last executing test programs: 5m51.489660586s ago: executing program 32 (id=367): socket$nl_generic(0x10, 0x3, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000200140012800900010076657468000000000400028008004040", @ANYRES32=0x0, @ANYBLOB="04001a80e2b9"], 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61105a000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000004000000000000000000001800000004000040000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) io_setup(0xff, &(0x7f0000000280)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000780)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) eventfd(0xe37) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 5m39.429939822s ago: executing program 33 (id=590): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @remote, 0x800000}, r4}}, 0x30) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000027"], 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x8, 0x13, r6, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000280)=0x0) r8 = syz_open_procfs(r7, &(0x7f00000002c0)='net/igmp\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f0000000180)=0xff800000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000807000000", @ANYRES32=r1, @ANYBLOB="e6000000000000001c001a801800048014000a80"], 0x3c}}, 0x0) 5m23.031085842s ago: executing program 34 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x958b4000) (async, rerun: 64) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) (rerun: 64) mlock2(&(0x7f0000e49000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r3, 0x2502}, {r3, 0x16386}], 0x2, 0x0, 0x0, 0x0) (rerun: 32) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 4m33.1755828s ago: executing program 35 (id=1913): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x5, 0x7ffc0002}]}) epoll_create(0x9) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='attr/fscreate\x00') read$rfkill(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x6}, 0x0, 0x10000, 0xfffffffc, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x80, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) r6 = accept$packet(r0, 0x0, &(0x7f0000000080)) sendto$packet(r6, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x1a, 0x4000, &(0x7f0000000140)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @remote}, 0x14) socket$inet_sctp(0x2, 0x1, 0x84) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x4d7, &(0x7f0000000280)) wait4(0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x1, 0x6}, &(0x7f0000000300)=0xc) 4m27.653346073s ago: executing program 36 (id=2034): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x4040, 0x2) socket$l2tp6(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x108000, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001000"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 4m14.402248519s ago: executing program 37 (id=2272): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80890a, &(0x7f0000000100)={[{@orlov}, {@nodioread_nolock}, {}, {@oldalloc}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0x7, 0x7b5, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4000, 0x0, 0xfff, 0x2, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x8, 0x40000cca8, 0x4010}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0xbaa23f3d13f2d1f5, 0x0, 0x200, {0x0, 0x0, 0x0, r2, 0x0, 0x400}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0x8, @mcast1, 0x79}}, 0x0, 0x0, 0x14, 0x0, "aa1cda12482ce936fe2707b31f549402157745ea281f88ea79321f8931e69fff9996d6cc77adb40b96e90df08b90b2a7f62e807928e17a869290e49ecf42b43e5dfc7650c208e65bbb7e7dd058ed1d57"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "68348bff59852eca", "2014cff675966721a16bac26aa64772e", "451d2ed9", "07d64047ba57cbcb"}, 0x28) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 4m12.876193978s ago: executing program 38 (id=2287): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112bf000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x322f7f2843671a4a}, 0xc1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x0, 0xfffffffe, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x200c08d1}, 0x20040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = syz_open_dev$sg(&(0x7f0000000740), 0x8000, 0x404840) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r2}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 3m50.745635154s ago: executing program 39 (id=2738): syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="8580f83288e1aaaaaa780a010102e000000111819078ac1414bb"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100000, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x20008090) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r4, 0x0, 0x40880) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20008002) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000002400078008000500000000000800050000000000080005000000000008000500000000000400078014000780080006"], 0xd0}}, 0x0) 3m28.061595442s ago: executing program 40 (id=3214): timer_settime(0x0, 0x0, &(0x7f0000007fc0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) readv(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x29, &(0x7f0000000200), 0x1}, 0x6d) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x2}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2m52.814217405s ago: executing program 41 (id=3912): accept$inet6(0xffffffffffffffff, 0x0, 0x0) (async) accept$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2410000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7033212a4000000000000850000000600000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000000c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) (async) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 2m36.815577132s ago: executing program 42 (id=4280): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfd, 0x7ffc1ffb}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045439, 0x40bea7b87a0000) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r1, r2+10000000}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x442}], 0x1, &(0x7f0000000140), &(0x7f0000000180)={[0x8969]}, 0x8) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 2m19.935562329s ago: executing program 43 (id=4648): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) ioctl$RTC_UIE_OFF(r0, 0x7004) 2m19.150371735s ago: executing program 44 (id=4659): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a00020077a9c6f76f00"], 0x30}}, 0x0) 2m5.862337873s ago: executing program 45 (id=4889): r0 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYRES8=r1], 0xfd, 0x1b7, &(0x7f00000001c0)="$eJzs2zFrE2EYB/AnNY1pHZLBSRxudApNP0GDVBADgpJBQVBsA9KTgoWADrabg1/CD+Pgqp/EsYNwklyaNCGFNpA7aH6/JQ+5/HPv+x5vkidwbx9+PDo4Pum/6f+KeqUSG3uRxHklmrERF84CALhNzrMs/mZZlt09i60fkWVZ2SMCAFbN9z8ArJ+Xr14/63S7+y+SpB6Rfhv0Br38MT/e6ceHSOMwdqIR/2L4A2Esr5887e7vJCPN+J6ejvOng96d2Xw7GtFcnG/n+WQ2vxnbl/O70Yj7i/O7C/O1eFSb5DcjohF/3sdxpHEQw+w0/7WdJI+fd+fy90avAwAAgNuglUyM+vdazPbvrdbs8Wl/nOc7lWv/PzDXX1fjQbXcuQPAujr5/OXoXZoeflqiqI/fY8n49Yrf2/lJVniK2aIyntWN4xdLOnlmr4j1uWlRuzzCuWJrxUOtFj7l4cUsa8F/RkTpl3upTT0qCv4gAgo33f1ljwQAAAAAAAAAAAAAALhKEfcVlT1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANbP/wAAAP//4Ut++A==") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2000775) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={r4, 0x7}, 0x8) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xf7a5e0d2d9ec0bc8, {0xaaaaaaaaaaaa0102}}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007"], 0x2c}}, 0x0) readv(r5, &(0x7f0000000400)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) 1m56.971120914s ago: executing program 46 (id=5053): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000a00)=r0, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x20, 0xffff8001, 0x2, {{0xc, 0x4, 0x0, 0x2d, 0x30, 0x64, 0x0, 0x8, 0x4, 0x0, @remote, @multicast2, {[@end, @ssrr={0x89, 0x7, 0x67, [@dev={0xac, 0x14, 0x14, 0x27}]}, @rr={0x7, 0xb, 0x69, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3a}]}, @lsrr={0x83, 0x7, 0x2b, [@rand_addr=0x64010100]}, @noop]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0xa8, 0x24, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x7}, {0xfff1}, {0x0, 0x3}}, [@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x30}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x44) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0xf0, 0x28, 0x713, 0x0, 0x0, {{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x8}, {@in6=@empty, 0x0, 0x32}, @in=@loopback, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000005c0), 0xfe, 0x276, &(0x7f0000000600)="$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") creat(&(0x7f0000000e00)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12d7041, 0x0, 0xfc, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1m53.736660753s ago: executing program 47 (id=5096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'vlan0\x00', {0x6}, 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1m48.617806563s ago: executing program 48 (id=5167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) unshare(0x40000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x23, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002940)=""/4098, 0x15}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000cc0)={'filter\x00', 0x4}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34, 0x0, 0xa}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in6=@dev}}, {{@in=@dev}}}, &(0x7f0000000280)=0xe8) socket$kcm(0x29, 0x5, 0x0) memfd_secret(0x80000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x62, @multicast2, 0x4e22, 0x2, 'lblc\x00', 0x4, 0x4, 0x2d}, 0x2c) 1m48.360319488s ago: executing program 49 (id=5172): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x83b, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6(0xa, 0x5, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x359}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)=ANY=[@ANYBLOB="300000002b000701feffffff0000000002"], 0x30}, 0x1, 0x0, 0x0, 0x2404c801}, 0x4014) syz_read_part_table(0x4030, &(0x7f0000004040)="$eJzszjFKw3AYxuE3avCPZBHchGAQHCVuTrlFLpAzODuYmziGHqDH6wFaKB0aCH2e9fte+IVN2k+75yRvXea+T0qShxNv/Vfqp3KXJsnP8Xlc1mgFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2bXrN/Dvku0nKY5K/+9RDW+Ul6T7Pz8dljUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kb9v2ce2iol6T4un4/LNaIAAAAAAAAAAAA4sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUgAAAP//1SYMTA==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket(0x40000000015, 0x805, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f00000001c0)={0x0, 0xfb, 0xfd, 0x1, 0x6, "ab8751c232884b0f0562b7add6555ffa", "0a7c919df50bfa8577511abbaef5c1c7ab1b3f2df2202fa5be1c8971e23b035a9857f2e0289f6570aa7997aff32da728c620aef887adbfdf47e402340db5f3867d0518150d6fc87a5ac7b72b6fbe0381c2648f60e67345564958f614d635ad3fb52418cf28e921f6ef4f684411861b4444932e8226a3c8260cdddc0c4b8db8bc27a143a2af2d89f17bb3095974a0b7f12202748004d57071540191c1b32863d7d396020ff72698f13bb3778d1dbfe0bfbb17db3379ce7d49be49f3fdad67b8185861492cc6761b14c4873a0222658494494c9501a8274b0e5da19258b6670d52478650b502c3c209"}, 0xfd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1m46.846569616s ago: executing program 5 (id=5188): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000001680)=""/4096) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r4, &(0x7f0000000080), 0x0, 0x720, 0x0, 0x0) sendfile(r3, r2, 0x0, 0x578410ed) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockname(r0, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000180)=0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0}, &(0x7f0000000340)=0xfffffefe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0xc0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) 1m45.913012271s ago: executing program 5 (id=5190): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000004c52465ad57cd000"/35], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) sendfile(r0, r0, 0x0, 0x7ffffffc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x8000, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0x938, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x8, 