last executing test programs: 6m42.163210477s ago: executing program 32 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x6063100, 0x0, 0xfffffffffffffe61, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000ba0300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000bf980000180000005609000002000000850000008a000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff2}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) recvmsg$unix(r4, &(0x7f0000000600)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/47, 0x2f}, {&(0x7f0000000400)=""/159, 0x9f}], 0x2, &(0x7f0000000580)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x100) 6m41.476754227s ago: executing program 33 (id=37): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0xc, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71"], 0x0}, 0x94) syz_io_uring_setup(0x3645, &(0x7f0000000580)={0x0, 0x74ad, 0x1000, 0x1, 0x33b}, &(0x7f0000002000), &(0x7f0000000100)) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1000007, 0x30510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x0, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000000)={0x1, 0x1, 0x12, 0x23, 0x10009c, 0xfffffffffffffffe}) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) setxattr$incfs_metadata(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000480)="37df0819de9a9a70665702a85e2d719d4bb7cc196fd9644b77788dce7d7415425b56e538704a5381ac52b0b5b7ed200e99d6ba4932a7747115b00d5246eca7321a65968b19464e164c82619c60c7b981f87c9f67", 0x54, 0x2) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x12, 0x1, 0x0}, &(0x7f0000000300)=0x40) 6m30.152794501s ago: executing program 34 (id=151): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {}, {@dioread_lock}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000e40)='./file1\x00', 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_ROPEN(r0, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x80, 0x1, 0x7}, 0x3ff}}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000f72779baaae4438c75000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000000a0000070900010073797a31000000000900030073797a32000000001400000011000100"/119], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000001200010500"/39, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000040002005c0001000058"], 0xac}}, 0x4000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() mmap(&(0x7f0000a86000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1d3a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r1, 0x3416, 0x74c2, 0x20, &(0x7f0000000280)={[0x9]}, 0x8) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=ANY=[@ANYRES8, @ANYRESOCT=r2, @ANYBLOB, @ANYRES8=r4], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendfile(r7, r7, &(0x7f0000000240)=0x4, 0xf) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) fallocate(r0, 0x0, 0xbf5, 0x2000402) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x18, 0x0, 0xfffffffffe000001}) 6m28.546757012s ago: executing program 35 (id=163): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000001, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x2000d, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r0, 0x4b46, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@acl}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 6m28.199675883s ago: executing program 36 (id=166): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1, 0x0, 0x40000, 0xffffff97}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ba", 0x1}], 0x1}}], 0x3, 0x2400c0a2) 6m27.950861505s ago: executing program 37 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000104000000000036cebe2e000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028006000e0004001200050016"], 0x48}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x6) 6m26.943733033s ago: executing program 38 (id=175): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = epoll_create(0x7) epoll_pwait(r0, &(0x7f0000000240)=[{}], 0x1, 0x4, &(0x7f0000000280), 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x4000, 0x74) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc4, 0x80012d58, 0x12d5c}}, 0x44) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x77}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6fc84b579dfed949, 0x0) close(r10) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000540)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000480)=@getchain={0x4c, 0x66, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {0xb, 0x7}, {0xb, 0x9}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x2) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 6m15.13890937s ago: executing program 39 (id=220): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000091041e000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = syz_io_uring_setup(0x1852, &(0x7f0000000640)={0x0, 0xec25, 0x20000, 0x3, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4000, @fd, 0x1, 0x8001, 0x6, 0x4, 0x1, {0x3, r3}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x11, 0x4000, @fd_index=0x5, 0x10001, 0x9, 0x0, 0x0, 0x1, {0x2, r5}}) 6m9.954741456s ago: executing program 40 (id=253): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffee3, &(0x7f00000000c0)={&(0x7f0000000180)="98bd80d1b51facd6bb49000000000000000200000000", 0x16}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x24040090) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@abort}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") r4 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x2, 0x4, 0x4, 0x1, 0x0, 0x8, 0x400, 0x7, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x880, 0x0, 0x8001, 0x8, 0x0, 0x3d, 0x7fff, 0x0, 0x7fe, 0x0, 0x45}, r4, 0x8, r1, 0x8) r5 = getpgid(0xffffffffffffffff) rt_sigqueueinfo(r5, 0x6, &(0x7f0000000080)={0x6, 0xf1ae, 0x5}) 6m9.355080248s ago: executing program 41 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000008c0)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000d40)=""/228, 0xe4, 0x0, &(0x7f0000000700)=""/193, 0xc1}}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000700000000000000000010000300"/36], 0x24, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x5, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1e00000004000000f8ffffff0400000008000000", @ANYRES32, @ANYBLOB="0000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000005000000020000000d0000000000000000000000000000006902e1014bd0b41320b655"], 0x50) r9 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_inet_tcp_SIOCINQ(r9, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x5, 0x15, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x2ce}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @alu={0x3, 0x0, 0x9, 0x0, 0xb, 0x20, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000480)=""/197, 0x41000, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x8, 0xfffffff8, 0x8000}, 0x10, r4, 0xffffffffffffffff, 0x5, &(0x7f00000009c0)=[r5, r7, r8, r9, 0xffffffffffffffff, 0x1], &(0x7f0000000b00)=[{0x5, 0x3, 0xc, 0xb}, {0x0, 0x1, 0xb, 0xc}, {0x3, 0x2, 0x0, 0x4}, {0x1, 0x2, 0xd, 0x2}, {0x4, 0x2, 0x6, 0x8}], 0x10, 0xfffffe00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3a00000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) mq_open(&(0x7f0000000380)='-\x00', 0x40, 0x48, &(0x7f0000000400)={0x8d4, 0x6, 0xfffffffffffdffff, 0x5}) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x2040400) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r12, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r11, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) listen(r10, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r13 = syz_open_dev$vcsa(&(0x7f0000000140), 0x6, 0x2100) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0xfffffffd, 0x39d, 0x0, r13}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r13, 0x8a8, 0x4933, 0x6e, 0x0, 0x0) 6m3.977040641s ago: executing program 42 (id=290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0x8004}}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc}, 0x94) 6m0.834109567s ago: executing program 43 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000316000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) 5m59.026877016s ago: executing program 44 (id=320): unshare(0x6a040000) unshare(0x2000100) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500340012800e0001006970366772657461700000001a4102800600"], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4016) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r3, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r3, 0x1, &(0x7f00000001c0)={{0x0, 0x3938700}}, &(0x7f0000000200)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x35, 0x0, 0x6, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300), 0x0}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89fa, &(0x7f00000000c0)={'team_slave_1\x00', @random="0135e235ed01"}) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x4e}, 0x28) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0xffff, 0x4, 0x5, 0x1000, 0x1, 0xffff2d79, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x24, 0x2, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000), 0x1, 0x4ee, &(0x7f0000001100)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETINFO(r8, 0xffffffff80000600, 0xee01, &(0x7f0000000040)={0x4f, 0x40, 0x0, 0x4}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@map=r7, 0xffffffffffffffff, 0x24, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r4}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0xfffffffd, 0x83, 0xd44, 0x20, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1ff}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r9, 0xffffffffffffffff, 0x33, 0x10, 0x0, @void, @value, @void, @void, r4}, 0x20) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup=r10, r1, 0x1a, 0x0, 0x0, @void, @value=r11, @void, @void, r4}, 0x20) 5m53.800155944s ago: executing program 45 (id=359): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = creat(&(0x7f0000000840)='./file0\x00', 0x166) dup2(r1, r2) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) 5m50.66824283s ago: executing program 46 (id=388): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) socket$kcm(0x2, 0x1, 0x84) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r5, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = socket(0x2b, 0x80801, 0x1) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x2000000) 5m48.521667488s ago: executing program 47 (id=407): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000004) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c0000000400000001000084010000000a0000000200000006000000000000000000000105000000200000000a0000000000000e02000000000000000061002e2e61610061005f"], 0x0, 0x5c}, 0x28) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x3c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x40000) 5m43.450409523s ago: executing program 48 (id=439): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000040)={0x7f, 0x20000000000006}, &(0x7f000009de80), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) shutdown(r2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}}, 0x0) 5m15.960751348s ago: executing program 49 (id=735): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000001c0)={{r2}, 0x5, 0x8, 0x1e}) r4 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) write$UHID_INPUT(r5, &(0x7f00000020c0)={0x8, {"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", 0x1000}}, 0x1006) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5c, "ee61f2b25e1b8d9508be89b265dbf77e44a9aef21bc8980dd2cc98fc6dee3b817d9720c2c3bd869428abe03618a1e4202901b05d5a37d4d89084d38630c35d0c3aea5737dc8920655ce1415f84fa2bde09ae9c1636840862496a3eee"}, &(0x7f0000000100)=0x64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r6, 0xd, 0x1}, &(0x7f0000000180)=0x8) 5m7.010245934s ago: executing program 50 (id=783): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$igmp6(0xa, 0x3, 0x3a) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x10, 0x4, 0x7}, 0x1}}, 0x18) mremap(&(0x7f0000165000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f0000121000/0x1000)=nil) syz_clone(0xa794c600, 0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0) 4m48.603526351s ago: executing program 51 (id=925): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000180)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2f, 0x2718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x0, 0x6, 0x0, 0x1, 0xf9, 0x6, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2800) mount$nfs(&(0x7f0000000140)=')}^^]}{\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x800, &(0x7f0000000540)={[{'bond\x00'}, {'\x00'}, {'(@,!*&,+\x8a$(&'}], [{@dont_measure}, {@flag='lazytime'}, {@dont_measure}, {@measure}, {@fowner_lt={'fowner<', r3}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xb8b2069a0a8c1fff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0x104}, 0x1, 0x0, 0x0, 0x10004000}, 0x20004080) fchown(r1, r2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@polexpire={0xcc, 0x1b, 0x8, 0x70bd27, 0x25dfdbfc, {{{@in6=@private2, @in=@broadcast, 0x4e20, 0x0, 0x4e22, 0x1, 0xa, 0xf0, 0x180, 0x73, r0, r2}, {0x386, 0x1ff, 0x62882a89, 0x6b, 0x8000000000000000, 0x13, 0x3ff, 0x9}, {0x21, 0x401, 0x9, 0x5}, 0x729, 0x6e6bb4, 0x2, 0x1, 0x1}, 0x9}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xcc}}, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xfe82, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x8000, 0x0, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x70bda7, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) 4m46.973071854s ago: executing program 52 (id=943): recvfrom$inet(0xffffffffffffffff, &(0x7f0000000200)=""/127, 0x7f, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000010004b042dbd7000000000", @ANYRES32=r6, @ANYBLOB="5bad850a0000020006894fbdf1a5f95cbced3c8e6b11f70fa2402688ebc3e89464ef6af2f58f4e322b333613b57300ecb83eb10b53a15cb840c60a129ff5700554fdcdb1ca7484afe8976bc731e7ce31532f13fb38502fda81a5f028e898479189fed4f5f2f9d7cddf"], 0x20}, 0x1, 0x0, 0x0, 0x40005}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @val={@val={0x88a8, 0x4}, {0x8035, 0x7, 0x0, 0x3}}, {@canfd={0xd, {{0x3, 0x1}, 0x19, 0x0, 0x0, 0x0, "185dbb1cd7b284fee8cba2a31982503227a0ff346406455075b841f871b84b9dff1af3ba0a3fbfba7671ea11278096e5abfb374f6a01ec216cdde1aba35ee5e3"}}}}, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x8001, &(0x7f0000000440)=""/211) unshare(0x64000600) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 4m32.613463515s ago: executing program 53 (id=1013): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = request_key(&(0x7f0000000140)='.dead\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/snd/seq\x00', 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) r1 = io_uring_setup(0xcda, &(0x7f0000000000)={0x0, 0x1c38, 0x400, 0x6, 0x60}) close_range(r1, r1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r2, &(0x7f0000000200)=""/202, 0xca) prctl$PR_SCHED_CORE(0x41, 0x2001007, 0x0, 0x1, 0x0) 4m31.154539183s ago: executing program 54 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) 4m27.232623577s ago: executing program 55 (id=1038): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000000000e9844c5c4912fb5e5b0fd5b4e3abb1adf49d8a1cd84957fb71ecc5ac406d9d2ded6223cbd7c33f69fe040ddc0398fd6498f7d1a7c53fa4f729b0416d245891156dce5bd214ef9bc616fe47eb4077a6173e35644a7cd90182a677d8e3e6d472820cd577ddd0aa9274c63e7f94e253f5d153885f15e7116e719a060e"], &(0x7f0000000f40)=""/4089, 0x1a, 0xfffffffffffffff7, 0xa}, 0x28) r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) pwritev(r2, 0x0, 0x0, 0x1ff, 0x0) shutdown(r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8901, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x0, {0x2, 0x4e20, @multicast1=0xe000cc02}}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r6, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r6, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e22000005000900290000000800140005000000080003000a0101006c031680100001800c000400f5ffffff0d0000"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r9, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e24, @empty}}}, 0x90) 4m21.001197015s ago: executing program 56 (id=1076): truncate(&(0x7f0000000040)='./file2\x00', 0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b44, 0x40000000000fc) 4m16.04553561s ago: executing program 57 (id=1093): syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) memfd_secret(0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa98, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r2, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x48, 0x40008c5}, 0xc03e0000}], 0x1, 0x24000004) 4m14.408023284s ago: executing program 58 (id=1105): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 4m13.892776339s ago: executing program 59 (id=1109): unshare(0x2a060400) unshare(0x8050080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb4}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x20000, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x101c0, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r3) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000006800010000000000000000000000000000000000060003000a00000008000100000000001c0002"], 0x44}}, 0x0) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x40000000015, 0x5, 0x0) 4m12.828757163s ago: executing program 60 (id=1117): setitimer(0x225c17d03, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) (async) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c880) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c880) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x4c}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) r3 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x80000011) (async) recvmsg(0xffffffffffffffff, 0x0, 0x80000011) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x7, 0x8, 0x20005, 0xb43, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x68, r5, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xd, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 4m9.597253777s ago: executing program 61 (id=1125): r0 = syz_open_dev$loop(&(0x7f0000004a40), 0x2e, 0x40800) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000200)={@dev, @loopback, 0x0}, &(0x7f0000000240)=0xc) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6, 0xc8, 0x6, 0x7}]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bind$xdp(r2, &(0x7f0000000280)={0x2c, 0xc, r3, 0x2, r4}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000001c0)={r1}) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0xd0900) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000040)={r7, 0x6, {0x0, 0x0, 0x0, 0x9f, 0x7f, 0x0, 0x0, 0x19, 0x4, "eb6736c2e95a0dd0949f7619c958421e7940c36f54a976dd9e90f4e757915bd6b9b77e15a7e33bafa39c2ca5b580be97f8a3b2f8bed8273930e6569ec84eb30d", "831e314bd24742f52f436c9174db6294edc3b246468af67259e154c4525a160c16865a9c3d26378de7f0e26b686df51c3da6f1453d30e38c423e744d42443237", "b3c17d81d325cb5410397654c0f438877451294960b5272583fdd7c3418d65fc", [0x1, 0x7]}}) 3m59.607715804s ago: executing program 62 (id=1166): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4006e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0xffffffffffffffff, 0x800000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/partitions\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) (fail_nth: 9) 3m38.040717609s ago: executing program 63 (id=1276): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x58, 0x12, 0x101, 0x0, 0x0, {0x0, 0xfe, 0x0, 0x0, {0x0, 0x2000, [0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x100]}, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xa, 0x1, "d456a89ea898"}]}, 0x58}}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) fsopen(&(0x7f00000000c0)='cpuset\x00', 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}], 0x1, 0x48094) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r6, 0x0, 0x800020000000005) accept4$llc(r0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'veth1_vlan\x00', &(0x7f0000000480)=@ethtool_sset_info={0x37, 0x3ff}}) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x10, 0x800) 3m34.766821816s ago: executing program 64 (id=1298): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r1 = semget$private(0x0, 0x5, 0x0) semtimedop(r1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x667, &(0x7f0000000080)={0x0, 0x8dd3, 0x1, 0x3e, 0x235}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x382, 0x0) ioctl$TCSBRK(r7, 0x5409, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000030000000000000000000000b7080000000000007b8af8ff00000000b7080000f8511b3b8ffacfade2cc9400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007ae3f007e9c62040000f0", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES8=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000ffe000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet6(0xa, 0x800000000000002, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000680)="5f3a2f830ad298b15b9dbcfbf6f1", 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m33.344997341s ago: executing program 65 (id=1229): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64ab8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0xe}, 0x0, 0x36, 0x43a1bd74, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4) getsockopt$inet_tcp_int(r3, 0x6, 0x6, 0x0, 0x0) splice(r1, &(0x7f0000000040)=0x2, r2, 0x0, 0x889, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000380)={@empty}, 0x14) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) unshare(0x22020400) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0x1265, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f000001f400)={0x2, 0x0, 0x200000000}) fcntl$lock(r8, 0x26, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1}) fcntl$lock(r8, 0x7, &(0x7f0000000240)={0x1, 0x0, 0x6}) r9 