last executing test programs: 4m6.911966278s ago: executing program 32 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4}, 0x94) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(r0, &(0x7f0000000180)='./bus\x00', 0x801c6, 0x56) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) sendfile(r2, r2, 0x0, 0x1000000201005) truncate(0x0, 0x9471) sendfile(0xffffffffffffffff, r1, 0x0, 0x3ffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000040)) r7 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r8) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r9) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000194000/0x2000)=nil, 0x2000, 0x1) 3m15.033006286s ago: executing program 33 (id=740): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, r0, 0x2) socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x8041) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=""/13, &(0x7f0000000040)=0xd) 3m7.941694917s ago: executing program 34 (id=813): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x46070300) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r2, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) r4 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb6, 0x1, 0xffffffbc, 0x333}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c8d0}, 0x20000084) 3m5.849392826s ago: executing program 35 (id=828): gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1, 0x1, @thr={&(0x7f00000000c0)="3444e91cb387a538c5b4ec078dc26ed5551ede3a6ec74167e62448dfa8536446ff96896f17dd30259db2eeb59a3b1e7778ea04cdc46c01dcd77bf7e5f6d9c9fde95d3a68f01cdf23e189a91a4ded9d8e98771b08962be6095919af385a0d2a4d4236c75c10ea680c7b749f96c18555e999d0c2b992fc336f2566301f4f0b587e2dcb8139b5085c4b462741845344ac5c4b51089f0124aa2d40c3b9c31cf4feada224ec775273c01e8d95a342ea2f29e6a3fc0e897fcd2606721ef143765ba4ed3e3e2c1e5cd103f1235db0943233c93a1debafe1acccd60a306b2e62b7566add6e4afb42994bf545dc7d5b986f3b68147500", &(0x7f0000000380)="440d4eeeac2b2f7f94e721cc87311015d1205154d2cf71b204f2c688f1a93dbde8d265fb2946e03f5f0c9c7e5ad90ca288d72250f7f30bcf4207f1af7ad9010259f3f64743f40437043ff22f97e78114b50b97f4d779f39a31084fb51def31b1e295ff71bce24fa503cc4b4b55651315b7ba586f29e9f47c0c60818bb01ed8e41e16f08ba5947aad85d8fbf41b01a77b42eb164b6f4b02f5f3cb994f5aceed15734bbe747f91b41b"}}, &(0x7f0000000240)) (async) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1, 0x1, @thr={&(0x7f00000000c0)="3444e91cb387a538c5b4ec078dc26ed5551ede3a6ec74167e62448dfa8536446ff96896f17dd30259db2eeb59a3b1e7778ea04cdc46c01dcd77bf7e5f6d9c9fde95d3a68f01cdf23e189a91a4ded9d8e98771b08962be6095919af385a0d2a4d4236c75c10ea680c7b749f96c18555e999d0c2b992fc336f2566301f4f0b587e2dcb8139b5085c4b462741845344ac5c4b51089f0124aa2d40c3b9c31cf4feada224ec775273c01e8d95a342ea2f29e6a3fc0e897fcd2606721ef143765ba4ed3e3e2c1e5cd103f1235db0943233c93a1debafe1acccd60a306b2e62b7566add6e4afb42994bf545dc7d5b986f3b68147500", &(0x7f0000000380)="440d4eeeac2b2f7f94e721cc87311015d1205154d2cf71b204f2c688f1a93dbde8d265fb2946e03f5f0c9c7e5ad90ca288d72250f7f30bcf4207f1af7ad9010259f3f64743f40437043ff22f97e78114b50b97f4d779f39a31084fb51def31b1e295ff71bce24fa503cc4b4b55651315b7ba586f29e9f47c0c60818bb01ed8e41e16f08ba5947aad85d8fbf41b01a77b42eb164b6f4b02f5f3cb994f5aceed15734bbe747f91b41b"}}, &(0x7f0000000240)) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0x20ec25, 0x400, 0x0, 0x3d6}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) (async) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) eventfd2(0xd8a3, 0x80000) (async) r5 = eventfd2(0xd8a3, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/157, 0x9d}, {0x0}], 0x2, 0x8}) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4007, @fd=r5, 0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000300)=""/157, 0x9d}, {0x0}], 0x2, 0x8}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x28) (async) socket$vsock_stream(0x28, 0x1, 0x28) 2m38.661610643s ago: executing program 6 (id=1145): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f0000000680)="$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") r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) fchown(r0, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc86c81, 0x122) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000080)={0x2, 0xa, 0x10000}) 2m38.543686083s ago: executing program 6 (id=1148): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400000000000000000000000f", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 2m38.401532256s ago: executing program 6 (id=1151): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002000000000000000000"], 0x10}}, 0x0) 2m37.508281017s ago: executing program 6 (id=1162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) (async) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x7}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffd27, &(0x7f0000000040)=[{&(0x7f0000000080)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100070000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd1b642383656d4d2449155037", 0x55}], 0x1}, 0x4000080) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6ce, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) (async) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0xd4c, 0x8004, 0x7f, 0xc6ce, 0xfd, "00000807000000f6150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 2m37.197791305s ago: executing program 6 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000002400000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) 2m36.609772198s ago: executing program 6 (id=1174): r0 = socket(0x40000000015, 0x5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getpid() gettid() read(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f681b49}}}, 0x90) r4 = socket(0x2b, 0x1, 0x1) getsockname$l2tp(r4, 0x0, &(0x7f0000000040)) 2m36.573340841s ago: executing program 36 (id=1174): r0 = socket(0x40000000015, 0x5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x81, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) getpid() gettid() read(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in6={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f681b49}}}, 0x90) r4 = socket(0x2b, 0x1, 0x1) getsockname$l2tp(r4, 0x0, &(0x7f0000000040)) 2m34.639009816s ago: executing program 8 (id=1196): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x97ffffff}, 0x0) 2m34.533164066s ago: executing program 8 (id=1198): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000700)='./file1\x00', 0x0, 0x194) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000002c0)={0xb0, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x9c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20040001}, 0x24000010) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/dev_mcast\x00') r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', 0x0, r2, 0x5, 0x3, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0xa930bdd3cd1209db, 0xf3, 0x3, 0x1c, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x40, 0x7800, 0x1, 0x6}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xffff77f3, 0x0, r3, 0x6, '\x00', r4, r5, 0x5, 0x5, 0x1}, 0x50) pread64(r2, &(0x7f0000000000)=""/16, 0x10, 0x3ff) pread64(r2, &(0x7f00000000c0)=""/87, 0x57, 0x1) 2m34.402576318s ago: executing program 8 (id=1201): io_setup(0x3, &(0x7f0000000180)=0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = getpid() r3 = perf_event_open(&(0x7f0000000880)={0x7, 0x80, 0x3, 0x59, 0x2, 0x6, 0x0, 0x5, 0xa2b, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0x0, 0x5}, 0x2000, 0x9, 0x7, 0x5, 0x4, 0x9, 0x4, 0x0, 0x112a0}, r2, 0x1, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1d, 0x7f, 0x3a, 0xa, 0x0, 0x0, 0x64aa4, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140)}, 0xd02, 0xffffffffffffc9c4, 0x4, 0x8, 0x40000000000000, 0x7, 0x3ff, 0x0, 0x8, 0x0, 0xffffffff}, r2, 0x9, r3, 0x0) socket(0x17, 0x1, 0x7ff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2475f6a37e2d0c88, 0x10004, 0x6, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r4, 0xb) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x69}, 0x2c) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=@newlink={0x2c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}]}, 0x2c}}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r6, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x51, &(0x7f00000000c0)={[{@nobarrier}, {@errors_remount}, {@norecovery}, {@block_validity}, {@usrjquota}]}, 0x8, 0x611, &(0x7f0000000200)="$eJzs3c1vVFUbAPDnTKfT0vK+LcSouJAmxkCitLSAIcZE2BOCHztXlRaCFEpojRZJLAluTIwbFyauXIj/hZK4deHWhRtXhoQYw0IMkTF3eqdMpzP9npnS/n7Jpefc27nn3KFPz7mn58wNYNcayv4pRByIiGspYqDmWDHyg0ML3/fgr5vnsy1FufzOnylufprma8+V8q/9+Yv/HYj0SyFif9fycmfmblwen5qavJ7nR2avXBuZmbtx5NKV8YuTFyevjr02dvLE8RMnR49u6vpqiz5z+4OPBj4/+9533zxKo9//djbFqXicf0N2XfWv7dlUydl7NhTlBQ9r92fv68lNnnu7+Hug+nPyRKrfwbZ1If95/H9EPBcD0VXzvzkQn73V0coBLVVOUW2jgF0nbSj+e7e+IkCbVfsB1Xv7RvfByxVa3CsB2uH+6YUBgIXY746IavwXF8YGozeyvX0P0pJxnhQRmxuZW5CV8fNPZ29nWzQZhwNaY/5WdZS7vv1PldgcjN5Kru9BYUn8F2q2bP/bGyx/qC4v/qF95m9FxPN5+1+KdcX/UE38v7/B8sU/AAAAAAAAbJ27pyPi1Ubz/wqL839KDeb/9EfEqS0of/W//xXu5Ym0BcUBNe6fjngjopwaxH9usCvP/a8yH6A7Xbg0NXk0XzN4OLp7svxo3XlrZwgf+WL/183Kr53/l21Z+dW5gPmZ7hXrFuJOjM+Ob/a6gYj7tyJeqMz/PZjvWTr/J2v/U4P2P4vva2ssY//Ld85F/vui3urxD7RK+duIQw3X/zzpbqeVP59jpNIfGKn2CpZ78ZMvf2hWfh7/cyH+oe2y9r9v5fjvSbWf1zOzvvOXIuLYXLHc7Ph6+/9X8/5/Kb3bVT1/5uPx2dnroxGldGb5/rH11Rl2qmo8VOMli//DL608/rfY/6+Jwz0RMb/GMp993P97s2P6/9A5WfxPrNz+Dy5t/9efGLsz+GOz8s+tqf0/XmnTD+d7jP9BreWfx7HWAO1IdQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKVeIiL2RCsOL6UJheDiiPyKeib7C1PTM7CsXpj+8OhGxt1h5/n+h+qTfgajkU/X5/4M1+bG6/LGI2BcRX3XtqeSHz09PTXT64gEAAAAAAAAAAAAAAAAAAGCb6K+s+S/31K//z/zR1enaAS1XzL+Kd9h9iht+ZblnSysCtN3G4x942q09/rtbWg+g/ZrH/8NH5Yq2VgdoI/1/2L02GP/+XAA7wGrxX2hTPYB2W+OYXm+r6wF0gvt/AAAAAADYUfYdvPtrioj51/dUtkwpP2ayP+xspvbA7mUOL+xexelO1wDoFPf4QFpM/dNwsX/z2f+pNRUCAAAAAAAAAAAAAJY5dMD6f9itVl7/b24/7GQrrP9vFPw+LgB2kOaP/kiltlYEaDv3+MBqd/rW/wMAAAAAAAAAAADANtB74/L41NTk9Zm5py/x5vaoxvoS8+PbohobS1SXi9cdetyaQrsjouOX3JFEqfH73M5EB38nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAS/wXAAD//+4sI9k=") io_setup(0x7, &(0x7f0000000080)) 2m33.979819396s ago: executing program 8 (id=1207): r0 = inotify_init1(0x80000) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x11, 0x1, {0x0, 0x4}}, 0x14) inotify_add_watch(r0, &(0x7f00000024c0)='.\x00', 0x400000c) mkdir(&(0x7f0000000000)='./file0\x00', 0x70) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x5c42, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x60}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x3ff]}, 0x8) signalfd4(r4, &(0x7f0000000080)={[0x10000]}, 0x8, 0x80800) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'netpci0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x100000001, 0x5, 0x4}) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 2m33.723192199s ago: executing program 8 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x4000}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x24000804) 2m32.750097277s ago: executing program 8 (id=1218): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x5000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) fallocate(r3, 0x0, 0x0, 0x8800000) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m32.71938945s ago: executing program 37 (id=1218): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x2, 0x12) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xffffff4c}]) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x5000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) fallocate(r3, 0x0, 0x0, 0x8800000) open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2m21.013742517s ago: executing program 3 (id=1354): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x1000000, 0x1}, 0x8}, 0x94) 2m20.99193031s ago: executing program 3 (id=1356): socket(0x28, 0x5, 0x3) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x74c42) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab72502000000000000001e000000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffff7, 0xc, 0x2, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x0, 0xffffffffffffffff, 0x1}) capset(0x0, 0x0) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000095020000000200000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000002ab899ecd022ad06a4b8aed00222fd8dd2787c926c838733d60cef26d4ea79b59397f56bd4e62a776db7820661a63fda99a64b2c4d1726eab22410b347e42fc5b29e6e942c4fbc8fa73e785755550824bd587200462b77913e01010000ada0f295256711dbb5ce364567928c0e21892e89b9f1ca69026230eebb29268ecb00"/146, @ANYRES32=0x0, @ANYBLOB="0500040023080000180012800e00010077697265677561726400000004000280"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x20040000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r11, 0x401070c9, &(0x7f0000000040)={0x0, 0x18000000, 0x1}) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="00fb21040ed433def663ea1ce06ec5d0a2c4d6970b59673c595b54e32255db44dd545e42e408a0288a003a7a198142d4865f4a587081db548dd8a757ef8a7879d647a548932f11f8e19e517b9b60d5641ab15cbf4cb0b4c7e7b44e6ab2e7caf69c1ff9788f23ea8d6ba2617ae36b3494625e32c3af9ca07e0c8dac778258d1bdefb3549b65f44cd4c8ef32e3640e17c6fef49bcb8e245f7c79373d780287b244383d37fe6949"], 0x21, 0x1) 2m20.841463953s ago: executing program 3 (id=1360): socket$key(0xf, 0x3, 0x2) socket$kcm(0xa, 0x2, 0x73) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x2, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0x86dd}}], 0x1, 0x0) 2m20.774241389s ago: executing program 3 (id=1361): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000010000100ffffff00080000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000880000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3058000080080003"], 0x124}}, 0x0) 2m20.729761623s ago: executing program 3 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x8, 0x5, 0x7}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 2m20.647546861s ago: executing program 3 (id=1364): unshare(0x60000600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) sync() sync() sync() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a320000000005000400010000001400078005001500000000000800114000000046050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}}, 0x84000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000580)="fae238da1307de453279fa5b0784332931", 0x11}], 0x1) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x80002002}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000003800048018000180080001006f7366000c00028008000140000000031c0001800b00010072656a65637400000c000280080001400000000014"], 0x8c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010e21d231d56c71317351c00000000cafe675d0aa1", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000008c0)=0x8) 2m5.393942269s ago: executing program 38 (id=1364): unshare(0x60000600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) sync() sync() sync() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a320000000005000400010000001400078005001500000000000800114000000046050005000a000000050001000600000011000300686173683a69702c6d61726b"], 0x60}}, 0x84000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000580)="fae238da1307de453279fa5b0784332931", 0x11}], 0x1) ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f0000000080)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x80002002}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000003800048018000180080001006f7366000c00028008000140000000031c0001800b00010072656a65637400000c000280080001400000000014"], 0x8c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010e21d231d56c71317351c00000000cafe675d0aa1", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f00000008c0)=0x8) 1m1.124610267s ago: executing program 2 (id=2166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, 0x0, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, @CTA_EXPECT_MASTER={0xe0, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x100000c1}, 0x20040004) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000840)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)={0xff, 0xfff}) openat$cgroup_ro(r1, &(0x7f0000000400)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r4) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x303, 0x2, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="88000000031400012abd700006dcdf250962020073797a31000000000800410073697700146e3300736974300000000000000000000000000900020073797a300000000008004100727865001400330076657468305f244b181c9b6629afb97a746f5f687372000000000900020073797a320000000008004100736977001400330076657468315f"], 0x88}}, 0x20000000) 1m0.913918736s ago: executing program 2 (id=2168): setsockopt(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) 1m0.834397093s ago: executing program 2 (id=2169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) 1m0.662111808s ago: executing program 2 (id=2171): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4401, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0xa1, 0x0, 0x0, 0x0, 0x5, 0x20181, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(r0, 0x1b, 0x6, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r7, 0x3, 0x4100, 0x8000c62) r8 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xa419, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r8, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000002200)='9', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r9, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) 59.501150963s ago: executing program 2 (id=2183): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x18c}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 57.789811648s ago: executing program 2 (id=2196): r0 = syz_io_uring_setup(0x5495, &(0x7f0000000740)={0x0, 0xeaf4, 0x800, 0x3, 0x204}, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000300)={0x200, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f00000001c0)=""/163, 0xa3}], &(0x7f00000002c0)=[0x80000000000, 0x7, 0xf897, 0xe, 0x1, 0x5, 0xa581], 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) write$nbd(r1, &(0x7f0000000840)={0x67446698, 0x0, 0x0, 0x0, 0x3, "36e891aec9dfd6a4029ccb13f84c08295917bf112f64851d0e97b5e79cf9590688c31f240a1734b26b19a85353009ac1f21101c921ed07e0a76f0e7c92e20cdf8537dd4fa3f3f4f89b4ae37e8f97be904755fcbacaec6ca61ee6c17418af91ac1728b5f1438dff62e540171ec3d476069aa357a5ea1c45e79488a4a59d8f80054fb05ee426dede82e2ac27cf16159c7dcd13111d4348f930bbc34d624245d0ed05b465030b43748854197d7ab5e0d897887edb923b10ebb9f209264727151d984c0ba9d1983649eb8c78a1ad686538e7c56a56f268bda23f6023428fbf9b40c1cf38ba85ecb08a785018df0b4d2269928c5746b8a53d5395bf"}, 