0x10}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xed}}, @filter_kind_options=@f_route={{0xa}, {0x8a0, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x3}}, @TCA_ROUTE4_POLICE={0x884, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5, 0xffff, 0x9, 0x9e, 0x5, 0x86c, 0x4a613b42, 0x7e, 0x59, 0x8, 0x2, 0x0, 0x5, 0xffffffff, 0x7, 0x6, 0x3, 0x9, 0x3, 0x3b4, 0x0, 0x13c2, 0x3, 0x7, 0x8, 0xda, 0x2, 0x7, 0x9, 0x4, 0x4, 0x1, 0x7, 0x5, 0x8, 0x4, 0x7, 0x8, 0x10001, 0x9, 0x100, 0x2, 0x3a, 0x8fc9, 0x8, 0xe7a, 0x9, 0x6, 0x101, 0x6, 0x7, 0x80, 0xd2b, 0x7272, 0x1, 0xc, 0x3e3, 0x2, 0x3, 0xd162, 0x400, 0x101, 0xfffffff8, 0x1, 0x800, 0x700, 0x3, 0x2, 0x7, 0x7fff, 0x16, 0x4, 0x5, 0x2, 0x6, 0x81, 0x4, 0x7, 0x8, 0x5, 0x0, 0x8, 0x6, 0x8000, 0x4, 0xffff8000, 0xae0, 0xffffff68, 0x3, 0x100000, 0x0, 0x101, 0x14, 0x1, 0x9, 0xfffffff7, 0x1, 0xf91e, 0x9, 0x1d, 0xfffffff8, 0x8001, 0x400, 0x1, 0xc, 0x5, 0x3, 0x3, 0x200, 0xffff21ef, 0xf, 0xffff, 0x9, 0x81, 0x6, 0x2881, 0x9, 0x40, 0x6, 0x8, 0x5, 0x6, 0xfffffc00, 0xffff, 0x8, 0x3, 0x2, 0x400, 0x101, 0x1, 0xc73, 0x5, 0x6, 0x9, 0x80000001, 0x7, 0x8, 0xfffffa2e, 0x1, 0x4, 0xfffffff9, 0x8, 0xb1e, 0x4, 0x7, 0x1, 0x9, 0x80000001, 0x1, 0x80, 0x8000, 0x5, 0x9, 0x8, 0x7f, 0xd9, 0x3, 0xe443, 0x1, 0x6, 0x2, 0x81, 0x8, 0xf0b, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x2, 0x0, 0x10, 0x3, 0x6, 0x0, 0x9, 0x7, 0x10, 0x4, 0x4, 0x8, 0x1, 0x2038dd36, 0x1ff, 0x6, 0x6, 0x6, 0x5, 0xfff, 0xb18, 0x100000, 0x9, 0x9, 0x5, 0x2f9, 0x6, 0x1ff, 0x1000, 0x16f9, 0x81, 0xb6, 0x4, 0x2, 0x5, 0xf, 0x8, 0x7, 0xb, 0xcbdf, 0x2, 0x0, 0x6, 0x2, 0x200, 0x0, 0x8001, 0x451, 0xbbc, 0x5, 0xfff, 0x10000, 0x9, 0x2, 0x8, 0x4, 0x5, 0xed, 0x200, 0x7b3, 0x4f3, 0x3, 0xb7e, 0x5, 0xb3a, 0x6, 0x4, 0x100, 0x3190, 0x70046025, 0xffff, 0x6, 0x2, 0x40, 0x7, 0x40, 0x1, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x1, 0x80000000, 0x6, 0xce, {0x6, 0x2, 0x2, 0x4, 0xb6a, 0x9}, {0x0, 0x2, 0x3, 0x9, 0x0, 0x9}, 0x10, 0xb142, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xf, 0x7, 0x8, 0x2, 0x0, 0xb, 0xfffffff9, 0x3, 0x4, 0x1, 0xb27, 0x2, 0x7ff, 0x2, 0xaf2, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x7, 0x0, 0x400, 0x4, 0x6, 0x8d0d, 0x2, 0x5, 0x8, 0x311, 0x81, 0x537, 0x9, 0x3, 0x8001, 0xd, 0x3, 0x14, 0x328, 0x93d8, 0x0, 0x6, 0x4, 0x1ff, 0xa, 0x446eda7a, 0x1, 0x6, 0x6fd, 0x8001, 0x5, 0x6, 0x41, 0x1, 0xe41, 0x1, 0x875, 0x1000, 0xfffffff9, 0x52e9, 0x2, 0x7, 0x3, 0x5, 0x7, 0x9, 0x6, 0x0, 0xd, 0x7, 0xfffffffd, 0x2, 0x5, 0x8, 0x400, 0x2f, 0x5, 0x8000, 0x862, 0x6, 0x3d9, 0x4, 0xfff, 0x4, 0x6, 0x8, 0x7, 0x3, 0x13bf, 0x80000001, 0x6, 0x9, 0x2, 0x0, 0xdc98, 0xfffffff9, 0xfaa, 0xf41c, 0x5, 0x4c5, 0x3, 0xb8, 0x4, 0xffff, 0x1, 0x7, 0x7, 0x65, 0x9, 0xfffffffa, 0x4, 0x7, 0x7f5154d3, 0x2, 0x2ea, 0x0, 0xd, 0x80, 0x0, 0x4, 0x1, 0x4, 0x2, 0xc, 0x200, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x80, 0x100, 0x6, 0x1ff, 0x3, 0xfffffff9, 0x5, 0x1000, 0x7, 0x1, 0x7, 0x0, 0xfffffffc, 0x6, 0xb854, 0x1, 0x20000, 0x1c0000, 0xfffff6f2, 0x4, 0x9, 0x8491, 0x3, 0x8, 0x2, 0x45, 0x2, 0x3ff, 0x1, 0xc, 0x9, 0x7, 0x400, 0x401, 0x10001, 0x4, 0x7ef6fc0e, 0x0, 0x1, 0xffffffff, 0x68326a0c, 0xa0, 0x2, 0x4, 0xabc, 0xffff, 0xffff, 0x8001, 0x6, 0x3, 0x8, 0x4, 0xc, 0x1, 0x8, 0x27, 0xd, 0x4, 0x1000, 0x8, 0x9, 0x7, 0x4, 0x4, 0x7ff, 0x1d5b6cf6, 0x8, 0x8, 0x7, 0x8, 0xfff, 0x8, 0x6, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x1, 0x1, 0x4, 0x3, 0x81, 0x1, 0x147, 0x8, 0x90, 0xffffff7e, 0x9, 0x5, 0x5e, 0xfffffff8, 0x200, 0xb, 0x5, 0x1, 0x2, 0x5, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x100, 0x0, 0x3, 0x8, 0xa8, 0x2, 0x3ff, 0x5, 0x7, 0x2d, 0xd616, 0x9, 0x898085fb, 0x100, 0x3, 0x3, 0x4, 0xc0b, 0x6d20, 0x6d16498a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9891}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="8734c7625071"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0xa0}, 0x4000044) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x7188, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r10 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r10) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES16=r8, @ANYRES32=0x0, @ANYBLOB="c61a0200231a0500280012800b00010069703667726500001800028014000700fe8000000000000000000000000000aa08000a00", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 1m42.622605264s ago: executing program 5 (id=5226): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800060018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 1m42.50667223s ago: executing program 5 (id=5228): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10008, 0x8, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m41.716847217s ago: executing program 5 (id=5238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800070018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 1m40.855903197s ago: executing program 5 (id=5253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000807000000", @ANYRES32=r2, @ANYBLOB="e6000000000000001c00"], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1m40.754090283s ago: executing program 50 (id=5253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000807000000", @ANYRES32=r2, @ANYBLOB="e6000000000000001c00"], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1m35.619073804s ago: executing program 0 (id=5338): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x736e, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000020000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000640)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x9}, 0x94) 1m35.478678512s ago: executing program 0 (id=5340): syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x6, {{0xa, 0x4e22, 0x10, @private2, 0x3}}, {{0xa, 0x4e21, 0x3, @mcast1, 0x2}}}, 0x108) close(r0) 1m35.446059804s ago: executing program 0 (id=5343): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, 0x0) bind$bt_hci(r0, 0x0, 0x0) 1m35.245932986s ago: executing program 0 (id=5345): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m34.890147596s ago: executing program 0 (id=5356): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x60b3, 0x4005, 0xb, 0x7, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) r1 = msgget$private(0x0, 0x200) msgsnd(r1, &(0x7f0000000080)={0x1}, 0x8, 0x800) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r2, 0x0, 0x5f) (async) write$binfmt_script(r2, 0x0, 0x5f) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000b00080003400000000a14000000110001"], 0x64}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r4) sendmsg$NLBL_MGMT_C_REMOVE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000010280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fddbdf2502000000050001"], 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x20000800) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4082101}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000004", @ANYRES16=r5, @ANYBLOB="00012cbd7000fcdbdf250100000008000400010000001400050000000000000000000000ffffac1414aa06000b000b0000001400060000000000000000000000ffffe00000020b000100232c267b2e4000000800020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x8882) (async) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4082101}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000004", @ANYRES16=r5, @ANYBLOB="00012cbd7000fcdbdf250100000008000400010000001400050000000000000000000000ffffac1414aa06000b000b0000001400060000000000000000000000ffffe00000020b000100232c267b2e4000000800020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x24004080}, 0x8882) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) (async) close_range(r6, 0xffffffffffffffff, 0x0) 1m33.605908881s ago: executing program 0 (id=5380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r4, 0x25, 0x0, @val=@tcx}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r3}, 0x10) 1m33.561505794s ago: executing program 51 (id=5380): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r2, r4, 0x25, 0x0, @val=@tcx}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r5, r6, 0x4, r3}, 0x10) 1m13.422397723s ago: executing program 7 (id=5778): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x18) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0x100, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000019c0)={[{@dax_inode}]}, 0x1, 0x5e1, &(0x7f0000003c00)="$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") recvmmsg(r1, &(0x7f0000003b00)=[{{&(0x7f0000000280)=@can, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/121, 0x79}, {&(0x7f0000000380)}, {&(0x7f0000000480)=""/168, 0xa8}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4, &(0x7f0000000540)=""/119, 0x77}, 0xfffffffa}, {{&(0x7f0000000640)=@x25, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000400)=""/54, 0x36}, {&(0x7f00000006c0)=""/206, 0xce}, {&(0x7f00000007c0)=""/199, 0xc7}, {&(0x7f00000008c0)=""/15, 0xf}, {&(0x7f0000000900)=""/6, 0x6}, {&(0x7f00000009c0)=""/234, 0xea}, {&(0x7f0000000ac0)=""/85, 0x55}], 0x7}, 0x80000000}, {{&(0x7f0000000bc0)=@l2tp6, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c40)=""/97, 0x61}, {&(0x7f0000000cc0)=""/73, 0x49}, {&(0x7f0000000d40)=""/83, 0x53}, {&(0x7f0000000dc0)=""/88, 0x58}], 0x4, &(0x7f0000000e80)=""/207, 0xcf}, 0x1}, {{&(0x7f0000000f80)=@ax25={{0x3, @null}, [@bcast, @netrom, @rose, @null, @remote, @default, @null, @rose]}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001000)=""/102, 0x66}, {&(0x7f0000001080)=""/126, 0x7e}, {&(0x7f0000001100)=""/119, 0x77}, {&(0x7f0000001180)=""/211, 0xd3}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000001280)=""/41, 0x29}], 0x6, &(0x7f0000003a00)=""/241, 0xf1}, 0x7}], 0x4, 0x40, &(0x7f0000001380)={0x0, 0x989680}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 1m13.227487834s ago: executing program 7 (id=5782): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB='.'], 0x20) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=r1, 0x9, 0x1, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x10000, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x8, 0x1, 0x0, 0x1}], &(0x7f0000000400)='GPL\x00', 0x80000001, 0x58, &(0x7f0000000440)=""/88, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xb, 0x7e, 0x800}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000580)=[{0x0, 0x1, 0x1, 0x3}, {0x4, 0x3, 0xd, 0x5}, {0x0, 0x4, 0x5, 0x7}, {0x4, 0x1, 0x3, 0x9}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r5, r2, 0x11, 0x18, r3, @void, @value=r6, @void, @void, r4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280060002000100000008000500", @ANYBLOB="60ef1a2c6d8ef75b22047a8e4262fdc05bd2834e4ab2d4e6bd231cee0fe31924b650a920b67bc7e4370089bec58a68499df5580a03fd562c8cc03df3908080fe7ddb1b7216e5555d7ac71432ca29412b270cfae75de0b5ed31870e3f7143dfca6e890bfc93fdd06b43ae081a4164", @ANYRESHEX=r0], 0x44}}, 0x0) 1m13.227114375s ago: executing program 7 (id=5783): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r2, 0xfffffffffffffffd, 0x1) read(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r3, 0x3, r0, 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010028b97004fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200260a06000500040000000a000200ff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket(0x40000000015, 0x5, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') (async) lseek(r2, 0xfffffffffffffffd, 0x1) (async) read(r2, 0x0, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r3, 0x3, r0, 0x1}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010028b97004fcdbdf2507000000", @ANYRES32=r4, @ANYBLOB="0200260a06000500040000000a000200ff"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040880) (async) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) 1m13.170197918s ago: executing program 7 (id=5787): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114d000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x47, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000001000)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x1f8, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @private=0xa010100, @remote, 0x2, 0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x20}, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0x60}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r2 = socket$inet6(0xa, 0x2, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r3, 0x2}, {r3, 0x2005}], 0x2, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r4 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000440)={[{@grpquota}, {@delalloc}, {@resuid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@jqfmt_vfsv1}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100020000000000040001000000000008000000", @ANYRES32=r5, @ANYBLOB="1002000000000000200007009eedb6f5206f4900000000"], 0x2c, 0x0) unshare(0x22020600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m12.885186284s ago: executing program 7 (id=5793): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000090300001c0011b7000000000d000000000f0000000000000e04000000020000000000"], 0x0, 0x42, 0x0, 0x1}, 0x28) (async) r0 = socket(0x1e, 0x5, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) syz_io_uring_setup(0x2e55, &(0x7f0000000400)={0x0, 0xf957, 0x0, 0x1, 0x159}, &(0x7f0000000480), &(0x7f00000004c0)) close(0x3) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0xa9, 0xe3, &(0x7f0000000080)="2db13f42b3ba77d402c9789efb28d871e18873dcb7bead622221fcab44ddb22db06f24f02c3e02311a018565ad4c45e0f339082f2ae415e6e55b72682204d55f768ed56cc9103f9f037086a9e04b3dca9ae4733fa69f7624063cd47ea2f7871d04c05a026f61e38dd80606a45fa4abc5849237d9ffe79b817f1fbe0efecbe0fdc8b4b749f4e04bd3d8168556ce8c9328c3b38f7f2289d597a90bfcad2107ee0293b9a92d03fdfd0011", &(0x7f0000000140)=""/227, 0xd, 0x0, 0xb1, 0x12, &(0x7f00000002c0)="41d0e91e275b3a89bb0c42e8f1d5123533def8dd6c736427568eb29efe744cc3312a759698d3e870f6461c10760e49e9c6be30e0e79c6634173d7bd80f9be838e9181a1fc4a040767309549fea2592a043b12df336422d8d13b9f61b9e054bc432f9237192eeea9599e5b139a4dcdca79421f8738f713dfbaad39317286694237d68457344411118c091334bc7ae28160bc5f3f9cef3cefafc1e0b351e0bc4876459b133d9bc96e3067098a0647707b620", &(0x7f0000000240)="b66cd5847aa8509da79fdb6905d5f8f20f0b", 0x4, 0x0, 0x9}, 0x50) (rerun: 32) 1m11.723790082s ago: executing program 7 (id=5810): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000000480)="e1a5", 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$packet(r1, &(0x7f0000000440)="f5", 0x1, 0x20000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) writev(r1, &(0x7f0000002800)=[{&(0x7f0000000480)="e1a5", 0x2}], 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) sendto$packet(r1, &(0x7f0000000440)="f5", 0x1, 0x20000000, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) 1m11.655177176s ago: executing program 52 (id=5810): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000002800)=[{&(0x7f0000000480)="e1a5", 0x2}], 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) sendto$packet(r1, &(0x7f0000000440)="f5", 0x1, 0x20000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x0) (async) writev(r1, &(0x7f0000002800)=[{&(0x7f0000000480)="e1a5", 0x2}], 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) sendto$packet(r1, &(0x7f0000000440)="f5", 0x1, 0x20000000, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710031000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) 1m8.949743045s ago: executing program 9 (id=5866): sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa8, 0x464, 0x100, 0x70bd2c, 0x25dfdbfd, "88774ff209a01f140a065f7d1ec4d814fb1835fbab96f8b2462aa97bede00d30e0c96446f2b57d8d7e72bc6016951821b47046c147b8b00bd54b164af077c198c1e894d2ce5904c87a4d6b3b7cc0b835627e68226843a5f3a6ab8c0b8610e5c071730866be06d79573b92970be698a6fb0e865c76c0c206a4a4265350d8bcdcaf5804bc159ae2c10bfcfea14ace3649149b81948ddf7", [""]}, 0xa8}}, 0x10) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'erspan0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x7, 0x6a, 0x8, {{0x38, 0x4, 0x2, 0x5, 0xe0, 0x66, 0x0, 0x86, 0x13, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x59, 0xffffffffffffffff, [{0x2, 0xa, "684eb7afea9de017"}, {0x7, 0xb, "5ae60470a8ca25ac87"}, {0x6, 0x9, "e72807a47ced45"}, {0x6, 0x7, "4cfd0cef91"}, {0x0, 0xc, "6830c82fc19114966256"}, {0x7, 0xf, "801388baab1375336a6c625858"}, {0x2, 0x9, "f66190f0c56a6d"}, {0x0, 0xa, "b2c64871840cfca4"}]}, @timestamp_addr={0x44, 0x3c, 0x76, 0x1, 0x0, [{@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x17}}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@rand_addr=0x64010101, 0x4}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x37}}, {@broadcast, 0x5}]}, @end, @timestamp={0x44, 0x18, 0xd1, 0x0, 0x1, [0x2d, 0x6, 0xd, 0x9, 0xae45]}, @end, @rr={0x7, 0x13, 0x3f, [@remote, @remote, @loopback, @remote]}, @generic={0x88, 0x8, "b9efe59e7877"}]}}}}}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0xb, 0x3, 0x4, 0x4, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x7, 0x0, 0x40}}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@newsa={0xfc, 0x10, 0x0, 0x70bd25, 0x25dfdbff, {{@in6=@private0, @in6=@mcast1, 0x6, 0x3, 0x4e23, 0x0, 0x2, 0x20, 0x0, 0x68, r1, r3}, {@in6=@local, 0x4d3, 0x3c}, @in6=@remote, {0x2, 0x9, 0xffffffffffffffff, 0x3, 0x6d4, 0x7c, 0x81, 0x9}, {0x75, 0x7, 0xffffffffffffff26}, {0x4, 0x1, 0x2}, 0x70bd26, 0x34ff, 0x8, 0x3, 0x6, 0xc0}, [@offload={0xc, 0x1c, {r4, 0x1}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000805) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000005c0)={0x7, &(0x7f0000000580)=[{0x6, 0x3, 0x1, 0xe31e}, {0x3, 0x7, 0x3, 0xfffffabb}, {0x2, 0xe, 0x0, 0x1}, {0xa, 0x6, 0x8, 0x7}, {0x1, 0x0, 0x8, 0x9}, {0x6, 0x6, 0x6}, {0x18, 0x1, 0xf0, 0x9}]}, 0x10) (async) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000600)="2823dc38fc58665e87eb789a9ad6bf61809f182d05161a586d2e21aef2c8f7a941d4117835aefb81a30498618a1a033c7755a3e43662ccbdc2e6436ffc987f9c44ea156894c9a0a689014d44a30839fa2f0dbb25136df0e2a5e78b59cd5e410d", 0x60) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3, 0x4d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}}, 0x8000) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000880)='veth0_to_hsr\x00') (async) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{&(0x7f00000008c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000900)="eadc88ced6b0e58c90d42d18ae25d0eeafa62b4e452e0969f5801623d16b1031330fdddf89bd4814ae9abb912d9b1d0b9da8a4b9d55127dc5743d2397b9fae0c920349fd5681e7afd597d3b47a8823277b912e7583884a848a9af9ed0f854de317588b87d50a7a336ccc57a52fc8fce619df420bb251db056c34b4737201407d1213e53525868c058eab016d234664bc027eecea4387c1ebfc9e71af25401955d881892dac2d13f3d3098882a8208867ce7edb8a0c15d884f9c0ee3db0f0b5a47d707c1807ae8391c73ffb7ac73324872239091686be7e02066d0f8fcfb9576e978eff61cd87629462a977ed", 0xec}], 0x1, &(0x7f0000000a40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @broadcast}}}], 0x58}}], 0x1, 0x0) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x40049366, &(0x7f0000000b00)) (async) shutdown(r2, 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) connect$x25(r2, &(0x7f0000000b40), 0x12) syz_clone(0x10000500, &(0x7f0000000b80)="03b38e87dce20f35fc2434d0ac7006edfc455ea2a22e77a9551bbe209dd80ad0f79214f00634f4df9dcdbfce77ae789521f74a4801e2487248fda79aecbf8b4fd26a13b58be910", 0x47, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="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") r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0xffff0000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x16}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x3}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x4004800) writev(r2, &(0x7f0000001e80)=[{&(0x7f0000001d80)="f240b5f5921a58a727c7077bfa8f9887b7419baae224539b109f7db1ce5eeb028e4f16b00db61ac5b19ac50506731cce19635c7cadfbe03a1f1cc5a07b808c7ecdc1c5bf7c51dbe21a4e09982a5a8874155027ef1bd4ef95cc1a16b402d946033e50d441ccc31f823242dcd6304275597876b5cbee862d8980a18545d1017a96391e50ee0374794b00d9d82bdc4a6f1273395232829097b51454ce8a9e0d8919104a20bce8b71bcfe10c348478f5865685f309f6f8aed03820db21b670255339282f90f5baa2bbceeed683ce81325284bb4cb24a3345a9bb", 0xd8}], 0x1) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000001ec0)=0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001fc0)={0x0, 0x84, &(0x7f0000001f00)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x46, @local, 0x3}, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x16}, 0x10001}, @in6={0xa, 0x4e20, 0x81, @loopback}]}, &(0x7f0000002000)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000002040)={r9, 0xed, "470aafd61df04db99822e416915993f7f7f68ca09c3ff29d28640c621bd78b36db1686c5eed8abe9ed011a2ac58c8a45dd3b1a2025c650c1be48b23a98315eeec967b4c4d81fb5c12dd05ed5d52436c7d3e2c144d019ddea251c3dd190aa2ae8c7677075e05ab797632df1f6c2e21afeaecc590ce6c1b79781aacd639f8b15278a3509d09a2dfd5e65a13d8d80fa1f7feb1e2555b004fa51b24a9f9e832696c458156a2e8c594050edbfc573dee641d7bba7bc492f0179187064d3f6b5496192c1e058ce56aafa61d5b759cd633f304447a7a512256ecb71fc85ff548fceb9ede0a5dd3fe6fd0a27bc6a65c510"}, &(0x7f0000002140)=0xf5) readv(r7, &(0x7f0000003400)=[{&(0x7f0000002180)=""/193, 0xc1}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/224, 0xe0}, {&(0x7f0000003380)=""/110, 0x6e}], 0x4) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000003440), &(0x7f0000003480)=0x4) (async) listen(r2, 0x4e1e5784) (async) setsockopt$MRT_TABLE(r2, 0x0, 0xcf, &(0x7f00000034c0)=0xff, 0x4) 1m8.916106416s ago: executing program 9 (id=5868): syz_emit_ethernet(0xa2, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x6c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 1m8.85559386s ago: executing program 9 (id=5871): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x35, 0x0, "55a4f7b8e411dd2e4dce051f9c3a75df392975db7fd9287428cfacebe8a7aef9bd2ee22bc5ab6a68dd7e1f664e174d91f679915f0e5f4fd040d61e41522eb436755c6050baa16c253144dd2c20065b73"}, 0xd8) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x121400, 0x0) preadv(r1, &(0x7f0000002f00)=[{&(0x7f0000001d40)=""/191, 0xbf}], 0x1, 0x0, 0xff) ioctl$sock_bt_hci(r1, 0x800448f0, &(0x7f0000000280)="b29dced1c347c8cfcd33ebb1972584990400000000000000aa65ec5187b4fcddb01a54ac14632df46673539fa7baae8061ac843d6e1197000000005acd80554cc38a") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~\"\"\nt\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)=ANY=[@ANYBLOB="34ff0000", @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf250c0000002000058014000280080003000008000008000400000001000800010075647000"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8094) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a008421"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="6bcd49fe10c00000001600000202000000fddbdf250a3f61025a64cf3bbb4cde44f16ee0a51f1e117322aa271dada9d023b76f1b4da7e4b2c2c6b8280918a5cc8b705e6c505b", @ANYRES32=r8, @ANYBLOB="0800090009000000140001002001000000000000000000000000000214000100fe8000000000000000000000000000aa14000100fc02000000000000000000000000000114000200fc01000000000000000000000000000014000200fe8000000000000000000000000000bb14000200fe8000000000000000000000000000aa14000600080000000500000000800000040000001400060007000000010001000900000005000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x4000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2, 0x0, 0x3f, 0x20000000, 0x20000000, 0x3, 0x7, 0x0, 0x40}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x5, 0x1ff, 0x2, 'snmp_trap\x00', 'syz1\x00', {0x100}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x32}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x2, 0x3, 0x0, 0x5], 0x0, 0x1}, {0x0, [0x6, 0x4, 0x2, 0x2, 0x982848c96d6a0d38], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 1m8.720672258s ago: executing program 9 (id=5872): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESOCT], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="00ff950000000000b702000014000000b7030000800000008500000083000000bf09000000000000550901000000000095000000000000000709000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94) 1m8.661282041s ago: executing program 9 (id=5873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x1170, 0x1398, 0x128, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x10}, @loopback, [0x0, 0xff000000], [0xff, 0xffffff00, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18, 0x0, 0x5}, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x243, 0x29}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [0x0, 