315232916s ago: executing program 0 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_io_uring_setup(0x6963, &(0x7f0000000100)={0x0, 0xf0ff, 0x8, 0x1, 0x3b5}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x45, [0x0, 0x89ff]}}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = io_uring_setup(0xca, &(0x7f00000006c0)={0x0, 0x4b44, 0x0, 0x2, 0x9, 0x0, r2}) io_uring_enter(r4, 0x4e19, 0xae50, 0x2, &(0x7f0000000740)={[0x6]}, 0x8) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$802154_dgram(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x73c9814aa9d54de1}, 0x44081) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x82340, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=0x0000000000000007,check=relaxed,unhide,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',unhide,,'], 0x1, 0x562, &(0x7f0000000140)="$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") dup2(r5, r6) 2.169112813s ago: executing program 3 (id=3094): semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x8, 0x3400}], 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x172831) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xb, 0x5, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sync() r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r9, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xffdffffd, 0x2, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x446, &(0x7f0000000500)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r10, 0xffffffff80000200, 0x0, 0x0) 1.908137506s ago: executing program 3 (id=3095): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000140)=ANY=[@ANYBLOB="636865636b3d72656c617865642c6d61703d6f66662c686964652c6d61703d6e6f726d616c2c63727566742c686964652c646d6f64653d3078303030303030303030303030303830302ce5000000000000003078303030303030303030303030303035342c636865636b3d72656c617865642c00"], 0x1, 0x557, &(0x7f0000000580)="$eJzs3V1v09YfwPGf+/Cn5C+haUwIVQUOZZuKVIKTQFDEleecpAcSO7Id1F4hRFupIh0TZRLtDeKGadL2HsbtXsS0N4T2Ejr5ISUlTcJa2qDo+4nAJ/bxeWrkn04bHwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdp2wZKG8dqrajC3GvjNIce75d08tBlSr4gV/5O5Obmc7rr8zYfDl+L/FmUhfbcgc/FmTvb+f+mr+xdnprrnD2nQmdjZ3Xv2pNPZeDHuhoxJXXsm9E3TqWtlQl9VymX79kotVDXT0OFaGOmmcgPtRH6gltybqlCplJTOr/ltr179/n/pT7dQqdy7VbTtsnqQb2knCH3v9oN86K6YRsN49eTE+HCc5178QXxoIhVpp6nU5lZnozSqkXGmwqdkKo7KVLSLxUKhWCyU71bu3rPtmb4d9kekL8f4P7QYr895+QZOZCqL/9IQI560ZdXqHlKHXq5UJRBfmh/t774y3fj/3W09tN7e+N+N8pc/HJ6XJP5fTd9dHRT/B7Tl7F47sit78kyeSEc6siEvukde94/gJL7qosUTI6H4YqQpTrJHZXuUVKQsZbHlsaxITUJRUhMjDdESypqEEolOPlGuBKLFkUh8CUTJkrhyU5QUpCIVKYkSLXlZE1/a4kldquIkpWzKVjLupSFtPMhU+JRMxSGZjh//XwnxH6nPefkGTmS/G/8BAAAAAMDEspLfvsfz/1m5kqRqpqHtcTcLAAAAAAB8Rslf/hfizWycuiIW838AAAAAACaNldxjZ4lITq6lqe6dUPwSAAAAAACACZH8/f+qWNOSi1PXxGL+DwAAAADApFketMb+38ley5Kwdc766x8JglnrTWv1W2vbiQ8429PpedMflxjV5q0LWSHJpjyTvXP1gpWtfnmwCOb7bLM5aq1/67gN6K5teP/ijPwm10XkvMj19XTnepYvW5E4VzMNnXf9xv2COM6FqUivRj//uPVKku7/6jUvWLK51dnIP33eWU/a8iYu5c12VknfOoqDB0NeJustJPdcHNnj2eRGjKzeXFqv3dv/qfT0qf9Q51tZTPMs5tJt7nD/5+I6C/lBvU9bcU5ETtTzt3IjzXNj6Ua66WnFtkiyBEVxRCs2ir3jf6yxGNKK7liU0lbMZcUdasX+/v7rjdIJWwEA47I5IgpZ/YF/+FUuDsd9V7nTi+6Hr+hLaZ6l+eTCOjN/xBXdHhVX7BPG9T/7noE0KMbG9f5+UG8hqfddfMK7gfWGjaIVD+H0y+2f5NLO7t6trfPZoWKpbN+x7btFmU26kW2IPQCAI4x+xs7IHNadZFYtA2fVXx98pSAvT+W5dGRdlpO7DZJvHBxZaq7nawjLI2atuZ4nvCyPmNXleh708ul5S2fwkwAA4OwspnHYSkLwMeP/8oh59+FYPnx23BvLAQDA6dDBeysX/WIFgWk9LlQqBSda0Srw3YcqMNW6VsaLdOCuOF5dq1bgR77rN+LEI1PVoQrbrZYfRKrmB6rlh2Y1efK7yh79Huqm40XGDVsN7YRaub4XOW6kqiZ0Vav9Q8OEKzpITg5b2jU14zqR8T0V+u3A1XmlQq17Mpqq9iJTM3HSU63ANJ1gTT3yG+2mVlUduoFpRX5aYLcu49X8oJkUmx/3YAMA8IXY2d179qTT2Xhxiolx9xEAABxGlAYAAAAAAAAAAAAAAAAAAAAA4Mt3erf9xaWf9p2Fp5U4d+zTZ2TsjR+emBKRMdTeXcf5hOV0F53+QgZzkhPyR98K3wAmyr8BAAD//4h0RBk=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1, 0x84}}}, 0x88}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20054800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) file_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x4062, 0x10000, 0x100, 0xfff, 0x80}, 0x18, 0x800) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x1, 0xb, 0x1}]}}]}, 0xb4}}, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) io_uring_enter(r8, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.884976397s ago: executing program 2 (id=3096): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r0 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000002c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcf", 0x5}], 0x1, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x10d00, 0xf) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r1, {0xfff2}, {0xffe0, 0xfff2}, {0x1, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x35, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) 1.118243575s ago: executing program 6 (id=3097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004600002c0000e00000059078ac1414ff0a01010089020000002000001c07e83eeee24d215f1ad8d29cac6bd886c0d3b77ff09819fea349febd44ec5336f955ca368eca4ac1266fdc6df557ad5f3155883da923fbb3ca14fef51aba9288b3a03d54c1cfb9c3ea45eb169191c9e6452ea4bed5691c8a3857752912143a3b1a983704b6ae48261b0d96a0e9841323b59d30e22e", @ANYRES32=r0, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f30ec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/4096, 0x1000}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x6, 0x0, 0x0, 0x4, 0x0, 0x5a1c, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100060808004149004001040800", 0x58}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) symlink(&(0x7f0000002680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2000000, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) 647.789258ms ago: executing program 2 (id=3098): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x40024e}, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x80000) socket$inet_mptcp(0x2, 0x1, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syncfs(0xffffffffffffffff) r3 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee6, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 574.937552ms ago: executing program 3 (id=3099): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x80, 0x91d, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4005, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x140) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f00000000c0)={{0x1, 0x2, 0x23, 0x3, 0xb}, 0xd16, 0x1ff, 0x5}) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x3000000, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 243.112078ms ago: executing program 3 (id=3100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}}, 0x0) 242.447618ms ago: executing program 3 (id=3101): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000006000000000000002e01000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500200000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="48456c5bd7cd77074181460000f4", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r9, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x17, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c180}, 0x8000) 192.068171ms ago: executing program 6 (id=3102): r0 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0xe482, 0xcb7, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x35cb, 0x0, 0x0, 0x0) 158.112632ms ago: executing program 2 (id=3103): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x102802, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, 0x0) pipe(&(0x7f0000000d00)) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x101, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) close(r0) socket$inet6(0xa, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) 157.356992ms ago: executing program 6 (id=3104): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x88661, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x500, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xff80, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x20, 0x112, 0x40, 0xd89, 0x398, 0x10001, 0x7, 0x8, 0x40}, {0x92}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x61}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r4, 0x5452, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) 120.225294ms ago: executing program 3 (id=3105): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0xfffe, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r4, 0x0, 0x0, 0x40000022, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000010200), r6) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000580)="0000000004000000", 0x8}, {&(0x7f0000000400)="789549", 0x3}], 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) unshare(0x22020400) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, 0x0}) fsopen(&(0x7f0000000100)='tracefs\x00', 0x0) 42.590958ms ago: executing program 2 (id=3106): semop(0x0, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xa78d, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000080)=[{0x3, 0x8, 0x3400}], 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x172831) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0xb, 0x5, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sync() r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000070000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}]}]}, 0x28}, 0x1, 0xff07}, 0x2000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xffdffffd, 0x2, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x446, &(0x7f0000000500)="$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") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000200, 0x0, 0x0) 0s ago: executing program 2 (id=3107): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x7, 0x200400000007, 0x6, 0x7ffffffffffffbff, 0x2000000000000000, 0x0, 0x0, 0x2000000000000000}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xffffffffffffffea, 0x0, 0x0, 0x200000, 0x4, 0x3}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x4001, 0x8}, 0x8) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x2, 0x80, 0x6, r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00010028bd70000400000002000000", @ANYRES32=0x0, @ANYBLOB="00000800080001"], 0x24}}, 0x200000d0) r8 = fsmount(r3, 0x1, 0x9) r9 = openat(r8, &(0x7f0000000040)='.\x00', 0x0, 0x0) utimensat(r9, 0x0, 0x0, 0x0) close(r2) kernel console output (not intermixed with test programs): or report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 338.293687][T14044] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2352: invalid indirect mapped block 4294967295 (level 1) [ 338.303682][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 338.303700][ C1] EXT4-fs (loop7): initial error at time 2000000151: ext4_free_branches:1023: inode 11 [ 338.303735][ C1] EXT4-fs (loop7): last error at time 2000000151: ext4_free_branches:1023: inode 11 [ 338.370622][T14044] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 338.381363][T14044] EXT4-fs (loop7): 2 truncates cleaned up [ 338.411759][T14044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.637082][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.901450][ T9568] EXT4-fs error (device loop7): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 338.915682][T14055] ieee802154 phy0 wpan0: encryption failed: -22 [ 338.936773][ T9568] EXT4-fs error (device loop7): ext4_lookup:1785: inode #17: comm syz-executor: iget: bad extended attribute block 6904 [ 339.102238][ T9568] syz_tun (unregistering): left allmulticast mode [ 339.207649][T14061] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2357'. [ 339.301214][T14052] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.363070][T14061] loop6: detected capacity change from 0 to 512 [ 339.370067][T14061] EXT4-fs: Ignoring removed nobh option [ 339.381828][T14061] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 339.411763][T14061] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 339.430453][T14061] EXT4-fs (loop6): group descriptors corrupted! [ 339.618572][T14071] lo speed is unknown, defaulting to 1000 [ 339.632014][T14071] lo speed is unknown, defaulting to 1000 [ 339.717217][T14071] chnl_net:caif_netlink_parms(): no params data found [ 339.774493][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.782489][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.790486][T14071] bridge_slave_0: entered allmulticast mode [ 339.797257][T14071] bridge_slave_0: entered promiscuous mode [ 339.804712][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.812355][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.820413][T14071] bridge_slave_1: entered allmulticast mode [ 339.827332][T14071] bridge_slave_1: entered promiscuous mode [ 339.827571][T14100] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 339.851017][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.862301][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.866126][T14100] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2366'. [ 339.910773][T14100] bond9: entered promiscuous mode [ 339.916318][T14100] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.925927][T14071] team0: Port device team_slave_0 added [ 339.975134][ T2168] bridge_slave_1: left allmulticast mode [ 339.982541][ T2168] bridge_slave_1: left promiscuous mode [ 339.995610][ T2168] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.013079][ T2168] bridge_slave_0: left allmulticast mode [ 340.019304][ T2168] bridge_slave_0: left promiscuous mode [ 340.025618][ T2168] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.251620][ T2168] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.261730][ T2168] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.271645][ T2168] bond0 (unregistering): Released all slaves [ 340.280377][T14071] team0: Port device team_slave_1 added [ 340.304024][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.319479][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.348650][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.370681][ T2168] tipc: Disabling bearer [ 340.376705][ T2168] tipc: Disabling bearer [ 340.396680][ T2168] tipc: Left network mode [ 340.403007][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.420921][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.455058][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.477248][ T2168] hsr_slave_0: left promiscuous mode [ 340.491589][ T2168] hsr_slave_1: left promiscuous mode [ 340.497850][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.516964][ T2168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.555206][ T2168] batman_adv: batadv0: Removing interface: dummy0 [ 340.618396][ T2168] team0 (unregistering): Port device team_slave_1 removed [ 340.637259][ T2168] team0 (unregistering): Port device team_slave_0 