0x109) pwritev(r1, &(0x7f0000000700)=[{&(0x7f00000004c0)="b8c89c0242cf7b6a6467934bc65234e65545cc4ceb4c8f2ecc8ebcc5ea4dffb3ab51b2b872f259e46b54f382ec5fbf6b10bdf0c0ffe39a2e9967d6f11cdd6f7fe40507c993fd2bf0cfe0dfe38a8b548817a874cab3224bc88fd9ccba2d397620b05c3dc168481da9d6b404e7f650e75f13c8051d6d455f0495e360b03048911cca891f1f0fd770f1ddccb0e76178ac8c49eae2859565caf37163cc93ef8a72624a03686145c5a9b6089846a214773623a9a60afc1a515c91107e3aebe71eee", 0xbf}, {&(0x7f0000000580)="c5b111906237471b8d0c1ae38b768bb6fee9105a9036cf073337eb8ba79f50f9565a3f7c1d4eb57fc7b071e6871f6ef0f41582d31d9f710e7c55162604b717304ab3f0ae3a90cc7e1413d32d5d48e9de3652a201beeb3baceca492e9eb16b1b434bdf3a41483882a47", 0x69}, {&(0x7f0000000600)="7cb21aa7ab62acb9eb30e50a09f5c59231ca28e956c770e33a98f199b030339729d04916415e4ae567fde0015b0ed7d18812cd0628442b9b9ee93fbc19127965f0c25bcd4b47cda10b7682ca042d9000a63c462891ca2eb13c3c2babae3689cd2323514e2c130474b63c2fb32b5c4871415d14f86c02bf4fa4d99e5e7a1adcdfea64b45099810443302ca387182caa83f8167f1a700a44ee5e143b99b336fe7bf3062836ece259fa8eda6dff5ffb6c2347c135a3208b79998eff19ad289450722b02324212df40653c4f4ee58f2e676cd75e45b44392c94dce03a7c040b027a161140862008de110b1142eb7337eb6cf443607ca55a87b0da481", 0xfa}], 0x3, 0xef, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000340)={0x400, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) io_setup(0x3, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCFLSH(r4, 0x541b, 0x7ffffffffffffffe) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 57.711364225s ago: executing program 39 (id=2196): r0 = syz_io_uring_setup(0x5495, &(0x7f0000000740)={0x0, 0xeaf4, 0x800, 0x3, 0x204}, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000300)={0x200, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/235, 0xeb}, {&(0x7f00000001c0)=""/163, 0xa3}], &(0x7f00000002c0)=[0x80000000000, 0x7, 0xf897, 0xe, 0x1, 0x5, 0xa581], 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) write$nbd(r1, &(0x7f0000000840)={0x67446698, 0x0, 0x0, 0x0, 0x3, "36e891aec9dfd6a4029ccb13f84c08295917bf112f64851d0e97b5e79cf9590688c31f240a1734b26b19a85353009ac1f21101c921ed07e0a76f0e7c92e20cdf8537dd4fa3f3f4f89b4ae37e8f97be904755fcbacaec6ca61ee6c17418af91ac1728b5f1438dff62e540171ec3d476069aa357a5ea1c45e79488a4a59d8f80054fb05ee426dede82e2ac27cf16159c7dcd13111d4348f930bbc34d624245d0ed05b465030b43748854197d7ab5e0d897887edb923b10ebb9f209264727151d984c0ba9d1983649eb8c78a1ad686538e7c56a56f268bda23f6023428fbf9b40c1cf38ba85ecb08a785018df0b4d2269928c5746b8a53d5395bf"}, 0x109) pwritev(r1, &(0x7f0000000700)=[{&(0x7f00000004c0)="b8c89c0242cf7b6a6467934bc65234e65545cc4ceb4c8f2ecc8ebcc5ea4dffb3ab51b2b872f259e46b54f382ec5fbf6b10bdf0c0ffe39a2e9967d6f11cdd6f7fe40507c993fd2bf0cfe0dfe38a8b548817a874cab3224bc88fd9ccba2d397620b05c3dc168481da9d6b404e7f650e75f13c8051d6d455f0495e360b03048911cca891f1f0fd770f1ddccb0e76178ac8c49eae2859565caf37163cc93ef8a72624a03686145c5a9b6089846a214773623a9a60afc1a515c91107e3aebe71eee", 0xbf}, {&(0x7f0000000580)="c5b111906237471b8d0c1ae38b768bb6fee9105a9036cf073337eb8ba79f50f9565a3f7c1d4eb57fc7b071e6871f6ef0f41582d31d9f710e7c55162604b717304ab3f0ae3a90cc7e1413d32d5d48e9de3652a201beeb3baceca492e9eb16b1b434bdf3a41483882a47", 0x69}, {&(0x7f0000000600)="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", 0xfa}], 0x3, 0xef, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000340)={0x400, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) io_setup(0x3, &(0x7f0000000180)=0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCFLSH(r4, 0x541b, 0x7ffffffffffffffe) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 56.617082714s ago: executing program 0 (id=2213): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$sock_netdev_private(r0, 0x89f2, &(0x7f0000000000)) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x27, 0x5, 0x8) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000140)=""/130) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000040)=0x8000000000000000, 0x8) r4 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000000c0)={&(0x7f0000000280)={0x2d, 0x0, 0x1f, 0x20000000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', './file0', [{}, {0x20, 'syscall\x00'}, {0x20, '}\\::&#'}, {}, {0x20, 'W/!*.'}], 0xa, "13cf6bf104f0937941163c895c532a6fde70d3b28bdab7be7306665a577cc2c8fd2fd5f4e6dbcf58761bc968a6fc1b246475df78d9276fe33a123b94bf1b4533fd52a36ace65441d8274c4060083d03e4048a803b64964b720c5df403ca321e7f58bd4f5a4f7eae39229f2eca6a4fa47f8c7921ef805432b87f492cdd0a87808a0c9592b52390ad2cca0a0a0fea163ef31986e11a9f594b8895bfe086ff4307211d3b8cf9f3079f0d768d379ec6d3c36fec01188ce532be7fd44de1deadf2df6dc3df8eb3e8da7df37523b70df8f10b7"}, 0xf3) syz_open_pts(0xffffffffffffffff, 0x44a00) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) pread64(r5, &(0x7f0000001600)=""/4081, 0xff1, 0x2) 56.561243719s ago: executing program 0 (id=2214): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x1, r1}}, 0x40) 56.497770425s ago: executing program 0 (id=2215): socket(0x1a, 0x5, 0x7fffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x74c42) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab72502000000000000001e000000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffff7, 0xc, 0x2, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x0, 0xffffffffffffffff, 0x1}) capset(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 55.687267668s ago: executing program 0 (id=2218): r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_WAIT_FOR_RESUME(r2, 0x5523) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x4401, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0xa1, 0x0, 0x0, 0x0, 0x5, 0x20181, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r3, 0x3) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") fallocate(r0, 0x1b, 0x6, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r6, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r7, 0x3, 0x4100, 0x8000c62) r8 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0xa419, 0x10000, 0xfffffffe, 0x2d0}, &(0x7f0000001040), &(0x7f0000001080)) io_uring_enter(r8, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r8, 0x11, &(0x7f0000002200)='9', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r9, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0xa, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa424e1aa2e0d4080045"], 0x0) 54.965225743s ago: executing program 0 (id=2227): socket(0x1a, 0x5, 0x7fffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x74c42) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab72502000000000000001e000000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffff7, 0xc, 0x2, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x0, 0xffffffffffffffff, 0x1}) capset(0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r6, 0x3) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x300, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) ioctl$IOC_PR_RESERVE(r10, 0x401070c9, &(0x7f0000000040)={0x0, 0x18000000, 0x1}) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000080), &(0x7f0000000100)=ANY=[@ANYBLOB="00fb21040ed433def663ea1ce06ec5d0a2c4d6970b59673c595b54e32255db44dd545e42e408a0288a003a7a198142d4865f4a587081db548dd8a757ef8a7879d647a548932f11f8e19e517b9b60d5641ab15cbf4cb0b4c7e7b44e6ab2e7caf69c1ff9788f23ea8d6ba2617ae36b3494625e32c3af9ca07e0c8dac778258d1bdefb3549b65f44cd4c8ef32e3640e17c6fef49bcb8e245f7c79373d780287b244383d37fe6949"], 0x21, 0x1) 53.78170324s ago: executing program 0 (id=2236): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa20000000000000702000009ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94175000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 53.77789472s ago: executing program 40 (id=2236): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa20000000000000702000009ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94175000) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 7.269071383s ago: executing program 9 (id=2730): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, 0x0, 0x0) 7.166425213s ago: executing program 9 (id=2734): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4}, 0x94) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(r0, &(0x7f0000000180)='./bus\x00', 0x801c6, 0x56) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x0) ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) sendfile(r2, r2, 0x0, 0x1000000201005) truncate(0x0, 0x9471) sendfile(0xffffffffffffffff, r1, 0x0, 0x3ffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0x200002e6) fcntl$setpipe(r3, 0x407, 0x7000000) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCGETA(r6, 0x5405, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.470058585s ago: executing program 9 (id=2741): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xfffffffffffffff8, 0x40000) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000040)={'vcan0\x00', 0x3, 0x7ff}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 5.336425588s ago: executing program 9 (id=2744): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, r3, 0xb15, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0x148, r3, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fa5704fa11b41fdadf345b4ebdc6280d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x48}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xa4, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "49402f7fa9f65f29734ca9400b3d214a3ea720f8f19c0773d9fa7162a225e7c9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a4a9a289393f2f894de7c4b441101521ed41c8bce63b51167e3b71b1d2e1886d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "10cf7386b967aa625d1c9b12952efad7"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e2560306c6c1522049b0f801e5a1db59"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x40804}, 0x8050) 3.244529737s ago: executing program 1 (id=2752): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x75}, 0x94) brk(0x800000) socket$inet6(0xa, 0x80003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.978033311s ago: executing program 5 (id=2754): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f646f74732c646d61736b3d3030303030ce51d23030303001003030303030303030303036322c666c7573"], 0x1, 0x29e, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa20000000000000702000009ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r4}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000002f80)=ANY=[@ANYRESDEC=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095", @ANYRES8=r2, @ANYRES8=r4, @ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="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", @ANYRES64=r7], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r10, 0x301, 0x30bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8400) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@noauto_da_alloc}, {@errors_remount}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r11, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) bind$inet6(r12, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00', 0x4}, 0x1c) r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYRES32, @ANYRESDEC=r9, @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r10], 0x50) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000001000000000000000008000100544545000900020073797a32000000000900010073797a31"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) getdents64(r13, &(0x7f0000001f80)=""/4096, 0x1000) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r0, 0x0) 2.295861203s ago: executing program 9 (id=2755): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0209000002000000000000030000"], 0x10}}, 0x0) 2.271668545s ago: executing program 5 (id=2756): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@mpls_delroute={0x58, 0x19, 0x20, 0x709d28, 0x25dfdbff, {0x1c, 0xb4, 0x14, 0x7, 0xff, 0x2, 0x0, 0xa, 0x200}, [@RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_MULTIPATH={0xc, 0x9, {0x7fff, 0x0, 0xb}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x38}, @RTA_MULTIPATH={0xc, 0x9, {0xff, 0xc, 0x6, r1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xa}, @RTA_MULTIPATH={0xc, 0x9, {0xaa, 0x8, 0x3, r1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000000000000, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x8030, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xb, r2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x95, 0x2b8, &(0x7f00000010c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xa8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x1a2d, 0x0, 0xdce, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f00000001c0)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000940b0400ce450c848d970900"], 0x48}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x5, 0x200400) ioctl$HIDIOCSUSAGE(r7, 0x4018480c, &(0x7f0000000580)={0x1, 0x2, 0x3, 0x2, 0x2, 0xfffffffb}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001100010027bd7000fddbdf", @ANYRES32=0x0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r8, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x4, 0x2, 0x3, 0x8, 0x309, 0x38, 0xce, 0xe, 0xb, 0x20, 0x1, 0x5, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x3, 0x200004, 0xce1, 0x800400}]}, 0x58) close(r8) 2.132654958s ago: executing program 1 (id=2760): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") ppoll(&(0x7f0000000d00)=[{r1, 0x4200}, {r1, 0xd044}], 0x2, 0x0, 0x0, 0x0) close(0x4) 2.077390523s ago: executing program 7 (id=2761): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@grpjquota}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0x16) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2.077008173s ago: executing program 7 (id=2762): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(r0, &(0x7f0000006d80)=[{{&(0x7f00000002c0)=@caif=@dbg={0x25, 0x10, 0xb}, 0x80, 0x0}}], 0x1, 0x20000814) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) (async) syz_clone(0xa794c600, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) 1.797325088s ago: executing program 7 (id=2765): socket$inet(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000000000000000000002", @ANYRES32=0x0, @ANYBLOB="052000000302000008000a20", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4040855}, 0x40) 1.66410371s ago: executing program 1 (id=2766): socket$inet_udplite(0x2, 0x2, 0x88) r0 = memfd_secret(0x80000) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002c08000000000000ffe9df25027c0000"], 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0xc050) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @mcast1}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f", @ANYRES16, @ANYRESHEX, @ANYRES8=r0, @ANYRES64, @ANYRESHEX, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8=0x0], 0x4, 0x317, &(0x7f0000000580)="$eJzs3U1rE1sYwPEnSdMk7e1tF5fL5aJwqCCKdGgD7lxYpAUxoLSNYAVhaqcaMk1KEgoRsRUEt65ddOFSBBHcuRFx242fQK27InRnF6VHJvPSvIwxrbTx5f9bNE/nnGfO6ZyTTjvtzNk892gxv5AUkYgElPMhKjHv01U5/Xbtw/HpN395xWpyfGYsrVRURK7ffTb8utJ/9eXfrxKyPnRjcyv9af3YjMjuzG2JqlxZFbRWpporFitOE2o+V84bSl2xLbNsqVyhbJUqXrk5Z1tqwS4uLVWVWZgf6FsqWeWyMgtVlbeqqlJUlVJVmbfMXEEZhqEG+gQiMhRE0ZaySLvE7NNtrWVLa60Tq6K1Dqm96gdx7zXhb9jVrgP3G13XNP5t67ZMjthh9gxHYVv3dDz++P247/+Pjzsbf71yRN3CEZm+NntpPJOZmFIqKbL4cDm7nHVf3fL3/ZITWyxZmzozuyPinvFTorVEnGjyYmZiVNUMycnFFS9/ZTnrnhzGF2r5G/6PCjrg7svJH3PzVWN+XPr28i1Jy6D8I6H5aT9fonX5vXLqRF2+IYPy7qYUxZZ5ZybX5d8bU+rC5UxT+6lavTr3uzA8AAAAAAAAAAAciKECe9fvI8GfelOGkaj9x0dQnnI2O/XcCsH19VEZlJ3w6/Ojodf3e+T/ni5+4QAAAAAA/EHK1Tt507at0uEEsSepNk3EDREnEHkw7HSm7Q7/9XrcWeu9ItJaFGvfREOQOuu293zK65gc5oHyg+Q+ehgS+Ddr5M2dF35RSsIqR/c1AUZ6Q498shSRTntY+SzyY8eno3RJHmxiJzqeWs1BLGjrv9A6OvL9/WjTjrtbJBjB+jrbWuvGLef39Xb4ZpBsPlAjG+5+7TbfNL5w4w8AAADwK6r7xQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRJcP9/xFvpv5OHh/nP7W8sEm+J+NZHsnnrxAfLxfPcfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/oa8BAAD//9Lhu7E=") recvmmsg(r0, 0x0, 0x0, 0x10103, &(0x7f00000059c0)={0x77359400}) 1.577381918s ago: executing program 7 (id=2767): socket(0x1a, 0x5, 0x7fffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x74c42) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab72502000000000000001e000000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffff7, 0xc, 0x2, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x0, 0xffffffffffffffff, 0x1}) capset(0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 859.572272ms ago: executing program 9 (id=2769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='bic', 0x24) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup2(r1, r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000140)=ANY=[], 0xa) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 750.040423ms ago: executing program 5 (id=2771): r0 = socket(0x11, 0x3, 0xffffffff) setsockopt(r0, 0x107, 0x13, 0x0, 0x0) (fail_nth: 1) 749.607663ms ago: executing program 1 (id=2772): r0 = socket(0x11, 0x3, 0xffffffff) setsockopt(r0, 0x107, 0x13, 0x0, 0x0) 414.665923ms ago: executing program 7 (id=2773): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149", 0x13) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1203, 0x48a4d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) unshare(0x2040400) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_open_dev$loop(&(0x7f0000000040), 0x1b3, 0x0) ioctl$BLKPG(r9, 0x1269, &(0x7f0000000140)={0x2, 0x0, 0x98, &(0x7f0000000080)={0xffffffff, 0x0, 0xa}}) 375.166946ms ago: executing program 7 (id=2774): r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) splice(r3, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) 375.033597ms ago: executing program 5 (id=2775): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000001a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x18000000}, 0x94) 374.441236ms ago: executing program 1 (id=2776): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") ppoll(&(0x7f0000000d00)=[{r1, 0x4200}, {r1, 0xd044}], 0x2, 0x0, 0x0, 0x0) close(0x4) 317.709822ms ago: executing program 5 (id=2777): socket(0x1a, 0x5, 0x7fffffff) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x74c42) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000002000010327bd7000a64ab72502000000000000001e000000080017004e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) clock_adjtime(0x4, &(0x7f0000000000)={0x3ff, 0x0, 0xfffffffffffffff7, 0xc, 0x2, 0x0, 0x0, 0x4, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x5, 0x0, 0xffffffffffffffff, 0x1}) capset(0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r5, 0x3) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) 262.712487ms ago: executing program 4 (id=2778): syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x8, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000526000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de477f00f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 262.187897ms ago: executing program 5 (id=2779): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="9feb01001800000000000000980000009800000007000000070000000020000b02000000000000000000000300000000050000000400000009000000060000000000000e05000000000000000c0000000000001002000000070000000000000c020000000a00000003000005692300000d00000004000000060000000400000001000000030000000b00000003000000060000000d0000000000000e03000000000000000c0000001000000c050000000000002e5f5f00aba6dccd180803628b"], &(0x7f0000000180)=""/4096, 0xb7, 0x1000, 0x0, 0x6}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001180)=ANY=[@ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002380)=""/4113, 0x1011}, {&(0x7f0000000640)=""/196, 0xc4}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000cc0)=""/242, 0xf2}], 0x4}, 0x40000120) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) set_mempolicy(0x2002, &(0x7f0000000000)=0x401, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00000000c0)=""/179, 0xb3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f00000011c0), 0x7, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000001580)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x1c8, r3, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x911}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfa7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdb4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3aac}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8a19}]}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x81}, 0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) 217.400911ms ago: executing program 4 (id=2780): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x400, 0x15, 0x2ac}, &(0x7f0000000340)=0x0, &(0x7f0000000200)=0x0) (rerun: 32) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) (async) io_uring_enter(r1, 0x3516, 0x2, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0xb8, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xab, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (async) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/135, 0x87}], 0x1, 0xe, 0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), &(0x7f0000000140)=r5}, 0x20) 112.20171ms ago: executing program 4 (id=2781): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r1, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 111.948311ms ago: executing program 4 (id=2782): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r1, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 111.14668ms ago: executing program 1 (id=2783): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x4, 0x9, @loopback, 0x2}, {0xa, 0x4e24, 0x8000000, @mcast2}, 0x1, {[0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x390]}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000240)=0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 73.602104ms ago: executing program 4 (id=2784): r0 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x84, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x1, 0x12e, [0x200000000480, 0x0, 0x0, 0x2000000004b0, 0x2000000004e0], 0x84000000, 0x0, 0x0}, 0x1a6) 0s ago: executing program 4 (id=2785): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@dioread_nolock}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@discard}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3120046, &(0x7f00000005c0)={[{@stripe={'stripe', 0x3d, 0xfffffffffffffff8}}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@jqfmt_vfsv0}]}, 0x11, 0x553, &(0x7f0000001080)="$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") (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4G4IvN71UWgihUEJrYpHEkuhN48WDiScP4l9hJPHqP+DBiydDQozhIIbImpmdbaftbunb7pT280mGzsvuPN8Bvn2effZ5ZgLYt0bSPyoRhyLiWhIxVDhWjfzgSP119/+6eT5dkqjV3v0ziZufJovFcyX5zwP5m/8diiR9+8GJH9eUO7dw4/LkzMz09WyrN9+7cOPYpSuTF6cvTl+deG3i1MkTJ0+NH9/+9RUvJ+L97799mIz/8NvZJE7Ho676zvS6Vr+3d1slp2WPRK3uQXF/GsipbZ57t/h7aPkvtq4/kmpp4bBJF/L/j90R8WwMRVfhX3MoPn+71OCAtqol0aijgH0n2VL+9+18IECHNdoBjc/2zT4Hr1Vpc6sE6IR7Z+odAPXc746IRv5X876zvqxvYOB+sqKfJ4mI7fXM1aVl/PLz2c/SJVr0wwHtsXirN++3X13/J1luDkdftjVwv7Ii/yuFJd3/zhbLH1m1Lf+hcxZvRcRzef3fE5vK/5FC/n+4xfLlPwAAAAAAAOycO2ci4pVm4/8qS+N/epqM/xmMiNM7UP7jv/+r3M1Xkh0oDii4dybijabjf5fG+A535Vv/z8YDdCcXLs1MH4+IpyLiaHT3ptvjq85bHCF87MuD37Qqvzj+L13S8htjAfMz3a2umog7NTk/ud3rBiLu3Yp4Phv/ezjfs3L8T1r/J03q/zS/r22wjIMv3T7X6tjj8x9ol9p3EUea1v/Lze10bWz+yrWxuab35xjL2gNjjVZBw3IL4IVPvhpsVf46+e8uEtBmaf0/sH7+9ybF+/XMbe78PRHx6kK11ur4Vtv/Pcl7XY3zpz6enJ+/Ph7Rk7y1dv/E5mKGvaqRD418SfP/6Ivr9/8ttf8LedgfEYurT96ih+6ZR4O/t4pH+x/Kk+b/1Pr1//DK+n/zKxO3h39qVf65DdX/J7I6/Wi+R/8fFK29H8eaLByIpglaSrgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8ISrRMT/IqmMLq1XKqOjEYMR8XQMVGZm5+ZfvjD70dWp9Fj2/P9K40m/Q/XtpPH8/+HC9sTK7f60rAMR8XVXf3Z89PzszFTZFw8AAAAAAAAAAAAAAAAAAAC7xGA257/Wu3r+f+qPrrKjA9qumv9czvee0mIBOivP/y8+2PQ7a707Hw3QSdWyAwBKs/H8725rHEDntc7/Bw9rmY6GA3SQ9j/sX1vMf18Pwh6g/of9aoN9en3tjgMog/ofAAAAAAD2lAOH7/yaRMTi6/3ZEoXJvwb7w95WKTsAoDTG8ML+VZ0tOwKgLD7jA8nS2j9NJ/u3Hv2ftCcgAAAAAAAAAAAAAGCNI4fM/4f9av35/8b2w162zvz/LPmzRwM8rG3g5cCTpvWjP9T9sNet8xnfA79gn3hcbW/+PwAAAAAAAAAAAADsAn03Lk/OzExfn1t48lbe3B1hbG5lcXJXhLHdlf6IWNrzqD1ldUdE+Ve6cyvViMrGXty4BUeJMZf8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFjyXwAAAP//CHogwg==") (async, rerun: 32) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200088b, &(0x7f0000000140)={[{@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@resuid}]}, 0x0, 0x56b, &(0x7f0000000680)="$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") perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x20004, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x102260, 0x10000, 0x3, 0x1, 0x8, 0x20001, 0x0, 0x0, 0x0, 0x0, 0xef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000004018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x64}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, r8, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x24044080) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 02] __quota_error: 105 callbacks suppressed [ 211.395475][T12902] Quota error (device loop1): write_blk: dquota write failed [ 211.402933][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 211.402954][ C1] EXT4-fs (loop1): initial error at time 1771644483: ext4_mb_mark_diskspace_used:4224 [ 211.402981][ C1] EXT4-fs (loop1): last error at time 1771644483: ext4_mb_mark_diskspace_used:4224 [ 211.473098][T12902] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 211.482708][T12902] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 211.520380][T12927] loop0: detected capacity change from 0 to 128 [ 211.521688][T12902] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.1978: Failed to acquire dquot type 1 [ 211.561663][T12902] loop1: lost filesystem error report for type 5 error -117 [ 211.561877][T12902] EXT4-fs error (device loop1): mb_free_blocks:2047: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 211.601687][T12902] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1978: corrupted inode contents [ 211.634258][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 211.634443][T12902] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #12: comm syz.1.1978: mark_inode_dirty error [ 211.687007][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 211.731546][T12933] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12933 comm=syz.9.1992 [ 211.754650][T12930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1991'. [ 211.764135][T12902] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1978: corrupted inode contents [ 211.764166][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 211.781719][T12902] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.1978: mark_inode_dirty error [ 211.811753][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 211.812456][T12902] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1978: corrupted inode contents [ 211.828441][T12925] lo speed is unknown, defaulting to 1000 [ 211.836320][T12933] netlink: 'syz.9.1992': attribute type 1 has an invalid length. [ 211.878101][T12933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.891655][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 211.893307][T12902] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 211.926969][T12936] bond1: (slave dummy0): making interface the new active one [ 211.975876][T12936] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 212.026144][T12902] loop1: lost filesystem error report for type 5 error -117 [ 212.029030][T12902] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #12: comm syz.1.1978: corrupted inode contents [ 212.094900][T12938] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 212.098478][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 212.122959][T12902] EXT4-fs error (device loop1): ext4_truncate:4587: inode #12: comm syz.1.1978: mark_inode_dirty error [ 212.137431][T12943] loop2: detected capacity change from 0 to 8192 [ 212.196408][T12902] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 212.199634][T12902] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 212.252787][T12948] loop2: detected capacity change from 0 to 512 [ 212.263076][T12948] ext4: Unknown parameter 'euid<00000000000000032896' [ 212.271267][T12902] loop1: lost filesystem error report for type 5 error -117 [ 212.288439][T12902] EXT4-fs (loop1): 1 truncate cleaned up [ 212.324190][T12902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 212.453020][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 212.560963][T12961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=12961 comm=syz.2.2000 [ 212.667048][T12959] cgroup: fork rejected by pids controller in /syz2 [ 212.698876][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 212.757803][ T8006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.156470][T12998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=12998 comm=syz.0.2001 [ 213.363716][T13364] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 213.498040][T13397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2005'. [ 213.573696][T13399] loop9: detected capacity change from 0 to 8192 [ 214.268744][T13418] tipc: New replicast peer: 255.255.255.255 [ 214.282006][T13418] tipc: Enabled bearer , priority 10 [ 214.292788][T13405] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 214.305225][T13418] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2011'. [ 214.325658][T13418] tipc: Disabling bearer [ 214.391702][ T28] audit: type=1400 audit(1771644486.842:2019): avc: denied { map } for pid=13410 comm="syz.1.2012" path="socket:[34319]" dev="sockfs" ino=34319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 214.532867][ T28] audit: type=1400 audit(1771644486.842:2020): avc: denied { accept } for pid=13410 comm="syz.1.2012" path="socket:[34319]" dev="sockfs" ino=34319 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 214.614066][T13431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'. [ 214.871529][T13448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=13448 comm=syz.1.2016 [ 214.875121][T13439] loop0: detected capacity change from 0 to 8192 [ 215.138337][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2024'. [ 215.154681][T13457] loop1: detected capacity change from 0 to 256 [ 215.329620][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2023'. [ 215.406807][T13460] team0 (unregistering): Port device team_slave_0 removed [ 215.433882][T13460] team0 (unregistering): Port device team_slave_1 removed [ 215.457617][T13468] loop0: detected capacity change from 0 to 1024 [ 215.470166][T13468] ext4: Bad value for 'debug_want_extra_isize' [ 215.546327][T13477] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.671208][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 215.715841][T13493] loop9: detected capacity change from 0 to 512 [ 215.757637][T13493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.770568][T13493] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.785187][T13491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=13491 comm=syz.2.2034 [ 215.785286][ T28] audit: type=1400 audit(1771644488.282:2021): avc: denied { create } for pid=13492 comm="syz.9.2035" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 215.876842][T13503] siw: device registration error -23 [ 216.034657][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.103471][T13508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 216.393012][T15201] loop0: detected capacity change from 0 to 1024 [ 216.414175][T15201] EXT4-fs: Ignoring removed nobh option [ 216.436237][T15201] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.568976][T15201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.791367][ T9396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.060987][T17243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2047'. [ 217.240429][T17252] loop2: detected capacity change from 0 to 1024 [ 217.251262][T17252] EXT4-fs: Ignoring removed nobh option [ 217.256910][T17252] EXT4-fs: inline encryption not supported [ 217.282928][T17252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.296102][T17257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2051'. [ 217.311229][ T28] audit: type=1400 audit(1771644489.802:2022): avc: denied { read } for pid=17253 comm="syz.0.2051" path="socket:[34503]" dev="sockfs" ino=34503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 217.347996][T17257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 217.395544][T17252] netem: change failed [ 217.487613][ T28] audit: type=1400 audit(1771644489.982:2023): avc: denied { ioctl } for pid=17272 comm="syz.1.2058" path="socket:[33479]" dev="sockfs" ino=33479 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.513242][T17275] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20004 [ 217.529278][ T28] audit: type=1400 audit(1771644490.012:2024): avc: denied { getopt } for pid=17272 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 217.549277][ T28] audit: type=1400 audit(1771644490.012:2025): avc: denied { getopt } for pid=17272 comm="syz.1.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 217.581348][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2050'. [ 217.644620][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.665752][T17290] loop9: detected capacity change from 0 to 256 [ 217.678068][T17290] FAT-fs (loop9): invalid media value (0x00) [ 217.697143][T17290] FAT-fs (loop9): Can't find a valid FAT filesystem [ 217.851414][T17305] loop9: detected capacity change from 0 to 4096 [ 217.877172][T17305] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 217.936944][T17305] loop9: detected capacity change from 0 to 8192 [ 218.104690][T17305] loop9: p1 < > p2 p4 < p5 > [ 218.109468][T17305] loop9: partition table partially beyond EOD, truncated [ 218.141097][T17305] loop9: p1 start 134217728 is beyond EOD, truncated [ 218.161917][T17305] loop9: p2 size 591360 extends beyond EOD, truncated [ 218.180054][T17305] loop9: p5 size 591360 extends beyond EOD, truncated [ 218.337623][T17318] dvmrp1: entered allmulticast mode [ 218.369574][T17321] siw: device registration error -23 [ 218.376864][T17321] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 218.532250][ T28] audit: type=1400 audit(1771644491.022:2026): avc: denied { read } for pid=17317 comm="syz.1.2073" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.595038][T17318] loop1: detected capacity change from 0 to 256 [ 218.671264][T17318] FAT-fs (loop1): Directory bread(block 64) failed [ 218.717718][ T28] audit: type=1400 audit(1771644491.022:2027): avc: denied { open } for pid=17317 comm="syz.1.2073" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.830616][T17318] FAT-fs (loop1): Directory bread(block 65) failed [ 218.841174][T17315] siw: device registration error -23 [ 218.847323][T17318] FAT-fs (loop1): Directory bread(block 66) failed [ 218.858499][T17318] FAT-fs (loop1): Directory bread(block 67) failed [ 218.866669][T17318] FAT-fs (loop1): Directory bread(block 68) failed [ 218.873642][T17318] FAT-fs (loop1): Directory bread(block 69) failed [ 218.880384][T17318] FAT-fs (loop1): Directory bread(block 70) failed [ 218.889149][T17318] FAT-fs (loop1): Directory bread(block 71) failed [ 218.896206][T17318] FAT-fs (loop1): Directory bread(block 72) failed [ 218.903078][T17318] FAT-fs (loop1): Directory bread(block 73) failed [ 219.267242][T17332] loop0: detected capacity change from 0 to 4096 [ 219.274586][T17332] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 219.380047][T17342] loop2: detected capacity change from 0 to 4096 [ 219.403490][T17332] loop0: detected capacity change from 0 to 8192 [ 219.430039][T17342] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 219.524106][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 219.580515][T17361] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2085'. [ 219.607277][T17360] dvmrp6: entered allmulticast mode [ 220.009332][T17332] loop0: p1 < > p2 p4 < p5 > [ 220.041699][T17332] loop0: partition table partially beyond EOD, truncated [ 220.063224][T17332] loop0: p1 start 134217728 is beyond EOD, truncated [ 220.075777][T17332] loop0: p2 size 591360 extends beyond EOD, truncated [ 220.086557][T17332] loop0: p5 size 591360 extends beyond EOD, truncated [ 220.150831][T17371] loop1: detected capacity change from 0 to 4096 [ 220.162742][T17371] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 220.268094][T17375] siw: device registration error -23 [ 220.481675][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.761151][T17386] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2092'. [ 220.770463][T17386] netlink: zone id is out of range [ 220.775664][T17386] netlink: zone id is out of range [ 220.780996][T17386] netlink: zone id is out of range [ 220.786704][T17386] netlink: zone id is out of range [ 220.791902][T17386] netlink: zone id is out of range [ 220.797931][T17386] netlink: zone id is out of range [ 220.803106][T17386] netlink: zone id is out of range [ 220.808658][T17386] netlink: zone id is out of range [ 220.813930][T17386] netlink: zone id is out of range [ 220.864688][ T4002] loop1: p1 < > p2 p4 < p5 > [ 220.964353][ T4002] loop1: partition table partially beyond EOD, truncated [ 221.109975][ T4002] loop1: p1 start 134217728 is beyond EOD, truncated [ 221.136055][ T4002] loop1: p2 size 591360 extends beyond EOD, truncated [ 221.705046][T17393] FAT-fs (loop9): Directory bread(block 64) failed [ 221.711744][T17393] FAT-fs (loop9): Directory bread(block 65) failed [ 221.718325][T17393] FAT-fs (loop9): Directory bread(block 66) failed [ 221.724963][T17393] FAT-fs (loop9): Directory bread(block 67) failed [ 221.731698][T17393] FAT-fs (loop9): Directory bread(block 68) failed [ 221.738318][T17393] FAT-fs (loop9): Directory bread(block 69) failed [ 221.745220][T17393] FAT-fs (loop9): Directory bread(block 70) failed [ 221.751809][T17393] FAT-fs (loop9): Directory bread(block 71) failed [ 221.758592][T17393] FAT-fs (loop9): Directory bread(block 72) failed [ 221.765314][T17393] FAT-fs (loop9): Directory bread(block 73) failed [ 222.091998][ T4002] loop1: p5 size 591360 extends beyond EOD, truncated [ 222.102088][T17370] loop1: p1 < > p2 p4 < p5 > [ 222.106785][T17370] loop1: partition table partially beyond EOD, truncated [ 222.141718][T17403] set_capacity_and_notify: 2 callbacks suppressed [ 222.141734][T17403] loop2: detected capacity change from 0 to 128 [ 222.155012][T17403] msdos: Bad value for 'gid' [ 222.159609][T17403] msdos: Bad value for 'gid' [ 222.174807][T17370] loop1: p1 start 134217728 is beyond EOD, truncated [ 222.199662][T17370] loop1: p2 size 591360 extends beyond EOD, truncated [ 222.234000][T17370] loop1: p5 size 591360 extends beyond EOD, truncated [ 222.432338][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 222.462944][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 222.473979][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 222.581212][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 222.592573][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 222.603784][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 223.013108][T17418] tipc: New replicast peer: 255.255.255.255 [ 223.019510][T17418] tipc: Enabled bearer , priority 10 [ 223.352324][T17425] loop0: detected capacity change from 0 to 1024 [ 223.915854][T17418] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2106'. [ 223.936224][T17425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 223.937929][T17418] tipc: Disabling bearer [ 223.944374][T17425] System zones: 0-1, 3-36 [ 223.962394][T17425] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.2105: bad orphan inode 134217728 [ 223.973072][T17425] loop0: lost filesystem error report for type 5 error -117 [ 223.981620][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 223.995353][ C1] EXT4-fs (loop0): initial error at time 1771644496: ext4_orphan_get:1417 [ 224.003901][ C1] EXT4-fs (loop0): last error at time 1771644496: ext4_orphan_get:1417 [ 224.312379][T17425] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.419562][T17431] siw: device registration error -23 [ 224.426984][T17431] net_ratelimit: 677 callbacks suppressed [ 224.427028][T17431] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 224.909593][ T28] audit: type=1326 audit(1771644497.392:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 224.937344][ T28] audit: type=1326 audit(1771644497.392:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 224.937752][ T9396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.962823][ T28] audit: type=1326 audit(1771644497.392:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 224.995402][ T28] audit: type=1326 audit(1771644497.392:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.019315][ T28] audit: type=1326 audit(1771644497.392:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.043845][ T28] audit: type=1326 audit(1771644497.392:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.067779][ T28] audit: type=1326 audit(1771644497.392:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.194238][ T28] audit: type=1326 audit(1771644497.392:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.218256][ T28] audit: type=1326 audit(1771644497.392:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.242195][ T28] audit: type=1326 audit(1771644497.392:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17439 comm="syz.9.2110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5a2a01c629 code=0x7ffc0000 [ 225.479507][T17459] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2116'. [ 225.640257][T17453] loop0: detected capacity change from 0 to 8192 [ 225.730141][T17468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=17468 comm=syz.7.2116 [ 225.846120][T17459] cgroup: fork rejected by pids controller in /syz7 [ 225.928555][T17496] loop1: detected capacity change from 0 to 128 [ 225.935507][T17496] msdos: Bad value for 'gid' [ 225.940237][T17496] msdos: Bad value for 'gid' [ 226.108596][T17595] loop9: detected capacity change from 0 to 1024 [ 226.116669][T17595] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.283573][T17648] siw: device registration error -23 [ 226.291715][T17648] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 226.702804][T17595] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 226.788339][T17595] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.941785][T17595] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2119: bg 0: block 112: padding at end of block bitmap is not set [ 226.963051][T17690] loop2: detected capacity change from 0 to 164 [ 227.016614][T17690] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 227.026422][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 227.064312][T17694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 227.087611][T17702] loop9: detected capacity change from 0 to 128 [ 227.254028][T17694] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=17694 comm=syz.1.2124 [ 227.645184][T17724] loop1: detected capacity change from 0 to 512 [ 227.710105][T17724] ext4: Unknown parameter 'uid<00000000000000000000' [ 228.695793][T17740] tipc: New replicast peer: 255.255.255.255 [ 228.706957][T17740] tipc: Enabled bearer , priority 10 [ 228.732955][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 228.748823][T17740] tipc: Disabling bearer [ 229.128282][T17755] loop2: detected capacity change from 0 to 256 [ 229.381310][T17762] loop1: detected capacity change from 0 to 128 [ 229.738614][T17766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2142'. [ 229.915179][T17755] FAT-fs (loop2): Directory bread(block 64) failed [ 229.922369][T17755] FAT-fs (loop2): Directory bread(block 65) failed [ 229.929043][T17755] FAT-fs (loop2): Directory bread(block 66) failed [ 229.935627][T17755] FAT-fs (loop2): Directory bread(block 67) failed [ 229.942496][T17755] FAT-fs (loop2): Directory bread(block 68) failed [ 229.949373][T17755] FAT-fs (loop2): Directory bread(block 69) failed [ 229.956130][T17755] FAT-fs (loop2): Directory bread(block 70) failed [ 229.962923][T17755] FAT-fs (loop2): Directory bread(block 71) failed [ 229.969588][T17755] FAT-fs (loop2): Directory bread(block 72) failed [ 229.976436][T17755] FAT-fs (loop2): Directory bread(block 73) failed [ 230.338191][T17785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17785 comm=syz.9.2146 [ 231.050870][T17812] loop2: detected capacity change from 0 to 1024 [ 231.061093][T17816] loop9: detected capacity change from 0 to 256 [ 231.082323][T17812] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.123012][T17812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 231.137766][T17826] bridge_slave_0: left allmulticast mode [ 231.145109][T17826] bridge_slave_0: left promiscuous mode [ 231.151071][T17827] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2157'. [ 231.161126][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.168617][T17812] ext4 filesystem being mounted at /432/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.180074][T17826] bridge_slave_1: left allmulticast mode [ 231.185971][T17826] bridge_slave_1: left promiscuous mode [ 231.193050][T17812] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2155: bg 0: block 112: padding at end of block bitmap is not set [ 231.193443][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.216994][T17826] bond0: (slave bond_slave_0): Releasing backup interface [ 231.225315][T17826] bond_slave_0: left promiscuous mode [ 231.231909][T17826] bond0: (slave bond_slave_1): Releasing backup interface [ 231.248192][T17826] bond_slave_1: left promiscuous mode [ 231.262869][T17826] team0: Port device team_slave_0 removed [ 231.268768][T17828] loop1: detected capacity change from 0 to 128 [ 231.275484][T17828] msdos: Bad value for 'gid' [ 231.275960][T17826] team0: Port device team_slave_1 removed [ 231.283694][T17828] msdos: Bad value for 'gid' [ 231.299731][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.317326][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.325449][T17826] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 231.347886][T17827] team0 (unregistering): Port device team_slave_0 removed [ 231.360522][T17827] team0 (unregistering): Port device team_slave_1 removed [ 231.385883][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 231.406214][T17838] loop2: detected capacity change from 0 to 128 [ 232.374364][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 232.374391][ T28] audit: type=1400 audit(1771644504.872:2141): avc: denied { append } for pid=17865 comm="syz.2.2171" name="pfkey" dev="proc" ino=4026532846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 232.506614][T17866] loop2: detected capacity change from 0 to 4096 [ 232.637956][T17866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.982515][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2174'. [ 233.211221][T17886] tipc: New replicast peer: 255.255.255.255 [ 233.222046][T17887] loop9: detected capacity change from 0 to 1024 [ 233.236180][T17886] tipc: Enabled bearer , priority 10 [ 233.244775][T17887] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.274928][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2176'. [ 233.303469][T17887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 233.319865][T17886] tipc: Disabling bearer [ 233.341528][T17887] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.367399][T17887] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2177: bg 0: block 112: padding at end of block bitmap is not set [ 233.427881][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 233.462178][ T3310] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /437/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.487558][ T28] audit: type=1400 audit(1771644505.952:2142): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 233.522284][ T3310] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.547209][T17905] tipc: New replicast peer: 255.255.255.255 [ 233.554609][T17905] tipc: Enabled bearer , priority 10 [ 233.561065][T17905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2185'. [ 233.570317][T17905] tipc: Disabling bearer [ 233.581824][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 233.616817][ T3310] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /437/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.682025][ T3310] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.744110][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 233.768415][ T3310] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /437/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.817043][ T3310] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.856641][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 233.880898][ T3310] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /437/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.934566][ T3310] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 233.970860][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 233.997192][ T3310] EXT4-fs error (device loop2): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /437/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 234.066142][ T3310] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 234.086421][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 234.098760][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 234.111676][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 234.124265][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 234.136639][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 234.185689][ T3310] EXT4-fs warning (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 234.358447][T17919] loop0: detected capacity change from 0 to 1024 [ 234.373063][T17917] 9p: Bad value for 'rfdno' [ 234.500031][T17919] lo speed is unknown, defaulting to 1000 [ 234.800267][T17930] loop1: detected capacity change from 0 to 1024 [ 234.808805][T17930] EXT4-fs: Ignoring removed mblk_io_submit option [ 234.855892][ T9346] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.875222][T17930] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 234.888877][T17930] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.913168][T17930] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2192: bg 0: block 112: padding at end of block bitmap is not set [ 234.937690][T17930] veth1_macvtap: left promiscuous mode [ 235.179013][T17939] loop9: detected capacity change from 0 to 1024 [ 235.403015][ T8006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 235.419116][T17945] tipc: New replicast peer: 255.255.255.255 [ 235.425733][T17945] tipc: Enabled bearer , priority 10 [ 235.432397][T17945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2199'. [ 235.434831][T17939] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.442020][T17945] tipc: Disabling bearer [ 235.472513][T17939] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2194'. [ 235.616701][T17963] IPv6: addrconf: prefix option has invalid lifetime [ 235.621510][T17946] lo speed is unknown, defaulting to 1000 [ 235.754116][ T12] bridge_slave_1: left allmulticast mode [ 235.759799][ T12] bridge_slave_1: left promiscuous mode [ 235.780655][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.832155][ T12] team0: Port device erspan0 removed [ 235.848776][ T12] dvmrp1 (unregistering): left allmulticast mode [ 235.875654][ T12] dvmrp6 (unregistering): left allmulticast mode [ 235.885380][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.945968][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.978799][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.011681][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 236.044553][ T12] bond0 (unregistering): Released all slaves [ 236.070287][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 236.086522][ T12] bond1 (unregistering): Released all slaves [ 236.108273][ T12] bond2 (unregistering): Released all slaves [ 236.117126][ T12] bond3 (unregistering): Released all slaves [ 236.148645][T17974] lo speed is unknown, defaulting to 1000 [ 236.281446][T17946] chnl_net:caif_netlink_parms(): no params data found [ 236.324586][T18018] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2212'. [ 236.508072][T18018] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=18018 comm=syz.9.2212 [ 236.518103][T18050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 237.186637][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.196324][T17946] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.204175][T17946] bridge_slave_0: entered allmulticast mode [ 237.210642][T17946] bridge_slave_0: entered promiscuous mode [ 237.217418][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.224493][T17946] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.231739][T17946] bridge_slave_1: entered allmulticast mode [ 237.238239][T17946] bridge_slave_1: entered promiscuous mode [ 237.289258][T18063] loop1: detected capacity change from 0 to 256 [ 237.312616][T17946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.352754][T17946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.374045][T18069] loop0: detected capacity change from 0 to 4096 [ 237.389681][ T12] tipc: Left network mode [ 237.403612][T17946] team0: Port device team_slave_0 added [ 237.427302][T17946] team0: Port device team_slave_1 added [ 237.436924][T18069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.449321][T18087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2217'. [ 237.550784][T18090] tipc: New replicast peer: 255.255.255.255 [ 237.561953][T18090] tipc: Enabled bearer , priority 10 [ 237.570945][ T12] hsr_slave_0: left promiscuous mode [ 237.577097][ T12] hsr_slave_1: left promiscuous mode [ 237.584409][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.591886][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.635052][T18107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18107 comm=syz.9.2225 [ 237.649599][ T12] team0 (unregistering): Port device team_slave_1 removed [ 237.663840][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.697661][ T8906] smc: removing ib device syz0 [ 237.721209][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2222'. [ 237.742710][T18103] tipc: Disabling bearer [ 237.771978][T17946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.790704][T18111] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2226'. [ 237.803919][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.863832][T17946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.876426][T17946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.883423][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.909520][T17946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.940687][T17946] hsr_slave_0: entered promiscuous mode [ 237.947871][T17946] hsr_slave_1: entered promiscuous mode [ 237.953865][T17946] debugfs: 'hsr0' already exists in 'hsr' [ 237.959813][T17946] Cannot create hsr debugfs directory [ 237.996288][ T9396] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /124/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.064638][ T9396] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.113436][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.165106][ T9396] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /124/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.220665][ T9396] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.315244][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.342050][ T9396] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /124/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.402793][ T9396] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.450779][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.463766][ T9396] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /124/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.514374][ T9396] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.542090][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.554079][ T9396] EXT4-fs error (device loop0): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /124/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.580663][ T9396] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 238.603016][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.644209][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.663156][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.688911][T18149] loop9: detected capacity change from 0 to 1024 [ 238.713490][T18149] EXT4-fs: Ignoring removed mblk_io_submit option [ 