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x20000054) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x600000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r10}}) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 3m24.770709294s ago: executing program 66 (id=1352): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3m21.081605618s ago: executing program 67 (id=1383): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value=0x3e}, 0x28) 3m20.909618673s ago: executing program 68 (id=1385): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x401, &(0x7f0000000040)) syslog(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x48030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x1, @perf_bp={0x0, 0xa}, 0x4, 0x6, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, r0, 0xdfffffffffbfffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075}, 0x38) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) 3m18.467340397s ago: executing program 69 (id=1395): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x800, 0x4, 0x7, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) brk(0x689d80000003) 3m10.528322745s ago: executing program 70 (id=1434): msync(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x0) 3m6.348625422s ago: executing program 71 (id=1462): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x1000, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}, 0x1c000000}], 0x300, 0xf00) 1m19.241941989s ago: executing program 72 (id=2239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r1, 0x1, 0xffffff80, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x0) 1m9.456755999s ago: executing program 8 (id=2348): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000180)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000), &(0x7f0000000040)=ANY=[], 0xe01, 0x1) unlink(&(0x7f0000000100)='./file1\x00') r13 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) munlock(&(0x7f0000006000/0x4000)=nil, 0x4000) write(r13, &(0x7f0000004200)='t', 0x1) 1m5.365074148s ago: executing program 8 (id=2398): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000d80)='\x00', 0x89901) unshare(0x20400) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_config_ext={0x3, 0x6}, 0x0, 0x10000000000, 0x5, 0x6, 0x2, 0xcd, 0xffff, 0x0, 0x0, 0x0, 0xed0}, 0x0, 0xfff8000000000001, r0, 0x2) 1m5.236278769s ago: executing program 8 (id=2399): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '#'}]}], {0x14}}, 0x8c}}, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) 1m5.174257325s ago: executing program 8 (id=2400): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b16ae220000000", @ANYRES16=r6, @ANYBLOB="01000000080000000000140000000c0007800800020001040000"], 0x20}}, 0x0) 1m4.304941281s ago: executing program 8 (id=2403): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365749c00aef835302c00"], 0x1, 0x36a, &(0x7f0000001840)="$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") r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000001bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f0000000300)={0x14c8, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x877e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x1060, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "3c159abe743921091092f933a27370d74487bbb5cb50911c1ff5b89526b357f46193"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "8e8d71f5a53ec2259f103e29ae3d84ec740d6a0b57d6c7412dfed9bab0ac59da446877ad071983388bbf7d64690f93678ab93ed456fa9bf0339f69a9d54e2782f597c0864942e51ea0904b5b6cb33a4ec942a9b47bf59d7ad43d4ae4011790ee32d74ef19cc33df49274c3990c3bea8caa57cb29d4f3c5b37f9f667fd7cf0c7b0ce96d8653de0581a8d2cc18343dbe6b291fbf8ab31195e0dff4c44f53ba663004cb902f37d0d0f99274450351dbb2f6c4d112c075a9bd64c5ff5b5c1ee650b3292b8993eff52291a7ddb408e63124c78a7238c583d0c8c48d3f365d87661a000610526b16aee648fde0fc7f37fa592bcf536c16375e1c1bccd0621098b5f6f2fe43876c7f7fdee3169805515cceddfa66b260239592697a441017f4877a5eefb351b5e543b59eea83883385ede3f8f7cb466dcb56a11d0a76f686ea587c89a31e87100d5eba2a30eeab91dfe3ecf7cecdd70aa610a1e6e8d3e91091ed6037b334be3a12452ef611aa060be767dca246e59e2096f8a9e22934c7295a052856572e2e05c02fc840851379e6b3e1c953a551c3fa1d9299d178b6b003e77082bf065772319dea6c9c861dd96f32984c388c5338445506d1f0da3382df2f64a5b407f5638b5fe97662511094091120e02be0bdc40c5163abe4b2ea5025ebac202fd25da9e5504ea4a3adf2d43a09bd27b280a9ea671224388794ad3e5da3588369b3605ddaedc41d3fb36817468f024382b7afa1faffb498c636ad59fd730ceafa970063c937886e2d02a40e93a3b03603da2bc9eb735a7dd6a8fa168167276153cf3b53022296a6333a296bae1b110cd47e04b2ee0d75d06c8f3d2d1afe1526c0865c3ecdb0e4d3c686f91112bfce724dacc09eca92e90d70230f83c1bb94c1b7e7af5c4c27af7be16ee9b22b92699990e1116d025bbacab873247c22bc02094c483c114a436077b87108020b709babd088480126ac9287e771c468be704a283b6b64a12ae11844c6834ef71cec6a4f315e5fc08c6053ae2ae2f17714e1e02c5b37ca2a4a6030692c8d84b7695a296a8c58f11c349862e38582a2b6238dc32358b64b3a1a9fe2f5321909f241af7e0b792e84721e4f97818204b2c474657652f6ace23935e9f5d6296e146261e4a431b2850a39294c075032bb41db6c1b09ca370aeb7e34022240c5d488f696b862818c2323a86a3981b3c2ff0a8c7c46d107fed3c18b1f6d8d54b38227437f76cdf2202738bd6262424d4d0a9711069a392d6100fd75840e4788f8f3ac4308ae9f8cb8832e1c28a3c9cc8657646f9c830ff33caf68217a6116e4fba71fb65b05a8fad81a2047b75ae547608c5a1994f9d1d35e054683146cdb88989178cf4f264ded6f210a8437228afa6efa4a77522214c1a6608d6480bc2893333d5bd72bf6ab33d1adfbc448dcf901e1e33d879ed9dce871e4ca23b91e05fe69a35c11e9bcdafcb0abef908f2170d3cf669ce822a65533136e9210d107c6f9d39399bcd59445a133b370ef8a9994da8813bf3a4e0e04d4040f2ef08977f1abfe258f7ce42943bc4ae1f45290593aa9d47212e69aee3bcc34ec80fd962e56c0662b17501c7e8a53bead75bb8bd405538a61dc25b78c61c88a218b02f4ead1704ff2192ab4b6d13d078cc9e9e9de8b1e30f20a2eab300ff35cf4d6313ebf4afc06b0c3138bad90e4714162572ff032837439d539b5712c69803459edf89b2eaccd599e6cd8636b1e7f1fa31115fd794caca815398be4e704d51f7e57ace79e6b6857ac750abbbba5a2b7cd90c03b87e10758b97e932efff77c0ebe4608a854b173e9e648f73a85ad70bae6f0cf4ca5ec702d0b1a8234e51568144d1a71a86536561d5db8d48df58791722f1e7024b6f0dcc50aae9eb6c1a1d9fddeba4fbb02c1670cca28947779912cf52c6289ec5a772da0dcb309a84d9b73961b0ff1734e6dc3dd65549518fab5fab95f9f4d2db0d8c519f08cb592d181ffa1e6aaa480aa2fc29ec43e095cbd134d955bb44ffc3b032b91cd8646bd800847f20bfeeb0b1f51f3b9e9a0e70db19c167f9c406abf720cfc113c405a5cb58eb833cc82c4bd44e6059c7c54b082644d91b9f2bb503ae97bb6656aa4071290cc1f7d94281f5d86714058ec1de82a719f88043ba6fa75b325c3cdc649f91aaff8550bd948f2d71f8289270f15843c28d7129c5576a1eef0b43ecd037a42c90ee3b2b73dfa5cabd43e7ee8fc5b40cf2255367298853cfca2d330a095afdae94e9ce71fd7afdb99b8ea2e389c36a449ea924ed5c2269748bde3a5a49469017060ea75f618e6818eeac41a8ab1c670e4a5fd476227ab3062461ed35fc688fbeb4c0d238cc931a61427836b5fd6c621fb34043470917143395a334381d9124c0e30c1227c85e52c40a73929bb0db2af897acbe93c459b5726b5f3c4069f838f23d9e689977d326fc180d938146159bfe4b0743c2dee5856ca10cf47e2c134e1114bef6f1cbce7a621ab396dd0901e5ad84f9759e9667e06ab7cb6644a87974ef81dcd935e357a654472bad587e052f789fe2139b7620938245a93bb5e60c587b0a6a90c6b894e12cf9abd0edc3adbdeade78e0256c953f8d6f781e79322883f28d4f874b4c9456cdb670b2add16a06b968ff154b4af98ea627bbf43e7b63064a44166a10d1bcbcfebfa30cd8bed8ca4871ed0a45ce7e832277b5bf125a433fb55f90d12947c985395989c3c31189b15f172dd8052ab3a565d040349760d757ce29c0e02122ae02d46fbc2400ea96d8ac6a05db74fdf0ed186b7d5d9056f165bfc24ed62054c370ea69378d12a5b359c89d8d49fe936cb601f9946f328a017ec9065af1623d793d801fad36e0c20cb919e249884cad10be4e125d7ca3b56d6dcdbe1978a64e7528a26fd6f6f4eea6ea50094344d309f9f39d8516ecb12c73aaeac18b754063927c67c0b603038b31148ebfe3762fe27da88fc4a5123798042ed6e79070b977fe8b07e4737d9d3b10ab2b0c75cfcb05bc3ba20002bd9f1260fba1b8ee4fd2dfda26f0ae504e653fd3a6d8c7b5402f784bcb9bfa038fed1062f55b36ad188e25644940765fa43ee81e5031dab3080ab19b994f669c93dd1e1f285648d59fd570287d40e47333ce6acb2be6675eae3c439c129ea2aa066d478abdeeab11653d035609dbc4bd25f8bcce0fb01fa6b5089b07c9954c467d898b25620e896fb60691adddf87a305a5c9eec21221959a20a7951bcd33353d54471e6dd9c160471409affd4c8b1a4e92d7ed066057a6cad4d0003f793f19c1760fd279917fe61ecccb620e61bab28a822d6c871f5e2155e4435e90f2d74c5342f16d942393da6d541ee6cdfb3436b721b398db1a3d06d3f0721686942c35ac82606b0002d07e5bba322ac0082cdbd6b3ba431d99b93cc89b603735c6c99ea163471884eb133588bf8c45968c537daf1539ace4dd3d416d2751354e1a8c884d8e6576c00dd7161fe549f08695fc0293a653714d891456e10eacefede94fce8b1bf216105600cd16f8ff8f08ad241bf82b54611d32fcbb55723bb9688718173cf704bfc736f40e0c00cd21041231f10098f033c74793c6174e0ca4713be48bec7cb33e6ba4af2f97ad4a87c262c8f5754cfeb4a8337a1e1896f31880840461f35402ee4803854408cf20070ee50cb8ebebd1456f02695386070396c32efb00a5b223455818850e3778bcd73791ecaaba5f63bdfe33472b5f38252acaae210b00f2778a75b6fbd49037d7c5a0ac919ca5fa6ccf11009605cc8b5ad264995a9ba6e97af5f2cab17091ced587fdb2d12aceda17596070e94a9887e766ce93d6a5a028957b9a5257444d05a63ae5cd62c462213f702971d53313d0400daba79628dc85cd632b6818f8530f0b4e5ff7cf54b5de182c849dd254cf0d7cbc49c84d5d1ac93184b6d09dce4338c87f4e70ed135b2b78eac2e5e1258eb81a87b6fa7bfb2ed279e3b82bd5ecc36f5193787f8317c7d22865fdd1199a135ce60cb1ad8d685c4ac4aa9393e59072e9cc54b53ccfd6c17e21e2ea4afdf19491809da063aa7390839d2865579965b4f022e0764ad100a56fa1e55879ae1f2edf0ed8a46ac629ff017dd097c0948f4068e7227656c9709ed8e07eeacc5cc6a96138173ee0c55312b4cde66090e6b5d198ee69331e4be41dd455021450eb0654d52d6579d5fe246cc047ab7cf34b579eb76db46202c98ec653c17095d7582a35bf1b2ccf12020e46c38d3f72faf030ee45fa0116d8826ddb96c8eafce5a5e094b3474115299670b8fdf69d1797d25a145c5212489d45fc7253761661f4110bf5956d1799daf93aa1c1a239f899fb010ad8a8a01cb3fd0fa28243c66ccd82b7fb705f3e7dc84e0e32bae939bcfe9f309212ebefb9d5c98594b1abe1dd904e3a02ada235dbce530ccec53ee818de580af162b384afd255ab0b81b66570f81eb1b4c094931c5ad6be7d58ae0c8907a945cc7966d13a6d603c76feb6260411dfac26348168a77ab7bcc4a0c729816f116596c96846fd4a99b13fe4f93ce9cae36cbcd42eb1972e1ef0974019ae1a995f237f10ac64f76680b984cf7d46dfc41faa8fc4e13763830dca813ede362691ace9620d84bcd860afa709b3929e3f09ffbdbc48175e9a70732856568bbab5ae5537af693b45f3e753654bcf56570d01e26be1fbc321a61f42e62507ce1068b8395e109ccf53e4fc9e5b5ce031cbabcdcd0ed14ae65348b3dbd9946fe56f2f84c5d5c706bfbe364d1d04ec4be76dd68f526e3e0ece35b80733e34fc63562b27a5e9273ca2df0a5c9e1af3746b000cdfa03e7c20ce96a7f2bce837d85646f9145e5e22005540d139f719e90a5beabdea3a1bca1b385187fc8d6bc863aa84ab9e9a15195f38836a57651783be683b1737e61a6f7166709aaa7be2a34dc0c5f948330975cdeb5a4fc692fc45f38267228c8b98d028de951cfbe9080bb01a015067353601377e7588e2cf3aca361bcc8038357564a9a24c29c9eb4c25cd699f32e26bed155abb24a7ce55491fdac58a00ba1b4a90cdccfb51af20cc025927bd34b585880224fb025236fad093ae77864e8c1e36e1e2cc99e65e60ae51fe920a3c59bfebb53cc4bfc2bca20b66f5d5ae254d4655a890e48d5e7ccbed501e3e8fe04a9ea67cb902116d2fd04a537c5dc9757c3855427e0e1c7cb9f048270d980a89ac9fc0ec06bac051d7d3b7006c14bd03c13fde0527f43d2d661ada45979df7baa7ed333cf8da33fee484d6a6d321c85db0724a3ff38286404f8831f3e79ce9c90cc895208aa9b16dbff53caabeb427c58b234e458f171d1ffd327ac1d0e45af79d10e8506695e24be2ffa067e7228a426e5207a9594e08ed245e9b84d6a8a3d3814e8ee1fb2e0210d364ff3a6561383bd11937aa6845d4a789bd6ebd2175a73396ac434bab841c71b9aab9090a3d85a976a03e845048614a931392e47181d9ff695ab457ba3e8a2ff148e1498b28760acc559bb046b2ae56c9ff3760dfb180f90a90b14c4c4533bbc3b3209a5583af600e614cb638eb1c73615e329ad05d64550902296f0f633c5c36afa6063a1a52b7567d7cd58a6bef5b9f956cfdfec317a5502e8c4e7123e7a1ff3659aef40e7b60bfcec11429dc35b46212c9c30a394ce003999976d2d29ce2ee6a8ba66ee7a9c9794b44c5ef1141b42a983d04f0f5bd3c23d9555e9adff84717172b851dcba24531b8eb0398c81deec94ec804027bce18dc737b66d1ecb850524be259fd01cfebc99bbe00487bc8bc9cc6084d0b2b6a706eda9f0595c29"}]}, @TIPC_NLA_BEARER={0x15c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x71}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xd4a5}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x0, @private0, 0x1ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x77a7}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}]}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xac0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc0000000}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x38af}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff77}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xb5, @private1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd780}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7b7}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x14c8}, 0x1, 0x0, 0x0, 0x8400}, 0x20008880) io_uring_setup(0x40005496, &(0x7f0000000180)={0x0, 0xce6, 0x8000, 0x0, 0x326}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000200)={{0x100000000000, 0x6, 0x7fffffff, 0x0, 0xd}, [{0xfff, 0x2b, 0x6, 0x2}, {0x7fff, 0xb82, 0xff, 0x5}]}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000140)=0x3) 1m1.389028337s ago: executing program 8 (id=2413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0xf, &(0x7f00000010c0)=[@in6={0xa, 0x4e24, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0xfddd}, @in6={0xa, 0x4e20, 0x2, @private1, 0x4071}]}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {}, 0xc, {0x2, 0x4e22, @empty}, 'lo\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 1m1.364459669s ago: executing program 73 (id=2413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0xf, &(0x7f00000010c0)=[@in6={0xa, 0x4e24, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, @in={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0xfddd}, @in6={0xa, 0x4e20, 0x2, @private1, 0x4071}]}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000240)={{0x2, 0x4e23, @empty}, {}, 0xc, {0x2, 0x4e22, @empty}, 'lo\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x6, 0x1, 0xfffffffffffffffe}}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 48.084355766s ago: executing program 0 (id=2518): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x13c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) pwrite64(r0, &(0x7f0000000540)="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", 0x1000, 0x5) r1 = dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000002e00), r1) 48.03621647s ago: executing program 0 (id=2519): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x38, r0, 0x10, 0x70bd22, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008800}, 0x801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000c40)={0x9, 0x0, 0x0, 0x720}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="040003000000000008000300", @ANYRES32=r3, @ANYBLOB="10000000000000002000030000000000"], 0x54, 0x2) write(r5, &(0x7f0000000540)="340000001e005f0214fffffffffffff80700000001000000000000000500090002000000717db28bce0ba1bc6f0b86caac719999", 0x34) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r4, @ANYBLOB="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"/379], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 47.940683908s ago: executing program 0 (id=2521): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2f, 0x2718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x43}, 0x0, 0x6, 0x0, 0x1, 0xf9, 0x6, 0x8b, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, 0x0, 0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="14000000000000ffff000000010000000e000000000000001400000000000000000000000100000007000000000000002400000000000000000000000700000094040000820d212aab96bad6cdf92da325000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414366401010100000000600000000000000010000000070000000144207d40000000090000069f000000060001000000000a76000000090000000701862a00000002070e301517f337fc5724b0f4b19f0210c22ab262618268e7b39eceaeaa720106fe8b1561940400001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff00000000000000001100000000000000290000000100000000000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="0a010102ac1414aa000000001400000000000000010000000100000001000000000000001c000000000000000000000008000000", @ANYRES32=r4], 0x168}}], 0x1, 0x8000004) 47.700160879s ago: executing program 0 (id=2525): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='./file0\x00') io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 47.178891135s ago: executing program 0 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x13c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x4010) pwrite64(r0, &(0x7f0000000540)="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", 0x1000, 0x5) r1 = dup3(0xffffffffffffffff, r0, 0x80000) syz_genetlink_get_family_id$tipc(&(0x7f0000002e00), r1) 45.373360754s ago: executing program 0 (id=2547): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x9de, 0xffff7fff, 0x1, 'queue1\x00', 0x6}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) r8 = socket(0x40000000015, 0x5, 0x0) unshare(0x2a020400) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0xe) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendto$inet6(r2, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 45.30496869s ago: executing program 74 (id=2547): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000001c0)={0x9de, 0xffff7fff, 0x1, 'queue1\x00', 0x6}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r7) r8 = socket(0x40000000015, 0x5, 0x0) unshare(0x2a020400) bind$inet(r8, &(0x7f0000000340)={0x2, 0x4e20, @multicast1}, 0xe) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendto$inet6(r2, &(0x7f00000004c0)="2b985c", 0xfffffffffffffc46, 0x8000, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) 38.81893579s ago: executing program 9 (id=2597): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000000840)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc_tr={0x11, {@llc={0x4e, 0x2, "cd", "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"}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000180)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x280500) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x49, 0xfe8ee28a1d9fac77, 0xa, 0x1006, 0x2, 0x40, 0x3, 0x0, 0x6, 0x6}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0xc0a85320, &(0x7f0000000880)={{0x80, 0x8}, 'port0\x00', 0x0, 0x150625, 0x3, 0x4, 0x20107, 0x6, 0x8, 0x0, 0x4, 0xa}) setfsgid(0x0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 38.313140955s ago: executing program 9 (id=2600): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf0029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) 37.873092313s ago: executing program 9 (id=2603): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4039, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1}, 0x8892, 0x0, 0x43a1bd76, 0x2, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x830, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be2507fdfd0000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) 36.903543608s ago: executing program 9 (id=2608): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$eJzs3cFrJFkZAPCvKulMMsmarHpYF1wXd2Wy6nQmG2c3eFgVRE8L6oonYYxJJ4R00kPS2Z2Ewc3iVRBUdMGLnrwI/gGC7MW7CAvrXVQcZMzoQWFmSqq7eibp6U4y2Olmkt8Paqpeve76vtedfl2vq6YqgHPr+YiYjoihiHgpIiaL9WkxxV5zyh93Z//mYj4lkWVv3E4iKda1tnWhmI8XTxuNiG98NeK7yaNxt3Z21xaq1cpmUZ6pryd3s2z38ur6wkplpbIxNzf7yvyr81fnSz1p51REvPblv/30h7/6ymu/++xbf752a/p7eVr/zbK3o60dvdRseqnxWrQMR8TmaQQbkOFGC5uunugZHf4gAADoi3x//8MR8cnG/v9kDDX25gAAAICzJPvCRNxNIrIkLwAAAABnURoRE5Gk5eJ834ni3MzxiPhoXEyrta36Z5Zr2xtLeV3EVJTS5dVq5UqMNs4dmIpSkpdni3NsW+WX28pzEfF0RPxkcqxRLi/WqkuD/vEDAAAAzonxtvH/vyfTtFwuKvcGnBwAAADQO1ODTgAAAAA4dcb/AAAAcLaV8vF/dqIbMqXF3B0CAAAA4Mnytddfz6esdf/rpTd3ttdqb15eqmytlde3F8uLtc3r5ZVabaVxzb7147ZXrdWufy42tm/M1Ctb9Zmtnd1r67Xtjfq11UO3wAYAAAD66OlPvPenJCL2Pj/WmHIjRV0pIhs6+GAH/uFMSR/nwX89vTyA/jv4/T42wDyA/rNLD+dXadAJAAN33H8A6nryzh96nwsAAHA6Ln2s+/H/28sDTQ04ZcXx/+REFwABzpShDuvK4wNIBOi75vG/+1nToLMB+qnUcQ+gYFAAZ17am+P/x1zfI9GhAADAgE00piQtF+OAiUjTcjniqcZtAUvJ8mq1ciUiPhQRH0yWLuTl2cYzE3vzAAAAAAAAAAAAAAAAAAAAAAAAAHBCWZZEBgAAAJxpEenfW3fmujT54kT77wMjyX8mG/OIeOvnb/zsxkK9vjmbr//ng/X1d4v1Lz/urw8/vtWjnzEAAACAA1rj9NY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66c7+zcU7WZZl+zcX+xn3H1+KiKkifjE1a4ZjtDEfjVJEXPxXEsMHnpdExFAP4u+9ExHPdIqf5GnFVJHFofgjEWlEjPUqfjxm/GjGH+9BfDjP3sv7ny92+vyl8Xxj3vnzN1xM/6/u/V/6oP8b6tL/PdVto6XDxWff/81M1/jvRDw73Ln/acVP8u11iP/CCdv4nW/u7nary34ZcalT/5ccjjVTX78+s7Wze3l1fWGlslLZmJubfWX+1fmr81dmllerleLfjjF+9PHf3n9YuvdI+y8e0f822t/l9X/xiDYf/G649/6N/Y80F9vemSjFL7Js+oXO7/8z+ezTnePnfxOfKr4H8vr8NUzf/VbHXJ779R+f65Zn3v6lLu0fbWv/hbb2Tx/R/oNe+vr3/3LChwIAfbC1s7u2UK1WNi0cXIipfsV6wt6CkWgu5PudA88niSTyhQ8OVS0MPrHmwtvFZ2yh2vq09WjLvy8GR6eZ/OFuoutQEwAAeHI83Olvr0kGkxAAAAAAAAAAAAAAAAAAAACcQ8deBqxbVRoRD9d8+wdHXI2sPebeYJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wUAAP//kBLSkw==") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 36.010371467s ago: executing program 9 (id=2613): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x454, &(0x7f0000000ec0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r2, 0xb35, 0x70bd22, 0x25dfdbfb}, 0x14}}, 0xa0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x3d, 0x7fff0000}]}) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x9, 0x81, 0x4}, {0x6, 0x5, 0x7}]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@private2, 0x19, r4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BLKRASET(r6, 0x1262, &(0x7f0000000400)=0x1ff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000540)={0x0, 0x88, "12bcc9b8f6b5962cd813641d7745a04413adeb16efe52383a48b7bf88de6091f6207e49dec57086bfbc833932437f062138c6504ec9f5b3b9a1bf69d389786d872ff6d7b002d426a6740140cc9a1c1d30c89266193acb8ee3d7f919a05c9c4549d9626bcb14a81f509c0a21eacc1378a3b89fab2ac64fa6c0f9d30356dfdb7186e48d28ad725bdbe"}, &(0x7f0000000140)=0x90) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r8, 0x6}, 0x8) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000000)={r10, 0x1, 0x1}, 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000000df250a200004060000000200000066553e5cfe8000000b000000000000000000002c050013007f"], 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040) open_by_handle_at(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="08000000020003000b"], 