removed [ 340.735637][T14071] hsr_slave_0: entered promiscuous mode [ 340.749669][T14071] hsr_slave_1: entered promiscuous mode [ 340.756411][T14071] debugfs: 'hsr0' already exists in 'hsr' [ 340.764908][T14071] Cannot create hsr debugfs directory [ 341.387394][T14168] loop5: detected capacity change from 0 to 1024 [ 341.433169][T14168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.592707][T14168] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4222: comm syz.5.2378: Allocating blocks 497-513 which overlap fs metadata [ 341.659666][T14183] EXT4-fs (loop5): pa ffff888107e5eaf0: logic 48, phys. 177, len 21 [ 341.668860][T14183] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 341.698929][T14191] batadv_slave_0: entered promiscuous mode [ 341.757849][T14071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.773185][T14071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.785729][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.829300][T14071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.864871][T14071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.939661][T14197] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2382'. [ 341.999604][T14197] bond10: entered promiscuous mode [ 342.017132][T14197] 8021q: adding VLAN 0 to HW filter on device bond10 [ 342.047445][T14071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.074365][T14071] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.084636][ T2168] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.092112][ T2168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.130487][ T3977] Bluetooth: hci0: Frame reassembly failed (-84) [ 342.140055][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.147351][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.225654][T14071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.305878][T14071] veth0_vlan: entered promiscuous mode [ 342.315296][T14071] veth1_vlan: entered promiscuous mode [ 342.343631][T14071] veth0_macvtap: entered promiscuous mode [ 342.353192][T14071] veth1_macvtap: entered promiscuous mode [ 342.365085][T14071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.382975][T14071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.398978][ T2168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.408384][ T2168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.424438][ T2168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.434549][ T2168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.553017][ T28] kauditd_printk_skb: 1232 callbacks suppressed [ 342.553031][ T28] audit: type=1400 audit(2000000155.990:7043): avc: denied { shutdown } for pid=14270 comm="syz.0.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.610619][ T28] audit: type=1400 audit(2000000156.010:7044): avc: denied { read } for pid=14270 comm="syz.0.2361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 342.637723][T14276] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 342.694963][T14281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2361'. [ 342.803264][T14282] loop6: detected capacity change from 0 to 1024 [ 343.000315][ T28] audit: type=1326 audit(2000000156.290:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.076535][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 343.099872][ T28] audit: type=1326 audit(2000000156.290:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.192573][ T28] audit: type=1326 audit(2000000156.290:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.407273][ T28] audit: type=1326 audit(2000000156.290:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.458879][ T28] audit: type=1326 audit(2000000156.290:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.514536][ T28] audit: type=1326 audit(2000000156.340:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.603808][ T28] audit: type=1326 audit(2000000156.340:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.692938][ T28] audit: type=1326 audit(2000000156.340:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.9.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 343.975769][T14312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2391'. [ 344.067078][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2390'. [ 344.168745][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 344.168935][ T6123] Bluetooth: hci0: command 0x1003 tx timeout [ 344.231178][T14328] syzkaller0: entered promiscuous mode [ 344.239202][T14328] syzkaller0: entered allmulticast mode [ 344.425299][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2397'. [ 344.479106][T14362] bond7: entered promiscuous mode [ 344.502498][T14362] 8021q: adding VLAN 0 to HW filter on device bond7 [ 344.555223][T14370] vlan2: entered promiscuous mode [ 344.571042][T14370] bond0: entered promiscuous mode [ 344.592489][T14370] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 345.009890][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2400'. [ 345.431928][T14438] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 345.442916][T14438] vhci_hcd vhci_hcd.1: default hub control req: d10d v0006 i0007 l2 [ 346.012441][T14518] syzkaller0: entered promiscuous mode [ 346.018182][T14518] syzkaller0: entered allmulticast mode [ 346.027386][T14518] tipc: Started in network mode [ 346.032821][T14518] tipc: Node identity ead5fcdc7b14, cluster identity 4711 [ 346.040496][T14518] tipc: Enabled bearer , priority 0 [ 346.049081][T14517] tipc: Resetting bearer [ 346.058533][T14517] tipc: Disabling bearer [ 346.368087][T14562] lo speed is unknown, defaulting to 1000 [ 346.374140][T14562] lo speed is unknown, defaulting to 1000 [ 346.380441][T14562] lo speed is unknown, defaulting to 1000 [ 346.387723][T14562] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 346.400168][T14562] lo speed is unknown, defaulting to 1000 [ 346.407099][T14562] lo speed is unknown, defaulting to 1000 [ 346.413631][T14562] lo speed is unknown, defaulting to 1000 [ 346.582971][T14563] loop5: detected capacity change from 0 to 512 [ 347.076248][T14563] EXT4-fs (loop5): 1 orphan inode deleted [ 347.088050][T14563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.103167][ T56] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:4: Failed to release dquot type 1 [ 347.117335][T14563] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.495361][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2412'. [ 347.511457][T14594] bond6: entered promiscuous mode [ 347.517020][T14594] 8021q: adding VLAN 0 to HW filter on device bond6 [ 347.532054][T14594] vlan3: entered promiscuous mode [ 347.537478][T14594] bond0: entered promiscuous mode [ 347.543850][T14594] bond6: (slave vlan3): Enslaving as an active interface with an up link [ 347.863359][T14562] lo speed is unknown, defaulting to 1000 [ 347.864744][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.869861][T14562] lo speed is unknown, defaulting to 1000 [ 347.885638][T14562] lo speed is unknown, defaulting to 1000 [ 347.909861][T14554] loop6: detected capacity change from 0 to 512 [ 348.127670][T14631] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 348.869136][T14702] Unsupported ieee802154 address type: 0 [ 348.910591][T14702] syzkaller0: entered promiscuous mode [ 348.916313][T14702] syzkaller0: entered allmulticast mode [ 349.131899][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2422'. [ 349.229678][T14715] siw: device registration error -23 [ 349.237614][T14715] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 349.261955][T14715] loop5: detected capacity change from 0 to 512 [ 349.637507][T14719] loop6: detected capacity change from 0 to 512 [ 350.124231][T14719] EXT4-fs (loop6): 1 orphan inode deleted [ 350.134233][T14719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.156831][T12500] __quota_error: 104 callbacks suppressed [ 350.156847][T12500] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 350.176180][T14719] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.271535][T14724] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2424'. [ 351.117487][T14732] loop5: detected capacity change from 0 to 1024 [ 351.128778][T12500] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:17: Failed to release dquot type 1 [ 351.185971][T14732] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 351.188974][T14731] lo: entered promiscuous mode [ 351.197000][T14732] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 351.213258][T14732] EXT4-fs (loop5): invalid journal inode [ 351.219211][T14732] EXT4-fs (loop5): can't get journal size [ 351.220467][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.021885][T14731] tunl0: entered promiscuous mode [ 352.030065][T14731] gre0: entered promiscuous mode [ 352.048368][T14732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.087621][T14730] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2424'. [ 352.259612][T14731] gretap0: entered promiscuous mode [ 352.272085][T14731] erspan0: entered promiscuous mode [ 352.280291][T14731] ip_vti0: entered promiscuous mode [ 352.288436][T14731] ip6_vti0: entered promiscuous mode [ 352.297553][T14731] sit0: entered promiscuous mode [ 352.496516][T14731] ip6tnl0: entered promiscuous mode [ 352.504681][T14731] ip6gre0: entered promiscuous mode [ 352.514810][T14731] syz_tun: entered promiscuous mode [ 352.524704][T14731] ip6gretap0: entered promiscuous mode [ 352.533555][T14731] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.541187][T14731] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.548688][T14731] bridge0: entered promiscuous mode [ 352.556966][T14731] vcan0: entered promiscuous mode [ 352.567467][T14731] bond0: entered promiscuous mode [ 352.572952][T14731] bond_slave_0: entered promiscuous mode [ 352.579163][T14731] bond_slave_1: entered promiscuous mode [ 352.589121][T14731] team0: entered promiscuous mode [ 352.594536][T14731] team_slave_0: entered promiscuous mode [ 352.600685][T14731] team_slave_1: entered promiscuous mode [ 352.609564][T14731] dummy0: entered promiscuous mode [ 352.623250][T14731] nlmon0: entered promiscuous mode [ 352.631094][T14731] caif0: entered promiscuous mode [ 352.637376][T14731] batadv0: entered promiscuous mode [ 352.645225][T14731] vxcan0: entered promiscuous mode [ 352.651514][T14731] vxcan1: entered promiscuous mode [ 352.658633][T14731] veth0: entered promiscuous mode [ 352.665762][T14731] veth1: entered promiscuous mode [ 352.686476][T14731] wg0: entered promiscuous mode [ 352.692900][T14731] wg1: entered promiscuous mode [ 352.700104][T14731] wg2: entered promiscuous mode [ 352.706694][T14731] veth0_to_bridge: entered promiscuous mode [ 352.716547][T14731] veth1_to_bridge: entered promiscuous mode [ 352.725739][T14731] veth0_to_bond: entered promiscuous mode [ 352.734283][T14731] veth1_to_bond: entered promiscuous mode [ 352.742463][T14731] veth0_to_team: entered promiscuous mode [ 352.750411][T14731] veth1_to_team: entered promiscuous mode [ 352.758584][T14731] veth0_to_batadv: entered promiscuous mode [ 352.766517][T14731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.774380][T14731] batadv_slave_0: entered promiscuous mode [ 352.781949][T14731] veth1_to_batadv: entered promiscuous mode [ 352.800371][T14731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.807967][T14731] batadv_slave_1: entered promiscuous mode [ 352.816406][T14731] xfrm0: entered promiscuous mode [ 352.823008][T14731] veth0_to_hsr: entered promiscuous mode [ 352.831297][T14731] veth1_to_hsr: entered promiscuous mode [ 352.839828][T14731] hsr0: entered promiscuous mode [ 352.846302][T14731] veth1_virt_wifi: entered promiscuous mode [ 352.854075][T14731] veth0_virt_wifi: entered promiscuous mode [ 352.866255][T14731] vlan0: entered promiscuous mode [ 352.871886][T14731] vlan1: entered promiscuous mode [ 352.877424][T14731] macvlan0: entered promiscuous mode [ 352.884653][T14731] macvlan1: entered promiscuous mode [ 352.891459][T14731] ipvlan0: entered promiscuous mode [ 352.897242][T14731] ipvlan1: entered promiscuous mode [ 352.908168][T14731] macvtap0: entered promiscuous mode [ 352.914703][T14731] macsec0: entered promiscuous mode [ 352.921532][T14731] geneve0: entered promiscuous mode [ 352.928370][T14731] geneve1: entered promiscuous mode [ 352.935871][T14731] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 352.945992][T14731] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 352.955644][T14731] netdevsim netdevsim5 netdevsim2: entered promiscuous mode [ 352.963972][T14731] netdevsim netdevsim5 netdevsim3: entered promiscuous mode [ 352.972059][T14731] ipvlan2: entered promiscuous mode [ 352.977930][T14731] bridge1: entered promiscuous mode [ 352.983626][T14731] ip6tnl1: entered promiscuous mode [ 353.006111][T12489] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.050956][T12489] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.071737][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2428'. [ 353.088927][T12489] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.100845][T14743] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 353.111766][T12489] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.123463][T14743] SELinux: failed to load policy [ 353.139338][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.149131][T14728] siw: device registration error -23 [ 353.184214][T14750] loop5: detected capacity change from 0 to 512 [ 353.194547][T14750] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2429: inode has both inline data and extents flags [ 353.209609][T14750] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 353.210311][T14750] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2429: couldn't read orphan inode 15 (err -117) [ 353.219918][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 353.219940][ C1] EXT4-fs (loop5): initial error at time 2000000166: ext4_orphan_get:1391: inode 15 [ 353.219983][ C1] EXT4-fs (loop5): last error at time 2000000166: ext4_orphan_get:1391: inode 15 [ 353.322976][ T28] audit: type=1326 audit(2000000166.760:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14747 comm="syz.6.2430" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f73473ac799 code=0x0 [ 353.330861][T14750] loop5: lost filesystem error report for type 5 error -117 [ 353.351065][T14750] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.466294][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.507296][T14769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2434'. [ 353.574334][T14769] loop5: detected capacity change from 0 to 512 [ 353.581665][T14769] EXT4-fs: Ignoring removed nobh option [ 