238.723003][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.745679][T18149] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.752366][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.769870][ T9396] EXT4-fs warning (device loop0): ext4_empty_dir:3097: inode #12: comm syz-executor: directory missing '..' [ 238.786410][T18149] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.817405][T17946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.834370][T18149] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2232: bg 0: block 112: padding at end of block bitmap is not set [ 238.869937][T17946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.892430][T18149] veth1_macvtap: left promiscuous mode [ 238.900033][T17946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.913861][T17946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.958933][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 239.058244][T17946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.102985][ T9396] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.306437][T18159] loop1: detected capacity change from 0 to 1024 [ 239.318456][T18159] EXT4-fs: inline encryption not supported [ 239.372948][T18159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.534102][ T313] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.544976][ T8006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.565060][T17946] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.613977][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2238'. [ 239.625577][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.632703][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.647971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.655111][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.711061][ T313] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.731264][T18230] loop9: detected capacity change from 0 to 256 [ 239.747907][T18204] tipc: New replicast peer: 255.255.255.255 [ 239.759926][T18204] tipc: Enabled bearer , priority 10 [ 239.799877][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2239'. [ 239.830837][T18232] tipc: Disabling bearer [ 239.854797][ T313] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.870076][T18242] tipc: New replicast peer: 255.255.255.255 [ 239.881005][T18230] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2240'. [ 239.893048][T18242] tipc: Enabled bearer , priority 10 [ 239.910025][T18255] tipc: Disabling bearer [ 239.932019][ T313] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.116924][ T313] bridge_slave_1: left allmulticast mode [ 240.128361][ T313] bridge_slave_1: left promiscuous mode [ 240.144296][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.171113][ T313] bridge_slave_0: left allmulticast mode [ 240.179429][ T313] bridge_slave_0: left promiscuous mode [ 240.192475][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.304651][ T313] dvmrp6 (unregistering): left allmulticast mode [ 240.417670][ T313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.433712][ T313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.452945][ T313] bond0 (unregistering): Released all slaves [ 240.477999][T17946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.514873][ T313] tipc: Left network mode [ 240.527285][ T313] hsr_slave_0: left promiscuous mode [ 240.542519][ T313] hsr_slave_1: left promiscuous mode [ 240.549770][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.564190][ T313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.573737][ T313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.581216][ T313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.599014][ T313] veth1_macvtap: left promiscuous mode [ 240.604681][ T313] veth0_macvtap: left promiscuous mode [ 240.615720][ T313] veth1_vlan: left promiscuous mode [ 240.621179][ T313] veth0_vlan: left promiscuous mode [ 240.730212][T18286] loop1: detected capacity change from 0 to 512 [ 240.748757][T18286] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 240.762518][T18286] EXT4-fs (loop1): 1 orphan inode deleted [ 240.769146][T18286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.502966][ T313] team0 (unregistering): Port device team_slave_1 removed [ 241.503576][ T8006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.522036][ T313] team0 (unregistering): Port device team_slave_0 removed [ 241.730809][T18297] loop9: detected capacity change from 0 to 128 [ 241.737502][T18297] msdos: Bad value for 'gid' [ 241.742262][T18297] msdos: Bad value for 'gid' [ 241.770795][T18197] chnl_net:caif_netlink_parms(): no params data found [ 242.293661][T18197] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.318128][T18197] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.336711][T18197] bridge_slave_0: entered allmulticast mode [ 242.370404][T18197] bridge_slave_0: entered promiscuous mode [ 242.659999][T18197] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.693654][T18197] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.705745][T18197] bridge_slave_1: entered allmulticast mode [ 242.740716][T18197] bridge_slave_1: entered promiscuous mode [ 242.754459][T18333] tipc: New replicast peer: 255.255.255.255 [ 242.784523][T18333] tipc: Enabled bearer , priority 10 [ 242.811951][T18341] __nla_validate_parse: 1 callbacks suppressed [ 242.811993][T18341] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2251'. [ 242.837448][T18341] tipc: Disabling bearer [ 242.877803][T18197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.941532][T18197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.982670][T17946] veth0_vlan: entered promiscuous mode [ 243.018743][T17946] veth1_vlan: entered promiscuous mode [ 243.068121][T18197] team0: Port device team_slave_0 added [ 243.091372][T17946] veth0_macvtap: entered promiscuous mode [ 243.111059][T17946] veth1_macvtap: entered promiscuous mode [ 243.134859][T18197] team0: Port device team_slave_1 added [ 243.186155][T17946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.216335][T18197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.233973][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.303643][T18197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.327177][T17946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.346779][T18197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.356401][T18197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.427242][T18197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.461903][T18322] lo speed is unknown, defaulting to 1000 [ 243.467950][T18322] lo speed is unknown, defaulting to 1000 [ 243.473979][T18322] lo speed is unknown, defaulting to 1000 [ 243.480540][T18322] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 243.491009][T18322] lo speed is unknown, defaulting to 1000 [ 243.497270][T18322] lo speed is unknown, defaulting to 1000 [ 243.503379][T18322] lo speed is unknown, defaulting to 1000 [ 243.509629][T18322] lo speed is unknown, defaulting to 1000 [ 243.515962][T18322] lo speed is unknown, defaulting to 1000 [ 243.522125][T18322] lo speed is unknown, defaulting to 1000 [ 243.528415][T18322] lo speed is unknown, defaulting to 1000 [ 243.531434][T18372] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 243.559537][ T8908] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.579985][ T8908] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.603213][T18197] hsr_slave_0: entered promiscuous mode [ 243.609417][T18197] hsr_slave_1: entered promiscuous mode [ 243.621518][T18197] debugfs: 'hsr0' already exists in 'hsr' [ 243.627652][T18197] Cannot create hsr debugfs directory [ 243.640986][ T8908] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.651823][ T8908] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.774567][T18378] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2255'. [ 243.843950][T18406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 243.890598][T18406] vhci_hcd vhci_hcd.3: default hub control req: 8029 v0000 i0000 l31125 [ 243.902244][T18402] loop9: detected capacity change from 0 to 8192 [ 244.082543][T18435] netlink: 'syz.4.2264': attribute type 27 has an invalid length. [ 244.144287][T18197] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.171777][T18442] tipc: New replicast peer: 255.255.255.255 [ 244.178284][T18442] tipc: Enabled bearer , priority 10 [ 244.200926][T18446] loop4: detected capacity change from 0 to 1024 [ 244.201960][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2266'. [ 244.209161][T18446] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.221116][T18442] tipc: Disabling bearer [ 244.228615][T18447] loop1: detected capacity change from 0 to 128 [ 244.235013][T18197] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.245437][T18197] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.285296][T18197] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.309722][T18446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.328163][T18446] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.350023][T18446] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2268: bg 0: block 112: padding at end of block bitmap is not set [ 244.424780][T18197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.461328][T18197] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.480749][T18446] veth1_macvtap: left promiscuous mode [ 244.520426][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.527603][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.538961][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 244.550906][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.558094][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.641441][T18197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.680030][T18472] loop4: detected capacity change from 0 to 8192 [ 244.691679][T18476] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2271'. [ 244.934280][T18197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.008648][T18499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2278'. [ 245.105148][T18506] siw: device registration error -23 [ 245.581811][T18507] siw: device registration error -23 [ 245.930004][T18518] tipc: New replicast peer: 255.255.255.255 [ 245.942803][T18522] loop4: detected capacity change from 0 to 256 [ 245.963312][T18518] tipc: Enabled bearer , priority 10 [ 245.994372][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2279'. [ 246.038597][T18518] tipc: Disabling bearer [ 246.115053][T18550] tipc: New replicast peer: 255.255.255.255 [ 246.129112][T18550] tipc: Enabled bearer , priority 10 [ 246.139652][T18554] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2281'. [ 246.151870][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2285'. [ 246.179242][T18550] tipc: Disabling bearer [ 246.984374][T18563] loop9: detected capacity change from 0 to 8192 [ 247.286785][T18570] siw: device registration error -23 [ 247.846128][T18554] team0 (unregistering): Port device team_slave_0 removed [ 247.915038][T18554] team0 (unregistering): Port device team_slave_1 removed [ 247.935991][T18197] veth0_vlan: entered promiscuous mode [ 247.952873][T18576] Invalid argument reading file caps for ./file0 [ 247.953478][T18197] veth1_vlan: entered promiscuous mode [ 247.992956][T18576] netem: change failed [ 248.027407][T18197] veth0_macvtap: entered promiscuous mode [ 248.051158][T18197] veth1_macvtap: entered promiscuous mode [ 248.066305][T18592] tipc: New replicast peer: 255.255.255.255 [ 248.072805][T18592] tipc: Enabled bearer , priority 10 [ 248.088463][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2296'. [ 248.099047][T18592] tipc: Disabling bearer [ 248.123629][T18197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.170970][T18197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.190162][T18607] loop9: detected capacity change from 0 to 1024 [ 248.205649][ T8906] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.224754][ T8906] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.240601][T18607] EXT4-fs: Ignoring removed nobh option [ 248.252052][T18607] EXT4-fs: inline encryption not supported [ 248.261280][ T8906] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.270768][ T313] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.305922][T18607] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.357277][T18605] loop4: detected capacity change from 0 to 8192 [ 248.407659][T18616] netlink: 'syz.5.2237': attribute type 3 has an invalid length. [ 248.461757][T18616] netlink: 49691 bytes leftover after parsing attributes in process `syz.5.2237'. [ 248.507481][T18616] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2237'. [ 248.536573][T18628] netlink: 'syz.4.2299': attribute type 4 has an invalid length. [ 248.557486][T18628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=18628 comm=syz.4.2299 [ 248.826786][T18647] siw: device registration error -23 [ 248.833343][T18647] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 249.185909][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.230977][T18654] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2304'. [ 249.329620][T18658] loop1: detected capacity change from 0 to 256 [ 249.392276][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2303'. [ 249.414199][T18679] netlink: 'syz.7.2308': attribute type 12 has an invalid length. [ 249.497592][T18636] lo speed is unknown, defaulting to 1000 [ 249.509622][T18679] netlink: 'syz.7.2308': attribute type 1 has an invalid length. [ 249.528571][T18681] loop9: detected capacity change from 0 to 8192 [ 249.744270][T18718] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2316'. [ 249.780294][T18721] tipc: Started in network mode [ 249.785555][T18721] tipc: Node identity ac14140f, cluster identity 4711 [ 249.793176][T18721] tipc: New replicast peer: 255.255.255.255 [ 249.799737][T18721] tipc: Enabled bearer , priority 10 [ 249.829539][T18721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2317'. [ 250.000937][T18721] tipc: Disabling bearer [ 250.242486][T18732] loop5: detected capacity change from 0 to 128 [ 250.249597][T18732] msdos: Bad value for 'gid' [ 250.254229][T18732] msdos: Bad value for 'gid' [ 251.062080][T18799] loop1: detected capacity change from 0 to 512 [ 251.099675][T18799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.164481][T18799] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 251.183719][T18812] loop9: detected capacity change from 0 to 1024 [ 251.225546][T18812] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.225757][T18799] System zones: 1-2, 4-12, 8-8 [ 251.257957][T18799] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2323: iget: bad i_size value: 38620345925642 [ 251.284578][T18799] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.287732][T18799] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2323: couldn't read orphan inode 15 (err -117) [ 251.297299][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 251.297340][ C1] EXT4-fs (loop1): initial error at time 1771644523: ext4_orphan_get:1391: inode 15 [ 251.297374][ C1] EXT4-fs (loop1): last error at time 1771644523: ext4_orphan_get:1391: inode 15 [ 251.334889][T18799] loop1: lost filesystem error report for type 5 error -117 [ 251.346313][T18799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.365858][T18826] lo speed is unknown, defaulting to 1000 [ 251.428368][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.467034][T18799] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2323: bg 0: block 5: invalid block bitmap [ 251.481890][ T28] audit: type=1400 audit(1771644523.962:2143): avc: denied { read write open } for pid=18779 comm="syz.1.2323" path="/217/file1/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 251.506311][T18799] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 251.554086][T18799] EXT4-fs (loop1): This should not happen!! Data will be lost [ 251.554086][T18799] [ 251.586087][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2331'. [ 251.596548][T18799] EXT4-fs (loop1): Total free blocks count 0 [ 251.611395][T18799] EXT4-fs (loop1): Free/Dirty block details [ 251.625474][T18856] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2332'. [ 251.628673][T18799] EXT4-fs (loop1): free_blocks=0 [ 251.640068][T18799] EXT4-fs (loop1): dirty_blocks=64 [ 251.670434][T18799] EXT4-fs (loop1): Block reservation details [ 251.676916][T18799] EXT4-fs (loop1): i_reserved_data_blocks=64 [ 251.708885][T18873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=18873 comm=syz.9.2331 [ 251.776091][ T8006] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.865780][T18895] tipc: New replicast peer: 255.255.255.255 [ 251.878225][T18895] tipc: Enabled bearer , priority 10 [ 251.898026][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'. [ 251.921469][T18895] tipc: Disabling bearer [ 252.473802][T19049] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 252.856796][T19054] lo speed is unknown, defaulting to 1000 [ 253.061289][T19083] loop4: detected capacity change from 0 to 512 [ 253.077385][T19083] EXT4-fs: inline encryption not supported [ 253.178070][T19083] EXT4-fs (loop4): orphan cleanup on readonly fs [ 253.201214][T19083] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6). [ 253.229051][T19090] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2351'. [ 253.239658][T19083] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.264675][ T28] audit: type=1400 audit(1771644525.762:2144): avc: denied { getopt } for pid=19089 comm="syz.1.