0xffffff00, 0x0, 0xff000000], [], 'geneve1\x00', 'xfrm0\x00', {}, {0xff}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x118, 0x160, 0x0, {0x4000000}, [@common=@dst={{0x48}, {0xfe, 0x1, 0x0, [0x3296, 0xce2, 0xc5, 0xe, 0xfd63, 0x9, 0x5, 0xc, 0x8, 0xd, 0xfa3, 0x2, 0xa, 0x40, 0xfff, 0x7fff], 0x2}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x2000, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 1m8.51464158s ago: executing program 9 (id=5874): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000012500008019000180140002007e80d52c6475cc7ab1f26d6d791600"/46], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 52.572089163s ago: executing program 53 (id=5874): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xa01, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x8000, &(0x7f0000000180)={[{@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000000000012500008019000180140002007e80d52c6475cc7ab1f26d6d791600"/46], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 44.870066074s ago: executing program 4 (id=6253): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [], 0x6b}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x0, 0x0, 0x350, 0x0, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d5]}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xffffff00, 0xff], 'tunl0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x51}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x6, 0x0, [0x9, 0xfffe, 0x7, 0x12, 0x7, 0x7fff, 0x7, 0x50, 0x4da, 0x7ff, 0x8000, 0x1, 0x7, 0x8, 0x1, 0x8], 0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4=@loopback, 0x2e, 0x36, 0xc}}}, {{@ipv6={@remote, @loopback, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xffffff00], 'tunl0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x4, 0xc}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x27, 0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff000000, 0xff000000, 0xff], [0xff000000, 0xff, 0xff000000], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x32, 0x1, 0x5, 0x54}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}, {{@ipv6={@mcast1, @remote, [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0xff000000, 0xff000000, 0xff], 'geneve0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x3b, 0x9, 0x5, 0x22}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000000), 0x0) (async) dup(r1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [], 0x6b}}) (async) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x610, 0x0, 0x0, 0x350, 0x0, 0x0, 0x540, 0x540, 0x540, 0x540, 0x540, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@esp={{0x30}, {[0x4d5, 0x4d5]}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, [0xff000000, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xffffff00, 0xff], 'tunl0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x88, 0x6, 0x2, 0x51}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x8, 0x6, 0x0, [0x9, 0xfffe, 0x7, 0x12, 0x7, 0x7fff, 0x7, 0x50, 0x4da, 0x7ff, 0x8000, 0x1, 0x7, 0x8, 0x1, 0x8], 0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4=@loopback, 0x2e, 0x36, 0xc}}}, {{@ipv6={@remote, @loopback, [0xff000000, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xffffff00], 'tunl0\x00', 'erspan0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x4, 0xc}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x2b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x27, 0x5}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff000000, 0xff000000, 0xff], [0xff000000, 0xff, 0xff000000], 'pim6reg1\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x32, 0x1, 0x5, 0x54}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x10, 0x8, 0x1}}}, {{@ipv6={@mcast1, @remote, [0xffffff00, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0xff000000, 0xff000000, 0xff], 'geneve0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x3b, 0x9, 0x5, 0x22}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xfe}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) (async) 44.7784191s ago: executing program 4 (id=6255): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap$xdp(&(0x7f0000f57000/0x1000)=nil, 0x1000, 0x5000002, 0x4008131, 0xffffffffffffffff, 0x180000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 44.668631246s ago: executing program 4 (id=6261): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESOCT], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000028000000b702000014000000b7030000800000008500000083000000bf09000000000000550901000000000095000000000000000709000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94) 44.606369389s ago: executing program 4 (id=6262): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf7, 0x1, 0x0, 0x0, 0x0, 0x57, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xb, 0xfffffffffffffff7}, 0x0, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20003300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x5010) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r9 = accept4$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) bind$unix(r9, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 44.524915934s ago: executing program 4 (id=6264): syz_emit_ethernet(0xad, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x77, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 44.249746911s ago: executing program 4 (id=6268): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x870) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_clone(0x72396100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$kcm(0xa, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 44.218400973s ago: executing program 54 (id=6268): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x4414}, 0x4000884) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000000000)=ANY=[], 0x870) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_clone(0x72396100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = socket$kcm(0xa, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.296287572s ago: executing program 6 (id=7075): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 6.235500005s ago: executing program 8 (id=7078): syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ff, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 6.174610099s ago: executing program 8 (id=7079): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000004610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 6.007763799s ago: executing program 8 (id=7094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000f3ff000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 5.957209762s ago: executing program 6 (id=7087): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap$xdp(&(0x7f0000f57000/0x1000)=nil, 0x1000, 0x5000002, 0x4008131, 0xffffffffffffffff, 0x180000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c00048018000180"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x88, r3, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x44890}, 0x80) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 5.943049703s ago: executing program 8 (id=7089): syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) 5.805597981s ago: executing program 8 (id=7092): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000004c52465ad57cd000"/35], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) sendfile(r0, r0, 0x0, 0x7ffffffc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x8000, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0x938, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x8, 0x10}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xed}}, @filter_kind_options=@f_route={{0xa}, {0x8a0, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x3}}, @TCA_ROUTE4_POLICE={0x884, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5, 0xffff, 0x9, 0x9e, 0x5, 0x86c, 0x4a613b42, 0x7e, 0x59, 0x8, 0x2, 0x0, 0x5, 0xffffffff, 0x7, 0x6, 0x3, 0x9, 0x3, 0x3b4, 0x0, 0x13c2, 0x3, 0x7, 0x8, 0xda, 0x2, 0x7, 0x9, 0x4, 0x4, 0x1, 0x7, 0x5, 0x8, 0x4, 0x7, 0x8, 0x10001, 0x9, 0x100, 0x2, 0x3a, 0x8fc9, 0x8, 0xe7a, 0x9, 0x6, 0x101, 0x6, 0x7, 0x80, 0xd2b, 0x7272, 0x1, 0xc, 0x3e3, 0x2, 0x3, 0xd162, 0x400, 0x101, 0xfffffff8, 0x1, 0x800, 0x700, 0x3, 0x2, 0x7, 0x7fff, 0x16, 0x4, 0x5, 0x2, 0x6, 0x81, 0x4, 0x7, 0x8, 0x5, 0x0, 0x8, 0x6, 0x8000, 0x4, 0xffff8000, 0xae0, 0xffffff68, 0x3, 0x100000, 0x0, 0x101, 0x14, 0x1, 0x9, 0xfffffff7, 0x1, 0xf91e, 0x9, 0x1d, 0xfffffff8, 0x8001, 0x400, 0x1, 0xc, 0x5, 0x3, 0x3, 0x200, 0xffff21ef, 0xf, 0xffff, 0x9, 0x81, 0x6, 0x2881, 0x9, 0x40, 0x6, 0x8, 0x5, 0x6, 0xfffffc00, 0xffff, 0x8, 0x3, 0x2, 0x400, 0x101, 0x1, 0xc73, 0x5, 0x6, 0x9, 0x80000001, 0x7, 0x8, 0xfffffa2e, 0x1, 0x4, 0xfffffff9, 0x8, 0xb1e, 0x4, 0x7, 0x1, 0x9, 0x80000001, 0x1, 0x80, 0x8000, 0x5, 0x9, 0x8, 0x7f, 0xd9, 0x3, 0xe443, 0x1, 0x6, 0x2, 0x81, 0x8, 0xf0b, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x2, 0x0, 0x10, 0x3, 0x6, 0x0, 0x9, 0x7, 0x10, 0x4, 0x4, 0x8, 0x1, 0x2038dd36, 0x1ff, 0x6, 0x6, 0x6, 0x5, 0xfff, 0xb18, 0x100000, 0x9, 0x9, 0x5, 0x2f9, 0x6, 0x1ff, 0x1000, 0x16f9, 0x81, 0xb6, 0x4, 0x2, 0x5, 0xf, 0x8, 0x7, 0xb, 0xcbdf, 0x2, 0x0, 0x6, 0x2, 0x200, 0x0, 0x8001, 0x451, 0xbbc, 0x5, 0xfff, 0x10000, 0x9, 0x2, 0x8, 0x4, 0x5, 0xed, 0x200, 0x7b3, 0x4f3, 0x3, 0xb7e, 0x5, 0xb3a, 0x6, 0x4, 0x100, 0x3190, 0x70046025, 0xffff, 0x6, 0x2, 0x40, 0x7, 0x40, 0x1, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x1, 0x80000000, 0x6, 0xce, {0x6, 0x2, 0x2, 0x4, 0xb6a, 0x9}, {0x0, 0x2, 0x3, 0x9, 0x0, 0x9}, 0x10, 0xb142, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xf, 0x7, 0x8, 0x2, 0x0, 0xb, 0xfffffff9, 0x3, 0x4, 0x1, 0xb27, 0x2, 0x7ff, 0x2, 0xaf2, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x7, 0x0, 0x400, 0x4, 0x6, 0x8d0d, 0x2, 0x5, 0x8, 0x311, 0x81, 0x537, 0x9, 0x3, 0x8001, 0xd, 0x3, 0x14, 0x328, 0x93d8, 0x0, 0x6, 0x4, 0x1ff, 0xa, 0x446eda7a, 0x1, 0x6, 0x6fd, 0x8001, 0x5, 0x6, 0x41, 0x1, 0xe41, 0x1, 0x875, 0x1000, 0xfffffff9, 0x52e9, 0x2, 0x7, 0x3, 0x5, 0x7, 0x9, 0x6, 0x0, 0xd, 0x7, 0xfffffffd, 0x2, 0x5, 0x8, 0x400, 0x2f, 0x5, 0x8000, 0x862, 0x6, 0x3d9, 0x4, 0xfff, 0x4, 0x6, 0x8, 0x7, 0x3, 0x13bf, 0x80000001, 0x6, 0x9, 0x2, 0x0, 0xdc98, 0xfffffff9, 0xfaa, 0xf41c, 0x5, 0x4c5, 0x3, 0xb8, 0x4, 0xffff, 0x1, 0x7, 0x7, 0x65, 0x9, 0xfffffffa, 0x4, 0x7, 0x7f5154d3, 0x2, 0x2ea, 0x0, 0xd, 0x80, 0x0, 0x4, 0x1, 0x4, 0x2, 0xc, 0x200, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x80, 0x100, 0x6, 0x1ff, 0x3, 0xfffffff9, 0x5, 0x1000, 0x7, 0x1, 0x7, 0x0, 0xfffffffc, 0x6, 0xb854, 0x1, 0x20000, 0x1c0000, 0xfffff6f2, 0x4, 0x9, 0x8491, 0x3, 0x8, 0x2, 0x45, 0x2, 0x3ff, 0x1, 0xc, 0x9, 0x7, 0x400, 0x401, 0x10001, 0x4, 0x7ef6fc0e, 0x0, 0x1, 0xffffffff, 0x68326a0c, 0xa0, 0x2, 0x4, 0xabc, 0xffff, 0xffff, 0x8001, 0x6, 0x3, 0x8, 0x4, 0xc, 0x1, 0x8, 0x27, 0xd, 0x4, 0x1000, 0x8, 0x9, 0x7, 0x4, 0x4, 0x7ff, 0x1d5b6cf6, 0x8, 0x8, 0x7, 0x8, 0xfff, 0x8, 0x6, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x1, 0x1, 0x4, 0x3, 0x81, 0x1, 0x147, 0x8, 0x90, 0xffffff7e, 0x9, 0x5, 0x5e, 0xfffffff8, 0x200, 0xb, 0x5, 0x1, 0x2, 0x5, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x100, 0x0, 0x3, 0x8, 0xa8, 0x2, 0x3ff, 0x5, 0x7, 0x2d, 0xd616, 0x9, 0x898085fb, 0x100, 0x3, 0x3, 0x4, 0xc0b, 0x6d20, 0x6d16498a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9891}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="8734c7625071"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0xa0}, 0x4000044) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x7188, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") close(0x3) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 3.744231331s ago: executing program 6 (id=7106): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, &(0x7f0000000180), 0x4bd) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xd4, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5c627085}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x968}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc20b}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8040}, 0x4800) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x7}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='coredump_filter\x00') sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfffff9e6, 