353.607613][T14769] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 353.620164][T14769] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 353.633188][T14769] EXT4-fs (loop5): group descriptors corrupted! [ 353.714896][T14776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2436'. [ 353.746291][T14776] IPv6: NLM_F_CREATE should be specified when creating new route [ 354.913901][T14808] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 354.947499][T14808] SELinux: failed to load policy [ 355.320813][T14817] siw: device registration error -23 [ 355.327790][T14817] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 355.796564][T14822] loop6: detected capacity change from 0 to 4096 [ 355.817423][T14822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.842234][T14827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2445'. [ 355.930450][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.031087][ T28] audit: type=1326 audit(2000000169.470:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.085120][ T28] audit: type=1326 audit(2000000169.470:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.109818][ T28] audit: type=1326 audit(2000000169.470:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.135988][ T28] audit: type=1326 audit(2000000169.470:7160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.175501][T14845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2448'. [ 356.304301][ T28] audit: type=1326 audit(2000000169.470:7161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.348692][ T28] audit: type=1326 audit(2000000169.470:7162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.425592][ T28] audit: type=1326 audit(2000000169.470:7163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.477618][T14849] loop5: detected capacity change from 0 to 512 [ 356.540222][ T28] audit: type=1326 audit(2000000169.470:7164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 356.570222][T14849] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 356.744904][T14849] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2451: bad orphan inode 131083 [ 356.762580][T14849] loop5: lost filesystem error report for type 5 error -117 [ 356.769798][T14849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.894951][T14877] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2453'. [ 356.931706][ T28] audit: type=1326 audit(2000000169.470:7165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 357.033121][ T28] audit: type=1326 audit(2000000169.470:7166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14834 comm="syz.6.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 357.155469][T14884] loop6: detected capacity change from 0 to 4096 [ 357.168885][T14884] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.238306][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.249729][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.478840][T14910] loop6: detected capacity change from 0 to 512 [ 357.661495][T14909] macvtap0: entered promiscuous mode [ 357.668866][T14909] ip6gretap0: entered promiscuous mode [ 357.696063][T14909] ip6gretap0: left promiscuous mode [ 358.131232][T14946] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2466'. [ 358.515456][T14960] netlink: 'syz.2.2470': attribute type 28 has an invalid length. [ 358.545549][T14960] netlink: 'syz.2.2470': attribute type 3 has an invalid length. [ 358.559889][T14960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2470'. [ 358.958712][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 361.094733][T14991] loop5: detected capacity change from 0 to 8192 [ 361.122744][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 361.122760][ T28] audit: type=1326 audit(2000000174.560:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.251860][ T28] audit: type=1326 audit(2000000174.560:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.408711][ T28] audit: type=1326 audit(2000000174.560:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.487981][ T28] audit: type=1326 audit(2000000174.560:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.528663][ T28] audit: type=1326 audit(2000000174.560:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.600803][ T3834] Bluetooth: hci0: sending frame failed (-49) [ 361.607994][ T28] audit: type=1326 audit(2000000174.580:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.616629][ T6123] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 361.639486][ T28] audit: type=1326 audit(2000000174.690:7239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 361.665575][ T28] audit: type=1326 audit(2000000174.690:7240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5c9f7c502 code=0x7ffc0000 [ 361.695268][ T28] audit: type=1326 audit(2000000174.690:7241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd5c9f7c597 code=0x7ffc0000 [ 361.744244][ T28] audit: type=1326 audit(2000000174.690:7242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd5c9f39491 code=0x7ffc0000 [ 362.002264][T15014] loop5: detected capacity change from 0 to 8192 [ 362.030516][ T3303] loop5: p1 p2 p3 p4 < > [ 362.043117][ T3303] loop5: p1 start 51316263 is beyond EOD, truncated [ 362.066117][ T3303] loop5: p2 start 4293394690 is beyond EOD, truncated [ 362.085611][ T3303] loop5: p3 size 100663552 extends beyond EOD, truncated [ 362.119874][T15013] cgroup: fork rejected by pids controller in /syz5 [ 362.150867][T15014] loop5: p1 p2 p3 p4 < > [ 362.155590][T15014] loop5: p1 start 51316263 is beyond EOD, truncated [ 362.199806][T15014] loop5: p2 start 4293394690 is beyond EOD, truncated [ 362.229841][T15014] loop5: p3 size 100663552 extends beyond EOD, truncated [ 362.266248][ T3000] loop5: p1 p2 p3 p4 < > [ 362.271271][ T3000] loop5: p1 start 51316263 is beyond EOD, truncated [ 362.284936][ T3000] loop5: p2 start 4293394690 is beyond EOD, truncated [ 362.299360][ T3000] loop5: p3 size 100663552 extends beyond EOD, truncated [ 362.559793][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 362.562545][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 362.652531][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 362.665657][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 362.775413][T15836] loop5: detected capacity change from 0 to 1024 [ 362.827022][T15836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.886169][T15841] netlink: 'syz.2.2492': attribute type 10 has an invalid length. [ 362.913467][T15841] hsr0: entered promiscuous mode [ 362.922400][T15842] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2491'. [ 362.943302][T15841] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 362.990871][T15841] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 363.010126][T15848] SELinux: failed to load policy [ 363.028490][T15841] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 363.038238][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2493'. [ 363.038928][T15851] Unsupported ieee802154 address type: 0 [ 363.057771][T15844] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.102098][T15841] netlink: 'syz.2.2492': attribute type 83 has an invalid length. [ 363.593358][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.682209][T15873] netlink: 'syz.5.2502': attribute type 30 has an invalid length. [ 363.704527][T15873] bond2: option arp_missed_max: invalid value (0) [ 363.711893][T15873] bond2: option arp_missed_max: allowed values 1 - 255 [ 363.721048][T15873] bond2 (unregistering): Released all slaves [ 364.188850][T15899] Unsupported ieee802154 address type: 0 [ 364.259111][T15898] SELinux: failed to load policy [ 364.311990][T15906] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 364.318651][T15906] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 364.327125][T15906] vhci_hcd vhci_hcd.0: Device attached [ 364.334795][T15907] vhci_hcd: connection closed [ 364.335129][T12489] vhci_hcd vhci_hcd.6: stop threads [ 364.351787][T12489] vhci_hcd vhci_hcd.6: release socket [ 364.357761][T12489] vhci_hcd vhci_hcd.6: disconnect device [ 364.565375][T15920] SELinux: failed to load policy [ 365.175389][T15944] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 365.256569][T15944] SELinux: failed to load policy [ 365.344589][T15956] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2522'. [ 365.360436][T15961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.396088][T15961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.491518][T15961] loop6: detected capacity change from 0 to 512 [ 365.625411][T15961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.684825][T15961] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.745338][T16013] SELinux: failed to load policy [ 365.813125][T16017] netlink: 'syz.2.2528': attribute type 30 has an invalid length. [ 365.827799][T16017] bond7: option arp_missed_max: invalid value (0) [ 365.835401][T16017] bond7: option arp_missed_max: allowed values 1 - 255 [ 365.852636][T16017] bond7 (unregistering): Released all slaves [ 366.303063][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.808104][T16123] loop6: detected capacity change from 0 to 128 [ 367.611799][T16128] siw: device registration error -23 [ 367.976067][T16136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 368.656404][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2549'. [ 368.675993][T16208] netlink: 'syz.9.2551': attribute type 30 has an invalid length. [ 368.691309][T16206] bond8: entered promiscuous mode [ 368.696934][T16206] 8021q: adding VLAN 0 to HW filter on device bond8 [ 368.712851][T16208] bond11: option arp_missed_max: invalid value (0) [ 368.721177][T16208] bond11: option arp_missed_max: allowed values 1 - 255 [ 368.730088][T16208] bond11 (unregistering): Released all slaves [ 368.748372][T16203] SELinux: failed to load policy [ 368.916858][ T28] kauditd_printk_skb: 495 callbacks suppressed [ 368.916895][ T28] audit: type=1400 audit(2000000182.350:7738): avc: denied { ioctl } for pid=16219 comm="syz.0.2556" path="socket:[43322]" dev="sockfs" ino=43322 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 369.385333][T16224] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2557'. [ 369.490303][T16229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2559'. [ 369.955527][T16242] SELinux: failed to load policy [ 369.980787][T12489] Bluetooth: hci1: Frame reassembly failed (-84) [ 370.413494][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2565'. [ 370.496872][ T28] audit: type=1326 audit(2000000183.930:7739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.525485][ T28] audit: type=1326 audit(2000000183.970:7740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.551142][ T28] audit: type=1326 audit(2000000183.970:7741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.575505][ T28] audit: type=1326 audit(2000000183.970:7742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.600535][ T28] audit: type=1326 audit(2000000183.970:7743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.624601][ T28] audit: type=1326 audit(2000000183.970:7744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.649062][ T28] audit: type=1326 audit(2000000183.970:7745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.674041][ T28] audit: type=1326 audit(2000000183.970:7746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.699592][ T28] audit: type=1326 audit(2000000183.970:7747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16250 comm="syz.9.2567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 370.726517][T16260] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2570'. [ 370.740305][T16260] bond11: entered promiscuous mode [ 370.745832][T16260] 8021q: adding VLAN 0 to HW filter on device bond11 [ 371.420930][T16264] netlink: 'syz.2.2571': attribute type 30 has an invalid length. [ 371.435529][T16264] bond7: option arp_missed_max: invalid value (0) [ 371.443858][T16264] bond7: option arp_missed_max: allowed values 1 - 255 [ 371.454165][T16264] bond7 (unregistering): Released all slaves [ 371.522450][ T6123] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 371.522686][T16249] Bluetooth: hci0: command 0x1003 tx timeout [ 371.619231][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2574'. [ 371.633799][T16273] bond12: entered promiscuous mode [ 371.639229][T16273] 8021q: adding VLAN 0 to HW filter on device bond12 [ 371.998688][ T3834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 371.998678][ T6123] Bluetooth: hci1: command 0x1003 tx timeout [ 372.040781][T16276] lo speed is unknown, defaulting to 1000 [ 372.046982][T16276] lo speed is unknown, defaulting to 1000 [ 372.413676][T16285] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2578'. [ 372.478883][T13159] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 372.724852][T16299] SELinux: failed to load policy [ 372.812474][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2582'. [ 372.834541][T16304] bond9: entered promiscuous mode [ 372.840344][T16304] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.047229][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2589'. [ 373.125445][T16326] SELinux: failed to load policy [ 373.228538][T16330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2593'. [ 373.266623][T16336] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2596'. [ 373.280970][T16336] gretap0: entered promiscuous mode [ 373.308470][T16337] loop5: detected capacity change from 0 to 512 [ 373.323295][T16337] EXT4-fs: Ignoring removed nobh option [ 373.337685][T16337] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 373.348433][T16337] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 373.361167][T16337] EXT4-fs (loop5): group descriptors corrupted! [ 373.525738][T16347] netlink: 'syz.0.2599': attribute type 10 has an invalid length. [ 373.540352][T16347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.552565][T16347] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 373.566511][T16347] netlink: 'syz.0.2599': attribute type 10 has an invalid length. [ 373.575597][T16347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2599'. [ 373.614956][T16347] batadv0: entered promiscuous mode [ 373.645754][T16347] batadv0: entered allmulticast mode [ 373.672621][T16347] bond0: (slave batadv0): Releasing backup interface [ 373.693480][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2600'. [ 373.727061][T16347] bridge0: port 3(batadv0) entered blocking state [ 373.748246][T16347] bridge0: port 3(batadv0) entered disabled state [ 373.798969][T12492] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 373.808750][T12492] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 