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f1, &(0x7f0000000080)) 35.998034648s ago: executing program 6 (id=2614): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf0029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x6) 35.785984948s ago: executing program 6 (id=2618): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x0, 0x5517, 0xfdfb}) 35.633013571s ago: executing program 6 (id=2620): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000040000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fc4fffff050000000089a3f0390200"/28], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r4, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r8, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x40718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) geteuid() sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r10, 0x0, 0x0) 35.623687811s ago: executing program 9 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3afe9caf13ed9a2924ed053d2b4b24aedb4035d4212c8a5f7df3b67916187c245f81035efe9b53a8d79988d4b00a8aa5926f8b9103fd0e543cebd14ca5d0825146c7ff12ef0b8fe612538542d6f5c9fdc7894374795b8ccb6bdb303b42aa86746d3370ad7a31c090504104000050209072501830200040725018101070009045b060c317135060905051008000600d30725018002000009050610200080ff0407250101060200090500100004090401090504104000ab0005090505022000060d0d48007672bf7524ef90e0a086de3562bf356642bc0201de8fa807c3b757b1c182c0f4c59af7c59293e1bc41956912be0eafd96bdf03aa6117bc3e50fbee59a6e5dfc7206516e091fce94c0c778a134b5368d1af31d240535b0725018002010009050b08000401a9050725010332f60b0725010206ac15090502140000c7070e0905010400020805800905051000020802ae07250103fbff0009050010400008000309050c040002030d07410f8c1ea652c620acd24cbf2bfeb921dfc3f2c147f7c05a53e4f7db6742a64c76fe8d2f319387c80165b1ad6b9054e93ae7385d785e1c040f2c4e5c2388ef8791090509002000010802"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 35.599871653s ago: executing program 75 (id=2621): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x71}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x100100, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x80, 0x8}}, 0x120) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 34.910461965s ago: executing program 6 (id=2623): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 34.549498886s ago: executing program 6 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd1400fcdbdf250900020073797a30000000000800410072786500140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010428bd7000fbdbdf251d01050005000d0001000000150001000200004004010000fcd8e6b650c8a77700000000c4483a4fa88d33342465f6e62f8039fbccdf5d9b6728b6d84b2e862db4459c510993d962b5b1f840882fbb1b8a9c8a804a43c186c09a1f3134f51877"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020480) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000000000000000002000000000000000001000084080000000600000001000000040000"], 0x0, 0x46, 0x0, 0x1}, 0x28) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r6, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x5c, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r7, r8, 0x4, r4}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c1400001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000000140380300000802c000180250001"], 0x14b0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000011c0)={0x2, 'veth0_to_hsr\x00'}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a40), r11) 34.370165452s ago: executing program 4 (id=2628): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf0029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) 34.257248692s ago: executing program 4 (id=2629): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x6000, 0x2, 0x40010, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x8003, 0x0, 0x5, 0xc}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708000180040010000400", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = semget(0x1, 0x1, 0x1) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000340)=""/77) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x400c000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20004000) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r6 = dup2(r5, r5) recvmmsg(r6, &(0x7f0000002ec0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000121, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000440)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, r7, 0x1a, 0x0, @void}, 0x10) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 33.657140054s ago: executing program 4 (id=2632): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@noblock_validity}]}, 0x3, 0x488, &(0x7f0000001340)="$eJzs3M1vFOUfAPDvTLuF/oBfq+ILL2oVjQ1qSwGVgwc1mnjAxEQPGk9NWwhSqKE1EUIUjMGTMSbejUf/BU96MUYvJl71bkiI6QXw4prZnWl3l90tLbtdYD+fZOB55qXP99uZZ/eZeXYbQN8ay/5JIrZHxB8RMVKt1u8wVv3v2vL5mevL52eSKJff+jup7Hd1+fxMsWtx3La8Mp5GpJ8lsadJu4tnz52cnp+fO5PXJ5dOfTC5ePbcsydOTR+fOz53+uCRI4cPTb3w/MHnmgc+tL48s5iu7v54Ye+u19/96o2jX9Tl35BHh4y12/hkudzh5nprR005GexhIKzLQERkp6tU6f8jMRCrJ28kXvu0p8EBXVUul8vbWm++UG6QNq4A7mBJ1Ndv6PLAXap4o8/uf4ulcRDwUveGHz135eXqDVCW97V8qW4ZjDTfp9Rwf9tJYxHxzoV/vsmW6M5zCACAOj9k459nmo3/0nigZr//53NDoxFxT0TcGxH3RcTOiLg/orLvgxHxUOXIWBk7raVxkuTG8U96+ZYSXEM2/nsxn9sazsZ/pZV2i8LoQF7bUcm/lBw7MT93IP+djEdpS1afatPGj6/+/mWrbbXjv2zJ4ijGgnkclwe31B8zO700vfGM6125GLF7sMi1dvybrMwEJBGxKyJ2b7CNE/u/29tq29r5t9GBeabytxFPVc//hViuz7+QtJ+fnNwa83MHJour4ka//HbpzVbtV/Lfv8H8OyA7///Lr/9rzfMfTWrnaxfX38alPz9veU+z0et/KHm7Ui6mgT+aXlo6MxUxlBytBl27/uDqsUW92D/Lf3xfs/zTymtc8ZvYExHZRfxwRDwSEY/msT8WEY9HxL42+f/8yhPvN92Q3uL13wFZ/rPrOv+rhaFoXNO8MHDyp+/rGh1dLeb5X29//g9XSuP5mpt5/buZuDZ2NQMAAMCdJ42I7ZGkEyvlNJ2YqH5efmdEOr+wuPT0sYUPT89WvyMwGqW0eNI1UvM8dCq/ra/WL0ZE9aMFxfZD+XPjrweGK/WJmYX52V4nD31uW4v+n/lroNfRAV3n+1rQv/R/6F/N+v/WHsQBbD7v/9C/mvT/4V7EAWy+Zu//n7Q/5N9uxQJsrob+b9oP+sj67/9/fa8rgQCbrmX/v5v/8g9Q4fk/9KXF4Vj7S/JtC8VP2uDht0shiYiO/sAo3RZ53XqhnDQ9uZFmhdLtEKFCFwq9fV0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADolP8CAAD//3fv18M=") r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (fail_nth: 6) 33.009352202s ago: executing program 4 (id=2635): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$eJzs3cFrJFkZAPCvKulMMsmarHpYF1wXd2Wy6nQmG2c3eFgVRE8L6oonYYxJJ4R00kPS2Z2Ewc3iVRBUdMGLnrwI/gGC7MW7CAvrXVQcZMzoQWFmSqq7eibp6U4y2Olmkt8Paqpeve76vtedfl2vq6YqgHPr+YiYjoihiHgpIiaL9WkxxV5zyh93Z//mYj4lkWVv3E4iKda1tnWhmI8XTxuNiG98NeK7yaNxt3Z21xaq1cpmUZ6pryd3s2z38ur6wkplpbIxNzf7yvyr81fnSz1p51REvPblv/30h7/6ymu/++xbf752a/p7eVr/zbK3o60dvdRseqnxWrQMR8TmaQQbkOFGC5uunugZHf4gAADoi3x//8MR8cnG/v9kDDX25gAAAICzJPvCRNxNIrIkLwAAAABnURoRE5Gk5eJ834ni3MzxiPhoXEyrta36Z5Zr2xtLeV3EVJTS5dVq5UqMNs4dmIpSkpdni3NsW+WX28pzEfF0RPxkcqxRLi/WqkuD/vEDAAAAzonxtvH/vyfTtFwuKvcGnBwAAADQO1ODTgAAAAA4dcb/AAAAcLaV8vF/dqIbMqXF3B0CAAAA4Mnytddfz6esdf/rpTd3ttdqb15eqmytlde3F8uLtc3r5ZVabaVxzb7147ZXrdWufy42tm/M1Ctb9Zmtnd1r67Xtjfq11UO3wAYAAAD66OlPvPenJCL2Pj/WmHIjRV0pIhs6+GAH/uFMSR/nwX89vTyA/jv4/T42wDyA/rNLD+dXadAJAAN33H8A6nryzh96nwsAAHA6Ln2s+/H/28sDTQ04ZcXx/+REFwABzpShDuvK4wNIBOi75vG/+1nToLMB+qnUcQ+gYFAAZ17am+P/x1zfI9GhAADAgE00piQtF+OAiUjTcjniqcZtAUvJ8mq1ciUiPhQRH0yWLuTl2cYzE3vzAAAAAAAAAAAAAAAAAAAAAAAAAHBCWZZEBgAAAJxpEenfW3fmujT54kT77wMjyX8mG/OIeOvnb/zsxkK9vjmbr//ng/X1d4v1Lz/urw8/vtWjnzEAAACAA1rj9NY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66c7+zcU7WZZl+zcX+xn3H1+KiKkifjE1a4ZjtDEfjVJEXPxXEsMHnpdExFAP4u+9ExHPdIqf5GnFVJHFofgjEWlEjPUqfjxm/GjGH+9BfDjP3sv7ny92+vyl8Xxj3vnzN1xM/6/u/V/6oP8b6tL/PdVto6XDxWff/81M1/jvRDw73Ln/acVP8u11iP/CCdv4nW/u7nary34ZcalT/5ccjjVTX78+s7Wze3l1fWGlslLZmJubfWX+1fmr81dmllerleLfjjF+9PHf3n9YuvdI+y8e0f822t/l9X/xiDYf/G649/6N/Y80F9vemSjFL7Js+oXO7/8z+ezTnePnfxOfKr4H8vr8NUzf/VbHXJ779R+f65Zn3v6lLu0fbWv/hbb2Tx/R/oNe+vr3/3LChwIAfbC1s7u2UK1WNi0cXIipfsV6wt6CkWgu5PudA88niSTyhQ8OVS0MPrHmwtvFZ2yh2vq09WjLvy8GR6eZ/OFuoutQEwAAeHI83Olvr0kGkxAAAAAAAAAAAAAAAAAAAACcQ8deBqxbVRoRD9d8+wdHXI2sPebeYJoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCk/wUAAP//kBLSkw==") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_io_uring_setup(0x20049a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 32.143681388s ago: executing program 4 (id=2641): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffeffffffffffd, 0x2c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f0000000440)="d4", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0x3, 0x6, @multicast}, 0x14) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r11 = dup3(r2, r10, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xfffffffffffffffd}) ioctl$MON_IOCG_STATS(r11, 0xc0109207, &(0x7f0000000180)) 31.353147908s ago: executing program 6 (id=2643): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x38, r0, 0x10, 0x70bd22, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008800}, 0x801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000c40)={0x9, 0x0, 0x0, 0x720}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="040003000000000008000300", @ANYRES32=r3, @ANYBLOB="10000000000000002000030000000000"], 0x54, 0x2) write(r5, &(0x7f0000000540)="340000001e005f0214fffffffffffff80700000001000000000000000500090002000000717db28bce0ba1bc6f0b86caac719999", 0x34) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r4, @ANYBLOB="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"/379], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 31.335811069s ago: executing program 76 (id=2643): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x38, r0, 0x10, 0x70bd22, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x100003}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008800}, 0x801) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000c40)={0x9, 0x0, 0x0, 0x720}, 0x10) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="040003000000000008000300", @ANYRES32=r3, @ANYBLOB="10000000000000002000030000000000"], 0x54, 0x2) write(r5, &(0x7f0000000540)="340000001e005f0214fffffffffffff80700000001000000000000000500090002000000717db28bce0ba1bc6f0b86caac719999", 0x34) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r4, @ANYBLOB="00032dbd7000fddbdf2504000000cc000480040007802400078008000300018000e5850118e640ca000800030000000000080003004000000008000200050000000900010073797a31000000001300010062726f616463000300040000000800030007000000080002000500000008000400040000000900010073796173742d6c696e6b00003c000780080004000800000008000300020000000800010011000000080002000800000008000200ff01000008000300020000000800040008000000540002800800010001000000040004002c0003800800020000000400080002000400000008000200f9ffffff0800020005000000080002000b000000080002000000010008000100020000000800020007000000580006800400050004000200040002004500040067636f28616573290000000000000000000000000000561d7502f1000000000000000000001d000000f249d69cc41e06ae2eca991c6cdf5ebeba9a6ab60200"/379], 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0x8) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 30.064195251s ago: executing program 4 (id=2650): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x3, 'sed\x00', 0x1a, 0x3, 0x57}, 0x2c) 30.050979443s ago: executing program 77 (id=2650): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x84, @loopback, 0x4e20, 0x3, 'sed\x00', 0x1a, 0x3, 0x57}, 0x2c) 6.450368042s ago: executing program 1 (id=2803): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r3 = socket(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/136, 0x88}], 0x1}, 0x7}], 0x1, 0x40012023, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xc8}}, 0x0) getsockname$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000000)) 5.668679891s ago: executing program 1 (id=2806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)="667634a4224ebb1721a99d660d089d8f96b2a5caad938c3ecbe172140af6d30098fcf7c71f1df7f33d6deb1b1ea3c1e783f5e2d46a304e9bccdcb77287067ca19f26ee5a3624fde4b84148682be8ff5f4ba060e4573b3f3211de589ec6561f69bef49eb25ba6286b268a4b66a3b7", 0x6e}], 0x1, &(0x7f0000000780)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x2, 0x810) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) write$cgroup_pressure(r5, &(0x7f00000000c0)={'some', 0x20, 0x8000000000000000, 0x20, 0x2}, 0x2f) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090603000000000000000000050000400900020073797a310000000005000100070000002c000780060004404e21000005000700ff0000000c0001"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3.41234881s ago: executing program 1 (id=2816): prlimit64(0x0, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) unshare(0x2040400) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000080)={[{}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@max_batch_time={'max_batch_time', 0x3d, 0x40fff}}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") 3.247986464s ago: executing program 1 (id=2819): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000200)=0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$packet(0x11, 0x3, 0x300) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="016f08d8f7c7ed1592f2770046009939448477525a660500"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000fe9078001309c40005020000fffd000880000002d58838068b91000000"], 0x4e) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r3, &(0x7f0000000100)={0xfffffffffffffffd, 0x1, 0x6, 0x7, 0x0, 0x800000000007fff, 0x7a, 0xfffffffffffffffa, 0x400006ac}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000040)={0x83, 0xffffffff, 0x1, 0x0, 0x8f, "ff00f7000000000000000020af88008300"}) r8 = syz_open_pts(r7, 0x141601) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x1a102, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000580)=""/120, 0x78, 0x0, &(0x7f0000000600)=""/152, 0x98}}, 0x10) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000002000000000210000000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x1b, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4e, '\x00', r2, @fallback=0x21, r10, 0x8, &(0x7f0000000540)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, r11, r12, 0x3, &(0x7f0000000800)=[r5, r13, r14], &(0x7f0000000840)=[{0x0, 0x1, 0xe, 0x4}, {0x3, 0x3, 0x12, 0xc}, {0x0, 0x5, 0xb}], 0x10, 0x4}, 0x94) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write(r8, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000080)={0x400008, 0x1ffffffe, 0x0, 0x200007, 0x19, "680c1acfa4a5000000070000faffffff000800"}) 2.84141805s ago: executing program 3 (id=2826): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) rseq(&(0x7f00000004c0), 0x1b, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x900) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000000)) 2.812063503s ago: executing program 3 (id=2827): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c1000003c00070101000000fbdbdf25037c000004008c80131001"], 0x102c}}, 0x2404c002) 2.705143932s ago: executing program 3 (id=2828): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = getpid() ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x9, 0x2003) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x80000, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0)="ad6e3163f15f34a9546ec64d6cd6ccb0755a61d840cd70d089825c383069d85fffd16fde8714b33d8ac25462301785e4a6a68a1bbe4729819544abaa91c365b971c12aef28e10d4efb76bff8525909b30da9521b9ab2768d46a03de917f1e6ab1aa26c58dfcf1bb36bc3c1", &(0x7f0000000240)=""/8, 0x2}, 0x20) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4d0fb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xb446edcd875b863c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) rename(0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000000a000000020000000800000002000000", @ANYRES32=0x0], 0x50) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket(0x10, 0x3, 0x0) 2.323874095s ago: executing program 3 (id=2834): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4269, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xe}, 0x19196, 0x20000, 0x43a1bd76, 0x1, 0x2c9, 0x2, 0x4, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6d932bbd70000000000001"], 0x24}, 0x1, 0x0, 0x100000000000000, 0x41}, 0x0) 2.195499067s ago: executing program 1 (id=2836): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x24048816) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101840, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYRESHEX=r2], 0x38}, 0x1, 0x0, 0x0, 0x20048091}, 0x4054) writev(r5, &(0x7f0000000180), 0x100000000000003c) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) r8 = open(0x0, 0x4c27e, 0x2) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r10, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "1854fb2346ed9421"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "b10f38973c051d95"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4044002) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x639, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd902, 0xe280}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xffffff7f00000000}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x24000000) (async) sendfile(r8, r8, 0x0, 0x800000a1e) 2.193135247s ago: executing program 7 (id=2837): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4e}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0xfffffdb0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f00000000c0)=r5) gettid() timer_create(0x1, 0x0, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2.192900698s ago: executing program 5 (id=2838): prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001140)=ANY=[@ANYBLOB="ff1a000000000000075000000002120a7788fffffffffeffffffff000000000000000e0000000000000005000000000000000b0000000000000000000000000000000000000000000000ff0f000000000000080000000000000000010007100000000002091100008000000000000004019705020008040105000100075800000001140740000600000002000000dd44000000000000ff070000000000004b940000000000000100000000000000c400000000000000020000000000000001040000000000000002000000000000070000000000000005020000000000000000"], 0xe0) (async) r1 = signalfd4(r0, &(0x7f0000001240)={[0x4]}, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000001000000000000000b"], 0x28}}, 0x40000) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) (async) getsockname$packet(r0, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r4, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20010}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) (async) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 2.088998196s ago: executing program 5 (id=2839): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 2.066817139s ago: executing program 7 (id=2840): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010100}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) exit(0xffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e9, 0x40}, 0x0, 0x0, 0x5, 0x2, 0xb5a, 0x9, 0x4, 0x2fc, 0x6, 0x6}) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffff6) 1.906573532s ago: executing program 3 (id=2842): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x4, 0x6, 0x0, 0x500, 0x4, 0x540000}) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) socket(0x10, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0) 1.841987808s ago: executing program 1 (id=2844): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @remote}], 0x2c) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000100)={r6}) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r5}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r10, 0x0, 0x15, &(0x7f0000000000)=0x80000000, 0x3) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.429092135s ago: executing program 2 (id=2845): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf0029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) 1.385558989s ago: executing program 5 (id=2846): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000300)={[{@dioread_nolock}, {@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@discard}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4c4800, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0) setreuid(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x402, &(0x7f0000000400)=ANY=[@ANYBLOB="75737291756f7469643d000000", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=r1]) 1.37434188s ago: executing program 2 (id=2847): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1.323492974s ago: executing program 2 (id=2848): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bond0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB="0a000100aa"], 0x48}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0xffffff7f00000000) 1.14510017s ago: executing program 7 (id=2849): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0001060e305900ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="80007f0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (fail_nth: 3) 1.038437789s ago: executing program 5 (id=2850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="58feff00020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x802) 1.007290662s ago: executing program 7 (id=2851): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0xffffeffffffffffd, 0x2c00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r6 = dup3(r2, r5, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xfffffffffffffffd}) ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180)) 761.089854ms ago: executing program 2 (id=2852): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xfff}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a, 0x1700}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) 687.50794ms ago: executing program 2 (id=2853): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000001540), 0x202000, 0x0) fcntl$getflags(r0, 0x3) 644.683444ms ago: executing program 2 (id=2854): socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) recvmmsg(r2, 0x0, 0x0, 0x22, 0x0) 528.955454ms ago: executing program 3 (id=2855): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r0 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x80, 0x1, 