0x73}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xe, 0x7e}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000f1ff0000fdffffff180100002020692500000000002020207b1af8ff001c0000bfa100000000000007010000f8ffffffb702400008000000b70300000000000085000000ca6e3f614f000000000000009a291080b621d99d8a0000ac52e0e38e5314d09770eb41441c8d68253c9ce6d89d"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 3.60809145s ago: executing program 6 (id=7113): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7ee}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000004100000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.404011521s ago: executing program 2 (id=7117): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000004c52465ad57cd000"/35], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) sendfile(r0, r0, 0x0, 0x7ffffffc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x8000, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0x938, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x8, 0x10}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xed}}, @filter_kind_options=@f_route={{0xa}, {0x8a0, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x3}}, @TCA_ROUTE4_POLICE={0x884, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5, 0xffff, 0x9, 0x9e, 0x5, 0x86c, 0x4a613b42, 0x7e, 0x59, 0x8, 0x2, 0x0, 0x5, 0xffffffff, 0x7, 0x6, 0x3, 0x9, 0x3, 0x3b4, 0x0, 0x13c2, 0x3, 0x7, 0x8, 0xda, 0x2, 0x7, 0x9, 0x4, 0x4, 0x1, 0x7, 0x5, 0x8, 0x4, 0x7, 0x8, 0x10001, 0x9, 0x100, 0x2, 0x3a, 0x8fc9, 0x8, 0xe7a, 0x9, 0x6, 0x101, 0x6, 0x7, 0x80, 0xd2b, 0x7272, 0x1, 0xc, 0x3e3, 0x2, 0x3, 0xd162, 0x400, 0x101, 0xfffffff8, 0x1, 0x800, 0x700, 0x3, 0x2, 0x7, 0x7fff, 0x16, 0x4, 0x5, 0x2, 0x6, 0x81, 0x4, 0x7, 0x8, 0x5, 0x0, 0x8, 0x6, 0x8000, 0x4, 0xffff8000, 0xae0, 0xffffff68, 0x3, 0x100000, 0x0, 0x101, 0x14, 0x1, 0x9, 0xfffffff7, 0x1, 0xf91e, 0x9, 0x1d, 0xfffffff8, 0x8001, 0x400, 0x1, 0xc, 0x5, 0x3, 0x3, 0x200, 0xffff21ef, 0xf, 0xffff, 0x9, 0x81, 0x6, 0x2881, 0x9, 0x40, 0x6, 0x8, 0x5, 0x6, 0xfffffc00, 0xffff, 0x8, 0x3, 0x2, 0x400, 0x101, 0x1, 0xc73, 0x5, 0x6, 0x9, 0x80000001, 0x7, 0x8, 0xfffffa2e, 0x1, 0x4, 0xfffffff9, 0x8, 0xb1e, 0x4, 0x7, 0x1, 0x9, 0x80000001, 0x1, 0x80, 0x8000, 0x5, 0x9, 0x8, 0x7f, 0xd9, 0x3, 0xe443, 0x1, 0x6, 0x2, 0x81, 0x8, 0xf0b, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x2, 0x0, 0x10, 0x3, 0x6, 0x0, 0x9, 0x7, 0x10, 0x4, 0x4, 0x8, 0x1, 0x2038dd36, 0x1ff, 0x6, 0x6, 0x6, 0x5, 0xfff, 0xb18, 0x100000, 0x9, 0x9, 0x5, 0x2f9, 0x6, 0x1ff, 0x1000, 0x16f9, 0x81, 0xb6, 0x4, 0x2, 0x5, 0xf, 0x8, 0x7, 0xb, 0xcbdf, 0x2, 0x0, 0x6, 0x2, 0x200, 0x0, 0x8001, 0x451, 0xbbc, 0x5, 0xfff, 0x10000, 0x9, 0x2, 0x8, 0x4, 0x5, 0xed, 0x200, 0x7b3, 0x4f3, 0x3, 0xb7e, 0x5, 0xb3a, 0x6, 0x4, 0x100, 0x3190, 0x70046025, 0xffff, 0x6, 0x2, 0x40, 0x7, 0x40, 0x1, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x1, 0x80000000, 0x6, 0xce, {0x6, 0x2, 0x2, 0x4, 0xb6a, 0x9}, {0x0, 0x2, 0x3, 0x9, 0x0, 0x9}, 0x10, 0xb142, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xf, 0x7, 0x8, 0x2, 0x0, 0xb, 0xfffffff9, 0x3, 0x4, 0x1, 0xb27, 0x2, 0x7ff, 0x2, 0xaf2, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x7, 0x0, 0x400, 0x4, 0x6, 0x8d0d, 0x2, 0x5, 0x8, 0x311, 0x81, 0x537, 0x9, 0x3, 0x8001, 0xd, 0x3, 0x14, 0x328, 0x93d8, 0x0, 0x6, 0x4, 0x1ff, 0xa, 0x446eda7a, 0x1, 0x6, 0x6fd, 0x8001, 0x5, 0x6, 0x41, 0x1, 0xe41, 0x1, 0x875, 0x1000, 0xfffffff9, 0x52e9, 0x2, 0x7, 0x3, 0x5, 0x7, 0x9, 0x6, 0x0, 0xd, 0x7, 0xfffffffd, 0x2, 0x5, 0x8, 0x400, 0x2f, 0x5, 0x8000, 0x862, 0x6, 0x3d9, 0x4, 0xfff, 0x4, 0x6, 0x8, 0x7, 0x3, 0x13bf, 0x80000001, 0x6, 0x9, 0x2, 0x0, 0xdc98, 0xfffffff9, 0xfaa, 0xf41c, 0x5, 0x4c5, 0x3, 0xb8, 0x4, 0xffff, 0x1, 0x7, 0x7, 0x65, 0x9, 0xfffffffa, 0x4, 0x7, 0x7f5154d3, 0x2, 0x2ea, 0x0, 0xd, 0x80, 0x0, 0x4, 0x1, 0x4, 0x2, 0xc, 0x200, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x80, 0x100, 0x6, 0x1ff, 0x3, 0xfffffff9, 0x5, 0x1000, 0x7, 0x1, 0x7, 0x0, 0xfffffffc, 0x6, 0xb854, 0x1, 0x20000, 0x1c0000, 0xfffff6f2, 0x4, 0x9, 0x8491, 0x3, 0x8, 0x2, 0x45, 0x2, 0x3ff, 0x1, 0xc, 0x9, 0x7, 0x400, 0x401, 0x10001, 0x4, 0x7ef6fc0e, 0x0, 0x1, 0xffffffff, 0x68326a0c, 0xa0, 0x2, 0x4, 0xabc, 0xffff, 0xffff, 0x8001, 0x6, 0x3, 0x8, 0x4, 0xc, 0x1, 0x8, 0x27, 0xd, 0x4, 0x1000, 0x8, 0x9, 0x7, 0x4, 0x4, 0x7ff, 0x1d5b6cf6, 0x8, 0x8, 0x7, 0x8, 0xfff, 0x8, 0x6, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x1, 0x1, 0x4, 0x3, 0x81, 0x1, 0x147, 0x8, 0x90, 0xffffff7e, 0x9, 0x5, 0x5e, 0xfffffff8, 0x200, 0xb, 0x5, 0x1, 0x2, 0x5, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x100, 0x0, 0x3, 0x8, 0xa8, 0x2, 0x3ff, 0x5, 0x7, 0x2d, 0xd616, 0x9, 0x898085fb, 0x100, 0x3, 0x3, 0x4, 0xc0b, 0x6d20, 0x6d16498a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9891}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="8734c7625071"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0xa0}, 0x4000044) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r9 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r9) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 3.173863365s ago: executing program 1 (id=7121): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x5, 0x7a, 0x7fff, 0x5, 0x0, 0xffffffffffffffff}) waitid(0x0, r0, &(0x7f0000000080), 0x1, &(0x7f0000000100)) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) connect$unix(r1, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000280)=0x2, 0x4) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x40010, 0xffffffffffffffff, 0x8000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0x8, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r3}}) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000380)={0x3, 0x18, '\x00', 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) waitid(0x0, r0, &(0x7f00000003c0), 0x20000000, &(0x7f0000000440)) r5 = pidfd_getfd(0xffffffffffffffff, r4, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r5, 0x111, 0x5, 0x16, 0x4) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000500), 0x4000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ptrace$peeksig(0x4209, r0, &(0x7f0000000540)={0x0, 0x0, 0x1}, &(0x7f0000000580)=[{}]) openat$cgroup_type(r5, &(0x7f0000000600), 0x2, 0x0) r7 = fcntl$dupfd(r4, 0x406, r6) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000000a40)={0xdb, 0x5, &(0x7f0000000640)="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"}) socket$kcm(0x29, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) fcntl$notify(r5, 0x402, 0x10) connect$unix(r5, &(0x7f0000000ac0)=@file={0x1, './file0\x00'}, 0x6e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b40), 0x121000, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, &(0x7f0000000b80)) socket(0xb, 0x2, 0x7) execve(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000d00)={[&(0x7f0000000c00)='}\x00', &(0x7f0000000c40)='/proc/self/net/pfkey\x00', &(0x7f0000000c80)='\f\x00', &(0x7f0000000cc0)='/proc/self/net/pfkey\x00']}, &(0x7f0000000ec0)={[&(0x7f0000000d40)='/selinux/load\x00', &(0x7f0000000d80)='{#[\x00', &(0x7f0000000dc0)='+}./\x00', &(0x7f0000000e00)='/proc/self/net/pfkey\x00', &(0x7f0000000e40)='cgroup.type\x00', &(0x7f0000000e80)='^\x00']}) syz_create_resource$binfmt(&(0x7f0000000f00)='./file0\x00') 3.108722389s ago: executing program 1 (id=7122): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.812593724s ago: executing program 3 (id=7123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa214}}, './file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r4, r6, 0x25, 0x0, @void}, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r10, &(0x7f00000002c0)=""/141, 0x8d) getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) r11 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r11, 0x2007ffb) sendfile(r11, r11, 0x0, 0x1000000201005) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%+9llu \x00'}, 0x20) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x80, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffffff00000000090000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001867000004000000000000000000002b9500000000000000d5600100ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000180)=""/133, 0x41100, 0x10, '\x00', r8, 0x25, r9, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0x7, 0xe, 0x539}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, r10, r11, r12, r13], &(0x7f0000000380)=[{0x3, 0x2, 0x2, 0x5}], 0x10, 0xf}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r14 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r14, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, r1, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) poll(0x0, 0x0, 0xb5) 1.792811836s ago: executing program 6 (id=7133): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.792087936s ago: executing program 1 (id=7124): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.791251986s ago: executing program 2 (id=7125): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000004000400b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 1.71750378s ago: executing program 1 (id=7126): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) writev(r0, &(0x7f0000002400)=[{&(0x7f0000000140)="fe891bfd4f1956a9d8d45422b3dfbc97d6c3992927fc5b6dca6009489104b91756e0e14c13f92fe5d9153af627944f211859f6cb1d5d50f3f7e4533bcef2a98c49c967aa49bc456488ddcab4825177ac47595fd2981752da57fe21c1d143cc47b175b00ab6a1cf02a3b9e7ad630df8d82fe68802b6fb5ebd4331d7db215edac401047c0526cb8f088e94f303db1ae0c26dc24bea4b675680290b1d8035baa3b147062597db6801aa265727a5d5fd49b5b292279d03efae8b7c23fcec306458c769afa82e545aa2619aba1d11b015512d318b62202757ea49b89a9b6dc26c2d2ba9b48580", 0xe4}, {&(0x7f0000000240)}], 0x2) 1.71428955s ago: executing program 2 (id=7137): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8400, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 1.707194891s ago: executing program 1 (id=7138): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.383938689s ago: executing program 8 (id=7127): r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r0, 0x155d, 0x2d7d, 0x0, &(0x7f0000000040)={[0x1]}, 0x8) 1.382093789s ago: executing program 1 (id=7140): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000004c52465ad57cd000"/35], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) sendfile(r0, r0, 0x0, 0x7ffffffc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x8000, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0x938, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x8, 0x10}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xed}}, @filter_kind_options=@f_route={{0xa}, {0x8a0, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x3}}, @TCA_ROUTE4_POLICE={0x884, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5, 0xffff, 0x9, 0x9e, 0x5, 0x86c, 0x4a613b42, 0x7e, 0x59, 0x8, 0x2, 0x0, 0x5, 0xffffffff, 0x7, 0x6, 0x3, 0x9, 0x3, 0x3b4, 0x0, 0x13c2, 0x3, 0x7, 0x8, 0xda, 0x2, 0x7, 0x9, 0x4, 0x4, 0x1, 0x7, 0x5, 0x8, 0x4, 0x7, 0x8, 0x10001, 0x9, 0x100, 0x2, 0x3a, 0x8fc9, 0x8, 0xe7a, 0x9, 0x6, 0x101, 0x6, 0x7, 0x80, 0xd2b, 0x7272, 0x1, 0xc, 0x3e3, 0x2, 0x3, 0xd162, 0x400, 0x101, 0xfffffff8, 0x1, 0x800, 0x700, 0x3, 0x2, 0x7, 0x7fff, 0x16, 0x4, 0x5, 0x2, 0x6, 0x81, 0x4, 0x7, 0x8, 0x5, 0x0, 0x8, 0x6, 0x8000, 0x4, 0xffff8000, 0xae0, 0xffffff68, 0x3, 0x100000, 0x0, 0x101, 0x14, 0x1, 0x9, 0xfffffff7, 0x1, 0xf91e, 0x9, 0x1d, 0xfffffff8, 0x8001, 0x400, 0x1, 0xc, 0x5, 0x3, 0x3, 0x200, 0xffff21ef, 0xf, 0xffff, 0x9, 0x81, 0x6, 0x2881, 0x9, 0x40, 0x6, 0x8, 0x5, 0x6, 0xfffffc00, 0xffff, 0x8, 0x3, 0x2, 0x400, 0x101, 0x1, 0xc73, 0x5, 0x6, 0x9, 0x80000001, 0x7, 0x8, 0xfffffa2e, 0x1, 0x4, 0xfffffff9, 0x8, 0xb1e, 0x4, 0x7, 0x1, 0x9, 0x80000001, 0x1, 0x80, 0x8000, 0x5, 0x9, 0x8, 0x7f, 0xd9, 0x3, 0xe443, 0x1, 0x6, 0x2, 0x81, 0x8, 0xf0b, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x2, 0x0, 0x10, 0x3, 0x6, 0x0, 0x9, 0x7, 0x10, 0x4, 0x4, 0x8, 0x1, 0x2038dd36, 0x1ff, 0x6, 0x6, 0x6, 0x5, 0xfff, 0xb18, 0x100000, 0x9, 0x9, 0x5, 0x2f9, 0x6, 0x1ff, 0x1000, 0x16f9, 0x81, 0xb6, 0x4, 0x2, 0x5, 0xf, 0x8, 0x7, 0xb, 0xcbdf, 0x2, 0x0, 0x6, 0x2, 0x200, 0x0, 0x8001, 0x451, 0xbbc, 0x5, 0xfff, 0x10000, 0x9, 0x2, 0x8, 0x4, 0x5, 0xed, 0x200, 