374.369232][T16358] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2602'. [ 374.426716][T16360] SELinux: failed to load policy [ 374.656734][T16362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.667444][T16362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.699225][T16362] loop5: detected capacity change from 0 to 1024 [ 374.718302][T16362] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 375.422470][T16403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2613'. [ 375.487195][T16413] loop6: detected capacity change from 0 to 128 [ 375.489959][T16408] SELinux: failed to load policy [ 375.503560][T16413] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 375.518827][T16413] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.551099][ T3963] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 375.648545][T16429] loop5: detected capacity change from 0 to 4096 [ 375.673066][T16429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.759814][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.809509][T16455] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2622'. [ 375.872931][T16455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2622'. [ 375.893969][T16455] lo speed is unknown, defaulting to 1000 [ 375.917521][T16455] lo speed is unknown, defaulting to 1000 [ 375.951397][T16461] xt_hashlimit: size too large, truncated to 1048576 [ 376.131611][T16466] loop5: detected capacity change from 0 to 128 [ 376.344433][T16466] ipvlan1: left promiscuous mode [ 376.545644][T16500] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2625'. [ 376.799713][T16511] FAULT_INJECTION: forcing a failure. [ 376.799713][T16511] name failslab, interval 1, probability 0, space 0, times 0 [ 376.813457][T16511] CPU: 1 UID: 0 PID: 16511 Comm: syz.0.2627 Tainted: G W syzkaller #0 PREEMPT(full) [ 376.813579][T16511] Tainted: [W]=WARN [ 376.813584][T16511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 376.813594][T16511] Call Trace: [ 376.813600][T16511] [ 376.813608][T16511] __dump_stack+0x1d/0x30 [ 376.813632][T16511] dump_stack_lvl+0x95/0xd0 [ 376.813691][T16511] dump_stack+0x15/0x1b [ 376.813707][T16511] should_fail_ex+0x263/0x280 [ 376.813727][T16511] should_failslab+0x8c/0xb0 [ 376.813815][T16511] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 376.813833][T16511] ? __alloc_skb+0x2d6/0x690 [ 376.813859][T16511] __alloc_skb+0x2d6/0x690 [ 376.813891][T16511] ? __alloc_skb+0x200/0x690 [ 376.813931][T16511] netlink_alloc_large_skb+0xbf/0xf0 [ 376.813958][T16511] netlink_sendmsg+0x40c/0x6f0 [ 376.813986][T16511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.814055][T16511] ____sys_sendmsg+0x563/0x5b0 [ 376.814087][T16511] ___sys_sendmsg+0x195/0x1e0 [ 376.814195][T16511] __x64_sys_sendmsg+0xd4/0x160 [ 376.814224][T16511] x64_sys_call+0x194c/0x3020 [ 376.814245][T16511] do_syscall_64+0x12c/0x370 [ 376.814264][T16511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.814325][T16511] RIP: 0033:0x7fd5c9f7c799 [ 376.814373][T16511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.814390][T16511] RSP: 002b:00007fd5c89d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.814433][T16511] RAX: ffffffffffffffda RBX: 00007fd5ca1f5fa0 RCX: 00007fd5c9f7c799 [ 376.814447][T16511] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 376.814461][T16511] RBP: 00007fd5c89d7090 R08: 0000000000000000 R09: 0000000000000000 [ 376.814474][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.814486][T16511] R13: 00007fd5ca1f6038 R14: 00007fd5ca1f5fa0 R15: 00007ffd38829aa8 [ 376.814505][T16511] [ 377.118402][T16515] tmpfs: Bad value for 'mpol' [ 377.681668][T16538] netlink: 'syz.6.2635': attribute type 30 has an invalid length. [ 377.731878][T16538] bond10: option arp_missed_max: invalid value (0) [ 377.740272][T16538] bond10: option arp_missed_max: allowed values 1 - 255 [ 377.748318][T16538] bond10 (unregistering): Released all slaves [ 377.910663][T16549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16549 comm=syz.0.2639 [ 378.103977][T16536] siw: device registration error -23 [ 378.804986][T16572] __nla_validate_parse: 3 callbacks suppressed [ 378.805005][T16572] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2647'. [ 378.867036][T16575] loop6: detected capacity change from 0 to 512 [ 379.860222][T16575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.928829][T16575] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.964139][T16586] netlink: 'syz.5.2650': attribute type 1 has an invalid length. [ 380.007047][T16586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 380.070843][T16591] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16591 comm=syz.5.2650 [ 380.119257][T16575] bond0: (slave vlan3): Opening slave failed [ 380.398456][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2653'. [ 380.432324][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.485655][T16600] loop5: detected capacity change from 0 to 512 [ 380.500183][T16600] EXT4-fs: Ignoring removed nobh option [ 380.507030][T16600] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 380.517379][T16600] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 380.527756][T16600] EXT4-fs (loop5): group descriptors corrupted! [ 380.840756][T16604] loop6: detected capacity change from 0 to 128 [ 380.871091][T16604] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.884180][T16604] ext4 filesystem being mounted at /487/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.914291][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2658'. [ 382.024555][T16639] netlink: 'syz.2.2664': attribute type 1 has an invalid length. [ 382.052928][ T3963] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 382.076651][T16639] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 382.093279][T16639] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 382.107279][T16639] bond7: (slave ip6gre2): making interface the new active one [ 382.123016][T16639] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 382.134319][T16650] FAULT_INJECTION: forcing a failure. [ 382.134319][T16650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.148097][T16650] CPU: 1 UID: 0 PID: 16650 Comm: syz.6.2667 Tainted: G W syzkaller #0 PREEMPT(full) [ 382.148125][T16650] Tainted: [W]=WARN [ 382.148131][T16650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.148141][T16650] Call Trace: [ 382.148147][T16650] [ 382.148154][T16650] __dump_stack+0x1d/0x30 [ 382.148176][T16650] dump_stack_lvl+0x95/0xd0 [ 382.148261][T16650] dump_stack+0x15/0x1b [ 382.148279][T16650] should_fail_ex+0x263/0x280 [ 382.148300][T16650] should_fail+0xb/0x20 [ 382.148316][T16650] should_fail_usercopy+0x1a/0x20 [ 382.148464][T16650] _copy_from_user+0x1c/0xb0 [ 382.148609][T16650] ___sys_sendmsg+0xc1/0x1e0 [ 382.148718][T16650] __x64_sys_sendmsg+0xd4/0x160 [ 382.148745][T16650] x64_sys_call+0x194c/0x3020 [ 382.148774][T16650] do_syscall_64+0x12c/0x370 [ 382.148795][T16650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.148814][T16650] RIP: 0033:0x7f73473ac799 [ 382.148827][T16650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.148845][T16650] RSP: 002b:00007f7345dff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.148930][T16650] RAX: ffffffffffffffda RBX: 00007f7347625fa0 RCX: 00007f73473ac799 [ 382.148945][T16650] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 382.148956][T16650] RBP: 00007f7345dff090 R08: 0000000000000000 R09: 0000000000000000 [ 382.148968][T16650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.148978][T16650] R13: 00007f7347626038 R14: 00007f7347625fa0 R15: 00007ffc4a5f9848 [ 382.149010][T16650] [ 382.152946][T16643] bridge0: port 1(macsec2) entered blocking state [ 382.328918][T16643] bridge0: port 1(macsec2) entered disabled state [ 382.340839][T16643] macsec2: entered allmulticast mode [ 382.433029][T16643] bridge0: entered allmulticast mode [ 382.469150][T16710] loop6: detected capacity change from 0 to 512 [ 382.486482][T16643] macsec2: left allmulticast mode [ 382.505633][T16710] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 382.525682][T16643] bridge0: left allmulticast mode [ 382.557255][T12517] Bluetooth: hci0: Frame reassembly failed (-84) [ 382.607536][T16710] EXT4-fs (loop6): failed to open journal device unknown-block(0,127) -6 [ 382.678785][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2668'. [ 382.747125][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2668'. [ 382.799874][T16772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2671'. [ 382.850303][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 382.850443][ T28] audit: type=1326 audit(2000000196.290:7766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 382.884789][ T28] audit: type=1326 audit(2000000196.300:7767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 382.948967][ T28] audit: type=1326 audit(2000000196.300:7768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 382.975084][T16783] siw: device registration error -23 [ 383.139125][ T28] audit: type=1326 audit(2000000196.300:7769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.293004][T16787] loop6: detected capacity change from 0 to 128 [ 383.636201][T16790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.651530][ T28] audit: type=1326 audit(2000000196.320:7770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.676024][ T28] audit: type=1326 audit(2000000196.320:7771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.701231][ T28] audit: type=1326 audit(2000000196.320:7772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.725910][ T28] audit: type=1326 audit(2000000196.320:7773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.758670][ T28] audit: type=1326 audit(2000000196.320:7774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.810775][T16790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.835992][ T28] audit: type=1326 audit(2000000196.320:7775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16773 comm="syz.9.2673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 383.925400][T16816] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2683'. [ 383.935744][T16790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.995397][T16790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.074244][T16700] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.098018][T16700] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.117190][T16833] loop6: detected capacity change from 0 to 4096 [ 384.132971][T16700] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.150067][T16833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.151359][ T8402] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.227635][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.250814][T16844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2687'. [ 384.522015][T16877] SELinux: failed to load policy [ 384.558683][T13159] Bluetooth: hci0: command 0x1003 tx timeout [ 384.562476][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 384.607544][T16906] loop6: detected capacity change from 0 to 512 [ 384.670929][T16906] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 384.723879][T16911] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2694'. [ 384.759104][T16906] EXT4-fs (loop6): 1 truncate cleaned up [ 384.765500][T16906] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.784404][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2695'. [ 384.860125][T16917] loop5: detected capacity change from 0 to 128 [ 384.913979][T16920] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2696'. [ 385.451605][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.504047][T16937] SELinux: failed to load policy [ 385.598475][T16947] raw_sendmsg: syz.0.2701 forgot to set AF_INET. Fix it! [ 385.740532][T16966] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2705'. [ 385.856031][T16981] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2706'. [ 385.871096][T16981] bond13: entered promiscuous mode [ 385.876529][T16981] 8021q: adding VLAN 0 to HW filter on device bond13 [ 386.369981][T17061] batman_adv: batadv0: Adding interface: dummy0 [ 386.377039][T17061] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.403655][T17061] batman_adv: batadv0: Interface activated: dummy0 [ 386.449026][T17047] batadv0: mtu less than device minimum [ 386.463444][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.481074][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.498534][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.514092][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.530778][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.548733][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.565640][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.582593][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.596244][T17047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 386.758886][T17096] SELinux: failed to load policy [ 386.832351][T17108] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2716'. [ 386.995048][T17115] loop6: detected capacity change from 0 to 512 [ 387.023685][T17115] EXT4-fs: dax option not supported [ 387.344179][T17141] geneve2: entered promiscuous mode [ 387.386237][T17143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'. [ 387.402188][T17143] bond8: entered promiscuous mode [ 387.407902][T17143] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.457720][ T129] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.466769][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.475594][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.495886][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.655514][T17164] bond10: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 387.719397][T17164] bond10 (unregistering): Released all slaves [ 387.777328][T17202] loop5: detected capacity change from 0 to 164 [ 387.786170][T17202] iso9660: Unknown parameter 'ÿÿ0x0000000000000000' [ 387.895054][T17211] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2732'. [ 387.910520][T17211] bond3: entered promiscuous mode [ 387.915985][T17211] 8021q: adding VLAN 0 to HW filter on device bond3 [ 387.934441][T17211] vlan2: entered promiscuous mode [ 387.941167][T17211] bond3: (slave vlan2): Enslaving as an active interface with an up link [ 388.191256][ T28] kauditd_printk_skb: 1044 callbacks suppressed [ 388.191268][ T28] audit: type=1400 audit(2000000201.630:8820): avc: denied { bind } for pid=17219 comm="syz.9.