0x20f}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f00002e7000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r5, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) io_setup(0x3, &(0x7f0000008240)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x200800, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f0000010000)="$eJzs3ctrXGUbAPBnZnJp0nxfL1/5aPvB10KFeqG5Ik3UjSt1URALbhRKTKaxZpIJmUltQhep7rpwIYqCuHDvX+DGriyCuNa9uJCK1ggqCCNnLnUyyaSxppma8/vB6bzvmZk8553hefued84lgNQ6mfyTiRiIiC8j4kCtuv4FJ2sPa7evTiVLJiqV8z9kqq9L6o2XNt63PyJWI2JfRLzwTMQrmY1xS8srs5OFQn6xXh8qzy0MlZZXzlyam5zJz+TnR8bPTkyMD4+NTuxYW6+/9dr1c5881/PxL2/euvn2Z58mmzVQf65nx6KsV2t6dxxqWtcVEU/dp3i7LVdvT1+nN4R7knx//4mIU9X8PxC56rcJpEGlUqn8Xult9/RqBdizstUxcCY7GBG1cjY7OFgbwx+J/myhWCo/drG4ND9dGysfjO7sxUuF/HB9X+FgdGeS+ki1/Gd9tKU+FlEdA7+T66vWB6eKhend7eqAFvtb8v/nXC3/gZSwyw/pJf8hveQ/pJf8h/SS/5Be8h/SS/5Desl/SC/5D+kl/yG95D+k0vPnziVLpXEe//Tl5aXZ4uUz0/nS7ODc0tTgVHFxYXCmWJypnrMzd7e/VygWF0Yej6UrQ+V8qTxUWl65MFdcmi9fqJ7XfyHfvSutArbj0IkbX2ciYvWJvuoSTdfCkKuwt1Uqmej0OchAZ+Q63QEBHWPqD9LLPj7Qeone1nHBvnZvXNj62rn2L+DBle30BgAdc/qY3/8grYzPIb3M/0N6GeMDm9yib52t5v+Bfybz/5BeA23u//Wvpnt3DUfEvyPiq1x3b+NeX8BekP0uUx//nz7w0EDrsz2ZX6s/EfRExOsfnH/vymS5vDiSrP/xzvry+/X1o01vbLvDAHRKI08beQwApNfa7atTjWU3437/dO0ghI3xu+pzk/uqv1H2r2XWHauQ2aFjF1avRcTRzeJn6vc7r+3I9K/lNsQ/nDw2TaBm69t05C/EX/gb8Y/VH5Pl/03xj9/7xwGpciPpf4Y3y79skpZ3JjJa+5+BHTp2on3/l73T/+Xa9H8n7vqrbc2rH77xbdv41yKOd/XVa+v7n656/Ex9nqc5frJtp7fZxlsvv/jfds9VPqr9nc36v4akNFSeWxgqLa+cqV5HbiY/PzJ+dmJifHhsdGKoOkfdGxHVmeqNnjz6xc2t2t/fJn5z+zf7/B/ZZvt/+9/nL53cIv7Dpzb//g9vET/5xh7dZvyfRr9p+19lEn+6TfuzW8RP1o1tM37p3Wd7t/lSAGAXlJZXZicLhfyigoJCRwrXHozNaCl0umcC7rfScrJrniR9p7cEAAAAAAAAAAAA2K7dOJy4020EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgL/ggAAP//atjKmw==") sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000033b52266000000000600000018010000786c6c25000000000020202063ed4d1f843fd29c3ee7b9558c55e77c0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202001001af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 523.579415ms ago: executing program 5 (id=2856): ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x84000) mount$9p_fd(0x0, 0x0, 0x0, 0xc4, 0x0) flock(0xffffffffffffffff, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xc, 0x16, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0x75b5, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8081002, 0x33e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x28, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', r0}) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 440.016942ms ago: executing program 7 (id=2857): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf0029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f00000004c0)=[@enter_looper], 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0x6) 98.533522ms ago: executing program 7 (id=2858): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x2, 0x0, 0x7fffffff}]}) fcntl$lock(r0, 0x0, &(0x7f0000000ac0)={0x1, 0x2, 0x6, 0x300000000000000}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x30, 0x0, 0x0, 0x7, 0x20800, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x106200, 0x10004, 0xcd92, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r1, &(0x7f0000000000)="cb1d7feccf35ee34", 0x8, 0x4811, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) capget(&(0x7f0000000180)={0x19980330, r2}, &(0x7f00000001c0)={0x400, 0x3d8, 0x0, 0x3, 0x10, 0x8}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xbf50908f34263107, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "1ec4ca42d51603ab6be326fb68159827afb16b1ffb7106f992c9c1bbab1bd3d28c3ad32947da1c74f1fb80e179a55ea846e0190b2b879071f31d0e160ee95c6b7a93eb11740633e70ad79e6d727002aab566ae7f7e817e23dfcd4c3971e95d06dbdc42b77dbb0e29ed8fc9f069d82f07bcfd72ae55ee4589bd4a569d3b63e46b"}}}}]}, 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x2a648000) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) 0s ago: executing program 5 (id=2859): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0xabe5, 0x0, 0x0, 0x34f}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000a40)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000140), 0x2, 0x0) r8 = perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x8, 0x4, 0x3, 0x0, 0xff, 0x20000, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1b7f, 0x0, @perf_config_ext={0x1}, 0x4c8, 0x7, 0x2, 0x4, 0x40, 0x7, 0x0, 0x0, 0x101, 0x0, 0x1}, 0x0, 0x10, 0xffffffffffffffff, 0xf) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x9) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80)="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") ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c00000010000100b02abd7000fcdbdf25000000", @ANYRES32=0x0, @ANYBLOB="8111000000000000140003007465616d30000000000000000000000008000400d4000000300016802c000180280001"], 0x6c}, 0x1, 0x0, 0x0, 0x2a5ab9fefff63ca5}, 0x24000010) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x24, r10, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x84, r10, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xb1}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0xf535}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x5}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7ffd}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x1}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x7fff}]}, 0x84}, 0x1, 0x0, 0x0, 0x804}, 0xf9da38ceaf799f7b) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r14 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r14, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) kernel console output (not intermixed with test programs): main item tag 0x0 [ 397.468582][ T4413] hid-generic 0080:0008:0000.0008: unknown main item tag 0x0 [ 397.484286][ T4413] hid-generic 0080:0008:0000.0008: unknown main item tag 0x0 [ 397.510242][ T4413] hid-generic 0080:0008:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 397.563935][T19695] loop0: detected capacity change from 0 to 512 [ 397.614514][T19695] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 397.658696][T19695] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 397.668089][T19695] System zones: 0-1, 15-15, 18-18, 34-34 [ 397.690541][T19695] EXT4-fs (loop0): orphan cleanup on readonly fs [ 397.697037][T19695] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 397.781529][T19695] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 397.825964][T19695] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 397.867161][T19695] EXT4-fs (loop0): 1 truncate cleaned up [ 397.876515][T19695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.363470][T19727] syzkaller0: entered promiscuous mode [ 398.369389][T19727] syzkaller0: entered allmulticast mode [ 398.485938][T19010] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.672019][ T28] audit: type=1326 audit(1771596257.777:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 398.745524][ T28] audit: type=1326 audit(1771596257.777:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 398.797798][T19763] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2485'. [ 398.810428][ T28] audit: type=1326 audit(1771596257.777:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 398.835988][T19763] net_ratelimit: 10 callbacks suppressed [ 398.836031][T19763] netlink: zone id is out of range [ 398.876373][ T28] audit: type=1326 audit(1771596257.777:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 398.909647][T19763] netlink: zone id is out of range [ 398.922015][T19744] loop6: detected capacity change from 0 to 512 [ 398.941708][ T28] audit: type=1326 audit(1771596257.777:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 398.965458][T19763] netlink: zone id is out of range [ 399.155689][T19778] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.163049][T19778] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.211786][ T28] audit: type=1326 audit(1771596257.777:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 399.454615][ T28] audit: type=1326 audit(1771596257.777:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19750 comm="syz.0.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64e127c629 code=0x7ffc0000 [ 399.584505][T19778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.598036][T19778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.615774][T19744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.659889][T19744] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.703698][T19751] batman_adv: batadv0: Adding interface: dummy0 [ 399.710683][T19751] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.744050][T19744] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 399.788816][T19773] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 399.796058][T19751] batman_adv: batadv0: Interface activated: dummy0 [ 399.805562][T19771] batadv0: mtu less than device minimum [ 399.812247][T19771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.823745][T19771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.835309][T19771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.846661][T19771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.858002][T19771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.869861][T19771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 399.913805][ T1656] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.928883][ T1656] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.929865][T19807] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 399.937977][ T1656] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.010967][ T1656] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.024791][T19814] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2488'. [ 400.102684][T18202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.169991][T19835] delete_channel: no stack [ 400.186536][T19835] delete_channel: no stack [ 400.212155][T19832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.219901][T19832] IPv6: NLM_F_CREATE should be set when creating new route [ 400.249097][T19831] netlink: 752 bytes leftover after parsing attributes in process `syz.4.2489'. [ 400.376195][T19856] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2496'. [ 400.495104][T19857] can0: slcan on ttyS3. [ 400.798819][T19857] can0 (unregistered): slcan off ttyS3. [ 400.828006][T19855] loop9: detected capacity change from 0 to 1024 [ 401.012376][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 401.012394][ T28] audit: type=1400 audit(1771596260.097:2471): avc: denied { watch watch_reads } for pid=19853 comm="syz.9.2498" path="/211/file0" dev="tmpfs" ino=1149 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 401.065858][T19872] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2502'. [ 401.159450][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2500'. [ 401.175458][T19880] loop9: detected capacity change from 0 to 1024 [ 401.240636][T19880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.298358][T19880] EXT4-fs error (device loop9): ext4_lookup:1785: comm syz.9.2505: inode #12: comm syz.9.2505: iget: illegal inode # [ 401.327564][T19880] EXT4-fs (loop9): Remounting filesystem read-only [ 401.334874][T19900] loop6: detected capacity change from 0 to 512 [ 401.344904][T19902] can0: slcan on ttyS3. [ 401.349690][T19904] erspan0: left allmulticast mode [ 401.359603][T19902] loop7: detected capacity change from 0 to 512 [ 401.367462][T19902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 401.411118][T19904] erspan0: entered allmulticast mode [ 401.412535][T19900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 401.426728][T19902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.427264][T19904] team0: Port device erspan0 added [ 401.443524][T13637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.454046][T19902] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.471965][T19900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.512445][T19900] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.604939][T19900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.618519][ T28] audit: type=1400 audit(1771596260.737:2472): avc: denied { nlmsg_read } for pid=19925 comm="syz.0.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 401.830744][T19932] can0 (unregistered): slcan off ttyS3. [ 401.908436][T19948] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2519'. [ 401.991109][T19951] syzkaller0: entered promiscuous mode [ 401.997264][T19951] syzkaller0: entered allmulticast mode [ 402.038024][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.168718][ T28] audit: type=1326 audit(1771596261.287:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.211698][T19970] loop0: detected capacity change from 0 to 512 [ 402.218994][ T28] audit: type=1326 audit(1771596261.287:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.243321][ T28] audit: type=1326 audit(1771596261.287:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.277003][ T28] audit: type=1326 audit(1771596261.287:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.280709][T19971] batman_adv: batadv0: Adding interface: dummy0 [ 402.301488][ T28] audit: type=1326 audit(1771596261.287:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.333683][ T28] audit: type=1326 audit(1771596261.287:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.338473][T19971] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.368817][T19970] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 402.408949][T19970] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 402.425715][T19971] batman_adv: batadv0: Interface activated: dummy0 [ 402.432596][T19970] System zones: 0-1, 15-15, 18-18, 34-34 [ 402.438605][ T28] audit: type=1326 audit(1771596261.287:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19955 comm="syz.7.2520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 402.472948][T19970] EXT4-fs (loop0): orphan cleanup on readonly fs [ 402.501506][T19970] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 402.519138][T19970] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 402.562876][T19970] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 402.569239][T19978] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 402.579722][T19970] EXT4-fs (loop0): 1 truncate cleaned up [ 402.585982][T19970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.664528][T19980] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2527'. [ 402.677509][T19980] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2527'. [ 402.829317][T19989] netlink: 'syz.7.2532': attribute type 4 has an invalid length. [ 402.941664][T19989] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2532'. [ 403.009775][T19997] netlink: 'syz.6.2533': attribute type 10 has an invalid length. [ 403.080082][T19997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.099818][T19985] loop4: detected capacity change from 0 to 512 [ 403.120495][T19997] team0: Port device bond0 added [ 403.259993][T19985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.290706][T19985] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.318452][T20002] lo speed is unknown, defaulting to 1000 [ 403.336683][T19985] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 403.372948][T19985] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 403.382959][T20003] lo speed is unknown, defaulting to 1000 [ 403.534229][T14178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.728121][T20022] netlink: 'syz.7.2540': attribute type 4 has an invalid length. [ 403.756195][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2541'. [ 403.762108][T20024] loop9: detected capacity change from 0 to 512 [ 403.777072][T20021] vlan2: entered promiscuous mode [ 403.783440][T20021] dummy0: entered promiscuous mode [ 403.792355][T20024] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.2536: inode has both inline data and extents flags [ 403.823483][T20024] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.823735][T20024] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2536: couldn't read orphan inode 15 (err -117) [ 403.833675][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 403.833720][ C1] EXT4-fs (loop9): initial error at time 1771596262: ext4_orphan_get:1391: inode 15 [ 403.833758][ C1] EXT4-fs (loop9): last error at time 1771596262: ext4_orphan_get:1391: inode 15 [ 403.875760][T20024] loop9: lost filesystem error report for type 5 error -117 [ 403.876384][T20024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.953789][T20022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.963446][T20022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.023768][T13637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.099218][T20032] loop9: detected capacity change from 0 to 512 [ 404.107587][T20032] EXT4-fs: Ignoring removed orlov option [ 404.120332][T20022] loop7: detected capacity change from 0 to 1024 [ 404.127622][T20022] EXT4-fs: inline encryption not supported [ 404.141570][ T7964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.159503][T20032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.170096][T20022] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.193643][T20032] EXT4-fs (loop9): orphan cleanup on readonly fs [ 404.210776][T20032] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2544: bg 0: block 248: padding at end of block bitmap is not set [ 404.250906][ T7964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.258637][T20032] loop9: lost filesystem error report for type 5 error -117 [ 404.271798][T20032] EXT4-fs error (device loop9): ext4_acquire_dquot:7003: comm syz.9.2544: Failed to acquire dquot type 1 [ 404.279406][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 404.279451][ C1] EXT4-fs (loop9): last error at time 1771596263: ext4_validate_block_bitmap:441 [ 404.329985][T20032] loop9: lost filesystem error report for type 5 error -117 [ 404.334259][T20039] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=104 sclass=netlink_audit_socket pid=20039 comm=syz.6.2545 [ 404.354726][T20032] EXT4-fs (loop9): 1 truncate cleaned up [ 404.371381][ T7964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.392634][T20032] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 404.438550][T20032] EXT4-fs: Ignoring removed orlov option [ 404.448594][T20032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.460168][ T7964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.477746][T20032] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 404.495484][T19010] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.518828][T20032] EXT4-fs error (device loop9): __ext4_remount:6806: comm syz.9.2544: Abort forced by user [ 404.538379][T20032] EXT4-fs (loop9): Remounting filesystem read-only [ 404.545544][T20032] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 404.560702][T20032] ext4 filesystem being remounted at /217/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 404.618450][ T7964] bridge_slave_1: left allmulticast mode [ 404.630601][ T7964] bridge_slave_1: left promiscuous mode [ 404.636319][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.667916][ T7964] bridge_slave_0: left allmulticast mode [ 404.684166][ T7964] bridge_slave_0: left promiscuous mode [ 404.698526][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.828981][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.879147][ T7964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.916211][ T7964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.999185][ T7964] bond0 (unregistering): Released all slaves [ 405.022864][T20063] loop7: detected capacity change from 0 to 512 [ 405.031830][T20047] team0: No ports can be present during mode change [ 405.074577][T13637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.086245][ T7964] hsr_slave_0: left promiscuous mode [ 405.102004][ T7964] hsr_slave_1: left promiscuous mode [ 405.113371][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.136025][ T7964] net_ratelimit: 14 callbacks suppressed [ 405.136041][ T7964] batadv0: mtu less than device minimum [ 405.158587][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.169873][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.170442][T20033] kexec: Could not allocate control_code_buffer [ 405.181255][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.200171][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.210907][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.222009][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.233030][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.243937][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.254834][ T7964] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 405.327961][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.357163][ T7964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.426957][T20063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.453052][T20071] loop9: detected capacity change from 0 to 512 [ 405.467992][ T7964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.485795][ T7964] batman_adv: batadv0: Interface deactivated: dummy0 [ 405.503299][ T7964] batman_adv: batadv0: Removing interface: dummy0 [ 405.521893][T20063] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.536567][ T7964] veth1_macvtap: left promiscuous mode [ 405.543098][ T7964] veth0_macvtap: left promiscuous mode [ 405.549072][ T7964] veth1_vlan: left promiscuous mode [ 405.554510][ T7964] veth0_vlan: left promiscuous mode [ 405.571292][T20063] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 405.647484][T20063] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 405.693748][ T7964] team0 (unregistering): Port device team_slave_1 removed [ 405.704109][ T7964] team0 (unregistering): Port device team_slave_0 removed [ 405.720272][T20071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.779933][T20071] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.792248][T20048] lo