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.264863][T19083] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 253.354370][T19083] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2350: bad orphan inode 14 [ 253.380010][ T28] audit: type=1400 audit(1771644525.762:2145): avc: denied { ioctl } for pid=19089 comm="syz.1.2351" path="socket:[39178]" dev="sockfs" ino=39178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 253.405760][T19083] loop4: lost filesystem error report for type 5 error -117 [ 253.411636][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 253.426003][ C1] EXT4-fs (loop4): last error at time 1771644525: ext4_orphan_get:1417 [ 253.464013][T19083] ext4_test_bit(bit=13, block=18) = 1 [ 253.476729][T19083] is_bad_inode(inode)=0 [ 253.489317][ T28] audit: type=1400 audit(1771644525.982:2146): avc: denied { mount } for pid=19118 comm="syz.1.2355" name="/" dev="hugetlbfs" ino=38330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 253.516486][T19117] loop5: detected capacity change from 0 to 128 [ 253.519694][T19083] NEXT_ORPHAN(inode)=0 [ 253.523670][T19117] msdos: Bad value for 'gid' [ 253.530695][T19083] max_ino=32 [ 253.531813][T19117] msdos: Bad value for 'gid' [ 253.544782][T19083] i_nlink=1 [ 253.557411][T19083] EXT4-fs (loop4): 1 truncate cleaned up [ 253.578883][T19083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.648453][T19070] lo speed is unknown, defaulting to 1000 [ 253.692204][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.744879][T19131] loop4: detected capacity change from 0 to 512 [ 253.758693][T19131] EXT4-fs: Ignoring removed nobh option [ 253.761195][T19133] ipip0: entered promiscuous mode [ 253.769982][T19133] ipip0: entered allmulticast mode [ 253.836873][T19131] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 253.859688][T19131] EXT4-fs (loop4): 1 truncate cleaned up [ 253.873371][T19131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.933345][ T28] audit: type=1400 audit(1771644526.432:2147): avc: denied { append } for pid=19130 comm="syz.4.2357" path="/27/file2/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 253.945919][T19143] tipc: New replicast peer: 255.255.255.255 [ 253.996825][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.008902][T19143] tipc: Enabled bearer , priority 10 [ 254.048621][T19148] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2361'. [ 254.059349][T19148] tipc: Disabling bearer [ 254.118002][T19157] netlink: 'syz.4.2365': attribute type 10 has an invalid length. [ 254.131685][T19157] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2365'. [ 254.240446][T19161] loop4: detected capacity change from 0 to 1024 [ 254.249104][T19161] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.279754][T19161] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 254.359741][T19172] netlink: 'syz.1.2370': attribute type 11 has an invalid length. [ 254.360484][T19161] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.384279][T19172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2370'. [ 254.389608][T19161] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2367: bg 0: block 112: padding at end of block bitmap is not set [ 254.408762][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 254.457133][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 254.502417][T19174] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 254.860826][T19199] loop1: detected capacity change from 0 to 128 [ 254.867639][T19199] msdos: Bad value for 'gid' [ 254.872348][T19199] msdos: Bad value for 'gid' [ 254.886929][T19205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2379'. [ 254.962322][T19212] tipc: Enabling of bearer rejected, failed to enable media [ 254.990314][T19206] loop5: detected capacity change from 0 to 8192 [ 255.011803][T19205] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=19205 comm=syz.4.2379 [ 255.011863][T19210] loop9: detected capacity change from 0 to 512 [ 255.042985][ T4002] loop5: p1 < > p2 p4 < p5 > [ 255.048285][ T4002] loop5: partition table partially beyond EOD, truncated [ 255.049604][T19210] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 255.067163][T19210] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 255.082104][T19210] EXT4-fs (loop9): mount failed [ 255.088215][ T4002] loop5: p1 start 134217728 is beyond EOD, truncated [ 255.121892][ T4002] loop5: p2 size 591360 extends beyond EOD, truncated [ 255.146278][ T4002] loop5: p5 size 591360 extends beyond EOD, truncated [ 255.161614][T19198] cgroup: fork rejected by pids controller in /syz4 [ 255.174062][T19206] loop5: p1 < > p2 p4 < p5 > [ 255.179061][T19206] loop5: partition table partially beyond EOD, truncated [ 255.262181][T19206] loop5: p1 start 134217728 is beyond EOD, truncated [ 255.270163][T19206] loop5: p2 size 591360 extends beyond EOD, truncated [ 255.302914][T19206] loop5: p5 size 591360 extends beyond EOD, truncated [ 255.393084][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 255.397200][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 255.404730][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 255.420035][ T28] audit: type=1326 audit(1771644527.712:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.9.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a2a016417 code=0x7ffc0000 [ 255.492739][ T28] audit: type=1326 audit(1771644527.712:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.9.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5a29fbda19 code=0x7ffc0000 [ 255.544493][ T28] audit: type=1326 audit(1771644527.712:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19209 comm="syz.9.2383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5a2a016417 code=0x7ffc0000 [ 255.729380][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 255.740147][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 255.752530][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 255.806970][T19476] ip6gretap0: entered promiscuous mode [ 255.831741][T19476] macsec1: entered allmulticast mode [ 255.850210][T19476] ip6gretap0: entered allmulticast mode [ 255.889737][T19476] ip6gretap0: left allmulticast mode [ 255.895282][T19476] ip6gretap0: left promiscuous mode [ 255.939475][T19498] tipc: Started in network mode [ 255.971675][T19498] tipc: Node identity ac14140f, cluster identity 4711 [ 255.990382][T19498] tipc: New replicast peer: 255.255.255.255 [ 256.000156][T19498] tipc: Enabled bearer , priority 10 [ 256.049922][T19506] loop4: detected capacity change from 0 to 8192 [ 256.059013][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2393'. [ 256.068237][T19507] tipc: Disabling bearer [ 256.172200][ T4002] loop4: p1 < > p2 p4 < p5 > [ 256.183188][ T4002] loop4: partition table partially beyond EOD, truncated [ 256.192633][ T4002] loop4: p1 start 134217728 is beyond EOD, truncated [ 256.199422][ T4002] loop4: p2 size 591360 extends beyond EOD, truncated [ 256.207456][ T4002] loop4: p5 size 591360 extends beyond EOD, truncated [ 256.224975][T19506] loop4: p1 < > p2 p4 < p5 > [ 256.232625][T19506] loop4: partition table partially beyond EOD, truncated [ 256.250260][T19506] loop4: p1 start 134217728 is beyond EOD, truncated [ 256.262337][T19506] loop4: p2 size 591360 extends beyond EOD, truncated [ 256.285340][T19506] loop4: p5 size 591360 extends beyond EOD, truncated [ 256.300873][T19523] loop1: detected capacity change from 0 to 128 [ 256.307577][T19523] msdos: Bad value for 'gid' [ 256.312228][T19523] msdos: Bad value for 'gid' [ 256.428530][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2401'. [ 256.431852][T19528] loop9: detected capacity change from 0 to 128 [ 256.465152][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 256.476371][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 256.506235][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 256.546522][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 256.575352][T19530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=19530 comm=syz.7.2401 [ 256.684086][T19556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2402'. [ 256.693690][T19556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2402'. [ 256.707624][T19556] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2402'. [ 256.878803][ T28] kauditd_printk_skb: 979 callbacks suppressed [ 256.878843][ T28] audit: type=1400 audit(1771644529.372:3130): avc: denied { getopt } for pid=19579 comm="syz.5.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 256.923009][T19580] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 256.923873][T19580] @0Ù: renamed from bond_slave_1 (while UP) [ 257.818176][T19614] loop4: detected capacity change from 0 to 1024 [ 257.862146][T19614] EXT4-fs: Ignoring removed mblk_io_submit option [ 257.896255][T19614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 257.926676][T19627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=19627 comm=syz.1.2419 [ 257.980059][T19614] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.993655][T19631] loop5: detected capacity change from 0 to 128 [ 258.011912][T19614] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2418: bg 0: block 112: padding at end of block bitmap is not set [ 258.079318][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 258.378706][T19635] __nla_validate_parse: 36 callbacks suppressed [ 258.378721][T19635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2424'. [ 258.599927][T19622] lo speed is unknown, defaulting to 1000 [ 258.671792][T19639] loop4: detected capacity change from 0 to 128 [ 258.678531][T19639] msdos: Bad value for 'gid' [ 258.683170][T19639] msdos: Bad value for 'gid' [ 258.944780][T19649] loop1: detected capacity change from 0 to 256 [ 258.981650][T19649] FAT-fs (loop1): Directory bread(block 64) failed [ 258.988486][T19649] FAT-fs (loop1): Directory bread(block 65) failed [ 258.995395][T19649] FAT-fs (loop1): Directory bread(block 66) failed [ 259.002037][T19649] FAT-fs (loop1): Directory bread(block 67) failed [ 259.008679][T19649] FAT-fs (loop1): Directory bread(block 68) failed [ 259.015379][T19649] FAT-fs (loop1): Directory bread(block 69) failed [ 259.021986][T19649] FAT-fs (loop1): Directory bread(block 70) failed [ 259.028535][T19649] FAT-fs (loop1): Directory bread(block 71) failed [ 259.035418][T19649] FAT-fs (loop1): Directory bread(block 72) failed [ 259.041964][T19649] FAT-fs (loop1): Directory bread(block 73) failed [ 259.157913][T19650] lo speed is unknown, defaulting to 1000 [ 259.312508][T19647] loop5: p1 < > p2 p4 < p5 > [ 259.330261][T19647] loop5: partition table partially beyond EOD, truncated [ 259.409745][T19647] loop5: p1 start 134217728 is beyond EOD, truncated [ 259.447493][T19647] loop5: p2 size 591360 extends beyond EOD, truncated [ 259.494908][T19647] loop5: p5 size 591360 extends beyond EOD, truncated [ 259.535790][T19664] xt_cluster: you have exceeded the maximum number of cluster nodes (3131 > 32) [ 259.612843][T19664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64276 sclass=netlink_route_socket pid=19664 comm=syz.4.2431 [ 259.739221][T19671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2433'. [ 259.894631][T19672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=19672 comm=syz.4.2433 [ 259.917062][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2434'. [ 260.045170][T19679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=19679 comm=syz.5.2434 [ 260.097311][T19692] set_capacity_and_notify: 1 callbacks suppressed [ 260.097326][T19692] loop9: detected capacity change from 0 to 128 [ 260.326888][T19674] cgroup: fork rejected by pids controller in /syz5 [ 260.451032][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 260.451201][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 260.482895][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 260.740495][T20026] syzkaller0: entered promiscuous mode [ 260.761675][T20026] syzkaller0: entered allmulticast mode [ 260.884133][T20043] loop5: detected capacity change from 0 to 4096 [ 260.902349][T20045] lo speed is unknown, defaulting to 1000 [ 260.918397][T20043] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 261.110122][T20050] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 261.184555][ T28] audit: type=1400 audit(1771644533.682:3131): avc: denied { listen } for pid=20061 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 261.268551][ T28] audit: type=1400 audit(1771644533.682:3132): avc: denied { accept } for pid=20061 comm="syz.4.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 261.349321][T20045] syzkaller1: entered promiscuous mode [ 261.354869][ T28] audit: type=1400 audit(1771644533.842:3133): avc: denied { name_bind } for pid=20101 comm="syz.9.2450" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 261.371698][T20045] syzkaller1: entered allmulticast mode [ 261.942724][T20273] loop1: detected capacity change from 0 to 256 [ 261.973726][T20273] FAT-fs (loop1): Directory bread(block 64) failed [ 261.980516][T20273] FAT-fs (loop1): Directory bread(block 65) failed [ 261.987273][T20273] FAT-fs (loop1): Directory bread(block 66) failed [ 261.993885][T20273] FAT-fs (loop1): Directory bread(block 67) failed [ 262.000595][T20273] FAT-fs (loop1): Directory bread(block 68) failed [ 262.007223][T20273] FAT-fs (loop1): Directory bread(block 69) failed [ 262.013969][T20273] FAT-fs (loop1): Directory bread(block 70) failed [ 262.020493][T20273] FAT-fs (loop1): Directory bread(block 71) failed [ 262.027176][T20273] FAT-fs (loop1): Directory bread(block 72) failed [ 262.033725][T20273] FAT-fs (loop1): Directory bread(block 73) failed [ 262.993976][T20279] loop4: detected capacity change from 0 to 128 [ 263.000609][T20279] msdos: Bad value for 'gid' [ 263.005240][T20279] msdos: Bad value for 'gid' [ 263.247687][ T28] audit: type=1326 audit(1771644535.742:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.356750][ T28] audit: type=1326 audit(1771644535.772:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.408205][T20303] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2464'. [ 263.438919][ T28] audit: type=1326 audit(1771644535.772:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.581077][T20310] program syz.1.2469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.594172][ T28] audit: type=1326 audit(1771644535.772:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.653122][ T28] audit: type=1326 audit(1771644535.772:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.677068][ T28] audit: type=1326 audit(1771644535.772:3139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.704848][ T28] audit: type=1326 audit(1771644535.772:3140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.729356][ T28] audit: type=1326 audit(1771644535.772:3141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 263.757615][T20316] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2470'. [ 263.914966][ T28] audit: type=1326 audit(1771644535.772:3142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 264.001368][ T28] audit: type=1326 audit(1771644535.772:3143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20288 comm="syz.7.2462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x7ffc0000 [ 264.227871][T22956] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2472'. [ 264.339106][T23534] lo speed is unknown, defaulting to 1000 [ 264.440737][T23534] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2468'. [ 264.611334][T24148] loop1: detected capacity change from 0 to 256 [ 264.631536][T24149] loop5: detected capacity change from 0 to 256 [ 264.834623][T24149] FAT-fs (loop5): Directory bread(block 64) failed [ 264.841262][T24149] FAT-fs (loop5): Directory bread(block 65) failed [ 264.848280][T24149] FAT-fs (loop5): Directory bread(block 66) failed [ 264.854868][T24149] FAT-fs (loop5): Directory bread(block 67) failed [ 264.861543][T24149] FAT-fs (loop5): Directory bread(block 68) failed [ 264.868443][T24149] FAT-fs (loop5): Directory bread(block 69) failed [ 264.875234][T24149] FAT-fs (loop5): Directory bread(block 70) failed [ 264.881867][T24149] FAT-fs (loop5): Directory bread(block 71) failed [ 264.888631][T24149] FAT-fs (loop5): Directory bread(block 72) failed [ 264.895162][T24149] FAT-fs (loop5): Directory bread(block 73) failed [ 264.910468][T24148] FAT-fs (loop1): Directory bread(block 64) failed [ 264.917655][T24148] FAT-fs (loop1): Directory bread(block 65) failed [ 264.924236][T24148] FAT-fs (loop1): Directory bread(block 66) failed [ 264.930837][T24148] FAT-fs (loop1): Directory bread(block 67) failed [ 264.937475][T24148] FAT-fs (loop1): Directory bread(block 68) failed [ 264.944011][T24148] FAT-fs (loop1): Directory bread(block 69) failed [ 264.950591][T24148] FAT-fs (loop1): Directory bread(block 70) failed [ 264.957153][T24148] FAT-fs (loop1): Directory bread(block 71) failed [ 264.963764][T24148] FAT-fs (loop1): Directory bread(block 72) failed [ 264.970298][T24148] FAT-fs (loop1): Directory bread(block 73) failed [ 265.445329][T24373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2479'. [ 265.575621][T24536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=24536 comm=syz.7.2479 [ 265.774720][T24550] loop4: detected capacity change from 0 to 128 [ 265.781497][T24550] msdos: Bad value for 'gid' [ 265.786169][T24550] msdos: Bad value for 'gid' [ 266.146067][T24648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 266.400366][T24727] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 266.421812][T24727] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 266.565145][T24744] loop4: detected capacity change from 0 to 4096 [ 266.576329][T24744] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 266.642194][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810bb31a00: rx timeout, send abort [ 266.715575][T24744] loop4: detected capacity change from 0 to 8192 [ 266.782080][ T4002] loop4: p1 < > p2 p4 < p5 > [ 266.786794][ T4002] loop4: partition table partially beyond EOD, truncated [ 266.983105][T24723] loop1: detected capacity change from 0 to 4096 [ 267.051860][T24764] dvmrp6: entered allmulticast mode [ 267.142394][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b496200: rx timeout, send abort [ 267.150630][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810bb31a00: abort rx timeout. Force session deactivation [ 267.650632][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b496200: abort rx timeout. Force session deactivation [ 267.762110][ T4002] loop4: p1 start 134217728 is beyond EOD, truncated [ 267.769008][ T4002] loop4: p2 size 591360 extends beyond EOD, truncated [ 267.769481][T24723] EXT4-fs: test_dummy_encryption option not supported [ 267.776888][ T4002] loop4: p5 size 591360 extends beyond EOD, truncated [ 267.818652][T24744] loop4: p1 < > p2 p4 < p5 > [ 267.841870][T24744] loop4: partition table partially beyond EOD, truncated [ 267.859483][T24744] loop4: p1 start 134217728 is beyond EOD, truncated [ 267.887844][T24744] loop4: p2 size 591360 extends beyond EOD, truncated [ 267.932429][T24744] loop4: p5 size 591360 extends beyond EOD, truncated [ 268.039569][T24779] loop1: detected capacity change from 0 to 512 [ 268.143127][T24723] lo speed is unknown, defaulting to 1000 [ 268.278543][T24779] EXT4-fs (loop1): failed to initialize system zone (-117) [ 268.301723][T24779] EXT4-fs (loop1): mount failed [ 268.550837][T24791] loop4: detected capacity change from 0 to 128 [ 268.581681][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 268.592467][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 268.603160][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 268.629713][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 268.641246][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 268.653144][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 268.934817][T24801] loop5: detected capacity change