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 388.282799][T17227] geneve2: entered promiscuous mode [ 388.316209][ T28] audit: type=1326 audit(2000000201.730:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.343766][ T28] audit: type=1326 audit(2000000201.730:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.372337][T17230] dummy0: left promiscuous mode [ 388.388178][T17230] batman_adv: batadv0: Adding interface: dummy0 [ 388.454008][T17230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.496921][T17232] loop6: detected capacity change from 0 to 512 [ 388.511221][ T28] audit: type=1326 audit(2000000201.730:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.724211][T17230] batman_adv: batadv0: Interface activated: dummy0 [ 388.731419][ T28] audit: type=1326 audit(2000000201.730:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.886517][ T28] audit: type=1326 audit(2000000201.730:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.915243][ T28] audit: type=1326 audit(2000000201.730:8826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.940602][ T28] audit: type=1326 audit(2000000201.740:8827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 388.988249][ T28] audit: type=1326 audit(2000000201.740:8828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 389.023442][T12489] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.032325][T12489] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.044677][T17232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.060090][T17232] ext4 filesystem being mounted at /507/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.074560][ T28] audit: type=1326 audit(2000000201.740:8829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17216 comm="syz.5.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 389.116000][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.137837][T12489] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.156623][T12489] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.509680][T17264] loop5: detected capacity change from 0 to 128 [ 389.573011][T17281] __nla_validate_parse: 1 callbacks suppressed [ 389.573107][T17281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2742'. [ 389.669206][T17309] netlink: 'syz.6.2743': attribute type 4 has an invalid length. [ 389.691419][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 389.696405][T17309] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2743'. [ 389.730578][T17281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.749843][T17281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.761061][T17281] hsr0: left promiscuous mode [ 389.770255][T17319] loop6: detected capacity change from 0 to 512 [ 389.802260][T17319] EXT4-fs: Ignoring removed nobh option [ 389.827241][T17322] lo speed is unknown, defaulting to 1000 [ 389.834258][T17322] lo speed is unknown, defaulting to 1000 [ 389.887916][T17319] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 390.027145][T17319] EXT4-fs (loop6): 1 truncate cleaned up [ 390.033504][T17319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.165250][T17340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2751'. [ 390.189974][T17342] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2750'. [ 390.200150][T17319] lo speed is unknown, defaulting to 1000 [ 390.206325][T17319] lo speed is unknown, defaulting to 1000 [ 390.264915][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2743'. [ 390.281546][T17347] lo speed is unknown, defaulting to 1000 [ 390.290526][T17347] lo speed is unknown, defaulting to 1000 [ 390.318821][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 390.484315][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2754'. [ 390.504397][T17359] bond4: entered promiscuous mode [ 390.509976][T17359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.568693][T17363] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 390.575605][T17363] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 390.588000][T17363] vhci_hcd vhci_hcd.0: Device attached [ 390.617665][T17364] vhci_hcd: connection closed [ 390.623111][T12523] vhci_hcd vhci_hcd.5: stop threads [ 390.654814][T12523] vhci_hcd vhci_hcd.5: release socket [ 390.662644][T12523] vhci_hcd vhci_hcd.5: disconnect device [ 391.013662][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.255837][T17381] SELinux: failed to load policy [ 391.806144][T17408] 9p: Could not find request transport: fd0x0000000000000006 [ 391.873790][T17401] loop5: detected capacity change from 0 to 512 [ 391.890249][T17401] msdos: Bad value for 'gid' [ 391.898527][T17401] msdos: Bad value for 'gid' [ 391.940108][T17419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17419 comm=syz.2.2774 [ 391.983018][T17419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2568 sclass=netlink_tcpdiag_socket pid=17419 comm=syz.2.2774 [ 391.996417][T17419] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=17419 comm=syz.2.2774 [ 392.158311][T17401] loop5: detected capacity change from 0 to 512 [ 392.431121][T17401] EXT4-fs (loop5): 1 orphan inode deleted [ 392.454235][T17401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.495193][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.515149][T17442] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2781'. [ 392.572351][T17423] loop6: detected capacity change from 0 to 32768 [ 392.601345][T17449] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2780'. [ 392.629105][T17423] loop6: p1 p2 p3 < p5 p6 > [ 392.634826][T17423] loop6: p2 size 16775168 extends beyond EOD, truncated [ 392.643334][T17423] loop6: p5 start 4294970168 is beyond EOD, truncated [ 392.673117][T17456] netlink: 'syz.5.2784': attribute type 30 has an invalid length. [ 392.742179][ T7045] udevd[7045]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 392.753610][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 392.769915][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 392.771422][ T7036] udevd[7036]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 392.801073][T17456] bond5: option arp_missed_max: invalid value (0) [ 392.808713][T17456] bond5: option arp_missed_max: allowed values 1 - 255 [ 392.821903][T17456] bond5 (unregistering): Released all slaves [ 392.983870][T17471] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2791'. [ 393.007301][T17471] bond10: entered promiscuous mode [ 393.013316][T17471] 8021q: adding VLAN 0 to HW filter on device bond10 [ 393.062458][T17476] bond9: entered promiscuous mode [ 393.068345][T17476] 8021q: adding VLAN 0 to HW filter on device bond9 [ 393.275366][T17489] loop6: detected capacity change from 0 to 512 [ 393.698252][T17493] loop5: detected capacity change from 0 to 512 [ 393.742814][T17493] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.763838][T17493] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.852163][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.281912][T17509] 9p: Could not find request transport: fd0x0000000000000006 [ 394.393936][T12494] Bluetooth: hci0: Frame reassembly failed (-84) [ 394.481984][T17514] SELinux: failed to load policy [ 394.560633][T17520] syzkaller0: entered promiscuous mode [ 394.571951][T17520] syzkaller0: entered allmulticast mode [ 395.263110][T17532] netlink: 'syz.9.2808': attribute type 30 has an invalid length. [ 395.277222][T17532] bond14: option arp_missed_max: invalid value (0) [ 395.284331][T17532] bond14: option arp_missed_max: allowed values 1 - 255 [ 395.292722][T17532] bond14 (unregistering): Released all slaves [ 395.545397][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 395.545410][ T28] audit: type=1400 audit(2000000208.980:8852): avc: denied { read } for pid=17539 comm="syz.5.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 396.013569][T17552] SELinux: failed to load policy [ 396.337539][T17564] __nla_validate_parse: 1 callbacks suppressed [ 396.337555][T17564] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2819'. [ 396.410477][ T3834] Bluetooth: hci0: command 0x1003 tx timeout [ 396.417050][T13159] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 396.426611][T17567] siw: device registration error -23 [ 396.434441][T17567] net_ratelimit: 30 callbacks suppressed [ 396.434516][T17567] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 396.722108][T17574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2822'. [ 397.123699][ T28] audit: type=1400 audit(2000000210.560:8853): avc: denied { mount } for pid=17614 comm="syz.0.2834" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 397.128858][T17615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 397.178945][ T28] audit: type=1400 audit(2000000210.610:8854): avc: denied { unmount } for pid=14071 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 397.366301][T17659] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2836'. [ 397.686556][T17722] netlink: 666 bytes leftover after parsing attributes in process `syz.9.2839'. [ 397.781695][T17737] loop6: detected capacity change from 0 to 2048 [ 397.800639][T17737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.813568][T17737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.834002][T17744] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2840'. [ 397.961695][T17753] loop6: detected capacity change from 0 to 512 [ 397.968508][T17753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.977360][T17753] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.616642][ T28] audit: type=1326 audit(2000000212.050:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.5.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7fc00000 [ 399.241155][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.259361][ T28] audit: type=1326 audit(2000000212.700:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17782 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 399.291139][T17793] FAULT_INJECTION: forcing a failure. [ 399.291139][T17793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.311974][ T28] audit: type=1326 audit(2000000212.700:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17782 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 399.319163][T17793] CPU: 0 UID: 0 PID: 17793 Comm: syz.6.2854 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.319194][T17793] Tainted: [W]=WARN [ 399.319201][T17793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.319212][T17793] Call Trace: [ 399.319220][T17793] [ 399.319229][T17793] __dump_stack+0x1d/0x30 [ 399.319333][T17793] dump_stack_lvl+0x95/0xd0 [ 399.319413][T17793] dump_stack+0x15/0x1b [ 399.319432][T17793] should_fail_ex+0x263/0x280 [ 399.319456][T17793] should_fail+0xb/0x20 [ 399.319549][T17793] should_fail_usercopy+0x1a/0x20 [ 399.319581][T17793] strncpy_from_user+0x27/0x250 [ 399.319598][T17793] ? __kmalloc_cache_noprof+0x18a/0x410 [ 399.319621][T17793] __se_sys_memfd_create+0x20f/0x3b0 [ 399.319657][T17793] __x64_sys_memfd_create+0x31/0x40 [ 399.319751][T17793] x64_sys_call+0x1f22/0x3020 [ 399.319773][T17793] do_syscall_64+0x12c/0x370 [ 399.319795][T17793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.319815][T17793] RIP: 0033:0x7f73473ac799 [ 399.319880][T17793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.319895][T17793] RSP: 002b:00007f7345dfee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 399.319946][T17793] RAX: ffffffffffffffda RBX: 00000000000004bf RCX: 00007f73473ac799 [ 399.319959][T17793] RDX: 00007f7345dfeee0 RSI: 0000000000000000 RDI: 00007f7347442e79 [ 399.319971][T17793] RBP: 0000200000000c00 R08: 00000000ffffffff R09: 0000000000000000 [ 399.320046][T17793] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 399.320058][T17793] R13: 00007f7345dfeee0 R14: 00007f7345dfeea0 R15: 0000200000000500 [ 399.320081][T17793] [ 399.481594][T17783] batman_adv: batadv0: Adding interface: dummy0 [ 399.537883][T17783] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.583845][ T28] audit: type=1326 audit(2000000212.700:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17782 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 399.606443][T17783] batman_adv: batadv0: Interface activated: dummy0 [ 399.634605][ T28] audit: type=1326 audit(2000000212.700:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17782 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 399.659716][T17795] batadv0: mtu less than device minimum [ 399.690809][ T28] audit: type=1326 audit(2000000212.700:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17782 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 399.699399][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.721949][ T28] audit: type=1326 audit(2000000212.700:8861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17782 comm="syz.0.2853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 399.726260][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.760578][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.772227][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.783360][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.794470][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.805522][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.816835][T17795] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.883354][T17807] loop6: detected capacity change from 0 to 128 [ 399.894459][T17814] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 400.219465][T17858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2861'. [ 400.245287][T17858] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2861'. [ 400.256709][T17858] hsr_slave_0: left promiscuous mode [ 400.263026][T17858] hsr_slave_1: left promiscuous mode [ 400.273164][T17859] loop5: detected capacity change from 0 to 164 [ 400.284348][T17859] iso9660: Unknown parameter 'å' [ 400.970498][T17877] loop6: detected capacity change from 0 to 512 [ 402.648811][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2862'. [ 403.999726][T17877] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 403.999860][T17877] EXT4-fs: failed to create workqueue [ 404.017716][T17877] EXT4-fs (loop6): mount failed [ 404.730582][T17928] lo speed is unknown, defaulting to 1000 [ 404.778886][T17928] lo speed is unknown, defaulting to 1000 [ 406.446710][T17981] lo speed is unknown, defaulting to 1000 [ 406.454179][T17981] lo speed is unknown, defaulting to 1000 [ 406.600300][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 406.600313][ T28] audit: type=1326 audit(2000000220.040:8885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17980 comm="syz.0.