speed is unknown, defaulting to 1000 [ 405.886174][T20071] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 405.926718][T20048] chnl_net:caif_netlink_parms(): no params data found [ 405.946850][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.983096][T20088] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 406.031486][T20048] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.083395][T20048] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.117737][T20048] bridge_slave_0: entered allmulticast mode [ 406.124459][T20048] bridge_slave_0: entered promiscuous mode [ 406.152071][T20048] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.160371][T20048] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.167934][T20048] bridge_slave_1: entered allmulticast mode [ 406.175079][T20048] bridge_slave_1: entered promiscuous mode [ 406.183721][T20106] __nla_validate_parse: 2 callbacks suppressed [ 406.183739][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2554'. [ 406.213605][T20106] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2554'. [ 406.242801][T20048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.258870][T20107] loop7: detected capacity change from 0 to 512 [ 406.291766][T20107] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2554: inode has both inline data and extents flags [ 406.303876][T20048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.314802][T20107] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 406.316521][T20107] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2554: couldn't read orphan inode 15 (err -117) [ 406.325842][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 406.325862][ C1] EXT4-fs (loop7): initial error at time 1771596265: ext4_orphan_get:1391: inode 15 [ 406.325889][ C1] EXT4-fs (loop7): last error at time 1771596265: ext4_orphan_get:1391: inode 15 [ 406.410085][T13637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.450691][T20048] team0: Port device team_slave_0 added [ 406.488785][T20048] team0: Port device team_slave_1 added [ 406.498031][T20107] loop7: lost filesystem error report for type 5 error -117 [ 406.502198][T20107] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.516086][T20048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.694297][T20048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.720993][T20048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.792994][T20128] can0: slcan on ttyS3. [ 406.917240][T20130] can0 (unregistered): slcan off ttyS3. [ 407.028796][T20048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.037080][T20048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.066015][T20048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.188051][T20048] hsr_slave_0: entered promiscuous mode [ 407.247955][T20048] hsr_slave_1: entered promiscuous mode [ 407.288867][T20048] debugfs: 'hsr0' already exists in 'hsr' [ 407.311723][T20048] Cannot create hsr debugfs directory [ 407.391582][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.977234][T20048] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 408.023500][T20048] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 408.073134][T20048] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 408.087786][T20048] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 408.190653][T20048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.237638][T20048] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.273050][T20167] FAULT_INJECTION: forcing a failure. [ 408.273050][T20167] name failslab, interval 1, probability 0, space 0, times 0 [ 408.298203][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.305421][ T1656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.321557][T20167] CPU: 0 UID: 0 PID: 20167 Comm: syz.7.2562 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.321591][T20167] Tainted: [W]=WARN [ 408.321598][T20167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.321610][T20167] Call Trace: [ 408.321658][T20167] [ 408.321666][T20167] __dump_stack+0x1d/0x30 [ 408.321691][T20167] dump_stack_lvl+0x95/0xd0 [ 408.321713][T20167] dump_stack+0x15/0x1b [ 408.321734][T20167] should_fail_ex+0x263/0x280 [ 408.321772][T20167] should_failslab+0x8c/0xb0 [ 408.321831][T20167] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 408.321858][T20167] ? vfs_parse_monolithic_sep+0x16a/0x270 [ 408.321881][T20167] kmemdup_nul+0x36/0xc0 [ 408.321974][T20167] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 408.322006][T20167] vfs_parse_monolithic_sep+0x16a/0x270 [ 408.322067][T20167] generic_parse_monolithic+0x24/0x30 [ 408.322101][T20167] parse_monolithic_mount_data+0x46/0x60 [ 408.322129][T20167] do_new_mount+0x24e/0x8d0 [ 408.322230][T20167] ? security_capable+0x7b/0x90 [ 408.322256][T20167] path_mount+0x4d0/0xbc0 [ 408.322283][T20167] __se_sys_mount+0x28c/0x2e0 [ 408.322331][T20167] ? fput+0x8f/0xc0 [ 408.322360][T20167] __x64_sys_mount+0x67/0x80 [ 408.322384][T20167] x64_sys_call+0x2d61/0x3020 [ 408.322412][T20167] do_syscall_64+0x12c/0x370 [ 408.322583][T20167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.322605][T20167] RIP: 0033:0x7fb9b00fc629 [ 408.322621][T20167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.322640][T20167] RSP: 002b:00007fb9aeb4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 408.322664][T20167] RAX: ffffffffffffffda RBX: 00007fb9b0375fa0 RCX: 00007fb9b00fc629 [ 408.322755][T20167] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 408.322768][T20167] RBP: 00007fb9aeb4f090 R08: 0000200000000840 R09: 0000000000000000 [ 408.322817][T20167] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000002 [ 408.322831][T20167] R13: 00007fb9b0376038 R14: 00007fb9b0375fa0 R15: 00007ffcc81c8708 [ 408.322852][T20167] [ 408.598552][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.605730][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.705704][ T28] kauditd_printk_skb: 72 callbacks suppressed [ 408.705720][ T28] audit: type=1400 audit(1771596267.829:2550): avc: denied { connect } for pid=20184 comm="syz.7.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 408.734506][T20185] netlink: 'syz.7.2567': attribute type 4 has an invalid length. [ 408.759894][T20183] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.766409][ T28] audit: type=1400 audit(1771596267.859:2551): avc: denied { getopt } for pid=20184 comm="syz.7.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 408.793224][T20183] batman_adv: batadv0: Interface deactivated: dummy0 [ 408.857927][T20183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.900839][T20183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.985279][T20183] bond0: left promiscuous mode [ 408.990281][T20183] bond_slave_0: left promiscuous mode [ 408.998030][T20183] bond_slave_1: left promiscuous mode [ 409.003837][T20183] bridge_slave_1: left promiscuous mode [ 409.048037][T20189] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2558'. [ 409.067671][ T7977] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.087219][ T7977] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.130050][ T7977] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.150450][ T7977] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.243202][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2574'. [ 409.262868][ T28] audit: type=1400 audit(1771596268.379:2552): avc: denied { ioctl } for pid=20219 comm="syz.4.2574" path="socket:[67764]" dev="sockfs" ino=67764 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 409.344740][T20215] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.352185][T20215] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.402815][ T28] audit: type=1400 audit(1771596268.450:2553): avc: denied { create } for pid=20222 comm="syz.9.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 409.426527][T20215] batman_adv: batadv0: Interface deactivated: dummy0 [ 409.514179][T20235] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2579'. [ 409.574429][T20215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.612320][T20215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.735457][ T5300] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.777021][ T5300] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.810701][T20260] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2582'. [ 409.821240][ T5300] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.848552][T20048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.866678][ T5300] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.910484][T20267] tipc: Enabling of bearer rejected, already enabled [ 409.923927][T20229] loop4: detected capacity change from 0 to 512 [ 410.021775][T20280] loop9: detected capacity change from 0 to 512 [ 410.064795][T20268] loop7: detected capacity change from 0 to 8192 [ 410.090417][T20280] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 410.098873][T20268] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 410.140813][T20280] EXT4-fs (loop9): orphan cleanup on readonly fs [ 410.169638][T20280] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2587: bg 0: block 248: padding at end of block bitmap is not set [ 410.217229][T20280] loop9: lost filesystem error report for type 5 error -117 [ 410.217479][T20280] Quota error (device loop9): write_blk: dquota write failed [ 410.225548][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 410.225568][ C0] EXT4-fs (loop9): last error at time 1771596269: ext4_validate_block_bitmap:441 [ 410.250244][T20280] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 410.260836][T20280] EXT4-fs error (device loop9): ext4_acquire_dquot:7003: comm syz.9.2587: Failed to acquire dquot type 1 [ 410.273948][T20280] loop9: lost filesystem error report for type 5 error -117 [ 410.274793][T20280] EXT4-fs (loop9): 1 truncate cleaned up [ 410.296860][T20280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.337432][T20048] veth0_vlan: entered promiscuous mode [ 410.359476][T20229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.373685][T20280] netlink: 64 bytes leftover after parsing attributes in process `syz.9.2587'. [ 410.374659][T20048] veth1_vlan: entered promiscuous mode [ 410.387494][T20229] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.448023][T20229] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 410.463034][T20048] veth0_macvtap: entered promiscuous mode [ 410.473068][T20048] veth1_macvtap: entered promiscuous mode [ 410.486853][T20048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.499601][T20048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.508499][T13637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.529363][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.539979][T20315] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 410.556850][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.584844][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.604782][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.623358][T20322] 9p: Bad value for 'wfdno' [ 410.702718][T14178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.712289][T20331] FAULT_INJECTION: forcing a failure. [ 410.712289][T20331] name failslab, interval 1, probability 0, space 0, times 0 [ 410.783182][T20331] CPU: 1 UID: 0 PID: 20331 Comm: syz.5.2548 Tainted: G W syzkaller #0 PREEMPT(full) [ 410.783261][T20331] Tainted: [W]=WARN [ 410.783271][T20331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.783284][T20331] Call Trace: [ 410.783291][T20331] [ 410.783301][T20331] __dump_stack+0x1d/0x30 [ 410.783442][T20331] dump_stack_lvl+0x95/0xd0 [ 410.783514][T20331] dump_stack+0x15/0x1b [ 410.783540][T20331] should_fail_ex+0x263/0x280 [ 410.783563][T20331] ? kernfs_fop_open+0x438/0x640 [ 410.783600][T20331] should_failslab+0x8c/0xb0 [ 410.783622][T20331] __kmalloc_cache_noprof+0x5f/0x410 [ 410.783708][T20331] kernfs_fop_open+0x438/0x640 [ 410.783740][T20331] ? do_dentry_open+0x49c/0xa90 [ 410.783766][T20331] do_dentry_open+0x4ca/0xa90 [ 410.783788][T20331] ? __pfx_kernfs_fop_open+0x10/0x10 [ 410.783903][T20331] vfs_open+0x37/0x1e0 [ 410.783954][T20339] program syz.4.2593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.783951][T20331] path_openat+0x1b70/0x2050 [ 410.783991][T20331] ? do_file_open+0x7e/0x290 [ 410.784047][T20331] do_file_open+0x16c/0x290 [ 410.784203][T20331] file_open_name+0xfa/0x120 [ 410.784236][T20331] __se_sys_acct+0x8c/0x500 [ 410.784384][T20331] __x64_sys_acct+0x1f/0x30 [ 410.784413][T20331] x64_sys_call+0x2e7f/0x3020 [ 410.784497][T20331] do_syscall_64+0x12c/0x370 [ 410.784530][T20331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.784584][T20331] RIP: 0033:0x7f11742bc629 [ 410.784602][T20331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.784621][T20331] RSP: 002b:00007f1172d0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 410.784643][T20331] RAX: ffffffffffffffda RBX: 00007f1174535fa0 RCX: 00007f11742bc629 [ 410.784728][T20331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 410.784752][T20331] RBP: 00007f1172d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 410.784822][T20331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.784889][T20331] R13: 00007f1174536038 R14: 00007f1174535fa0 R15: 00007ffdf2a3d4a8 [ 410.784909][T20331] [ 410.859194][T20341] lo speed is unknown, defaulting to 1000 [ 411.008441][T20345] usb usb7: usbfs: interface 0 claimed by hub while 'syz.5.2596' resets device [ 411.147159][T20348] loop9: detected capacity change from 0 to 256 [ 411.169814][T20348] vfat: Unknown parameter 'p);;A;jl *vŕ̂߾n}iޫ)nB #)PґJm@Zz̴DdZZ\A}lhWK`3i0<vtBW Y0rZ4}:' [ 411.922173][T20360] loop6: detected capacity change from 0 to 128 [ 412.060855][T20384] loop5: detected capacity change from 0 to 512 [ 412.076048][T20385] loop4: detected capacity change from 0 to 256 [ 412.110196][T20385] FAT-fs (loop4): Directory bread(block 64) failed [ 412.116841][T20385] FAT-fs (loop4): Directory bread(block 65) failed [ 412.123684][T20385] FAT-fs (loop4): Directory bread(block 66) failed [ 412.130816][T20385] FAT-fs (loop4): Directory bread(block 67) failed [ 412.138350][T20385] FAT-fs (loop4): Directory bread(block 68) failed [ 412.145311][T20385] FAT-fs (loop4): Directory bread(block 69) failed [ 412.152071][T20385] FAT-fs (loop4): Directory bread(block 70) failed [ 412.159169][T20385] FAT-fs (loop4): Directory bread(block 71) failed [ 412.165987][T20385] FAT-fs (loop4): Directory bread(block 72) failed [ 412.172686][T20385] FAT-fs (loop4): Directory bread(block 73) failed [ 412.235686][T20384] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.2604: inode has both inline data and extents flags [ 412.344876][T20384] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 412.346150][T20384] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2604: couldn't read orphan inode 15 (err -117) [ 412.355853][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 412.355893][ C1] EXT4-fs (loop5): initial error at time 1771596271: ext4_orphan_get:1391: inode 15 [ 412.355921][ C1] EXT4-fs (loop5): last error at time 1771596271: ext4_orphan_get:1391: inode 15 [ 412.941765][T20384] loop5: lost filesystem error report for type 5 error -117 [ 412.944834][T20384] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.032584][T20401] loop9: detected capacity change from 0 to 512 [ 413.117699][T20401] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 413.138652][T20401] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 413.166321][T20401] System zones: 0-1, 15-15, 18-18, 34-34 [ 413.186865][T20401] EXT4-fs (loop9): orphan cleanup on readonly fs [ 413.209659][T20401] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 413.249544][T20401] EXT4-fs warning (device loop9): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 413.306524][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.320263][T20401] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 413.343325][T20401] EXT4-fs (loop9): 1 truncate cleaned up [ 413.369039][T20401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.706491][T20443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.744830][T20443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.165760][T20480] hub 9-0:1.0: USB hub found [ 414.181811][T20480] hub 9-0:1.0: 8 ports detected [ 414.215427][T13637] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.229446][ T7968] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.319742][ T28] audit: type=1326 audit(1771596273.442:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.349174][ T7968] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.392073][ T28] audit: type=1326 audit(1771596273.442:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.424596][T20496] batman_adv: batadv0: Interface activated: dummy0 [ 414.431415][T20496] net_ratelimit: 30 callbacks suppressed [ 414.431433][T20496] batadv0: mtu less than device minimum [ 414.466504][T20475] loop5: detected capacity change from 0 to 512 [ 414.474521][ T28] audit: type=1326 audit(1771596273.442:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.525972][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.537310][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.548824][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.560035][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.571003][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.582142][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.593046][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.604196][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.615089][T20496] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 414.633439][ T28] audit: type=1326 audit(1771596273.442:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.658747][ T28] audit: type=1326 audit(1771596273.442:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.691912][ T28] audit: type=1326 audit(1771596273.442:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.745987][ T7968] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.746103][ T28] audit: type=1326 audit(1771596273.442:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.783212][T20475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.812024][ T28] audit: type=1326 audit(1771596273.442:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.822715][T20475] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.844682][ T28] audit: type=1326 audit(1771596273.462:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.890269][ T28] audit: type=1326 audit(1771596273.462:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20487 comm="syz.6.2620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa1c0a6c629 code=0x7ffc0000 [ 414.922735][ T7968] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.972471][T20500] lo speed is unknown, defaulting to 1000 [ 415.012272][ T7968] bridge_slave_0: left allmulticast mode [ 415.027314][T20527] loop6: detected capacity change from 0 to 512 [ 415.049179][ T7968] bridge_slave_0: left promiscuous mode [ 415.058385][T20475] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 415.069566][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.084033][T20527] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 415.101042][T20527] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 415.109410][T20527] System zones: 0-1, 15-15, 18-18, 34-34 [ 415.115771][T20527] EXT4-fs (loop6): orphan cleanup on readonly fs [ 415.122453][T20527] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 415.143385][T20527] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 415.152534][T20534] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 415.166357][ T7968] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 415.167049][T20527] EXT4-fs (loop6): 1 truncate cleaned up [ 415.186682][ T7968] ip6gretap1 (unregistering): left promiscuous mode [ 415.193628][ T7968] ip6gretap1 (unregistering): left allmulticast mode [ 415.209663][T20527] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.283710][ T7968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.304739][ T7968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.321944][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.333797][ T7968] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 415.371429][ T7968] bond0 (unregistering): Released all slaves [ 415.375422][T20552] loop5: detected capacity change from 0 to 1024 [ 415.395216][ T7968] bond1 (unregistering): Released all slaves [ 415.413320][T20552] EXT4-fs: Ignoring removed i_version option [ 415.433190][T20552] EXT4-fs: Ignoring removed nobh option [ 415.483578][ T7968] tipc: Disabling bearer [ 415.491045][T20552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.495338][ T7968] tipc: Left network mode [ 415.568043][T20552] EXT4-fs error (device loop5): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 415.629157][ T7968] hsr_slave_0: left promiscuous mode [ 415.663520][ T7968] hsr_slave_1: left promiscuous mode [ 415.685995][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.719284][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.727413][ T7968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.751222][ T7968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.770214][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.779530][ T7968] batman_adv: batadv0: Interface deactivated: dummy0 [ 415.786974][ T7968] batman_adv: batadv0: Removing interface: dummy0 [ 415.801594][ T7968] veth0_macvtap: left promiscuous mode [ 415.818056][ T7968] veth1_vlan: left promiscuous mode [ 415.835164][T20581] loop5: detected capacity change from 0 to 512 [ 415.841582][ T7968] veth0_vlan: left promiscuous mode [ 415.859884][T20581] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 415.965213][ T7968] team_slave_1 (unregistering): left promiscuous mode [ 415.977169][ T7968] team0 (unregistering): Port device team_slave_1 removed [ 415.988020][ T7968] team_slave_0 (unregistering): left promiscuous mode [ 415.996629][ T7968] team0 (unregistering): Port device team_slave_0 removed [ 416.040740][T20570] bridge_slave_0: left allmulticast mode [ 416.046635][T20570] bridge_slave_0: left promiscuous mode [ 416.052531][T20570] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.185135][T20500] chnl_net:caif_netlink_parms(): no params data found [ 416.249608][T20597] loop4: detected capacity change from 0 to 512 [ 416.297016][T20597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 416.320521][T20500] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.346933][T20500] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.358063][T20597] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2632: bg 0: block 384: padding at end of block bitmap is not set [ 416.377704][T20500] bridge_slave_0: entered allmulticast mode [ 416.385061][T20500] bridge_slave_0: entered promiscuous mode [ 416.392189][T20500] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.400262][T20500] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.407162][T20597] loop4: lost filesystem error report for type 5 error -117 [ 416.408258][T20500] bridge_slave_1: entered allmulticast mode [ 416.412397][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 416.416998][T20500] bridge_slave_1: entered promiscuous mode [ 416.421569][ C1] EXT4-fs (loop4): initial error at time 1771596275: ext4_validate_block_bitmap:441 [ 416.443623][ C1] EXT4-fs (loop4): last error at time 1771596275: ext4_validate_block_bitmap:441 [ 416.454945][T20500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.464110][T20597] EXT4-fs (loop4): Remounting filesystem read-only [ 416.471127][T20597] EXT4-fs (loop4): 1 truncate cleaned up [ 416.478732][T20500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.491716][T20589] loop5: detected capacity change from 0 to 512 [ 416.498842][T20597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.521228][T20597] FAULT_INJECTION: forcing a failure. [ 416.521228][T20597] name failslab, interval 1, probability 0, space 0, times 0 [ 416.534096][T20597] CPU: 0 UID: 0 PID: 20597 Comm: syz.4.2632 Tainted: G W syzkaller #0 PREEMPT(full) [ 416.534168][T20597] Tainted: [W]=WARN [ 416.534177][T20597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.534262][T20597] Call Trace: [ 416.534268][T20597] [ 416.534288][T20597] __dump_stack+0x1d/0x30 [ 416.534394][T20597] dump_stack_lvl+0x95/0xd0 [ 416.534414][T20597] dump_stack+0x15/0x1b [ 416.534432][T20597] should_fail_ex+0x263/0x280 [ 416.534452][T20597] should_failslab+0x8c/0xb0 [ 416.534492][T20597] kmem_cache_alloc_noprof+0x66/0x400 [ 416.534510][T20597] ? __es_insert_extent+0x508/0xee0 [ 416.534538][T20597] __es_insert_extent+0x508/0xee0 [ 416.534562][T20597] ? _prb_read_valid+0x8f5/0x950 [ 416.534605][T20597] ext4_es_cache_extent+0x37e/0x5d0 [ 416.534637][T20597] ext4_map_query_blocks+0x38c/0x550 [ 416.534718][T20597] ? ext4_es_lookup_extent+0x3ae/0x570 [ 416.534746][T20597] ext4_map_blocks+0x306/0x970 [ 416.534773][T20597] ext4_getblk+0x128/0x530 [ 416.534896][T20597] ext4_bread_batch+0x5c/0x320 [ 416.534921][T20597] __ext4_find_entry+0x852/0xdf0 [ 416.535010][T20597] ext4_lookup+0xcd/0x3a0 [ 416.535032][T20597] ? __pfx_ext4_lookup+0x10/0x10 [ 416.535099][T20597] path_openat+0xbf0/0x2050 [ 416.535136][T20597] do_file_open+0x16c/0x290 [ 416.535169][T20597] do_sys_openat2+0x94/0x130 [ 416.535322][T20597] __x64_sys_openat+0xf2/0x120 [ 416.535379][T20597] x64_sys_call+0x1e39/0x3020 [ 416.535402][T20597] do_syscall_64+0x12c/0x370 [ 416.535439][T20597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.535459][T20597] RIP: 0033:0x7f7ac134c629 [ 416.535475][T20597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.535491][T20597] RSP: 002b:00007f7abfd9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.535541][T20597] RAX: ffffffffffffffda RBX: 00007f7ac15c5fa0 RCX: 00007f7ac134c629 [ 416.535554][T20597] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 416.535568][T20597] RBP: 00007f7abfd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 416.535580][T20597] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 416.535592][T20597] R13: 00007f7ac15c6038 R14: 00007f7ac15c5fa0 R15: 00007fffb256ca38 [ 416.535610][T20597] [ 416.790903][T20500] team0: Port device team_slave_0 added [ 416.798113][T20500] team0: Port device team_slave_1 added [ 416.802651][T20618] FAULT_INJECTION: forcing a failure. [ 416.802651][T20618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.852365][T20618] CPU: 1 UID: 0 PID: 20618 Comm: syz.7.2634 Tainted: G W syzkaller #0 PREEMPT(full) [ 416.852503][T20618] Tainted: [W]=WARN [ 416.852511][T20618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.852524][T20618] Call Trace: [ 416.852531][T20618] [ 416.852539][T20618] __dump_stack+0x1d/0x30 [ 416.852606][T20618] dump_stack_lvl+0x95/0xd0 [ 416.852632][T20618] dump_stack+0x15/0x1b [ 416.852726][T20618] should_fail_ex+0x263/0x280 [ 416.852748][T20618] should_fail+0xb/0x20 [ 416.852765][T20618] should_fail_usercopy+0x1a/0x20 [ 416.852787][T20618] _copy_to_user+0x20/0xa0 [ 416.852818][T20618] lsm_fill_user_ctx+0x13a/0x1e0 [ 416.852956][T20618] selinux_getselfattr+0x86/0xd0 [ 416.853026][T20618] security_getselfattr+0x24d/0x500 [ 416.853051][T20618] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 416.853143][T20618] x64_sys_call+0x1b6f/0x3020 [ 416.853251][T20618] do_syscall_64+0x12c/0x370 [ 416.853331][T20618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.853352][T20618] RIP: 0033:0x7fb9b00fc629 [ 416.853371][T20618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.853394][T20618] RSP: 002b:00007fb9aeb4f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 416.853418][T20618] RAX: ffffffffffffffda RBX: 00007fb9b0375fa0 RCX: 00007fb9b00fc629 [ 416.853432][T20618] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000064 [ 416.853444][T20618] RBP: 00007fb9aeb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 416.853586][T20618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.853609][T20618] R13: 00007fb9b0376038 R14: 00007fb9b0375fa0 R15: 00007ffcc81c8708 [ 416.853692][T20618] [ 416.864305][T20500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.030213][T20589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.038789][T20500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.038843][T20500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.057550][T20500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.068983][T20589] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.092690][T14178] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.119710][T20500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.119747][T20500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.166886][T20500] hsr_slave_0: entered promiscuous mode [ 417.241183][T20648] loop7: detected capacity change from 0 to 512 [ 417.248159][T20645] loop4: detected capacity change from 0 to 512 [ 417.262713][T20500] hsr_slave_1: entered promiscuous mode [ 417.269121][T20648] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2636: inode has both inline data and extents flags [ 417.290244][T20589] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 417.314637][T20500] debugfs: 'hsr0' already exists in 'hsr' [ 417.315170][T20648] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 417.320492][T20500] Cannot create hsr debugfs directory [ 417.351921][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 417.358113][T20645] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 417.358439][ C1] EXT4-fs (loop7): initial error at time 1771596276: ext4_orphan_get:1391: inode 15 [ 417.374398][T20645] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 417.376206][ C1] EXT4-fs (loop7): last error at time 1771596276: ext4_orphan_get:1391: inode 15 [ 417.376639][T20648] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2636: couldn't read orphan inode 15 (err -117) [ 417.396780][T20645] System zones: 0-1, 15-15, 18-18, 34-34 [ 417.422220][T20648] loop7: lost filesystem error report for type 5 error -117 [ 417.422752][T20648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.432044][T20645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 417.466655][T20589] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 417.481372][T20645] EXT4-fs warning (device loop4): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 417.496602][T20645] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 417.503658][T20645] EXT4-fs (loop4): 1 truncate cleaned up [ 417.515093][T20645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 417.603746][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.626555][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.761973][T20681] loop7: detected capacity change from 0 to 1024 [ 417.783356][T20681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 417.785615][T18873] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.801910][T20681] System zones: 0-1, 3-36 [ 417.969318][T20689] can0: slcan on ttyS3. [ 418.054174][T20681] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2639: bad orphan inode 134217728 [ 418.099962][T20681] loop7: lost filesystem error report for type 5 error -117 [ 418.103405][T20681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.461659][T20690] can0 (unregistered): slcan off ttyS3. [ 418.485976][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.574962][T20500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.041335][T15707] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.136707][T20500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.166272][T20500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 419.193625][T20500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 419.343195][T20710] lo speed is unknown, defaulting to 1000 [ 419.414837][ T314] bridge_slave_1: left allmulticast mode [ 419.420747][ T314] bridge_slave_1: left promiscuous mode [ 419.451004][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.511104][ T314] bridge_slave_0: left allmulticast mode [ 419.516785][ T314] bridge_slave_0: left promiscuous mode [ 419.532261][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.641918][ T314] team0: Port device bond0 removed [ 419.661192][T20758] loop7: detected capacity change from 0 to 512 [ 419.668164][ T314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.682530][ T314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.694514][ T314] bond0 (unregistering): Released all slaves [ 419.701990][T20758] EXT4-fs error (device loop7): ext4_free_inode:354: comm syz.7.2649: bit already cleared for inode 11 [ 419.714395][T20758] loop7: lost filesystem error report for type 5 error -117 [ 419.717200][T20758] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 419.724785][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 419.724806][ C1] EXT4-fs (loop7): initial error at time 1771596278: ext4_free_inode:354 [ 419.724827][ C1] EXT4-fs (loop7): last error at time 1771596278: ext4_free_inode:354 [ 419.732446][T20762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.761230][T20500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.771366][T20758] loop7: lost filesystem error report for type 5 error -117 [ 419.779854][T20500] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.795805][T20758] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 419.809886][T20758] loop7: lost filesystem error report for type 5 error -117 [ 419.814672][T20758] EXT4-fs (loop7): 1 orphan inode deleted [ 419.822344][T20500] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 419.831887][T20758] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.846472][T20762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.872391][T20500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 419.910908][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.916403][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'. [ 419.918390][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.937529][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.944843][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.977190][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.986661][T20762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2645'. [ 419.997556][ T314] hsr_slave_0: left promiscuous mode [ 420.005967][ T314] hsr_slave_1: left promiscuous mode [ 420.021661][ T314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.031171][ T314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 420.049915][ T314] batman_adv: batadv0: Interface deactivated: dummy0 [ 420.057287][ T314] batman_adv: batadv0: Removing interface: dummy0 [ 420.125551][ T314] team0 (unregistering): Port device team_slave_1 removed [ 420.136900][ T314] team0 (unregistering): Port device team_slave_0 removed [ 420.201898][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 420.201915][ T28] audit: type=1326 audit(1771596279.325:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.259059][ T28] audit: type=1326 audit(1771596279.325:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.293943][T20789] net_ratelimit: 50 callbacks suppressed [ 420.293960][T20789] batadv0: mtu less than device minimum [ 420.295900][ T28] audit: type=1326 audit(1771596279.325:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.331305][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.343244][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.355304][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.367081][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.378523][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.389632][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.400866][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.411023][ T28] audit: type=1326 audit(1771596279.325:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.412128][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.435370][ T28] audit: type=1326 audit(1771596279.325:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.446016][T20789] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 420.490796][ T28] audit: type=1326 audit(1771596279.325:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.518990][ T28] audit: type=1326 audit(1771596279.325:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.555845][ T28] audit: type=1326 audit(1771596279.325:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.587703][ T28] audit: type=1326 audit(1771596279.325:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.606162][T20771] lo speed is unknown, defaulting to 1000 [ 420.611572][ T28] audit: type=1326 audit(1771596279.325:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.7.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 420.647656][T20500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.661272][T20710] chnl_net:caif_netlink_parms(): no params data found [ 420.743008][T20710] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.750330][T20710] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.757823][T20710] bridge_slave_0: entered allmulticast mode [ 420.773803][T20710] bridge_slave_0: entered promiscuous mode [ 420.809852][T20710] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.817805][T20710] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.832737][T20710] bridge_slave_1: entered allmulticast mode [ 420.839627][T20710] bridge_slave_1: entered promiscuous mode [ 420.856232][T20857] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2656'. [ 420.915967][T20710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.941784][T20710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.960440][T20857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20857 comm=syz.7.2656 [ 420.981862][T20857] netlink: 'syz.7.2656': attribute type 4 has an invalid length. [ 421.017962][T20710] team0: Port device team_slave_0 added [ 421.026827][T20710] team0: Port device team_slave_1 added [ 421.092483][T20500] veth0_vlan: entered promiscuous mode [ 421.104662][T20771] chnl_net:caif_netlink_parms(): no params data found [ 421.143291][T20710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.169231][T20710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.209286][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2661'. [ 421.258049][T20898] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2659'. [ 421.286631][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2661'. [ 421.321997][T20710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.396429][T20771] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.420819][T20771] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.428193][T20771] bridge_slave_0: entered allmulticast mode [ 421.435918][T20771] bridge_slave_0: entered promiscuous mode [ 421.442692][T20907] No such timeout policy "syz1" [ 421.452713][T20710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.460518][T20710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.487259][T20905] can0: slcan on ttyS3. [ 421.491745][T20710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.506945][T20900] vlan3: entered promiscuous mode [ 421.512224][T20900] vlan3: entered allmulticast mode [ 421.517518][T20900] hsr_slave_1: entered allmulticast mode [ 421.528364][T20771] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.535825][T20771] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.543544][T20771] bridge_slave_1: entered allmulticast mode [ 421.560713][T20771] bridge_slave_1: entered promiscuous mode [ 421.620105][T20910] can0 (unregistered): slcan off ttyS3. [ 421.627322][T20771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.638602][T20771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.660485][T20500] veth1_vlan: entered promiscuous mode [ 421.686510][T20500] veth0_macvtap: entered promiscuous mode [ 421.694520][T20500] veth1_macvtap: entered promiscuous mode [ 421.711987][T20500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.725149][T20710] hsr_slave_0: entered promiscuous mode [ 421.750721][T20710] hsr_slave_1: entered promiscuous mode [ 421.785921][T20500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.817047][T20771] team0: Port device team_slave_0 added [ 421.836052][T20771] team0: Port device team_slave_1 added [ 421.842388][ T7968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.851626][ T7968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.892218][ T7968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.924563][T20771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.936672][T20771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.020128][T20771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.043368][ T7968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.119915][T20771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.127603][T20771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.175023][T20771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.234623][T20771] hsr_slave_0: entered promiscuous mode [ 422.260002][T20771] hsr_slave_1: entered promiscuous mode [ 422.265973][T20771] debugfs: 'hsr0' already exists in 'hsr' [ 422.284542][T20771] Cannot create hsr debugfs directory [ 422.385124][T20961] veth0: entered promiscuous mode [ 422.500848][T20710] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 422.521694][T20710] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 422.531450][T20710] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 422.551852][T20710] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 422.591382][T20960] veth0: left promiscuous mode [ 422.733246][T20710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.742825][T20992] loop5: detected capacity change from 0 to 2048 [ 422.785735][T20992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.786197][T20710] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.857592][T20771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.868696][T20939] loop3: detected capacity change from 0 to 4096 [ 422.884723][T20939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.920272][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.927909][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.961613][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.969234][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.050936][T20771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 423.157397][T20710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.178596][T20998] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2669'. [ 423.194340][T20710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.435638][T20500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.474583][T20710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.505833][T20771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 423.521468][T20771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.560871][T21009] loop7: detected capacity change from 0 to 1024 [ 423.587336][T21009] EXT4-fs: Ignoring removed orlov option [ 423.606887][T21009] EXT4-fs: inline encryption not supported [ 423.615050][T20771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.626360][T21009] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 423.635658][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.648415][T20771] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.659056][T21009] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 423.684294][ T7968] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.691420][ T7968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.701151][T21009] EXT4-fs (loop7): invalid journal inode [ 423.724616][ T7968] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.732158][ T7968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.747314][T21009] EXT4-fs (loop7): can't get journal size [ 423.759843][T21009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 423.786862][T20771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.810083][T20771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.861237][T20710] veth0_vlan: entered promiscuous mode [ 423.887251][T20710] veth1_vlan: entered promiscuous mode [ 423.927207][T20710] veth0_macvtap: entered promiscuous mode [ 423.953821][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.982302][T20710] veth1_macvtap: entered promiscuous mode [ 423.991498][T21058] loop5: detected capacity change from 0 to 128 [ 423.999982][T20771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.024156][T20710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.043622][T20710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.099985][ T7977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.140864][ T7977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.212172][T21078] slcan: can't register candev [ 425.229363][ T7977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.243878][ T7977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.350746][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 425.350766][ T28] audit: type=1400 audit(1771596284.488:2628): avc: denied { map } for pid=21085 comm="syz.7.2681" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 425.469749][ T28] audit: type=1400 audit(1771596284.518:2629): avc: denied { setopt } for pid=21085 comm="syz.7.2681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 425.537464][T20771] veth0_vlan: entered promiscuous mode [ 425.538592][T21086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2681'. [ 425.553049][T21092] netlink: 'syz.5.2682': attribute type 1 has an invalid length. [ 425.562697][T21086] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2681'. [ 425.614222][T20771] veth1_vlan: entered promiscuous mode [ 425.653770][ T28] audit: type=1400 audit(1771596284.788:2630): avc: denied { ioctl } for pid=21109 comm="syz.2.2644" path="socket:[69412]" dev="sockfs" ino=69412 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 425.684850][T21104] loop5: detected capacity change from 0 to 128 [ 425.691749][T21104] msdos: Unknown parameter '00000000000000000000' [ 425.771938][T20771] veth0_macvtap: entered promiscuous mode [ 425.791084][T20771] veth1_macvtap: entered promiscuous mode [ 425.835833][ T28] audit: type=1400 audit(1771596284.938:2631): avc: denied { map } for pid=21103 comm="syz.5.2684" path="/proc/83/clear_refs" dev="proc" ino=70766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 425.867454][T21121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2687'. [ 425.885369][T20771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.898901][T21112] loop3: detected capacity change from 0 to 4096 [ 425.922119][T21119] loop2: detected capacity change from 0 to 256 [ 425.944710][ T28] audit: type=1400 audit(1771596284.938:2632): avc: denied { execute } for pid=21103 comm="syz.5.2684" path="/proc/83/clear_refs" dev="proc" ino=70766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 425.946659][T20771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.981755][T21125] loop5: detected capacity change from 0 to 512 [ 426.004154][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.007992][T21125] EXT4-fs: Ignoring removed bh option [ 426.037659][ T7964] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.054516][T21119] FAT-fs (loop2): Directory bread(block 64) failed [ 426.061481][T21119] FAT-fs (loop2): Directory bread(block 65) failed [ 426.068486][T21119] FAT-fs (loop2): Directory bread(block 66) failed [ 426.068808][T21125] EXT4-fs: inline encryption not supported [ 426.075305][T21119] FAT-fs (loop2): Directory bread(block 67) failed [ 426.087737][T21119] FAT-fs (loop2): Directory bread(block 68) failed [ 426.094287][T21119] FAT-fs (loop2): Directory bread(block 69) failed [ 426.101049][T21119] FAT-fs (loop2): Directory bread(block 70) failed [ 426.101221][ T7964] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.107944][T21119] FAT-fs (loop2): Directory bread(block 71) failed [ 426.107979][T21119] FAT-fs (loop2): Directory bread(block 72) failed [ 426.130871][T21119] FAT-fs (loop2): Directory bread(block 73) failed [ 426.148325][T21125] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 426.150912][ T7964] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.178890][T21112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.192360][T21125] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 426.242942][T21125] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2688: bg 0: block 248: padding at end of block bitmap is not set [ 426.327791][T21125] loop5: lost filesystem error report for type 5 error -117 [ 426.330456][T21125] Quota error (device loop5): write_blk: dquota write failed [ 426.338213][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 426.338235][ C0] EXT4-fs (loop5): last error at time 1771596285: ext4_validate_block_bitmap:441 [ 426.393642][T21125] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 426.415261][T21125] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.2688: Failed to acquire dquot type 1 [ 426.428529][T21125] loop5: lost filesystem error report for type 5 error -117 [ 426.429166][T21125] EXT4-fs (loop5): 1 truncate cleaned up [ 426.444340][T21125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 426.465499][T21148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2692'. [ 426.513929][T21145] can0: slcan on ttyS3. [ 426.592653][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 426.637865][T21145] can0 (unregistered): slcan off ttyS3. [ 426.769550][T21170] GUP no longer grows the stack in syz.7.2694 (21170): 200000006000-200000008000 (200000004000) [ 426.780857][T21170] CPU: 0 UID: 0 PID: 21170 Comm: syz.7.2694 Tainted: G W syzkaller #0 PREEMPT(full) [ 426.780946][T21170] Tainted: [W]=WARN [ 426.780955][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.780969][T21170] Call Trace: [ 426.780977][T21170] [ 426.780987][T21170] __dump_stack+0x1d/0x30 [ 426.781019][T21170] dump_stack_lvl+0x95/0xd0 [ 426.781102][T21170] dump_stack+0x15/0x1b [ 426.781121][T21170] fixup_user_fault+0x4fb/0x550 [ 426.781220][T21170] fault_in_user_writeable+0x5c/0xc0 [ 426.781315][T21170] futex_lock_pi+0x60b/0x7e0 [ 426.781418][T21170] ? __pfx_futex_wake_mark+0x10/0x10 [ 426.781445][T21170] do_futex+0x21f/0x380 [ 426.781519][T21170] __se_sys_futex+0x2f6/0x370 [ 426.781566][T21170] ? xfd_validate_state+0x45/0xf0 [ 426.781593][T21170] __x64_sys_futex+0x78/0x90 [ 426.781677][T21170] x64_sys_call+0x24ab/0x3020 [ 426.781702][T21170] do_syscall_64+0x12c/0x370 [ 426.781732][T21170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.781775][T21170] RIP: 0033:0x7fb9b00fc629 [ 426.781790][T21170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.781807][T21170] RSP: 002b:00007fb9aeb0d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 426.781827][T21170] RAX: ffffffffffffffda RBX: 00007fb9b0376180 RCX: 00007fb9b00fc629 [ 426.781840][T21170] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 426.781913][T21170] RBP: 00007fb9b0192b39 R08: 0000000000000000 R09: 0000000000000000 [ 426.781925][T21170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.781936][T21170] R13: 00007fb9b0376218 R14: 00007fb9b0376180 R15: 00007ffcc81c8708 [ 426.781953][T21170] [ 427.899550][T20500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.927234][T21177] FAULT_INJECTION: forcing a failure. [ 427.927234][T21177] name failslab, interval 1, probability 0, space 0, times 0 [ 427.956767][T21177] CPU: 1 UID: 0 PID: 21177 Comm: syz.5.2697 Tainted: G W syzkaller #0 PREEMPT(full) [ 427.956877][T21177] Tainted: [W]=WARN [ 427.956884][T21177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.956895][T21177] Call Trace: [ 427.956903][T21177] [ 427.956912][T21177] __dump_stack+0x1d/0x30 [ 427.957007][T21177] dump_stack_lvl+0x95/0xd0 [ 427.957031][T21177] dump_stack+0x15/0x1b [ 427.957055][T21177] should_fail_ex+0x263/0x280 [ 427.957080][T21177] should_failslab+0x8c/0xb0 [ 427.957155][T21177] kmem_cache_alloc_noprof+0x66/0x400 [ 427.957288][T21177] ? skb_clone+0x151/0x1f0 [ 427.957319][T21177] skb_clone+0x151/0x1f0 [ 427.957349][T21177] __netlink_deliver_tap+0x2c9/0x500 [ 427.957457][T21177] netlink_unicast+0x66b/0x690 [ 427.957482][T21177] netlink_sendmsg+0x5c8/0x6f0 [ 427.957514][T21177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.957543][T21177] ____sys_sendmsg+0x5af/0x600 [ 427.957583][T21177] ___sys_sendmsg+0x195/0x1e0 [ 427.957684][T21177] __x64_sys_sendmsg+0xd4/0x160 [ 427.957768][T21177] x64_sys_call+0x194c/0x3020 [ 427.957882][T21177] do_syscall_64+0x12c/0x370 [ 427.957974][T21177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.958000][T21177] RIP: 0033:0x7f11742bc629 [ 427.958020][T21177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.958065][T21177] RSP: 002b:00007f1172d0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.958085][T21177] RAX: ffffffffffffffda RBX: 00007f1174535fa0 RCX: 00007f11742bc629 [ 427.958098][T21177] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 427.958111][T21177] RBP: 00007f1172d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 427.958126][T21177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.958141][T21177] R13: 00007f1174536038 R14: 00007f1174535fa0 R15: 00007ffdf2a3d4a8 [ 427.958211][T21177] [ 427.958320][T21177] net_ratelimit: 10 callbacks suppressed [ 427.958333][T21177] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 428.195590][T21181] netlink: 'syz.1.2699': attribute type 2 has an invalid length. [ 428.237739][T21197] netlink: zone id is out of range [ 428.243207][T21197] netlink: zone id is out of range [ 428.269310][T21197] netlink: zone id is out of range [ 428.274609][T21197] netlink: zone id is out of range [ 428.287807][T21181] netlink: 'syz.1.2699': attribute type 8 has an invalid length. [ 428.318518][T21197] netlink: get zone limit has 8 unknown bytes [ 428.319219][T21184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2699'. [ 428.334532][T21181] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2699'. [ 428.366597][T21208] netlink: 'syz.2.2698': attribute type 21 has an invalid length. [ 428.379156][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'. [ 428.384452][T21208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 428.403817][T21213] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2703'. [ 428.694040][T21238] xt_NFQUEUE: number of total queues is 0 [ 428.941059][T21239] can0: slcan on ttyS3. [ 430.988468][T21240] can0 (unregistered): slcan off ttyS3. [ 431.067700][T21244] can0: slcan on ttyS3. [ 431.241564][T21255] loop3: detected capacity change from 0 to 1024 [ 431.250123][T21244] can0 (unregistered): slcan off ttyS3. [ 431.320921][T21255] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 431.349006][T21258] loop7: detected capacity change from 0 to 512 [ 431.382524][T21255] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 2: comm syz.3.2708: lblock 2 mapped to illegal pblock 2 (length 1) [ 431.399616][T21255] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 431.399721][T21255] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 431.406171][T21264] loop2: detected capacity change from 0 to 512 [ 431.408993][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 431.430370][ C1] EXT4-fs (loop3): initial error at time 1771596290: ext4_map_blocks:776: inode 3: block 2 [ 431.441474][ C1] EXT4-fs (loop3): last error at time 1771596290: ext4_map_blocks:776: inode 3: block 2 [ 431.459914][T21258] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 431.470516][T21255] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 48: comm syz.3.2708: lblock 0 mapped to illegal pblock 48 (length 1) [ 431.487512][T21271] netlink: 'syz.5.2712': attribute type 10 has an invalid length. [ 431.513518][T21258] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 431.516711][T21227] loop1: detected capacity change from 0 to 1024 [ 431.532314][T21264] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 431.541476][T21264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 431.542331][T21271] veth1_macvtap: left promiscuous mode [ 431.549900][T21258] System zones: 0-1, 15-15, 18-18, 34-34 [ 431.565025][T21258] EXT4-fs (loop7): orphan cleanup on readonly fs [ 431.571593][T21258] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 431.581984][T21255] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 431.583856][T21264] System zones: [ 431.594903][T21277] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2712'. [ 431.608537][T21255] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 431.618014][T21264] 0-1, 15-15, 18-18, 34-34 [ 431.619118][T21258] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 431.637939][T21255] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.2708: Failed to acquire dquot type 0 [ 431.638193][T21258] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 431.649855][T21264] EXT4-fs (loop2): orphan cleanup on readonly fs [ 431.675033][T21255] loop3: lost filesystem error report for type 5 error -117 [ 431.675110][T21258] EXT4-fs (loop7): 1 truncate cleaned up [ 431.684082][T21277] ip6gre1: entered promiscuous mode [ 431.698768][T21264] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 431.714398][T21255] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 431.723602][T21258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.736509][T21264] EXT4-fs warning (device loop2): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 431.736615][T21264] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 431.737049][T21277] ip6gre1: entered allmulticast mode [ 431.764598][T21255] loop3: lost filesystem error report for type 5 error -117 [ 431.766338][T21283] netlink: 'syz.5.2712': attribute type 6 has an invalid length. [ 431.782109][T21264] EXT4-fs (loop2): 1 truncate cleaned up [ 431.788611][T21255] EXT4-fs error (device loop3): ext4_evict_inode:255: inode #11: comm syz.3.2708: mark_inode_dirty error [ 431.802937][T21264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.821068][T21255] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 431.822172][T21255] EXT4-fs warning (device loop3): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 431.845882][T21283] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2712'. [ 431.855491][T21289] netlink: zone id is out of range [ 431.855591][T21255] EXT4-fs (loop3): 1 orphan inode deleted [ 431.860750][T21289] netlink: zone id is out of range [ 431.867501][T21255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.878170][T21289] netlink: zone id is out of range [ 431.889464][ T5300] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 431.889667][ T5300] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 431.889687][ T5300] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:9: Failed to release dquot type 0 [ 431.916903][T21289] netlink: zone id is out of range [ 431.925742][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.953237][T21297] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz.3.2708: Invalid inode table block 1 in block_group 0 [ 431.953440][T21297] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 432.007983][T20710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.253834][T20500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.284809][T20500] EXT4-fs error (device loop3): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 432.324093][T20500] loop3: lost filesystem error report for type 5 error -117 [ 432.324242][T20500] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 432.393747][T20500] loop3: lost filesystem error report for type 5 error -117 [ 432.393928][T20500] EXT4-fs error (device loop3): ext4_quota_off:7287: inode #3: comm syz-executor: mark_inode_dirty error [ 432.433014][T20500] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 432.883039][T21366] loop5: detected capacity change from 0 to 7 [ 432.944379][T21366] buffer_io_error: 1 callbacks suppressed [ 432.944395][T21366] Buffer I/O error on dev loop5, logical block 0, async page read [ 432.994144][T21366] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.085397][T21366] loop5: unable to read partition table [ 433.117347][T21377] loop2: detected capacity change from 0 to 128 [ 433.146519][T21377] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 433.165191][T21389] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.173284][ T28] audit: type=1400 audit(1771596292.281:2633): avc: denied { append } for pid=21378 comm="syz.7.2726" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 433.234163][T21377] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 433.254181][T21366] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 433.263561][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.326803][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.367316][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.394018][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.422217][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.438552][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.464106][ T3308] Buffer I/O error on dev loop5, logical block 0, async page read [ 433.862610][T20710] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.933150][ T5300] erspan0 (unregistering): left allmulticast mode [ 433.962840][ T5300] team0: Port device erspan0 removed [ 433.997358][ T5300] bond3 (unregistering): (slave gretap2): Releasing backup interface [ 434.057511][ T5300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.101671][ T5300] bond_slave_0: left allmulticast mode [ 434.123999][ T5300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.193652][ T5300] bond_slave_1: left allmulticast mode [ 434.267147][T21446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'. [ 434.276568][T21446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'. [ 434.288518][ T5300] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 434.327723][T21446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2730'. [ 434.344176][ T5300] bridge_slave_1: left allmulticast mode [ 434.356735][ T5300] bond0 (unregistering): Released all slaves [ 434.365551][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2730'. [ 434.369684][ T3496] hid_parser_main: 33 callbacks suppressed [ 434.369704][ T3496] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 434.386619][ T5300] bond1 (unregistering): Released all slaves [ 434.399493][ T3496] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.424693][ T5300] bond2 (unregistering): Released all slaves [ 434.438707][ T5300] bond3 (unregistering): Released all slaves [ 434.519497][T21444] can0: slcan on ttyS3. [ 434.551066][T21465] lo speed is unknown, defaulting to 1000 [ 434.573483][T21448] can0 (unregistered): slcan off ttyS3. [ 434.787451][T21490] loop1: detected capacity change from 0 to 1024 [ 434.893555][T21490] EXT4-fs: Ignoring removed orlov option [ 435.000910][T21490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.143366][T21484] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 435.156565][T20771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.381560][T21514] syzkaller0: entered promiscuous mode [ 435.400742][T21514] syzkaller0: entered allmulticast mode [ 435.483711][T21514] tipc: Started in network mode [ 435.494523][T21514] tipc: Node identity 02d9862d8a79, cluster identity 4711 [ 435.506297][T21514] tipc: Enabled bearer , priority 0 [ 435.525218][T21514] loop7: detected capacity change from 0 to 256 [ 435.547687][T21514] FAT-fs (loop7): unable to read block(17179869180) for building NFS inode [ 435.598614][T21513] tipc: Resetting bearer [ 435.618182][T21513] tipc: Disabling bearer [ 435.624823][T21532] loop5: detected capacity change from 0 to 256 [ 435.643448][T21532] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 435.779639][ T28] audit: type=1400 audit(1771596294.903:2634): avc: denied { map } for pid=21531 comm="syz.5.2743" path="socket:[71313]" dev="sockfs" ino=71313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.820318][ T28] audit: type=1400 audit(1771596294.903:2635): avc: denied { read accept } for pid=21531 comm="syz.5.2743" path="socket:[71313]" dev="sockfs" ino=71313 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 435.853229][T21551] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 435.861207][T21551] FAT-fs (loop5): Filesystem has been set read-only [ 435.897640][ T28] audit: type=1400 audit(1771596294.913:2636): avc: denied { connect } for pid=21531 comm="syz.5.