from 0 to 128 [ 268.941477][T24801] msdos: Bad value for 'gid' [ 268.946112][T24801] msdos: Bad value for 'gid' [ 269.014207][T24809] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2505'. [ 269.092284][T24811] loop4: detected capacity change from 0 to 256 [ 269.171294][T24816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2506'. [ 269.253529][T24805] lo speed is unknown, defaulting to 1000 [ 269.726653][T24820] loop9: detected capacity change from 0 to 4096 [ 269.765694][T24820] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.808014][T24820] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2508'. [ 269.874184][T24824] loop5: detected capacity change from 0 to 256 [ 269.902046][T24824] FAT-fs (loop5): Directory bread(block 64) failed [ 269.908694][T24824] FAT-fs (loop5): Directory bread(block 65) failed [ 269.915672][T24824] FAT-fs (loop5): Directory bread(block 66) failed [ 269.922236][T24824] FAT-fs (loop5): Directory bread(block 67) failed [ 269.928831][T24824] FAT-fs (loop5): Directory bread(block 68) failed [ 269.935722][T24824] FAT-fs (loop5): Directory bread(block 69) failed [ 269.942434][T24824] FAT-fs (loop5): Directory bread(block 70) failed [ 269.949258][T24824] FAT-fs (loop5): Directory bread(block 71) failed [ 269.955956][T24824] FAT-fs (loop5): Directory bread(block 72) failed [ 269.962690][T24824] FAT-fs (loop5): Directory bread(block 73) failed [ 270.277845][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.810375][T24844] netlink: 'syz.9.2511': attribute type 4 has an invalid length. [ 270.846097][T24845] netlink: 'syz.9.2511': attribute type 4 has an invalid length. [ 270.865992][T24844] netlink: 'syz.9.2511': attribute type 4 has an invalid length. [ 271.078608][T24852] ¹: entered allmulticast mode [ 271.125810][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2517'. [ 271.195422][T24856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=24856 comm=syz.9.2517 [ 271.426506][T24907] loop5: detected capacity change from 0 to 4096 [ 271.434291][T24907] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 271.475417][T24907] loop5: detected capacity change from 0 to 8192 [ 271.532581][ T4002] loop5: p1 < > p2 p4 < p5 > [ 271.537442][ T4002] loop5: partition table partially beyond EOD, truncated [ 271.568019][ T4002] loop5: p1 start 134217728 is beyond EOD, truncated [ 271.574921][ T4002] loop5: p2 size 591360 extends beyond EOD, truncated [ 271.597748][ T4002] loop5: p5 size 591360 extends beyond EOD, truncated [ 271.610101][T24907] loop5: p1 < > p2 p4 < p5 > [ 271.621261][T24907] loop5: partition table partially beyond EOD, truncated [ 271.635937][T24907] loop5: p1 start 134217728 is beyond EOD, truncated [ 271.653437][T24907] loop5: p2 size 591360 extends beyond EOD, truncated [ 271.677782][T24974] loop1: detected capacity change from 0 to 256 [ 271.697724][T24907] loop5: p5 size 591360 extends beyond EOD, truncated [ 271.757498][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 271.757513][ T28] audit: type=1400 audit(1771644544.252:3159): avc: denied { listen } for pid=24996 comm="syz.4.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 271.775492][T24907] dvmrp6: entered allmulticast mode [ 271.845103][T24987] 9p: Bad value for 'rfdno' [ 271.975692][T25048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2531'. [ 272.009005][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 272.021232][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 272.021444][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 272.059086][ T28] audit: type=1400 audit(1771644544.552:3160): avc: denied { execute_no_trans } for pid=25050 comm="syz.4.2532" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=41254 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 272.102599][T25048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=25048 comm=syz.5.2531 [ 272.549121][T25394] lo speed is unknown, defaulting to 1000 [ 272.858613][T25864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2546'. [ 273.049185][T26139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=26139 comm=syz.1.2546 [ 274.002151][T26707] netlink: 'syz.1.2557': attribute type 13 has an invalid length. [ 274.226520][T26727] loop9: detected capacity change from 0 to 4096 [ 274.237692][T26707] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.245001][T26707] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.264477][T26707] batman_adv: batadv0: Interface deactivated: dummy0 [ 274.294873][T26727] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 274.297301][T26730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=26730 comm=syz.7.2563 [ 274.394740][T26707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.418910][T26707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.433809][T26727] loop9: detected capacity change from 0 to 8192 [ 274.505619][ T23] lo speed is unknown, defaulting to 1000 [ 274.511467][ T23] syz0: Port: 1 Link DOWN [ 274.520257][ T8316] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.531040][ T4002] loop9: p1 < > p2 p4 < p5 > [ 274.534539][ T8316] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.548518][ T4002] loop9: partition table partially beyond EOD, truncated [ 274.551632][ T8316] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.582111][ T40] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.596784][ T4002] loop9: p1 start 134217728 is beyond EOD, truncated [ 274.624096][T26757] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2564'. [ 274.626150][ T4002] loop9: p2 size 591360 extends beyond EOD, truncated [ 274.666068][ T4002] loop9: p5 size 591360 extends beyond EOD, truncated [ 274.694809][T26741] lo speed is unknown, defaulting to 1000 [ 274.794392][T26727] loop9: p1 < > p2 p4 < p5 > [ 274.799589][T26727] loop9: partition table partially beyond EOD, truncated [ 274.809603][T26727] loop9: p1 start 134217728 is beyond EOD, truncated [ 274.816729][T26727] loop9: p2 size 591360 extends beyond EOD, truncated [ 274.826025][T26727] loop9: p5 size 591360 extends beyond EOD, truncated [ 274.856802][T26687] lo speed is unknown, defaulting to 1000 [ 274.875366][ T28] audit: type=1326 audit(1771644547.372:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26765 comm="syz.7.2568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f804770c629 code=0x0 [ 274.983089][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 274.994963][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 275.006038][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 275.041941][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 275.052691][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop9p5, 10) failed: No such file or directory [ 275.053122][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 275.063146][T26774] loop5: detected capacity change from 0 to 8192 [ 275.092068][T26759] loop1: detected capacity change from 0 to 128 [ 275.105986][T26759] msdos: Bad value for 'gid' [ 275.110820][T26759] msdos: Bad value for 'gid' [ 275.151913][ T4999] loop5: p1 < > p2 p4 < p5 > [ 275.156720][ T4999] loop5: partition table partially beyond EOD, truncated [ 275.173245][ T4999] loop5: p1 start 134217728 is beyond EOD, truncated [ 275.180097][ T4999] loop5: p2 size 591360 extends beyond EOD, truncated [ 275.190242][T26797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.191910][ T4999] loop5: p5 size 591360 extends beyond EOD, truncated [ 275.207217][T26797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.218508][T26774] loop5: p1 < > p2 p4 < p5 > [ 275.223491][T26774] loop5: partition table partially beyond EOD, truncated [ 275.230847][T26774] loop5: p1 start 134217728 is beyond EOD, truncated [ 275.251626][T26774] loop5: p2 size 591360 extends beyond EOD, truncated [ 275.261870][T26774] loop5: p5 size 591360 extends beyond EOD, truncated [ 275.301180][T26802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=26802 comm=syz.7.2574 [ 275.352800][T26805] loop4: detected capacity change from 0 to 1024 [ 275.353008][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 275.372852][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 275.374954][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 275.387839][T26805] EXT4-fs: Ignoring removed mblk_io_submit option [ 275.400257][T26814] loop5: detected capacity change from 0 to 128 [ 275.421402][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 275.466988][T26805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.501748][T26805] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.546679][T26805] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2577: bg 0: block 112: padding at end of block bitmap is not set [ 275.691291][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.719579][T27057] loop1: detected capacity change from 0 to 4096 [ 275.754699][T27057] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 275.764209][T27108] EXT4-fs: Ignoring removed oldalloc option [ 275.839489][T27108] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2581: Parent and EA inode have the same ino 15 [ 275.898055][T27108] loop4: lost filesystem error report for type 5 error -117 [ 275.901831][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 275.916803][ C0] EXT4-fs (loop4): initial error at time 1771644548: ext4_xattr_inode_iget:437 [ 275.926263][ C0] EXT4-fs (loop4): last error at time 1771644548: ext4_xattr_inode_iget:437 [ 275.931821][T27108] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2581: Parent and EA inode have the same ino 15 [ 276.017184][T27108] loop4: lost filesystem error report for type 5 error -117 [ 276.017590][T27108] EXT4-fs (loop4): 1 orphan inode deleted [ 276.031962][ T3301] loop1: p1 < > p2 p4 < p5 > [ 276.036724][ T3301] loop1: partition table partially beyond EOD, truncated [ 276.044335][ T3301] loop1: p1 start 134217728 is beyond EOD, truncated [ 276.051073][ T3301] loop1: p2 size 591360 extends beyond EOD, truncated [ 276.153826][ T3301] loop1: p5 size 591360 extends beyond EOD, truncated [ 276.158202][T27108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.196913][T27057] loop1: p1 < > p2 p4 < p5 > [ 276.201735][T27057] loop1: partition table partially beyond EOD, truncated [ 276.208866][T27057] loop1: p1 start 134217728 is beyond EOD, truncated [ 276.215860][T27057] loop1: p2 size 591360 extends beyond EOD, truncated [ 276.224506][T27057] loop1: p5 size 591360 extends beyond EOD, truncated [ 276.232373][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.279180][T27273] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.313041][T27273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.331681][T27273] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.343979][T27273] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2591: bg 0: block 112: padding at end of block bitmap is not set [ 276.420279][T18197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.444248][T27281] set_capacity_and_notify: 3 callbacks suppressed [ 276.444266][T27281] loop1: detected capacity change from 0 to 512 [ 276.460707][T27281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.468187][T27281] EXT4-fs (loop1): unable to read superblock [ 276.523662][T27282] loop4: detected capacity change from 0 to 128 [ 276.543831][T27282] msdos: Bad value for 'gid' [ 276.560769][T27282] msdos: Bad value for 'gid' [ 276.623332][T27294] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=27294 comm=syz.5.2596 [ 276.772778][T27404] xt_connbytes: Forcing CT accounting to be enabled [ 276.814196][T27387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2600'. [ 276.844146][T27422] loop1: detected capacity change from 0 to 128 [ 277.183197][T27597] loop9: detected capacity change from 0 to 8192 [ 277.214073][ T4002] loop9: p1 < > p2 p4 < p5 > [ 277.228577][ T4002] loop9: partition table partially beyond EOD, truncated [ 277.256322][ T4002] loop9: p1 start 134217728 is beyond EOD, truncated [ 277.275323][ T4002] loop9: p2 size 591360 extends beyond EOD, truncated [ 277.287873][T27750] loop4: detected capacity change from 0 to 1024 [ 277.301981][ T4002] loop9: p5 size 591360 extends beyond EOD, truncated [ 277.322139][T27750] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.342224][T27597] loop9: p1 < > p2 p4 < p5 > [ 277.347278][T27597] loop9: partition table partially beyond EOD, truncated [ 277.379934][T27750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 277.395938][T27597] loop9: p1 start 134217728 is beyond EOD, truncated [ 277.422875][T27597] loop9: p2 size 591360 extends beyond EOD, truncated [ 277.432084][T27750] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.444319][T27750] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2606: bg 0: block 112: padding at end of block bitmap is not set [ 277.478783][T27597] loop9: p5 size 591360 extends beyond EOD, truncated [ 277.507218][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.579775][T27791] loop4: detected capacity change from 0 to 128 [ 277.587180][T27786] loop5: detected capacity change from 0 to 8192 [ 277.792527][ T4999] loop5: p1 < > p2 p4 < p5 > [ 277.807135][ T4999] loop5: partition table partially beyond EOD, truncated [ 277.825972][ T4999] loop5: p1 start 134217728 is beyond EOD, truncated [ 277.857121][ T4999] loop5: p2 size 591360 extends beyond EOD, truncated [ 277.878895][ T4999] loop5: p5 size 591360 extends beyond EOD, truncated [ 277.881516][T27800] lo speed is unknown, defaulting to 1000 [ 277.910705][T27786] loop5: p1 < > p2 p4 < p5 > [ 277.935717][T27786] loop5: partition table partially beyond EOD, truncated [ 277.946469][T27809] FAULT_INJECTION: forcing a failure. [ 277.946469][T27809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.951763][T27786] loop5: p1 start 134217728 is beyond EOD, truncated [ 277.969204][T27786] loop5: p2 size 591360 extends beyond EOD, truncated [ 277.991206][T27809] CPU: 1 UID: 0 PID: 27809 Comm: syz.1.2616 Tainted: G W syzkaller #0 PREEMPT(full) [ 277.991240][T27809] Tainted: [W]=WARN [ 277.991247][T27809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.991263][T27809] Call Trace: [ 277.991333][T27809] [ 277.991340][T27809] __dump_stack+0x1d/0x30 [ 277.991443][T27809] dump_stack_lvl+0x95/0xd0 [ 277.991464][T27809] dump_stack+0x15/0x1b [ 277.991483][T27809] should_fail_ex+0x263/0x280 [ 277.991505][T27809] should_fail+0xb/0x20 [ 277.991523][T27809] should_fail_usercopy+0x1a/0x20 [ 277.991608][T27809] _copy_from_user+0x1c/0xb0 [ 277.991720][T27809] ___sys_sendmsg+0xc1/0x1e0 [ 277.991757][T27809] __x64_sys_sendmsg+0xd4/0x160 [ 277.991851][T27809] x64_sys_call+0x194c/0x3020 [ 277.991877][T27809] do_syscall_64+0x12c/0x370 [ 277.991922][T27809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.991986][T27809] RIP: 0033:0x7f22260ec629 [ 277.992012][T27809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.992045][T27809] RSP: 002b:00007f2224b3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.992110][T27809] RAX: ffffffffffffffda RBX: 00007f2226365fa0 RCX: 00007f22260ec629 [ 277.992125][T27809] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000003 [ 277.992147][T27809] RBP: 00007f2224b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.992170][T27809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.992187][T27809] R13: 00007f2226366038 R14: 00007f2226365fa0 R15: 00007fff77729368 [ 277.992240][T27809] [ 278.209193][T27786] loop5: p5 size 591360 extends beyond EOD, truncated [ 278.229781][T27823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=27823 comm=syz.9.2618 [ 278.455790][T27840] loop1: detected capacity change from 0 to 4096 [ 278.474665][T27840] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 278.572003][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2623'. [ 278.656440][T27847] Option ' ' to dns_resolver key: bad/missing value [ 278.885266][T27840] loop1: detected capacity change from 0 to 8192 [ 278.986481][T27860] vlan3: entered promiscuous mode [ 279.001829][T27860] vlan3: entered allmulticast mode [ 279.012512][T27860] hsr_slave_1: entered allmulticast mode [ 279.083673][ T4002] loop1: p1 < > p2 p4 < p5 > [ 279.088551][ T4002] loop1: partition table partially beyond EOD, truncated [ 279.096311][ T4002] loop1: p1 start 134217728 is beyond EOD, truncated [ 279.105698][T27865] netlink: 'syz.9.2630': attribute type 10 has an invalid length. [ 279.113711][ T4002] loop1: p2 size 591360 extends beyond EOD, truncated [ 279.122609][T27865] bond1: (slave dummy0): Releasing active interface [ 279.130537][ T4002] loop1: p5 size 591360 extends beyond EOD, truncated [ 279.150358][T27865] netlink: 'syz.9.2630': attribute type 10 has an invalid length. [ 279.168815][T27840] loop1: p1 < > p2 p4 < p5 > [ 279.176320][T27840] loop1: partition table partially beyond EOD, truncated [ 279.184397][T27865] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 279.194401][T27840] loop1: p1 start 134217728 is beyond EOD, truncated [ 279.243226][ T28] audit: type=1400 audit(1771644551.702:3162): avc: denied { write } for pid=27866 comm="syz.5.2631" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 279.278652][T27840] loop1: p2 size 591360 extends beyond EOD, truncated [ 279.312588][T27840] loop1: p5 size 591360 extends beyond EOD, truncated [ 279.424977][T27873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=27873 comm=syz.5.2632 [ 279.537920][T27912] loop5: detected capacity change from 0 to 512 [ 279.573565][T27912] EXT4-fs: Ignoring removed bh option [ 279.603258][T27912] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.647670][T27912] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 279.721406][T27912] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 279.757421][T27912] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 279.786717][T27912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.856729][T27918] msdos: Bad value for 'gid' [ 279.861377][T27918] msdos: Bad value for 'gid' [ 279.907907][T18197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.228820][T27953] siw: device registration error -23 [ 280.252926][T27955] EXT4-fs: Ignoring removed bh option [ 280.268079][T27955] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 280.278633][T27955] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 280.311962][T27955] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 280.341293][T27955] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 280.363753][T27955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.427200][T18197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.460929][T27969] netlink: 'syz.1.2656': attribute type 10 has an invalid length. [ 280.469319][T27969] batman_adv: batadv0: Removing interface: dummy0 [ 280.479139][T27969] netlink: 