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x0 [ 407.491861][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2888'. [ 407.506067][T17996] team1: entered promiscuous mode [ 407.515811][T17996] team1: entered allmulticast mode [ 407.730049][T17996] 8021q: adding VLAN 0 to HW filter on device team1 [ 408.789260][T18017] syz.6.2894 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 408.860725][T18018] lo speed is unknown, defaulting to 1000 [ 409.781620][T18018] lo speed is unknown, defaulting to 1000 [ 409.787610][T18018] lo speed is unknown, defaulting to 1000 [ 409.821786][T18018] infiniband syU×: set down [ 409.978750][T18018] infiniband syU×: added lo [ 410.023624][T18022] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2894'. [ 410.035799][ T28] audit: type=1326 audit(2000000223.470:8886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 410.076157][T18018] RDS/IB: syU×: added [ 410.093150][T18024] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2894'. [ 410.108628][ T28] audit: type=1326 audit(2000000223.470:8887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 410.137678][T18018] smc: adding ib device syU× with port count 1 [ 410.152264][T18018] smc: ib device syU× port 1 has no pnetid [ 410.165704][ T3391] lo speed is unknown, defaulting to 1000 [ 410.175339][T18018] lo speed is unknown, defaulting to 1000 [ 410.185348][ T28] audit: type=1326 audit(2000000223.470:8888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 410.366417][ T28] audit: type=1326 audit(2000000223.470:8889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 410.772447][ T9] lo speed is unknown, defaulting to 1000 [ 410.991672][ T28] audit: type=1326 audit(2000000223.470:8890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 411.016044][ T28] audit: type=1326 audit(2000000223.470:8891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 411.040047][ T28] audit: type=1326 audit(2000000223.470:8892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 411.131362][T18018] lo speed is unknown, defaulting to 1000 [ 411.198972][T18018] lo speed is unknown, defaulting to 1000 [ 412.192006][T18018] lo speed is unknown, defaulting to 1000 [ 412.512573][ T28] audit: type=1326 audit(2000000223.470:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.537311][ T28] audit: type=1326 audit(2000000223.470:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.595899][ T28] audit: type=1326 audit(2000000223.470:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.714817][T18053] netlink: 'syz.0.2904': attribute type 12 has an invalid length. [ 412.718807][ T28] audit: type=1326 audit(2000000223.470:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.731766][T18018] lo speed is unknown, defaulting to 1000 [ 412.777585][ T28] audit: type=1326 audit(2000000223.470:8897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.807946][T18018] lo speed is unknown, defaulting to 1000 [ 412.844163][T18018] lo speed is unknown, defaulting to 1000 [ 412.918642][ T28] audit: type=1326 audit(2000000223.470:8898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.952564][ T28] audit: type=1326 audit(2000000223.470:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 412.979647][T18041] siw: device registration error -23 [ 413.069906][ T28] audit: type=1326 audit(2000000223.470:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 413.095556][T18060] siw: device registration error -23 [ 413.102956][T18060] net_ratelimit: 11 callbacks suppressed [ 413.103036][T18060] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 413.180412][ T28] audit: type=1326 audit(2000000223.500:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 413.325716][ T28] audit: type=1326 audit(2000000223.500:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18020 comm="syz.9.2895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88bb70c799 code=0x7ffc0000 [ 413.356607][T18064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2907'. [ 413.413782][T18064] batman_adv: batadv0: Interface deactivated: dummy0 [ 413.584953][T18069] netlink: 'syz.5.2909': attribute type 16 has an invalid length. [ 413.593162][T18069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2909'. [ 413.759259][T18073] loop5: detected capacity change from 0 to 1024 [ 413.776557][T18073] EXT4-fs: Ignoring removed bh option [ 413.819799][T18073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.845870][T18073] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.897863][T18078] siw: device registration error -23 [ 413.905724][T18078] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 413.984600][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 414.372634][T18088] tipc: Enabling of bearer rejected, failed to enable media [ 414.404814][T18080] loop5: detected capacity change from 0 to 1024 [ 414.424432][T18080] EXT4-fs: Ignoring removed bh option [ 414.470300][T18080] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.506207][T18097] loop6: detected capacity change from 0 to 512 [ 414.595824][T18100] Q±6ã`Ò˜: renamed from lo (while UP) [ 414.637025][T18097] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2579 sclass=netlink_route_socket pid=18097 comm=syz.6.2919 [ 414.783049][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.184405][T18117] @0Ù: renamed from bond_slave_1 (while UP) [ 415.282179][T18117] block device autoloading is deprecated and will be removed. [ 416.480119][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2936'. [ 416.496369][T18159] bond1: entered promiscuous mode [ 416.503411][T18159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.531218][T18159] vlan2: entered promiscuous mode [ 416.536651][T18159] bond0: entered promiscuous mode [ 416.541863][T18159] bond_slave_0: entered promiscuous mode [ 416.547810][T18159] @0Ù: entered promiscuous mode [ 416.554035][T18159] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 416.600078][T18170] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2937'. [ 416.609905][T18170] batman_adv: batadv0: Interface deactivated: dummy0 [ 416.634375][ T3977] Bluetooth: hci1: Frame reassembly failed (-84) [ 417.331891][T13159] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 417.562706][T18204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2941'. [ 417.678294][T18231] loop5: detected capacity change from 0 to 512 [ 417.686026][T18231] EXT4-fs: Ignoring removed nobh option [ 417.765149][T18231] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 417.807685][T18231] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 417.949611][T18231] EXT4-fs (loop5): group descriptors corrupted! [ 418.417817][ T28] kauditd_printk_skb: 560 callbacks suppressed [ 418.417831][ T28] audit: type=1400 audit(2000000231.850:9463): avc: denied { write } for pid=18254 comm="syz.5.2947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 418.692879][ T3834] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 418.774900][T13159] Bluetooth: hci1: command 0x1003 tx timeout [ 418.911928][T18274] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2953'. [ 419.031182][T18281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2955'. [ 419.065223][T18281] loop5: detected capacity change from 0 to 512 [ 419.074436][T18281] EXT4-fs: Ignoring removed nobh option [ 419.091799][T18281] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 419.115065][T18281] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 419.131261][T18281] EXT4-fs (loop5): group descriptors corrupted! [ 419.202406][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 419.256959][ T28] audit: type=1326 audit(2000000232.690:9464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.292397][ T28] audit: type=1326 audit(2000000232.690:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.328717][ T28] audit: type=1326 audit(2000000232.690:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.368638][ T28] audit: type=1326 audit(2000000232.690:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.398612][ T28] audit: type=1326 audit(2000000232.690:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.438062][T18297] loop0: detected capacity change from 0 to 512 [ 419.446224][ T28] audit: type=1326 audit(2000000232.690:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.488712][ T28] audit: type=1326 audit(2000000232.690:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.520158][T18298] syzkaller0: entered promiscuous mode [ 419.527273][T18298] syzkaller0: entered allmulticast mode [ 419.535921][ T28] audit: type=1326 audit(2000000232.690:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.585844][ T28] audit: type=1326 audit(2000000232.690:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.2959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f509deec799 code=0x7ffc0000 [ 419.765377][T18305] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 419.781950][T18305] loop0: detected capacity change from 0 to 512 [ 420.250903][T18314] lo speed is unknown, defaulting to 1000 [ 420.257429][T18314] lo speed is unknown, defaulting to 1000 [ 420.269024][T18314] lo speed is unknown, defaulting to 1000 [ 420.837530][T18325] xt_TCPMSS: Only works on TCP SYN packets [ 421.205583][T18338] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2972'. [ 421.278701][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 421.513211][T18349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2978'. [ 421.542025][T18349] bond5: entered promiscuous mode [ 421.548001][T18349] 8021q: adding VLAN 0 to HW filter on device bond5 [ 421.664596][T18358] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2979'. [ 421.737847][T18358] loop6: detected capacity change from 0 to 512 [ 421.744656][T18358] EXT4-fs: Ignoring removed nobh option [ 421.753114][T18358] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 421.763500][T18358] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 421.774318][T18358] EXT4-fs (loop6): group descriptors corrupted! [ 422.074674][T18377] lo speed is unknown, defaulting to 1000 [ 422.081892][T18377] lo speed is unknown, defaulting to 1000 [ 422.089254][T18377] lo speed is unknown, defaulting to 1000 [ 422.186616][T18377] chnl_net:caif_netlink_parms(): no params data found [ 422.235250][T18377] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.243127][T18377] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.251261][T18377] bridge_slave_0: entered allmulticast mode [ 422.258356][T18377] bridge_slave_0: entered promiscuous mode [ 422.267187][T18377] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.274826][T18377] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.282364][T18377] bridge_slave_1: entered allmulticast mode [ 422.289413][T18377] bridge_slave_1: entered promiscuous mode [ 422.310367][T18377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.321420][T18377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.341348][T18377] team0: Port device team_slave_0 added [ 422.348164][T18377] team0: Port device team_slave_1 added [ 422.364222][T18377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.371830][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.398468][T18377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.428631][T18377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.526902][T18377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.554194][T18377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.584460][T18377] hsr_slave_0: entered promiscuous mode [ 422.595591][T18403] FAULT_INJECTION: forcing a failure. [ 422.595591][T18403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.595959][T18377] hsr_slave_1: entered promiscuous mode [ 422.609413][T18403] CPU: 0 UID: 0 PID: 18403 Comm: syz.5.2992 Tainted: G W syzkaller #0 PREEMPT(full) [ 422.609448][T18403] Tainted: [W]=WARN [ 422.609454][T18403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.609466][T18403] Call Trace: [ 422.609492][T18403] [ 422.609500][T18403] __dump_stack+0x1d/0x30 [ 422.609524][T18403] dump_stack_lvl+0x95/0xd0 [ 422.609553][T18403] dump_stack+0x15/0x1b [ 422.609604][T18403] should_fail_ex+0x263/0x280 [ 422.609627][T18403] should_fail+0xb/0x20 [ 422.609693][T18403] should_fail_usercopy+0x1a/0x20 [ 422.609716][T18403] _copy_from_user+0x1c/0xb0 [ 422.609742][T18403] ___sys_sendmsg+0xc1/0x1e0 [ 422.609882][T18403] __x64_sys_sendmsg+0xd4/0x160 [ 422.609911][T18403] x64_sys_call+0x194c/0x3020 [ 422.610044][T18403] do_syscall_64+0x12c/0x370 [ 422.610066][T18403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.610086][T18403] RIP: 0033:0x7f509deec799 [ 422.610100][T18403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.610120][T18403] RSP: 002b:00007f509c93f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.610139][T18403] RAX: ffffffffffffffda RBX: 00007f509e165fa0 RCX: 00007f509deec799 [ 422.610152][T18403] RDX: 0000000004000080 RSI: 00002000000001c0 RDI: 0000000000000003 [ 422.610165][T18403] RBP: 00007f509c93f090 R08: 0000000000000000 R09: 0000000000000000 [ 422.610177][T18403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.610223][T18403] R13: 00007f509e166038 R14: 00007f509e165fa0 R15: 00007ffc456109d8 [ 422.610241][T18403] [ 422.782794][T18407] loop0: detected capacity change from 0 to 512 [ 422.800281][T18377] debugfs: 'hsr0' already exists in 'hsr' [ 422.818394][T18377] Cannot create hsr debugfs directory [ 422.831049][T18407] EXT4-fs (loop0): 1 orphan inode deleted [ 422.840766][T18407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.854950][T18407] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.870384][T12503] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:18: Failed to release dquot type 1 [ 422.934489][T18377] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.995432][T18417] loop5: detected capacity change from 0 to 1764 [ 423.002506][T18377] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.040136][T18377] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.080639][T18421] SELinux: failed to load policy [ 423.090364][T18377] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.180771][T18377] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.200895][T18377] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.213279][T18377] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.231611][T18377] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.290768][T18377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.302522][T18377] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.320889][T14071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.331036][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.338367][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.347754][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.354916][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.393410][T18377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.405667][T18377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.449807][ T28] kauditd_printk_skb: 977 callbacks suppressed [ 423.449821][ T28] audit: type=1326 audit(2000000236.880:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18399 comm="syz.6.2991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f73473ac799 code=0x7ffc0000 [ 423.507924][T18468] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3006'. [ 423.606685][T18377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.729550][ T28] audit: type=1326 audit(2000000237.170:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.786562][ T28] audit: type=1326 audit(2000000237.190:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.810740][ T28] audit: type=1326 audit(2000000237.190:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.835099][ T28] audit: type=1326 audit(2000000237.190:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.867279][ T28] audit: type=1326 audit(2000000237.190:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.899381][ T28] audit: type=1326 audit(2000000237.190:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.930990][ T28] audit: type=1326 audit(2000000237.190:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.931060][T18490] loop6: detected capacity change from 0 to 8192 [ 423.951485][T18377] veth0_vlan: entered promiscuous mode [ 423.975512][ T28] audit: type=1326 audit(2000000237.190:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd5c9f7c799 code=0x7ffc0000 [ 423.991273][ T3303] loop6: p1 < > p2 p4 < p5 > [ 424.001333][ T28] audit: type=1326 audit(2000000237.190:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18479 comm="syz.0.3009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd5c9f7c502 code=0x7ffc0000 [ 424.015568][ T3303] loop6: partition table partially beyond EOD, [ 424.067483][T18377] veth1_vlan: entered promiscuous mode [ 424.083535][ T3303] truncated [ 424.122919][ T5341] Process accounting resumed [ 424.140935][T18377] veth0_macvtap: entered promiscuous mode [ 424.149537][ T3303] loop6: p1 start 134217728 is beyond EOD, truncated [ 424.169319][ T3303] loop6: p2 size 591360 extends beyond EOD, truncated [ 424.177061][T18377] veth1_macvtap: entered promiscuous mode [ 424.197815][ T3303] loop6: p5 size 591360 extends beyond EOD, truncated [ 424.206781][T18377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.220256][T18377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.304941][T18490] loop6: p1 < > p2 p4 < p5 > [ 424.312260][ T129] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.324663][ T129] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.336332][T18490] loop6: partition table partially beyond EOD, truncated [ 424.352767][ T129] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.369980][ T129] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.390005][T18490] loop6: p1 start 134217728 is beyond EOD, truncated [ 424.405647][T18490] loop6: p2 size 591360 extends beyond EOD, truncated [ 424.443713][T18490] loop6: p5 size 591360 extends beyond EOD, truncated [ 424.658027][T18555] siw: device registration error -23 [ 424.672603][T18555] loop5: detected capacity change from 0 to 512 [ 424.952161][T18553] loop0: detected capacity change from 0 to 2048 [ 425.035553][T18553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.123887][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 425.138531][ T3881] udevd[3881]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 425.155519][ T7036] udevd[7036]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 425.350679][T18583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.413572][T18595] loop5: detected capacity change from 0 to 512 [ 425.439271][T18595] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 425.472890][T14071] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.677801][T18613] loop0: detected capacity change from 0 to 128 [ 426.266329][T18663] dvmrp1: entered allmulticast mode [ 426.365144][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3032'. [ 426.380595][T18665] bond6: entered promiscuous mode [ 426.385911][T18665] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.427200][T18670] netlink: 'syz.5.3034': attribute type 11 has an invalid length. [ 426.526703][T18674] loop9: detected capacity change from 0 to 256 [ 426.586657][T18680] loop9: detected capacity change from 0 to 512 [ 426.598760][T18680] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 426.627097][T18680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 426.656055][T18680] System zones: 1-12 [ 426.673351][T18680] EXT4-fs (loop9): 1 truncate cleaned up [ 426.680379][T18680] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.839170][T18706] loop9: detected capacity change from 512 to 0 [ 426.867960][T16700] Bluetooth: hci0: Frame reassembly failed (-84) [ 426.904975][T18680] EXT4-fs error (device loop9): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.9.3038: unable to read itable block [ 426.919242][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 426.928388][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 426.936946][T18680] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: IO failure [ 426.946925][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 426.956288][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 426.963676][T18680] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #18: comm syz.9.3038: mark_inode_dirty error [ 426.975670][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 426.984864][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 426.992382][T18680] EXT4-fs error (device loop9): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.9.3038: unable to read itable block [ 427.005915][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.014901][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 427.023063][T18680] EXT4-fs error (device loop9): ext4_get_max_inline_size:121: inode #18: comm syz.9.3038: can't get inode location 18 [ 427.036208][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.044890][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 427.052245][T18680] EXT4-fs error (device loop9): ext4_get_inode_loc:4920: inode #18: block 9: comm syz.9.3038: unable to read itable block [ 427.066470][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.074867][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 427.081822][T18680] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: IO failure [ 427.091579][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.101171][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 427.108797][T18680] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #18: comm syz.9.3038: mark_inode_dirty error [ 427.121293][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.129908][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 427.137424][T18680] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.3038: Error while async write back metadata [ 427.150778][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.159344][T18680] EXT4-fs (loop9): I/O error while writing superblock [ 427.166395][T18680] EXT4-fs error (device loop9): ext4_check_bdev_write_error:227: comm syz.9.3038: Error while async write back metadata [ 427.179827][T18680] Buffer I/O error on dev loop9, logical block 1, lost sync page write [ 427.666596][T18807] loop0: detected capacity change from 0 to 128 [ 427.875775][T12508] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.940367][T12508] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.992003][T12508] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.013396][T18842] lo speed is unknown, defaulting to 1000 [ 428.020022][T18842] lo speed is unknown, defaulting to 1000 [ 428.026821][T18842] lo speed is unknown, defaulting to 1000 [ 428.041752][T12508] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.069438][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3060'. [ 428.128232][T18842] chnl_net:caif_netlink_parms(): no params data found [ 428.138300][T12508] bridge_slave_1: left allmulticast mode [ 428.144749][T12508] bridge_slave_1: left promiscuous mode [ 428.150691][T12508] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.158788][T12508] bridge_slave_0: left allmulticast mode [ 428.164679][T12508] bridge_slave_0: left promiscuous mode [ 428.170784][T12508] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.200596][T18854] loop6: detected capacity change from 0 to 512 [ 428.207799][T18854] EXT4-fs: Ignoring removed nobh option [ 428.219516][T18854] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 428.230259][T18854] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 428.240785][T18854] EXT4-fs (loop6): group descriptors corrupted! [ 428.271047][T12508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.281418][T12508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.291715][T12508] bond0 (unregistering): Released all slaves [ 428.332040][T18842] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.339471][T18842] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.347509][T18842] bridge_slave_0: entered allmulticast mode [ 428.354423][T18842] bridge_slave_0: entered promiscuous mode [ 428.361517][T18842] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.368704][T18842] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.376092][T18842] bridge_slave_1: entered allmulticast mode [ 428.383145][T18842] bridge_slave_1: entered promiscuous mode [ 428.410156][T18842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.421496][T18842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.444465][T18842] team0: Port device team_slave_0 added [ 428.452376][T18842] team0: Port device team_slave_1 added [ 428.470371][T18842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.478076][T18842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.518474][T18842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.532490][T18842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.541637][T18842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.569950][T18842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.586780][T12508] hsr_slave_0: left promiscuous mode [ 428.593081][T12508] hsr_slave_1: left promiscuous mode [ 428.600180][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.608272][T12508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.616555][T12508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.624301][T12508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.636721][T12508] veth1_macvtap: left promiscuous mode [ 428.645446][T12508] veth0_macvtap: left promiscuous mode [ 428.652631][T12508] veth1_vlan: left promiscuous mode [ 428.658130][T12508] veth0_vlan: left promiscuous mode [ 428.661708][ T28] kauditd_printk_skb: 1435 callbacks suppressed [ 428.661722][ T28] audit: type=1326 audit(2000000242.100:11894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.696552][ T28] audit: type=1326 audit(2000000242.100:11895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.756906][ T28] audit: type=1326 audit(2000000242.100:11896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.781115][ T28] audit: type=1326 audit(2000000242.100:11897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.805676][ T28] audit: type=1326 audit(2000000242.100:11898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.830923][ T28] audit: type=1326 audit(2000000242.100:11899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.856026][ T28] audit: type=1326 audit(2000000242.100:11900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.880403][T12508] team0 (unregistering): Port device team_slave_1 removed [ 428.883496][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 428.890283][T13159] Bluetooth: hci0: command 0x1003 tx timeout [ 428.894475][ T28] audit: type=1326 audit(2000000242.100:11901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.926958][ T28] audit: type=1326 audit(2000000242.100:11902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 428.927095][T12508] team0 (unregistering): Port device team_slave_0 removed [ 428.951551][ T28] audit: type=1326 audit(2000000242.100:11903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18879 comm="syz.2.3062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 429.008529][T18884] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3064'. [ 429.067111][T18884] batman_adv: batadv0: Interface deactivated: dummy0 [ 429.107767][T18842] hsr_slave_0: entered promiscuous mode [ 429.114163][T18842] hsr_slave_1: entered promiscuous mode [ 429.120405][T18842] debugfs: 'hsr0' already exists in 'hsr' [ 429.126606][T18842] Cannot create hsr debugfs directory [ 429.258070][T18895] loop6: detected capacity change from 0 to 2048 [ 429.289315][T18895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.333782][ T3963] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.687316][T18842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 429.698175][T18842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 429.707830][T18842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 429.718252][T18842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 429.764978][T18842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.780426][T18842] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.791610][T12508] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.799479][T12508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.822402][T18842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 429.833990][T18842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.847624][T12508] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.855022][T12508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.918659][T18842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.993009][T18842] veth0_vlan: entered promiscuous mode [ 430.004063][T18842] veth1_vlan: entered promiscuous mode [ 430.023897][T18842] veth0_macvtap: entered promiscuous mode [ 430.032875][T18842] veth1_macvtap: entered promiscuous mode [ 430.047761][T18842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.101453][T18842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.135978][T12508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.147807][T12523] Bluetooth: hci1: Frame reassembly failed (-84) [ 430.166962][T12508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.185580][T12508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.197954][T12508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.294660][T19048] set_capacity_and_notify: 1 callbacks