0x7b3, 0x4f3, 0x3, 0xb7e, 0x5, 0xb3a, 0x6, 0x4, 0x100, 0x3190, 0x70046025, 0xffff, 0x6, 0x2, 0x40, 0x7, 0x40, 0x1, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x1, 0x80000000, 0x6, 0xce, {0x6, 0x2, 0x2, 0x4, 0xb6a, 0x9}, {0x0, 0x2, 0x3, 0x9, 0x0, 0x9}, 0x10, 0xb142, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xf, 0x7, 0x8, 0x2, 0x0, 0xb, 0xfffffff9, 0x3, 0x4, 0x1, 0xb27, 0x2, 0x7ff, 0x2, 0xaf2, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x7, 0x0, 0x400, 0x4, 0x6, 0x8d0d, 0x2, 0x5, 0x8, 0x311, 0x81, 0x537, 0x9, 0x3, 0x8001, 0xd, 0x3, 0x14, 0x328, 0x93d8, 0x0, 0x6, 0x4, 0x1ff, 0xa, 0x446eda7a, 0x1, 0x6, 0x6fd, 0x8001, 0x5, 0x6, 0x41, 0x1, 0xe41, 0x1, 0x875, 0x1000, 0xfffffff9, 0x52e9, 0x2, 0x7, 0x3, 0x5, 0x7, 0x9, 0x6, 0x0, 0xd, 0x7, 0xfffffffd, 0x2, 0x5, 0x8, 0x400, 0x2f, 0x5, 0x8000, 0x862, 0x6, 0x3d9, 0x4, 0xfff, 0x4, 0x6, 0x8, 0x7, 0x3, 0x13bf, 0x80000001, 0x6, 0x9, 0x2, 0x0, 0xdc98, 0xfffffff9, 0xfaa, 0xf41c, 0x5, 0x4c5, 0x3, 0xb8, 0x4, 0xffff, 0x1, 0x7, 0x7, 0x65, 0x9, 0xfffffffa, 0x4, 0x7, 0x7f5154d3, 0x2, 0x2ea, 0x0, 0xd, 0x80, 0x0, 0x4, 0x1, 0x4, 0x2, 0xc, 0x200, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x80, 0x100, 0x6, 0x1ff, 0x3, 0xfffffff9, 0x5, 0x1000, 0x7, 0x1, 0x7, 0x0, 0xfffffffc, 0x6, 0xb854, 0x1, 0x20000, 0x1c0000, 0xfffff6f2, 0x4, 0x9, 0x8491, 0x3, 0x8, 0x2, 0x45, 0x2, 0x3ff, 0x1, 0xc, 0x9, 0x7, 0x400, 0x401, 0x10001, 0x4, 0x7ef6fc0e, 0x0, 0x1, 0xffffffff, 0x68326a0c, 0xa0, 0x2, 0x4, 0xabc, 0xffff, 0xffff, 0x8001, 0x6, 0x3, 0x8, 0x4, 0xc, 0x1, 0x8, 0x27, 0xd, 0x4, 0x1000, 0x8, 0x9, 0x7, 0x4, 0x4, 0x7ff, 0x1d5b6cf6, 0x8, 0x8, 0x7, 0x8, 0xfff, 0x8, 0x6, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x1, 0x1, 0x4, 0x3, 0x81, 0x1, 0x147, 0x8, 0x90, 0xffffff7e, 0x9, 0x5, 0x5e, 0xfffffff8, 0x200, 0xb, 0x5, 0x1, 0x2, 0x5, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x100, 0x0, 0x3, 0x8, 0xa8, 0x2, 0x3ff, 0x5, 0x7, 0x2d, 0xd616, 0x9, 0x898085fb, 0x100, 0x3, 0x3, 0x4, 0xc0b, 0x6d20, 0x6d16498a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9891}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="8734c7625071"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0xa0}, 0x4000044) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x7188, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") close(0x3) dup(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 1.381752079s ago: executing program 2 (id=7128): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) mmap$xdp(&(0x7f0000f57000/0x1000)=nil, 0x1000, 0x5000002, 0x4008131, 0xffffffffffffffff, 0x180000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r6, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a09040000000000000200020000001c000480180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a3200000000050007"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x10850}, 0x8040) sendmsg$NL80211_CMD_GET_MPATH(r1, 0x0, 0x80) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r12}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.066244258s ago: executing program 2 (id=7129): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r3 = syz_io_uring_setup(0x33c5, &(0x7f00000007c0)={0x0, 0x3abf, 0x400, 0x3, 0x222}, &(0x7f0000010080), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000c40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x7, 0x1, {{0x2a, 0x4, 0x0, 0x3c, 0xa8, 0x68, 0x0, 0x3, 0x0, 0x0, @rand_addr=0x64010101, @local, {[@noop, @timestamp_prespec={0x44, 0x3c, 0xed, 0x3, 0x7, [{@multicast2, 0xff}, {@remote, 0x40}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff}, {@broadcast, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@local, 0x8}]}, @lsrr={0x83, 0x7, 0xf2, [@remote]}, @noop, @noop, @timestamp_addr={0x44, 0x2c, 0x6c, 0x1, 0xb, [{@empty, 0x2}, {@multicast2, 0x3}, {@remote, 0x5}, {@multicast1, 0x2}, {@remote, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0x2b, 0x3, 0x5, [{@rand_addr=0x64010100, 0x8}, {@empty, 0x7}, {@multicast2, 0x8000}]}, @ra={0x94, 0x4}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000cc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="70000200000000e924b900fddbdfb8090002001300000008000500", @ANYRES32=r6, @ANYBLOB="060003000100000014000600ac14143600000000000000000000000008000500", @ANYRES32=r7, @ANYBLOB="24000c800800020001f8ffff060001009213000008000300654e000006000100020000000600070003000000"], 0x70}, 0x1, 0x0, 0x0, 0x2004c000}, 0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) lseek(r8, 0x2b, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000401, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) r9 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0xd4) getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) 861.77513ms ago: executing program 3 (id=7130): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRESOCT], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001000000000000000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000003f00000000b702000014000000b7030000800000008500000083000000bf09000000000000550901000000000095000000000000000709000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x5}, 0x94) 753.968296ms ago: executing program 3 (id=7131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) unshare(0x2040400) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xe, 0x4, 0x80, 0x1, 0x7, 0x2b, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pwritev(r8, &(0x7f0000000100)=[{&(0x7f0000000180)="7194", 0x2}], 0x1, 0x80000000, 0x3) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0x8c88}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r13], 0x54}}, 0x0) 508.082111ms ago: executing program 3 (id=7132): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 236.069177ms ago: executing program 6 (id=7134): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x2f2, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x18, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4", 0xfdb}, {0x0}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000004100000002010000000000004800000000000000080000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 230.983417ms ago: executing program 3 (id=7147): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) stat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f0000000280)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000440)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x0, 0x8b1}}, {@mpls_uc}}, 0x0) 1.04112ms ago: executing program 2 (id=7135): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r3, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000004c52465ad57cd000"/35], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r5}, 0x38) sendfile(r0, r0, 0x0, 0x7ffffffc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x40, 0x8000, 0x8, 0x0, {{0x6, 0x4, 0x1, 0x0, 0x18, 0x67, 0x8000, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end]}}}}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0x938, 0x64, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0x8, 0x10}, {0x9, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xed}}, @filter_kind_options=@f_route={{0xa}, {0x8a0, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r7}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3, 0xd}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0x3}}, @TCA_ROUTE4_POLICE={0x884, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x5, 0xffff, 0x9, 0x9e, 0x5, 0x86c, 0x4a613b42, 0x7e, 0x59, 0x8, 0x2, 0x0, 0x5, 0xffffffff, 0x7, 0x6, 0x3, 0x9, 0x3, 0x3b4, 0x0, 0x13c2, 0x3, 0x7, 0x8, 0xda, 0x2, 0x7, 0x9, 0x4, 0x4, 0x1, 0x7, 0x5, 0x8, 0x4, 0x7, 0x8, 0x10001, 0x9, 0x100, 0x2, 0x3a, 0x8fc9, 0x8, 0xe7a, 0x9, 0x6, 0x101, 0x6, 0x7, 0x80, 0xd2b, 0x7272, 0x1, 0xc, 0x3e3, 0x2, 0x3, 0xd162, 0x400, 0x101, 0xfffffff8, 0x1, 0x800, 0x700, 0x3, 0x2, 0x7, 0x7fff, 0x16, 0x4, 0x5, 0x2, 0x6, 0x81, 0x4, 0x7, 0x8, 0x5, 0x0, 0x8, 0x6, 0x8000, 0x4, 0xffff8000, 0xae0, 0xffffff68, 0x3, 0x100000, 0x0, 0x101, 0x14, 0x1, 0x9, 0xfffffff7, 0x1, 0xf91e, 0x9, 0x1d, 0xfffffff8, 0x8001, 0x400, 0x1, 0xc, 0x5, 0x3, 0x3, 0x200, 0xffff21ef, 0xf, 0xffff, 0x9, 0x81, 0x6, 0x2881, 0x9, 0x40, 0x6, 0x8, 0x5, 0x6, 0xfffffc00, 0xffff, 0x8, 0x3, 0x2, 0x400, 0x101, 0x1, 0xc73, 0x5, 0x6, 0x9, 0x80000001, 0x7, 0x8, 0xfffffa2e, 0x1, 0x4, 0xfffffff9, 0x8, 0xb1e, 0x4, 0x7, 0x1, 0x9, 0x80000001, 0x1, 0x80, 0x8000, 0x5, 0x9, 0x8, 0x7f, 0xd9, 0x3, 0xe443, 0x1, 0x6, 0x2, 0x81, 0x8, 0xf0b, 0x10000, 0x2, 0x1, 0x1, 0x1, 0x2, 0x6, 0x0, 0x9, 0x4, 0x8000, 0x9, 0x2, 0x0, 0x10, 0x3, 0x6, 0x0, 0x9, 0x7, 0x10, 0x4, 0x4, 0x8, 0x1, 0x2038dd36, 0x1ff, 0x6, 0x6, 0x6, 0x5, 0xfff, 0xb18, 0x100000, 0x9, 0x9, 0x5, 0x2f9, 0x6, 0x1ff, 0x1000, 0x16f9, 0x81, 0xb6, 0x4, 0x2, 0x5, 0xf, 0x8, 0x7, 0xb, 0xcbdf, 0x2, 0x0, 0x6, 0x2, 0x200, 0x0, 0x8001, 0x451, 0xbbc, 0x5, 0xfff, 0x10000, 0x9, 0x2, 0x8, 0x4, 0x5, 0xed, 0x200, 0x7b3, 0x4f3, 0x3, 0xb7e, 0x5, 0xb3a, 0x6, 0x4, 0x100, 0x3190, 0x70046025, 0xffff, 0x6, 0x2, 0x40, 0x7, 0x40, 0x1, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x1, 0x80000000, 0x6, 0xce, {0x6, 0x2, 0x2, 0x4, 0xb6a, 0x9}, {0x0, 0x2, 0x3, 0x9, 0x0, 0x9}, 0x10, 0xb142, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xf, 0x7, 0x8, 0x2, 0x0, 0xb, 0xfffffff9, 0x3, 0x4, 0x1, 0xb27, 0x2, 0x7ff, 0x2, 0xaf2, 0x8, 0x9, 0x10001, 0x6, 0x4, 0x7, 0x0, 0x400, 0x4, 0x6, 0x8d0d, 0x2, 0x5, 0x8, 0x311, 0x81, 0x537, 0x9, 0x3, 0x8001, 0xd, 0x3, 0x14, 0x328, 0x93d8, 0x0, 0x6, 0x4, 0x1ff, 0xa, 0x446eda7a, 0x1, 0x6, 0x6fd, 0x8001, 0x5, 0x6, 0x41, 0x1, 0xe41, 0x1, 0x875, 0x1000, 0xfffffff9, 0x52e9, 0x2, 0x7, 0x3, 0x5, 0x7, 0x9, 0x6, 0x0, 0xd, 0x7, 0xfffffffd, 0x2, 0x5, 0x8, 0x400, 0x2f, 0x5, 0x8000, 0x862, 0x6, 0x3d9, 0x4, 0xfff, 0x4, 0x6, 0x8, 0x7, 0x3, 0x13bf, 0x80000001, 0x6, 0x9, 0x2, 0x0, 0xdc98, 0xfffffff9, 0xfaa, 0xf41c, 0x5, 0x4c5, 0x3, 0xb8, 0x4, 0xffff, 0x1, 0x7, 0x7, 0x65, 0x9, 0xfffffffa, 0x4, 0x7, 0x7f5154d3, 0x2, 0x2ea, 0x0, 0xd, 0x80, 0x0, 0x4, 0x1, 0x4, 0x2, 0xc, 0x200, 0x0, 0x0, 0x0, 0x5, 0x4, 0x5, 0x80, 0x100, 0x6, 0x1ff, 0x3, 0xfffffff9, 0x5, 0x1000, 0x7, 0x1, 0x7, 0x0, 0xfffffffc, 0x6, 0xb854, 0x1, 0x20000, 0x1c0000, 0xfffff6f2, 0x4, 0x9, 0x8491, 0x3, 0x8, 0x2, 0x45, 0x2, 0x3ff, 0x1, 0xc, 0x9, 0x7, 0x400, 0x401, 0x10001, 0x4, 0x7ef6fc0e, 0x0, 0x1, 0xffffffff, 0x68326a0c, 0xa0, 0x2, 0x4, 0xabc, 0xffff, 0xffff, 0x8001, 0x6, 0x3, 0x8, 0x4, 0xc, 0x1, 0x8, 0x27, 0xd, 0x4, 0x1000, 0x8, 0x9, 0x7, 0x4, 0x4, 0x7ff, 0x1d5b6cf6, 0x8, 0x8, 0x7, 0x8, 0xfff, 0x8, 0x6, 0x5, 0xffffffff, 0x2, 0x1, 0x0, 0x1, 0x1, 0x4, 0x3, 0x81, 0x1, 0x147, 0x8, 0x90, 0xffffff7e, 0x9, 0x5, 0x5e, 0xfffffff8, 0x200, 0xb, 0x5, 0x1, 0x2, 0x5, 0x7, 0xffffffff, 0x7, 0x8, 0x8, 0x100, 0x0, 0x3, 0x8, 0xa8, 0x2, 0x3ff, 0x5, 0x7, 0x2d, 0xd616, 0x9, 0x898085fb, 0x100, 0x3, 0x3, 0x4, 0xc0b, 0x6d20, 0x6d16498a]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x9891}, @TCA_CHAIN={0x8, 0xb, 0x2}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @random="8734c7625071"}, @TCA_FLOWER_INDEV={0x14, 0x2, 'batadv0\x00'}, @TCA_FLOWER_KEY_ARP_OP_MASK={0x5, 0x3e, 0x9}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x938}, 0x1, 0x0, 0x0, 0xa0}, 0x4000044) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x7188, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r8, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r9 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) dup(r9) syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') 0s ago: executing program 3 (id=7136): close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000011000300685773683a6e65742c6e65740000000005000400010000000900020073797a30000000000500050002000000050001000600000014000780080006"], 0x60}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001714"], 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xfffffefd, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x27, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1e, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x6, 0x401, 0x80000000, 0x2401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x54, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x20, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0x3, 0x3fd, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x5, 0x1, 0x32, 0x98, 