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 435.923432][T21541] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 435.934450][T21541] SELinux: failed to load policy [ 436.011486][ T28] audit: type=1400 audit(1771596295.143:2637): avc: denied { watch } for pid=21563 comm="syz.3.2747" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 436.058894][T21570] loop2: detected capacity change from 0 to 512 [ 436.084740][T21565] net_ratelimit: 1 callbacks suppressed [ 436.084773][T21565] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 436.192530][ T5300] tipc: Left network mode [ 436.224407][T21591] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 436.233677][T21570] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 436.263388][ T5300] hsr_slave_0: left promiscuous mode [ 436.272019][ T5300] hsr_slave_1: left promiscuous mode [ 436.282657][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.321115][ T5300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.360007][ T5300] batman_adv: batadv0: Removing interface: dummy0 [ 436.610387][ T5300] team_slave_1 (unregistering): left allmulticast mode [ 436.633861][ T5300] team0 (unregistering): Port device team_slave_1 removed [ 437.016735][ T5300] team_slave_0 (unregistering): left allmulticast mode [ 437.036108][ T5300] team0 (unregistering): Port device team_slave_0 removed [ 437.145909][ T28] audit: type=1400 audit(1771596296.283:2638): avc: denied { accept } for pid=21641 comm="syz.2.2758" path="socket:[71987]" dev="sockfs" ino=71987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 437.165730][T21609] lo speed is unknown, defaulting to 1000 [ 437.280162][T21657] loop5: detected capacity change from 0 to 7 [ 437.708262][T21671] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 437.723911][T21678] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2766'. [ 437.734687][T21678] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2766'. [ 437.765015][T21671] bond1: (slave lo): Enslaving as an active interface with an up link [ 437.775283][T21671] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 438.561254][T21706] loop3: detected capacity change from 0 to 256 [ 438.992553][T21706] FAT-fs (loop3): Directory bread(block 64) failed [ 438.999526][T21706] FAT-fs (loop3): Directory bread(block 65) failed [ 439.007058][T21706] FAT-fs (loop3): Directory bread(block 66) failed [ 439.014659][T21706] FAT-fs (loop3): Directory bread(block 67) failed [ 439.021744][T21706] FAT-fs (loop3): Directory bread(block 68) failed [ 439.028617][T21706] FAT-fs (loop3): Directory bread(block 69) failed [ 439.035560][T21706] FAT-fs (loop3): Directory bread(block 70) failed [ 439.042543][T21706] FAT-fs (loop3): Directory bread(block 71) failed [ 439.049443][T21706] FAT-fs (loop3): Directory bread(block 72) failed [ 439.056745][T21706] FAT-fs (loop3): Directory bread(block 73) failed [ 439.537329][T21729] netlink: 'syz.7.2775': attribute type 10 has an invalid length. [ 439.613008][T21739] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2775'. [ 439.656410][T21739] ip6gre1: entered promiscuous mode [ 439.697047][T21739] ip6gre1: entered allmulticast mode [ 439.704044][ T28] audit: type=1400 audit(1771596298.835:2639): avc: denied { create } for pid=21742 comm="syz.5.2777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 439.753408][T21729] netlink: 'syz.7.2775': attribute type 6 has an invalid length. [ 439.776500][T21729] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2775'. [ 439.809825][T21741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2776'. [ 439.875602][T21747] can0: slcan on ttyS3. [ 440.083826][T21754] can0 (unregistered): slcan off ttyS3. [ 440.360351][T21784] lo speed is unknown, defaulting to 1000 [ 440.423561][T21784] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2780'. [ 440.887118][T21793] can0: slcan on ttyS3. [ 440.938636][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 440.962837][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 440.995946][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.028942][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.062279][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.072158][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.079947][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.088816][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.098519][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.106483][ T1049] hid-generic 0080:0008:0000.000A: unknown main item tag 0x0 [ 441.119082][ T1049] hid-generic 0080:0008:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 441.150267][T21809] fido_id[21809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 441.365584][T21759] loop5: detected capacity change from 0 to 512 [ 441.411264][T21759] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 441.466752][T21759] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 441.503819][T21759] EXT4-fs (loop5): 1 truncate cleaned up [ 441.536460][T21759] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.960196][T21730] can0 (unregistered): slcan off ttyS3. [ 442.041059][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.213452][T21863] FAULT_INJECTION: forcing a failure. [ 442.213452][T21863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.269008][T21871] netlink: 'syz.7.2790': attribute type 10 has an invalid length. [ 442.279708][T21871] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2790'. [ 442.289515][T21863] CPU: 0 UID: 0 PID: 21863 Comm: syz.5.2788 Tainted: G W syzkaller #0 PREEMPT(full) [ 442.289552][T21863] Tainted: [W]=WARN [ 442.289559][T21863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.289577][T21863] Call Trace: [ 442.289585][T21863] [ 442.289639][T21863] __dump_stack+0x1d/0x30 [ 442.289671][T21863] dump_stack_lvl+0x95/0xd0 [ 442.289697][T21863] dump_stack+0x15/0x1b [ 442.289739][T21863] should_fail_ex+0x263/0x280 [ 442.289766][T21863] should_fail+0xb/0x20 [ 442.289786][T21863] should_fail_usercopy+0x1a/0x20 [ 442.289808][T21863] strncpy_from_user+0x27/0x250 [ 442.289906][T21863] path_getxattrat+0xae/0x2b0 [ 442.289944][T21863] __x64_sys_fgetxattr+0x59/0x70 [ 442.289973][T21863] x64_sys_call+0x2da3/0x3020 [ 442.290095][T21863] do_syscall_64+0x12c/0x370 [ 442.290128][T21863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.290148][T21863] RIP: 0033:0x7f11742bc629 [ 442.290164][T21863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.290210][T21863] RSP: 002b:00007f1172d0f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 442.290235][T21863] RAX: ffffffffffffffda RBX: 00007f1174535fa0 RCX: 00007f11742bc629 [ 442.290253][T21863] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 442.290292][T21863] RBP: 00007f1172d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 442.290305][T21863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.290317][T21863] R13: 00007f1174536038 R14: 00007f1174535fa0 R15: 00007ffdf2a3d4a8 [ 442.290336][T21863] [ 442.509956][T21877] SELinux: Context unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 is not valid (left unmapped). [ 442.591386][ T28] audit: type=1400 audit(1771596301.736:2640): avc: denied { relabelto } for pid=21876 comm="syz.5.2791" name="cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 442.664410][T21881] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2792'. [ 442.749271][ T28] audit: type=1400 audit(1771596301.736:2641): avc: denied { associate } for pid=21876 comm="syz.5.2791" name="cgroup.procs" dev="cgroup" ino=298 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="unconfined_u:system_r:insmod_t:s0-s0:c0.c1023" [ 442.781626][T21883] tls_set_device_offload_rx: netdev not found [ 442.911514][T21895] loop7: detected capacity change from 0 to 512 [ 442.943638][T21895] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 442.951946][T21895] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 442.979235][T21895] System zones: 0-1, 15-15, 18-18, 34-34 [ 442.999186][T21895] EXT4-fs (loop7): orphan cleanup on readonly fs [ 443.050040][T21907] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2797'. [ 443.066829][T21895] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 443.100105][T21895] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 443.176788][T21895] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 443.208267][T21895] EXT4-fs (loop7): 1 truncate cleaned up [ 443.238822][T21895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.333033][T21914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.347089][T21914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.466573][T21937] netlink: 'syz.1.2803': attribute type 10 has an invalid length. [ 443.475379][T21937] veth1_macvtap: left promiscuous mode [ 443.526592][T21940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2803'. [ 443.541687][T21940] ip6gre1: entered promiscuous mode [ 443.546958][T21940] ip6gre1: entered allmulticast mode [ 443.562442][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.637809][T21941] loop2: detected capacity change from 0 to 1024 [ 443.645512][T21941] EXT4-fs: inline encryption not supported [ 443.667921][T21937] netlink: 'syz.1.2803': attribute type 6 has an invalid length. [ 443.677650][T21937] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2803'. [ 443.727127][T21941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.205736][T21946] syzkaller1: entered promiscuous mode [ 444.253285][T21946] syzkaller1: entered allmulticast mode [ 444.957152][T21957] loop5: detected capacity change from 0 to 512 [ 445.039015][T21957] EXT4-fs: journaled quota format not specified [ 445.848068][T21971] loop5: detected capacity change from 0 to 1764 [ 445.997680][T21982] loop3: detected capacity change from 0 to 1024 [ 446.034115][T21982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 446.034503][T21985] loop5: detected capacity change from 0 to 512 [ 446.050564][T21982] System zones: 0-1, 3-36 [ 446.059805][T21982] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2813: bad orphan inode 134217728 [ 446.137301][T21982] loop3: lost filesystem error report for type 5 error -117 [ 446.137968][T21982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.178569][T21985] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 446.196900][T21985] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 446.223830][T21985] System zones: 0-1, 15-15, 18-18, 34-34 [ 446.231120][T21985] EXT4-fs (loop5): orphan cleanup on readonly fs [ 446.237957][T21985] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 446.249654][T21985] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 446.265440][T21985] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 446.289797][T21985] EXT4-fs (loop5): 1 truncate cleaned up [ 446.303881][T21985] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 446.374739][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.559152][T22010] loop1: detected capacity change from 0 to 1024 [ 446.597500][T22010] EXT4-fs (loop1): blocks per group (131072) and clusters per group (32) inconsistent [ 446.680691][ T28] audit: type=1400 audit(1771596305.828:2642): avc: denied { getopt } for pid=22026 comm="syz.1.2819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.881256][T20500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.006680][T22045] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2823'. [ 447.051104][T22054] loop7: detected capacity change from 0 to 512 [ 447.080042][T22054] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 447.098209][T22054] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 447.106491][T22054] System zones: 0-1, 15-15, 18-18, 34-34 [ 447.110252][T22062] netlink: get zone limit has 8 unknown bytes [ 447.113070][T22054] EXT4-fs (loop7): orphan cleanup on readonly fs [ 447.135551][T22054] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 447.145732][T22054] EXT4-fs warning (device loop7): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 447.160920][T22054] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 447.176118][T22054] EXT4-fs (loop7): 1 truncate cleaned up [ 447.184736][T22054] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 447.279916][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.293260][ T28] audit: type=1400 audit(1771596306.439:2643): avc: denied { read write } for pid=22070 comm="syz.3.2828" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 447.327588][ T28] audit: type=1400 audit(1771596306.439:2644): avc: denied { open } for pid=22070 comm="syz.3.2828" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 447.408856][ T28] audit: type=1400 audit(1771596306.439:2645): avc: denied { ioctl } for pid=22070 comm="syz.3.2828" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 447.465475][T20710] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.547113][T22099] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 447.632398][T22099] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2831'. [ 447.668017][T22099] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.767452][T22099] vlan2: entered promiscuous mode [ 447.776743][T22099] bond1: entered promiscuous mode [ 447.787252][ T28] audit: type=1326 audit(1771596306.929:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 447.839251][T22128] loop5: detected capacity change from 0 to 512 [ 447.845664][ T28] audit: type=1326 audit(1771596306.929:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 447.912864][T22128] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 447.921047][T22128] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 447.966715][T22128] System zones: 0-1, 15-15, 18-18, 34-34 [ 447.969876][ T28] audit: type=1326 audit(1771596306.929:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 447.986931][T22128] EXT4-fs (loop5): orphan cleanup on readonly fs [ 447.996978][ T28] audit: type=1326 audit(1771596306.929:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 448.034248][ T28] audit: type=1326 audit(1771596306.929:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 448.061503][ T28] audit: type=1326 audit(1771596306.929:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 448.087399][ T28] audit: type=1326 audit(1771596306.929:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 448.095504][T22144] lo speed is unknown, defaulting to 1000 [ 448.133684][T22149] loop3: detected capacity change from 0 to 1024 [ 448.140731][T22128] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 448.150417][T22132] loop7: detected capacity change from 0 to 4096 [ 448.156926][T22128] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 448.190530][ T28] audit: type=1326 audit(1771596306.929:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 448.218976][T22128] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 448.223788][ T28] audit: type=1326 audit(1771596306.939:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22116 comm="syz.7.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b00fc629 code=0x7ffc0000 [ 448.226688][T22132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.291225][T22128] EXT4-fs (loop5): 1 truncate cleaned up [ 448.328405][T22128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 448.373243][T22149] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 448.509968][T22149] System zones: 0-1, 3-36 [ 448.519319][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.569770][T22173] loop5: detected capacity change from 0 to 1024 [ 448.609109][T22149] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2842: bad orphan inode 134217728 [ 448.649300][T22179] bond_slave_0: entered promiscuous mode [ 448.655133][T22179] bond_slave_1: entered promiscuous mode [ 448.661591][T22173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.718340][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.720966][T22179] macvlan2: entered promiscuous mode [ 448.736303][T22179] bond0: entered promiscuous mode [ 448.742759][T22179] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 448.751174][T22173] tmpfs: Unknown parameter 'usruotid' [ 448.785087][T22149] loop3: lost filesystem error report for type 5 error -117 [ 448.786194][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 448.800205][ C0] EXT4-fs (loop3): initial error at time 1771596307: ext4_orphan_get:1417 [ 448.808801][ C0] EXT4-fs (loop3): last error at time 1771596307: ext4_orphan_get:1417 [ 448.821341][T22185] macvlan3: entered promiscuous mode [ 448.829529][T22149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.865853][T22191] FAULT_INJECTION: forcing a failure. [ 448.865853][T22191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.879755][T22191] CPU: 0 UID: 0 PID: 22191 Comm: syz.7.2849 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.879794][T22191] Tainted: [W]=WARN [ 448.879802][T22191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.879817][T22191] Call Trace: [ 448.879824][T22191] [ 448.879833][T22191] __dump_stack+0x1d/0x30 [ 448.879863][T22191] dump_stack_lvl+0x95/0xd0 [ 448.879900][T22191] dump_stack+0x15/0x1b [ 448.879924][T22191] should_fail_ex+0x263/0x280 [ 448.879999][T22191] should_fail+0xb/0x20 [ 448.880076][T22191] should_fail_usercopy+0x1a/0x20 [ 448.880098][T22191] _copy_from_iter+0xcf/0xea0 [ 448.880168][T22191] ? __alloc_skb+0x4f6/0x690 [ 448.880173][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.880267][T22191] ? __alloc_skb+0x200/0x690 [ 448.880356][T22191] netlink_sendmsg+0x4ae/0x6f0 [ 448.880386][T22191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.880412][T22191] ____sys_sendmsg+0x5af/0x600 [ 448.880504][T22191] ___sys_sendmsg+0x195/0x1e0 [ 448.880528][T22191] ? path_openat+0x1b01/0x2050 [ 448.880569][T22191] __sys_sendmmsg+0x185/0x320 [ 448.880610][T22191] __x64_sys_sendmmsg+0x57/0x70 [ 448.880642][T22191] x64_sys_call+0x27aa/0x3020 [ 448.880695][T22191] do_syscall_64+0x12c/0x370 [ 448.880727][T22191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.880755][T22191] RIP: 0033:0x7fb9b00fc629 [ 448.880773][T22191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.880808][T22191] RSP: 002b:00007fb9aeb4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 448.880830][T22191] RAX: ffffffffffffffda RBX: 00007fb9b0375fa0 RCX: 00007fb9b00fc629 [ 448.880916][T22191] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000003 [ 448.880931][T22191] RBP: 00007fb9aeb4f090 R08: 0000000000000000 R09: 0000000000000000 [ 448.880944][T22191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.880987][T22191] R13: 00007fb9b0376038 R14: 00007fb9b0375fa0 R15: 00007ffcc81c8708 [ 448.881007][T22191] [ 449.338688][T20500] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.387877][T22216] loop5: detected capacity change from 0 to 512 [ 449.437947][T22210] loop2: detected capacity change from 0 to 8192 [ 449.475386][T22216] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 449.499384][T22216] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 449.507953][T22216] System zones: 0-1, 15-15, 18-18, 34-34 [ 449.514071][T22216] EXT4-fs (loop5): orphan cleanup on readonly fs [ 449.521103][T22216] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 449.536217][T22216] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 449.543950][T22216] EXT4-fs (loop5): 1 truncate cleaned up [ 449.561953][T22210] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.569322][T22210] IPv6: NLM_F_CREATE should be set when creating new route [ 449.585480][T22216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 449.790020][T22210] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.797426][T22210] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.862236][T22232] loop3: detected capacity change from 0 to 512 [ 449.869186][T22232] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 449.903707][T20048] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.938002][T22234] loop7: detected capacity change from 0 to 512 [ 450.025641][T22234] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 450.056469][T22234] EXT4-fs (loop7): 1 truncate cleaned up [ 450.106563][T22210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.117742][T22210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.126024][T22234] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.126142][ T2989] ================================================================== [ 450.146523][ T2989] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 450.153586][ T2989] [ 450.155935][ T2989] write to 0xffffffff86c91818 of 8 bytes by task 22234 on cpu 1: [ 450.163876][ T2989] data_alloc+0x310/0x390 [ 450.168593][ T2989] prb_reserve+0x8d7/0xae0 [ 450.173231][ T2989] vprintk_store+0x54a/0x910 [ 450.178024][ T2989] vprintk_emit+0x1a4/0x600 [ 450.182569][ T2989] vprintk_default+0x26/0x30 [ 450.187444][ T2989] vprintk+0x1d/0x30 [ 450.191437][ T2989] _printk+0x79/0xa0 [ 450.195433][ T2989] __ext4_msg+0x1aa/0x1c0 [ 450.199944][ T2989] ext4_fill_super+0x2f90/0x37c0 [ 450.204893][ T2989] get_tree_bdev_flags+0x291/0x300 [ 450.210297][ T2989] get_tree_bdev+0x1f/0x30 [ 450.214726][ T2989] ext4_get_tree+0x1c/0x30 [ 450.219147][ T2989] vfs_get_tree+0x57/0x1d0 [ 450.223756][ T2989] do_new_mount+0x288/0x8d0 [ 450.228282][ T2989] path_mount+0x4d0/0xbc0 [ 450.232631][ T2989] __se_sys_mount+0x28c/0x2e0 [ 450.237320][ T2989] __x64_sys_mount+0x67/0x80 [ 450.241941][ T2989] x64_sys_call+0x2d61/0x3020 [ 450.248734][ T2989] do_syscall_64+0x12c/0x370 [ 450.253555][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.259710][ T2989] [ 450.262211][ T2989] read to 0xffffffff86c91818 of 16 bytes by task 2989 on cpu 0: [ 450.269947][ T2989] _prb_read_valid+0x1bc/0x950 [ 450.275007][ T2989] prb_read_valid+0x3c/0x60 [ 450.279933][ T2989] syslog_print+0x258/0x560 [ 450.284825][ T2989] do_syslog+0x52b/0x7f0 [ 450.289187][ T2989] __x64_sys_syslog+0x41/0x50 [ 450.302128][ T2989] x64_sys_call+0x2b9e/0x3020 [ 450.307251][ T2989] do_syscall_64+0x12c/0x370 [ 450.311862][ T2989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.317762][ T2989] [ 450.320087][ T2989] Reported by Kernel Concurrency Sanitizer on: [ 450.326327][ T2989] CPU: 0 UID: 0 PID: 2989 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(full) [ 450.337285][ T2989] Tainted: [W]=WARN [ 450.341281][ T2989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.351644][ T2989] ================================================================== [ 450.487246][T22210] bond0: left promiscuous mode [ 450.493423][T22210] bond_slave_0: left promiscuous mode [ 450.499376][T22210] bond_slave_1: left promiscuous mode [ 450.508234][ T58] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.521018][ T58] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.532389][T20710] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 450.540675][T20710] FAT-fs (loop2): Filesystem has been set read-only [ 450.547491][ T58] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.586484][ T58] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.632544][T19199] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.