'syz.1.2656': attribute type 10 has an invalid length. [ 280.510265][T27969] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 280.566728][T27980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2660'. [ 280.739509][T27991] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.783078][T27986] x_tables: duplicate underflow at hook 1 [ 280.796793][T27992] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2664'. [ 281.057055][T18197] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.146231][T28004] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 281.221017][T28010] lo speed is unknown, defaulting to 1000 [ 281.292050][ T4002] loop4: p1 < > p2 p4 < p5 > [ 281.296796][ T4002] loop4: partition table partially beyond EOD, truncated [ 281.311149][ T4002] loop4: p1 start 134217728 is beyond EOD, truncated [ 281.329127][ T4002] loop4: p2 size 591360 extends beyond EOD, truncated [ 281.338517][ T4002] loop4: p5 size 591360 extends beyond EOD, truncated [ 281.360605][T28004] loop4: p1 < > p2 p4 < p5 > [ 281.366310][T28004] loop4: partition table partially beyond EOD, truncated [ 281.377895][T28004] loop4: p1 start 134217728 is beyond EOD, truncated [ 281.393986][T28004] loop4: p2 size 591360 extends beyond EOD, truncated [ 281.408551][T28004] loop4: p5 size 591360 extends beyond EOD, truncated [ 281.420431][T28021] lo speed is unknown, defaulting to 1000 [ 281.468448][T28023] 9p: Bad value for 'rfdno' [ 281.576631][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 281.583169][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 281.597582][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 281.693003][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 281.713381][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 281.717569][T28034] set_capacity_and_notify: 8 callbacks suppressed [ 281.717592][T28034] loop4: detected capacity change from 0 to 1024 [ 281.760662][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 281.770812][T28034] EXT4-fs: Ignoring removed nobh option [ 281.786026][T28034] EXT4-fs: inline encryption not supported [ 281.804449][T28034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.855778][T17946] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.891718][T28042] lo speed is unknown, defaulting to 1000 [ 281.986984][T28054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=28054 comm=syz.7.2684 [ 282.020495][T28051] loop5: detected capacity change from 0 to 4096 [ 282.057977][T28051] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 282.139432][T28051] loop5: detected capacity change from 0 to 8192 [ 282.172104][ T4002] loop5: p1 < > p2 p4 < p5 > [ 282.177318][ T4002] loop5: partition table partially beyond EOD, truncated [ 282.186183][ T4002] loop5: p1 start 134217728 is beyond EOD, truncated [ 282.193874][ T4002] loop5: p2 size 591360 extends beyond EOD, truncated [ 282.201999][ T4002] loop5: p5 size 591360 extends beyond EOD, truncated [ 282.212698][T28051] loop5: p1 < > p2 p4 < p5 > [ 282.217510][T28051] loop5: partition table partially beyond EOD, truncated [ 282.225390][T28051] loop5: p1 start 134217728 is beyond EOD, truncated [ 282.238495][T28051] loop5: p2 size 591360 extends beyond EOD, truncated [ 282.247096][T28051] loop5: p5 size 591360 extends beyond EOD, truncated [ 282.311805][T28051] 9p: Bad value for 'rfdno' [ 282.355025][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 282.366377][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 282.377733][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 282.442513][ T28] audit: type=1400 audit(1771644554.932:3163): avc: denied { ioctl } for pid=28257 comm="syz.5.2687" path="socket:[41973]" dev="sockfs" ino=41973 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 282.630663][T28532] loop9: detected capacity change from 0 to 512 [ 282.651154][T28532] EXT4-fs: Ignoring removed nobh option [ 282.720966][T28532] EXT4-fs (loop9): 1 orphan inode deleted [ 282.727350][T28532] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.880969][T28672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2695'. [ 282.890250][T28672] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2695'. [ 282.899684][T28672] netlink: 'syz.7.2695': attribute type 6 has an invalid length. [ 282.921257][T28672] lo speed is unknown, defaulting to 1000 [ 283.465004][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.505277][T28680] loop1: detected capacity change from 0 to 128 [ 283.593135][T28682] loop9: detected capacity change from 0 to 4096 [ 283.611875][T28682] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 283.723721][T28694] loop4: detected capacity change from 0 to 128 [ 283.768035][T28682] loop9: detected capacity change from 0 to 8192 [ 283.803012][T28678] loop5: detected capacity change from 0 to 128 [ 283.812132][T28678] msdos: Bad value for 'gid' [ 283.812247][T28682] loop9: p1 < > p2 p4 < p5 > [ 283.821658][T28678] msdos: Bad value for 'gid' [ 283.832349][T28682] loop9: partition table partially beyond EOD, truncated [ 283.839868][T28682] loop9: p1 start 134217728 is beyond EOD, truncated [ 283.854341][T28682] loop9: p2 size 591360 extends beyond EOD, truncated [ 283.871549][T28682] loop9: p5 size 591360 extends beyond EOD, truncated [ 283.942407][T28682] 9p: Bad value for 'rfdno' [ 284.068756][ T28] audit: type=1400 audit(1771644556.562:3164): avc: denied { create } for pid=28703 comm="syz.9.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 284.099939][T28704] syzkaller0: entered promiscuous mode [ 284.105859][T28704] syzkaller0: entered allmulticast mode [ 284.127048][T28707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2708'. [ 284.144723][T28707] bond2: option lacp_active: invalid value (5) [ 284.154993][T28707] bond2 (unregistering): Released all slaves [ 284.248926][T28716] loop9: detected capacity change from 0 to 2048 [ 284.273244][T28716] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.722104][T28742] FAT-fs (loop4): Directory bread(block 64) failed [ 284.770400][T28742] FAT-fs (loop4): Directory bread(block 65) failed [ 284.821195][T28742] FAT-fs (loop4): Directory bread(block 66) failed [ 284.842360][T28748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2721'. [ 284.873533][T28742] FAT-fs (loop4): Directory bread(block 67) failed [ 284.914177][T28748] IPVS: Error connecting to the multicast addr [ 284.922282][T28742] FAT-fs (loop4): Directory bread(block 68) failed [ 284.958850][T28741] siw: device registration error -23 [ 284.965035][T28741] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 284.967816][T28742] FAT-fs (loop4): Directory bread(block 69) failed [ 285.021926][T28742] FAT-fs (loop4): Directory bread(block 70) failed [ 285.028797][T28742] FAT-fs (loop4): Directory bread(block 71) failed [ 285.066650][T28742] FAT-fs (loop4): Directory bread(block 72) failed [ 285.088746][ T7850] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.102934][T28742] FAT-fs (loop4): Directory bread(block 73) failed [ 285.266056][T28755] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 285.856958][T28793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=28793 comm=syz.7.2731 [ 285.928586][T28796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=28796 comm=syz.1.2732 [ 286.117734][T28782] siw: device registration error -23 [ 286.123886][T28782] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 287.802954][T28830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2745'. [ 288.203366][T28836] set_capacity_and_notify: 3 callbacks suppressed [ 288.203382][T28836] loop9: detected capacity change from 0 to 256 [ 288.310605][T28840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2746'. [ 288.420260][T28842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2747'. [ 288.613012][T28843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10752 sclass=netlink_route_socket pid=28843 comm=syz.1.2747 [ 289.211915][T28836] FAT-fs (loop9): Directory bread(block 64) failed [ 289.218889][T28836] FAT-fs (loop9): Directory bread(block 65) failed [ 289.225646][T28836] FAT-fs (loop9): Directory bread(block 66) failed [ 289.232279][T28836] FAT-fs (loop9): Directory bread(block 67) failed [ 289.239086][T28836] FAT-fs (loop9): Directory bread(block 68) failed [ 289.245789][T28836] FAT-fs (loop9): Directory bread(block 69) failed [ 289.252490][T28836] FAT-fs (loop9): Directory bread(block 70) failed [ 289.259013][T28836] FAT-fs (loop9): Directory bread(block 71) failed [ 289.265756][T28836] FAT-fs (loop9): Directory bread(block 72) failed [ 289.272378][T28836] FAT-fs (loop9): Directory bread(block 73) failed [ 289.978259][T28864] loop5: detected capacity change from 0 to 512 [ 289.984973][T28864] msdos: Bad value for 'dmask' [ 289.997709][T28864] loop5: detected capacity change from 0 to 128 [ 290.054485][T28864] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.067079][T28864] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.693692][T18197] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.765626][T28875] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 290.769604][ T28] audit: type=1400 audit(1771644563.262:3165): avc: denied { name_bind } for pid=28874 comm="syz.4.2757" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 290.822743][T28880] loop5: detected capacity change from 0 to 256 [ 290.889720][T28884] loop1: detected capacity change from 0 to 8192 [ 290.890512][T28892] FAULT_INJECTION: forcing a failure. [ 290.890512][T28892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.909729][T28892] CPU: 1 UID: 0 PID: 28892 Comm: syz.4.2763 Tainted: G W syzkaller #0 PREEMPT(full) [ 290.909762][T28892] Tainted: [W]=WARN [ 290.909768][T28892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 290.909881][T28892] Call Trace: [ 290.909887][T28892] [ 290.909896][T28892] __dump_stack+0x1d/0x30 [ 290.909923][T28892] dump_stack_lvl+0x95/0xd0 [ 290.909989][T28892] dump_stack+0x15/0x1b [ 290.910154][T28892] should_fail_ex+0x263/0x280 [ 290.910179][T28892] should_fail+0xb/0x20 [ 290.910275][T28892] should_fail_usercopy+0x1a/0x20 [ 290.910298][T28892] _copy_from_user+0x1c/0xb0 [ 290.910376][T28892] evdev_ioctl_handler+0x4cf/0x16d0 [ 290.910420][T28892] ? __fget_files+0x184/0x1c0 [ 290.910443][T28892] ? mutex_lock+0x57/0x90 [ 290.910526][T28892] ? __pfx_evdev_ioctl+0x10/0x10 [ 290.910602][T28892] evdev_ioctl+0x24/0x30 [ 290.910629][T28892] __se_sys_ioctl+0xce/0x140 [ 290.910659][T28892] __x64_sys_ioctl+0x43/0x50 [ 290.910726][T28892] x64_sys_call+0x1563/0x3020 [ 290.910753][T28892] do_syscall_64+0x12c/0x370 [ 290.910787][T28892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.910810][T28892] RIP: 0033:0x7f9e917fc629 [ 290.910903][T28892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.910922][T28892] RSP: 002b:00007f9e90257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 290.910944][T28892] RAX: ffffffffffffffda RBX: 00007f9e91a75fa0 RCX: 00007f9e917fc629 [ 290.910959][T28892] RDX: 0000200000000340 RSI: 0000000080104592 RDI: 0000000000000003 [ 290.910973][T28892] RBP: 00007f9e90257090 R08: 0000000000000000 R09: 0000000000000000 [ 290.910988][T28892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.911001][T28892] R13: 00007f9e91a76038 R14: 00007f9e91a75fa0 R15: 00007ffc9ba90c08 [ 290.911045][T28892] [ 291.122865][ T4002] loop1: p1 < > p2 p4 < p5 > [ 291.126817][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2764'. [ 291.127591][ T4002] loop1: partition table partially beyond EOD, truncated [ 291.144531][ T4002] loop1: p1 start 134217728 is beyond EOD, truncated [ 291.153075][ T4002] loop1: p2 size 591360 extends beyond EOD, truncated [ 291.161290][ T4002] loop1: p5 size 591360 extends beyond EOD, truncated [ 291.171126][T28884] loop1: p1 < > p2 p4 < p5 > [ 291.176134][T28884] loop1: partition table partially beyond EOD, truncated [ 291.184787][T28884] loop1: p1 start 134217728 is beyond EOD, truncated [ 291.193715][T28884] loop1: p2 size 591360 extends beyond EOD, truncated [ 291.208348][T28884] loop1: p5 size 591360 extends beyond EOD, truncated [ 291.226277][T28898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.243741][T28898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.319136][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 291.333851][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 291.345192][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 291.415918][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 291.418204][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 291.437138][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 291.648627][T28911] loop1: detected capacity change from 0 to 128 [ 291.656897][T28911] FAT-fs (loop1): bogus number of reserved sectors [ 291.663578][T28911] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 291.672913][T28911] FAT-fs (loop1): Can't find a valid FAT filesystem [ 292.206171][T32725] FAULT_INJECTION: forcing a failure. [ 292.206171][T32725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.254107][T32725] CPU: 0 UID: 0 PID: 32725 Comm: syz.5.2771 Tainted: G W syzkaller #0 PREEMPT(full) [ 292.254142][T32725] Tainted: [W]=WARN [ 292.254148][T32725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.254229][T32725] Call Trace: [ 292.254235][T32725] [ 292.254243][T32725] __dump_stack+0x1d/0x30 [ 292.254265][T32725] dump_stack_lvl+0x95/0xd0 [ 292.254283][T32725] dump_stack+0x15/0x1b [ 292.254305][T32725] should_fail_ex+0x263/0x280 [ 292.254371][T32725] should_fail+0xb/0x20 [ 292.254386][T32725] should_fail_usercopy+0x1a/0x20 [ 292.254404][T32725] _copy_to_user+0x20/0xa0 [ 292.254426][T32725] simple_read_from_buffer+0xb5/0x130 [ 292.254528][T32725] proc_fail_nth_read+0x10e/0x150 [ 292.254552][T32725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 292.254575][T32725] vfs_read+0x1ab/0x7f0 [ 292.254602][T32725] ? __rcu_read_unlock+0x4e/0x70 [ 292.254650][T32725] ? __fget_files+0x184/0x1c0 [ 292.254675][T32725] ? mutex_lock+0x57/0x90 [ 292.254710][T32725] ksys_read+0xdc/0x1a0 [ 292.254734][T32725] __x64_sys_read+0x40/0x50 [ 292.254822][T32725] x64_sys_call+0x2886/0x3020 [ 292.254846][T32725] do_syscall_64+0x12c/0x370 [ 292.254915][T32725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.254937][T32725] RIP: 0033:0x7f08524ccece [ 292.254954][T32725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.254969][T32725] RSP: 002b:00007f0850f66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 292.254987][T32725] RAX: ffffffffffffffda RBX: 00007f0850f676c0 RCX: 00007f08524ccece [ 292.255029][T32725] RDX: 000000000000000f RSI: 00007f0850f670a0 RDI: 0000000000000004 [ 292.255042][T32725] RBP: 00007f0850f67090 R08: 0000000000000000 R09: 0000000000000000 [ 292.255055][T32725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.255068][T32725] R13: 00007f0852786038 R14: 00007f0852785fa0 R15: 00007ffc3d8005a8 [ 292.255088][T32725] [ 292.603216][ T1088] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2774'. [ 292.613719][ T1085] loop1: detected capacity change from 0 to 8192 [ 292.652089][ T4002] loop1: p1 < > p2 p4 < p5 > [ 292.656927][ T4002] loop1: partition table partially beyond EOD, truncated [ 292.671831][ T4002] loop1: p1 start 134217728 is beyond EOD, truncated [ 292.690056][ T4002] loop1: p2 size 591360 extends beyond EOD, truncated [ 292.697764][ T1091] IPv6: addrconf: prefix option has invalid lifetime [ 292.699581][ T1092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2779'. [ 292.715312][ T4002] loop1: p5 size 591360 extends beyond EOD, truncated [ 292.735875][ T1085] loop1: p1 < > p2 p4 < p5 > [ 292.740708][ T1085] loop1: partition table partially beyond EOD, truncated [ 292.753384][ T1085] loop1: p1 start 134217728 is beyond EOD, truncated [ 292.762971][ T1085] loop1: p2 size 591360 extends beyond EOD, truncated [ 292.777900][ T1085] loop1: p5 size 591360 extends beyond EOD, truncated [ 292.897882][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 292.897882][ T4002] udevd[4002]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 292.898012][ T3301] ================================================================== [ 292.898037][ T3301] BUG: KCSAN: data-race in data_push_tail / string [ 292.898058][ T3301] [ 292.898064][ T3301] write to 0xffffffff893980c8 of 1 bytes by task 4002 on cpu 1: [ 292.898079][ T3301] string+0x187/0x220 [ 292.898110][ T3301] vsnprintf+0x532/0x860 [ 292.898131][ T3301] vscnprintf+0x41/0x90 [ 292.898153][ T3301] printk_sprint+0x30/0x2e0 [ 292.898170][ T3301] vprintk_store+0x57b/0x910 [ 292.898186][ T3301] vprintk_emit+0x1a4/0x600 [ 292.898202][ T3301] devkmsg_emit+0x7f/0xb0 [ 292.898231][ T3301] devkmsg_write+0x1e2/0x2b0 [ 292.898257][ T3301] do_iter_readv_writev+0x4fd/0x5a0 [ 292.898273][ T3301] vfs_writev+0x2e1/0x900 [ 292.898291][ T3301] do_writev+0xe9/0x210 [ 292.898309][ T3301] __x64_sys_writev+0x45/0x50 [ 292.898325][ T3301] x64_sys_call+0x1c0c/0x3020 [ 292.898347][ T3301] do_syscall_64+0x12c/0x370 [ 292.898371][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.898390][ T3301] [ 292.898396][ T3301] read to 0xffffffff893980c8 of 8 bytes by task 3301 on cpu 0: [ 292.898411][ T3301] data_push_tail+0x100/0x470 [ 292.898431][ T3301] data_alloc+0x11b/0x390 [ 292.898454][ T3301] prb_reserve+0x8d7/0xae0 [ 292.898479][ T3301] vprintk_store+0x54a/0x910 [ 292.898496][ T3301] vprintk_emit+0x1a4/0x600 [ 292.898515][ T3301] devkmsg_emit+0x7f/0xb0 [ 292.898533][ T3301] devkmsg_write+0x1e2/0x2b0 [ 292.898563][ T3301] do_iter_readv_writev+0x4fd/0x5a0 [ 292.898582][ T3301] vfs_writev+0x2e1/0x900 [ 292.898603][ T3301] do_writev+0xe9/0x210 [ 292.898625][ T3301] __x64_sys_writev+0x45/0x50 [ 292.898643][ T3301] x64_sys_call+0x1c0c/0x3020 [ 292.898669][ T3301] do_syscall_64+0x12c/0x370 [ 292.898695][ T3301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.898713][ T3301] [ 292.898718][ T3301] value changed: 0x00000000ffffefed -> 0x00000a79726f7463 [ 292.898732][ T3301] [ 292.898737][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 292.898754][ T3301] CPU: 0 UID: 0 PID: 3301 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 292.898780][ T3301] Tainted: [W]=WARN [ 292.898787][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 292.898799][ T3301] ================================================================== [ 292.900058][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 292.960385][ T1125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2783'. [ 293.191907][ T4999] udevd[4999]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 293.212970][ T1125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2783'. [ 293.223446][ T1125] netlink: 'syz.1.2783': attribute type 6 has an invalid length. [ 293.242804][ T1131] lo speed is unknown, defaulting to 1000