0x7f, 0x0, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4f, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000002, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0x100, 0xfe, 0x4, 0x40, 0x9, 0x1b, 0x1ff, 0x7ff, 0x2, 0x7ffffffd, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0x8000, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x5, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x3042c26b, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffff0000, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x4, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e4, 0x5, 0x7, 0x1, 0x5, 0x3, 0x0, 0x1, 0x2, 0x2, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x9, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0x80000000, 0x2, 0x3, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x9, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x2, 0x1, 0x9, 0x2, 0x7, 0x0, 0x2, 0x80000004, 0x29, 0x9, 0x0, 0x80000004, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x0, 0xf, 0xa, 0x100, 0x4, 0x59b, 0x7, 0x9, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x7, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x5, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x8, 0x9, 0x0, 0xffffffff, 0xbe, 0x1, 0x7, 0x2, 0xffffffff, 0x0, 0x3d9, 0x0, 0xc, 0x9, 0x7, 0xfffffeff, 0x100, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0xe, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x6, 0x1, 0xa9c, 0x9, 0x7, 0x1, 0x2, 0x5, 0x1000, 0x6, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x4, 0xffffa5ba, 0xffffa9b4, 0xb, 0x4, 0x8000005, 0x3, 0x4b5f, 0x6, 0xa, 0xffffffff, 0x0, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x0, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x1000005, 0x4, 0xfff, 0x9, 0x10, 0xfffffffb, 0x4, 0xc2, 0x7f, 0x5, 0x2, 0x80000000, 0xf, 0x3, 0x1, 0x0, 0x5, 0xb8, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x5, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000005, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x104, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0x9, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0x10, 0x0, 0x3, 0x4, 0x80000000, 0xb46d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0xc, 0x3, 0xffffffff, 0x0, 0x7e, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x2, 0xb, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x3, 0x8, 0x6, 0x0, 0xa958, 0xff, 0x5, 0x6, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x1c00, 0x9, 0x0, 0xb7, 0xffffffff, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x6, 0x1000, 0xb, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x5, 0xffff8000, 0xe0, 0xfffffffb, 0x85, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x101, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x4000, 0x20000001, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000004, 0x6, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0x1, 0x9, 0x8, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c4, 0x2, 0x389f, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x8000002, 0x8, 0x2b, 0x200006, 0x80000004, 0x1, 0x10000002, 0xfb4, 0xbfa, 0x48, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0xffffffff, 0x6ae574d2, 0x5, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x8, 0x5, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0x17, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x8, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0xfffffffa, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x9, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x10001, 0x1, 0x1, 0xfffffff7, 0xfffffffb, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6330, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x40, 0x6, 0xffff, 0xfffffffa, 0x3, 0xa850, 0x1, 0x6, 0x7, 0x5, 0x7, 0x2ec, 0x9, 0x6, 0x401, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x8, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x3, 0x2, 0x80000002, 0x54, 0x400, 0x1, 0x8, 0xa, 0xb, 0x7, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0x65, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffb, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x4, 0x7, 0x2b, 0x6, 0x10, 0x1, 0x200, 0x7fff, 0x6, 0x200, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x7, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x10400, 0x20001, 0x8, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x7, 0x2, 0x2, 0x43, 0x3ff, 0x8, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r1}, 0xc) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) kernel console output (not intermixed with test programs): [ 353.674652][T27222] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 353.684055][T27222] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 353.706800][T27222] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 353.715444][T27222] System zones: 0-2, 18-18, 34-35 [ 353.721437][T27222] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 353.735480][T27222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.814663][T27232] loop4: detected capacity change from 0 to 1024 [ 353.832934][T27232] EXT4-fs: Ignoring removed nomblk_io_submit option [ 353.843222][T27232] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 353.860995][T27232] System zones: 0-1, 3-36 [ 353.873632][T27232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.979324][T26265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.035731][T27253] loop4: detected capacity change from 0 to 1024 [ 354.045347][T27253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 354.058497][T27253] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 354.068761][T27253] System zones: 0-1, 3-36 [ 354.070020][T27233] chnl_net:caif_netlink_parms(): no params data found [ 354.087112][T27253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.126180][T27257] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6135'. [ 354.133152][T27233] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.142499][T27233] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.149935][T27233] bridge_slave_0: entered allmulticast mode [ 354.156657][T27233] bridge_slave_0: entered promiscuous mode [ 354.164000][T27233] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.171059][T27233] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.179134][T27233] bridge_slave_1: entered allmulticast mode [ 354.186260][T27233] bridge_slave_1: entered promiscuous mode [ 354.195135][T27263] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.6134: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 354.204743][T27233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.223933][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 354.223953][ T29] audit: type=1326 audit(2000000405.279:7677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.235248][T27233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.255188][ T29] audit: type=1326 audit(2000000405.279:7678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.280152][T27233] team0: Port device team_slave_0 added [ 354.289458][ T29] audit: type=1326 audit(2000000405.326:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.295434][T27253] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.6134: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 354.319379][ T29] audit: type=1326 audit(2000000405.326:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.360481][ T29] audit: type=1326 audit(2000000405.326:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.364684][T27233] team0: Port device team_slave_1 added [ 354.389670][ T29] audit: type=1326 audit(2000000405.354:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.409957][T27233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.414581][ T29] audit: type=1326 audit(2000000405.438:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.421232][T27233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.445083][ T29] audit: type=1326 audit(2000000405.438:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.471728][T27233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.523282][T27233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.530628][T27233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.538291][ T29] audit: type=1326 audit(2000000405.560:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.556982][T27233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.580445][ T29] audit: type=1326 audit(2000000405.560:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27252 comm="syz.4.6134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 354.627744][T26265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.671824][T27233] hsr_slave_0: entered promiscuous mode [ 354.678306][T27233] hsr_slave_1: entered promiscuous mode [ 354.684646][T27233] debugfs: 'hsr0' already exists in 'hsr' [ 354.690758][T27233] Cannot create hsr debugfs directory [ 354.702629][T27275] loop6: detected capacity change from 0 to 128 [ 354.739139][T27274] netlink: 'syz.8.6140': attribute type 10 has an invalid length. [ 354.774483][T27274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.775854][T27275] FAT-fs (loop6): error, clusters badly computed (2 != 0) [ 354.782666][T27274] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 354.789124][T27275] FAT-fs (loop6): Filesystem has been set read-only [ 354.789411][T27275] FAT-fs (loop6): error, clusters badly computed (3 != 1) [ 354.820064][T27275] FAT-fs (loop6): error, clusters badly computed (4 != 2) [ 354.833722][T27275] random: crng reseeded on system resumption [ 354.982673][T27297] futex_wake_op: syz.6.6143 tries to shift op by -3; fix this program [ 355.087302][T27233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.096974][T27233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.110835][T27233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.120007][T27233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.123204][T27323] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6147'. [ 355.187454][T27233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.207641][T27233] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.218925][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.226535][T16400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.252291][T27233] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.263161][T27233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.280226][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.287525][T16400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.366465][T27233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.440753][T27359] netlink: 'syz.8.6151': attribute type 1 has an invalid length. [ 355.471780][T27359] 8021q: adding VLAN 0 to HW filter on device bond3 [ 355.489999][T27359] bond3: (slave bridge1): making interface the new active one [ 355.498540][T27359] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 355.517383][T27233] veth0_vlan: entered promiscuous mode [ 355.527461][T27233] veth1_vlan: entered promiscuous mode [ 355.544918][T27233] veth0_macvtap: entered promiscuous mode [ 355.561328][T27233] veth1_macvtap: entered promiscuous mode [ 355.579077][T27233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.593391][T27233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.603634][T16395] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.616614][T16395] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.643692][T16395] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.657226][T16395] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.707537][T27403] syzkaller1: entered promiscuous mode [ 355.713820][T27403] syzkaller1: entered allmulticast mode [ 355.797710][T27424] random: crng reseeded on system resumption [ 355.889747][T27429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6159'. [ 355.892085][T27442] loop2: detected capacity change from 0 to 1024 [ 355.899046][T27429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6159'. [ 355.907698][T27442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.915202][T27444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6159'. [ 