suppressed [ 430.294677][T19048] loop3: detected capacity change from 0 to 512 [ 430.333844][T19048] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 430.352473][T19048] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 430.364252][T19048] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3077: Corrupt directory, running e2fsck is recommended [ 430.416957][T19048] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 430.430824][T19048] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.3077: corrupted in-inode xattr: invalid ea_ino [ 430.447775][T19048] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 430.448060][T19048] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3077: couldn't read orphan inode 15 (err -117) [ 430.457368][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 430.457390][ C1] EXT4-fs (loop3): initial error at time 2000000243: ext4_iget_extra_inode:5025: inode 15 [ 430.457418][ C1] EXT4-fs (loop3): last error at time 2000000243: ext4_iget_extra_inode:5025: inode 15 [ 430.500833][T19048] loop3: lost filesystem error report for type 5 error -117 [ 430.503892][T19048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.538922][T19048] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.3077: corrupted xattr block 255: invalid header [ 430.559919][T19048] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 430.568000][T19048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.588899][T19048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3077'. [ 430.844616][T19116] siw: device registration error -23 [ 430.851953][T19116] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 430.874743][T19116] loop3: detected capacity change from 0 to 512 [ 431.128847][ T3834] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 431.803447][T19171] loop3: detected capacity change from 0 to 128 [ 432.044112][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 432.158787][T13159] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 432.318952][T19182] batadv_slave_0: Caught tx_queue_len zero misconfig [ 432.343308][T19182] mmap: syz.6.3087 (19182): VmData 29208576 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 432.766597][T19203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3094'. [ 432.884838][T19219] loop3: detected capacity change from 0 to 512 [ 432.892991][T19219] EXT4-fs: Ignoring removed nobh option [ 432.899526][T19219] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 432.910548][T19219] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33349!=32837) [ 432.920518][T19219] EXT4-fs (loop3): group descriptors corrupted! [ 433.031772][T19229] loop3: detected capacity change from 0 to 164 [ 433.045750][T19229] iso9660: Unknown parameter 'å' [ 433.837184][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3095'. [ 434.306990][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 434.307006][ T28] audit: type=1326 audit(2000000247.740:11922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.338682][ T28] audit: type=1326 audit(2000000247.740:11923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.364814][ T28] audit: type=1326 audit(2000000247.740:11924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.389590][ T28] audit: type=1326 audit(2000000247.740:11925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.414138][ T28] audit: type=1326 audit(2000000247.740:11926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.438664][ T28] audit: type=1326 audit(2000000247.740:11927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.489125][ T28] audit: type=1326 audit(2000000247.740:11928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.513369][ T28] audit: type=1326 audit(2000000247.740:11929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.541336][ T28] audit: type=1326 audit(2000000247.740:11930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.566040][ T28] audit: type=1326 audit(2000000247.760:11931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19275 comm="syz.2.3098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc546ec799 code=0x7ffc0000 [ 434.636116][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3101'. [ 435.136324][T19293] ================================================================== [ 435.144955][T19293] BUG: KCSAN: data-race in page_pool_put_unrefed_netmem / page_pool_refill_alloc_cache [ 435.155027][T19293] [ 435.157956][T19293] write to 0xffff88810d36d600 of 8 bytes by task 19298 on cpu 1: [ 435.165847][T19293] page_pool_refill_alloc_cache+0x2a5/0x3c0 [ 435.171831][T19293] page_pool_alloc_pages+0xd0/0x130 [ 435.177121][T19293] bpf_test_run_xdp_live+0x66c/0x1360 [ 435.183104][T19293] bpf_prog_test_run_xdp+0x57b/0xa10 [ 435.188852][T19293] bpf_prog_test_run+0x204/0x340 [ 435.193839][T19293] __sys_bpf+0x52e/0x7e0 [ 435.198160][T19293] __x64_sys_bpf+0x41/0x50 [ 435.202678][T19293] x64_sys_call+0x10cb/0x3020 [ 435.207439][T19293] do_syscall_64+0x12c/0x370 [ 435.212142][T19293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.218113][T19293] [ 435.220514][T19293] read to 0xffff88810d36d600 of 8 bytes by task 19293 on cpu 0: [ 435.228197][T19293] page_pool_put_unrefed_netmem+0x38b/0x4b0 [ 435.234355][T19293] napi_pp_put_page+0xe9/0x200 [ 435.239289][T19293] skb_release_data+0x624/0x670 [ 435.244400][T19293] __kfree_skb+0x44/0x150 [ 435.248883][T19293] sk_skb_reason_drop+0xbd/0x290 [ 435.254070][T19293] udpv6_recvmsg+0x1f7/0xca0 [ 435.258916][T19293] inet6_recvmsg+0x143/0x290 [ 435.263516][T19293] sock_recvmsg+0x95/0x120 [ 435.268176][T19293] __sys_recvfrom+0x122/0x200 [ 435.273011][T19293] __x64_sys_recvfrom+0x76/0x90 [ 435.277856][T19293] x64_sys_call+0x2c0c/0x3020 [ 435.282781][T19293] do_syscall_64+0x12c/0x370 [ 435.287443][T19293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.293329][T19293] [ 435.295720][T19293] value changed: 0xffffea0004bcf500 -> 0x0000000000000000 [ 435.303005][T19293] [ 435.305394][T19293] Reported by Kernel Concurrency Sanitizer on: [ 435.311872][T19293] CPU: 0 UID: 0 PID: 19293 Comm: syz.3.3105 Tainted: G W syzkaller #0 PREEMPT(full) [ 435.323129][T19293] Tainted: [W]=WARN SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 435.327185][T19293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.337841][T19293] ================================================================== [ 435.983420][T12486] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.030446][ T8470] bond0: (slave syz_tun): Releasing backup interface [ 436.058414][T12486] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.160113][T12486] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.259666][T12486] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.318318][T12486] bridge_slave_1: left allmulticast mode [ 436.324759][T12486] bridge_slave_1: left promiscuous mode [ 436.330925][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.338941][T12486] bridge_slave_0: left allmulticast mode [ 436.344665][T12486] bridge_slave_0: left promiscuous mode [ 436.350462][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.440703][T12486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.451356][T12486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.462011][T12486] bond0 (unregistering): Released all slaves [ 436.547914][T12486] hsr_slave_0: left promiscuous mode [ 436.554646][T12486] hsr_slave_1: left promiscuous mode [ 436.562463][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.570445][T12486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.578153][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.585860][T12486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.597075][T12486] veth1_macvtap: left promiscuous mode [ 436.602878][T12486] veth0_macvtap: left promiscuous mode [ 436.608632][T12486] veth1_vlan: left promiscuous mode [ 436.614318][T12486] veth0_vlan: left promiscuous mode [ 436.685799][T12486] team0 (unregistering): Port device team_slave_1 removed [ 436.696770][T12486] team0 (unregistering): Port device team_slave_0 removed [ 436.973486][T12486] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.020654][T12486] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.080243][T12486] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.130396][T12486] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.374411][T12486] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.399703][T12486] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.451251][T12486] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.529860][T12486] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.861185][T12486] bridge0: port 3(batadv0) entered disabled state [ 437.869667][T12486] bridge_slave_1: left allmulticast mode [ 437.875560][T12486] bridge_slave_1: left promiscuous mode [ 437.881501][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.891076][T12486] bridge_slave_0: left allmulticast mode [ 437.896954][T12486] bridge_slave_0: left promiscuous mode [ 437.903040][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.912729][T12486] bridge_slave_1: left allmulticast mode [ 437.919285][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.927172][T12486] bridge_slave_0: left allmulticast mode [ 437.933704][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.112029][T12486] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 438.120872][T12486] vlan2 (unregistering): left promiscuous mode [ 438.127182][T12486] bond0 (unregistering): left promiscuous mode [ 438.133626][T12486] bond_slave_0: left promiscuous mode [ 438.139222][T12486] @0Ù: left promiscuous mode [ 438.146079][T12486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.156812][T12486] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 438.166467][T12486] bond0 (unregistering): Released all slaves [ 438.174663][T12486] bond1 (unregistering): Released all slaves [ 438.261117][T12486] bond3 (unregistering): (slave vlan2): Releasing backup interface [ 438.270669][T12486] vlan2 (unregistering): left promiscuous mode [ 438.278245][T12486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.288258][T12486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.297607][T12486] bond0 (unregistering): Released all slaves [ 438.305437][T12486] bond1 (unregistering): Released all slaves [ 438.313602][T12486] bond2 (unregistering): Released all slaves [ 438.322035][T12486] bond3 (unregistering): Released all slaves [ 438.330459][T12486] bond4 (unregistering): Released all slaves [ 438.339137][T12486] bond5 (unregistering): Released all slaves [ 438.347385][T12486] bond6 (unregistering): Released all slaves [ 438.361652][T12486] bond7 (unregistering): (slave ip6gre2): Releasing backup interface [ 438.385618][T12486] dvmrp1 (unregistering): left allmulticast mode [ 438.581313][T12486] bond6 (unregistering): (slave vlan3): Releasing backup interface [ 438.590074][T12486] vlan3 (unregistering): left promiscuous mode [ 438.596419][T12486] bond0 (unregistering): left promiscuous mode [ 438.604202][T12486] bond0 (unregistering): Released all slaves [ 438.611416][T12486] bond1 (unregistering): Released all slaves [ 438.620437][T12486] bond2 (unregistering): Released all slaves [ 438.629289][T12486] bond3 (unregistering): Released all slaves [ 438.637571][T12486] bond4 (unregistering): Released all slaves [ 438.646304][T12486] bond5 (unregistering): Released all slaves [ 438.655014][T12486] bond6 (unregistering): Released all slaves [ 438.663786][T12486] bond7 (unregistering): Released all slaves [ 438.673008][T12486] bond8 (unregistering): Released all slaves [ 438.682286][T12486] bond9 (unregistering): Released all slaves [ 438.693973][T12486] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 438.703241][T12486] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 438.712019][T12486] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 8a:fc:db:61:b4:5d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 438.941052][T12486] bond7 (unregistering): (slave vlan2): Releasing backup interface [ 438.949867][T12486] vlan2 (unregistering): left promiscuous mode [ 438.956124][T12486] bond0 (unregistering): left promiscuous mode [ 438.963941][T12486] bond0 (unregistering): Released all slaves [ 438.971192][T12486] bond1 (unregistering): Released all slaves [ 438.979454][T12486] bond2 (unregistering): Released all slaves [ 438.988387][T12486] bond3 (unregistering): Released all slaves [ 438.996495][T12486] bond4 (unregistering): Released all slaves [ 439.005230][T12486] bond5 (unregistering): (slave veth5): Releasing backup interface [ 439.014088][T12486] bond5 (unregistering): Released all slaves [ 439.022587][T12486] bond6 (unregistering): Released all slaves [ 439.031877][T12486] bond7 (unregistering): Released all slaves [ 439.040773][T12486] bond8 (unregistering): Released all slaves [ 439.049154][T12486] bond9 (unregistering): Released all slaves [ 439.057109][T12486] bond10 (unregistering): Released all slaves [ 439.104081][T12486] tipc: Left network mode [ 439.109189][T12486] tipc: Left network mode [ 439.113916][T12486] tipc: Left network mode [ 439.204406][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.214422][T12486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.222353][T12486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.229918][T12486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.237746][T12486] batman_adv: batadv0: Removing interface: dummy0 [ 439.248014][T12486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.255631][T12486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.263587][T12486] batman_adv: batadv0: Removing interface: dummy0 [ 439.273498][T12486] hsr_slave_0: left promiscuous mode [ 439.279493][T12486] hsr_slave_1: left promiscuous mode [ 439.285547][T12486] batman_adv: batadv0: Removing interface: dummy0 [ 439.294597][T12486] hsr_slave_0: left promiscuous mode [ 439.300472][T12486] hsr_slave_1: left promiscuous mode [ 439.308119][T12486] veth1_macvtap: left promiscuous mode [ 439.313672][T12486] veth0_macvtap: left promiscuous mode [ 439.319321][T12486] veth1_vlan: left promiscuous mode [ 439.325384][T12486] veth0_vlan: left promiscuous mode [ 439.389423][T12486] team0 (unregistering): Port device team_slave_1 removed [ 439.400382][T12486] team0 (unregistering): Port device team_slave_0 removed [ 439.454545][T12486] team0 (unregistering): Port device team_slave_1 removed [ 439.463984][T12486] team0 (unregistering): Port device team_slave_0 removed [ 439.593521][T12517] smc: removing ib device syU× [ 440.341373][T12486] IPVS: stop unused estimator thread 0... [ 440.347845][T12486] IPVS: stop unused estimator thread 0...