355.931870][T27444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6159'. [ 355.942083][T27445] futex_wake_op: syz.6.6153 tries to shift op by -3; fix this program [ 355.952521][T27442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.959843][T27429] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 355.964266][T27444] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 355.976896][T27442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 355.998391][T27442] System zones: 0-1, 3-36 [ 356.005240][T27442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.033387][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.225723][T27465] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6166'. [ 356.227498][T27480] loop2: detected capacity change from 0 to 512 [ 356.266449][T27480] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 356.283262][T27480] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 356.293781][T27480] block device autoloading is deprecated and will be removed. [ 356.429888][T27480] EXT4-fs (loop2): couldn't read superblock of external journal [ 356.589896][T27489] netlink: 'syz.8.6173': attribute type 3 has an invalid length. [ 356.602508][T27489] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6173'. [ 356.834937][T27509] loop2: detected capacity change from 0 to 512 [ 356.841780][T27509] ext4: Unknown parameter 'smackfsroot' [ 356.872717][T27516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=27516 comm=syz.6.6174 [ 356.957140][T27525] syzkaller1: entered promiscuous mode [ 356.963382][T27525] syzkaller1: entered allmulticast mode [ 357.128453][T27526] futex_wake_op: syz.8.6176 tries to shift op by -3; fix this program [ 357.137566][T27539] loop4: detected capacity change from 0 to 512 [ 357.144694][T27539] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.154265][T27539] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 358.186112][T27682] netlink: 'syz.1.6204': attribute type 3 has an invalid length. [ 358.368176][T27612] loop4: detected capacity change from 0 to 512 [ 358.630458][T27612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.686528][T27612] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.848903][T27746] FAULT_INJECTION: forcing a failure. [ 358.848903][T27746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.862403][T27746] CPU: 1 UID: 0 PID: 27746 Comm: syz.1.6212 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.862441][T27746] Tainted: [W]=WARN [ 358.862449][T27746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 358.862461][T27746] Call Trace: [ 358.862468][T27746] [ 358.862477][T27746] __dump_stack+0x1d/0x30 [ 358.862546][T27746] dump_stack_lvl+0x95/0xd0 [ 358.862572][T27746] dump_stack+0x15/0x1b [ 358.862594][T27746] should_fail_ex+0x263/0x280 [ 358.862630][T27746] should_fail+0xb/0x20 [ 358.862715][T27746] should_fail_usercopy+0x1a/0x20 [ 358.862746][T27746] _copy_from_user+0x1c/0xb0 [ 358.862824][T27746] ___sys_sendmsg+0xc1/0x1e0 [ 358.862859][T27746] __x64_sys_sendmsg+0xd4/0x160 [ 358.862885][T27746] x64_sys_call+0x17ba/0x3000 [ 358.862913][T27746] do_syscall_64+0xc0/0x2a0 [ 358.862967][T27746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.863011][T27746] RIP: 0033:0x7fbaf0c8aeb9 [ 358.863033][T27746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.863087][T27746] RSP: 002b:00007fbaef6e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.863110][T27746] RAX: ffffffffffffffda RBX: 00007fbaf0f05fa0 RCX: 00007fbaf0c8aeb9 [ 358.863128][T27746] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 358.863150][T27746] RBP: 00007fbaef6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 358.863163][T27746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.863177][T27746] R13: 00007fbaf0f06038 R14: 00007fbaf0f05fa0 R15: 00007fff6b005a98 [ 358.863228][T27746] [ 359.075785][T27612] EXT4-fs (loop4): shut down requested (0) [ 359.091360][T27755] futex_wake_op: syz.1.6214 tries to shift op by 32; fix this program [ 359.210821][T27774] loop6: detected capacity change from 0 to 512 [ 359.255115][T27774] vfat: Bad value for 'shortname' [ 359.413454][T27785] loop6: detected capacity change from 0 to 512 [ 359.469914][T27785] EXT4-fs: Ignoring removed i_version option [ 359.475966][T27785] EXT4-fs: Ignoring removed bh option [ 359.532378][T27785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.578337][T27785] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 359.621341][T27796] geneve2: entered promiscuous mode [ 359.626809][T27796] geneve2: entered allmulticast mode [ 359.794209][T27819] loop2: detected capacity change from 0 to 128 [ 359.813479][T27821] FAULT_INJECTION: forcing a failure. [ 359.813479][T27821] name failslab, interval 1, probability 0, space 0, times 0 [ 359.818996][T27819] FAT-fs (loop2): bogus number of reserved sectors [ 359.826863][T27821] CPU: 1 UID: 0 PID: 27821 Comm: syz.1.6224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.826900][T27821] Tainted: [W]=WARN [ 359.826908][T27821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 359.826922][T27821] Call Trace: [ 359.826929][T27821] [ 359.827014][T27821] __dump_stack+0x1d/0x30 [ 359.827117][T27821] dump_stack_lvl+0x95/0xd0 [ 359.827149][T27821] dump_stack+0x15/0x1b [ 359.827179][T27821] should_fail_ex+0x263/0x280 [ 359.827211][T27821] should_failslab+0x8c/0xb0 [ 359.827258][T27821] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 359.827285][T27821] ? __alloc_skb+0x2f0/0x4b0 [ 359.827317][T27821] __alloc_skb+0x2f0/0x4b0 [ 359.827346][T27821] ? __alloc_skb+0x219/0x4b0 [ 359.827397][T27821] netlink_alloc_large_skb+0xbf/0xf0 [ 359.827495][T27821] netlink_sendmsg+0x40c/0x6f0 [ 359.827519][T27821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.827540][T27821] ____sys_sendmsg+0x5af/0x600 [ 359.827564][T27821] ___sys_sendmsg+0x195/0x1e0 [ 359.827677][T27821] __x64_sys_sendmsg+0xd4/0x160 [ 359.827702][T27821] x64_sys_call+0x17ba/0x3000 [ 359.827820][T27821] do_syscall_64+0xc0/0x2a0 [ 359.827866][T27821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.827932][T27821] RIP: 0033:0x7fbaf0c8aeb9 [ 359.827951][T27821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.827971][T27821] RSP: 002b:00007fbaef6e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.828035][T27821] RAX: ffffffffffffffda RBX: 00007fbaf0f05fa0 RCX: 00007fbaf0c8aeb9 [ 359.828051][T27821] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 359.828067][T27821] RBP: 00007fbaef6e7090 R08: 0000000000000000 R09: 0000000000000000 [ 359.828081][T27821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.828095][T27821] R13: 00007fbaf0f06038 R14: 00007fbaf0f05fa0 R15: 00007fff6b005a98 [ 359.828117][T27821] [ 360.033991][T27819] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 360.045662][T27819] FAT-fs (loop2): Can't find a valid FAT filesystem [ 360.106249][T27831] netlink: 'syz.1.6225': attribute type 1 has an invalid length. [ 360.123097][T27802] __nla_validate_parse: 5 callbacks suppressed [ 360.123130][T27802] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6219'. [ 360.145012][T27831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 360.152184][T27819] loop2: detected capacity change from 0 to 512 [ 360.178100][T27831] bond1: (slave bridge1): making interface the new active one [ 360.190325][T27819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 360.213966][T27831] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 360.223289][T27819] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.228864][T27802] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6219'. [ 360.365142][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 360.387173][T27850] netlink: 'syz.1.6226': attribute type 1 has an invalid length. [ 360.406176][T27850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 360.414823][T26265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.483055][T27850] bond2: (slave bridge2): making interface the new active one [ 360.523704][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 360.523723][ T29] audit: type=1326 audit(2000000411.182:7706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 360.531589][T27850] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 360.555126][T27865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6229'. [ 360.575984][ T29] audit: type=1326 audit(2000000411.182:7707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 360.599821][ T29] audit: type=1326 audit(2000000411.182:7708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 360.624256][ T29] audit: type=1326 audit(2000000411.182:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 360.653112][ T29] audit: type=1326 audit(2000000411.248:7710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d1fccaeb9 code=0x7ffc0000 [ 360.677410][ T29] audit: type=1326 audit(2000000411.248:7711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2d1fccac22 code=0x7ffc0000 [ 360.701020][ T29] audit: type=1326 audit(2000000411.248:7712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2d1fccacb7 code=0x7ffc0000 [ 360.724882][ T29] audit: type=1326 audit(2000000411.248:7713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2d1fc87c51 code=0x7ffc0000 [ 360.748457][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812f007400: rx timeout, send abort [ 360.756820][ T29] audit: type=1326 audit(2000000411.248:7714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f2d1fccbcc9 code=0x7ffc0000 [ 360.771127][T27865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6229'. [ 360.781160][ T29] audit: type=1326 audit(2000000411.248:7715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27862 comm="syz.4.6228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2d1fc87cbb code=0x7ffc0000 [ 360.877300][T27865] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.883936][T27875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.895344][T27865] bridge_slave_1 (unregistering): left allmulticast mode [ 360.895364][T27875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.910664][T27865] bridge_slave_1 (unregistering): left promiscuous mode [ 360.918324][T27865] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.188473][T27891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6238'. [ 361.256157][T27895] netlink: 'syz.1.6241': attribute type 1 has an invalid length. [ 361.270916][T27895] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.282963][ C1] vcan0: j1939_tp_rxtimer: 0xffff88812f007400: abort rx timeout. Force session deactivation [ 361.301917][T27895] bond3: (slave bridge3): making interface the new active one [ 361.311104][T27895] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 361.311303][T25724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.392035][T27914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6247'. [ 361.497571][T27928] 9p: Unknown uid 00000000004294967295 [ 361.503299][T27928] x_tables: duplicate underflow at hook 1 [ 361.619432][T27933] netlink: 'syz.4.6255': attribute type 1 has an invalid length. [ 361.634252][T27933] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.651279][T27933] bond3: (slave bridge3): making interface the new active one [ 361.660181][T27933] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 361.737764][T27959] loop4: detected capacity change from 0 to 2048 [ 361.768694][T27959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.784289][T27967] netlink: 3252 bytes leftover after parsing attributes in process `syz.1.6263'. [ 361.810283][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6263'. [ 361.865334][T27038] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.155356][T16396] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.206501][T28028] syz.2.6270: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 362.221219][T28028] CPU: 0 UID: 0 PID: 28028 Comm: syz.2.6270 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 362.221262][T28028] Tainted: [W]=WARN [ 362.221270][T28028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.221286][T28028] Call Trace: [ 362.221295][T28028] [ 362.221306][T28028] __dump_stack+0x1d/0x30 [ 362.221397][T28028] dump_stack_lvl+0x95/0xd0 [ 362.221499][T28028] dump_stack+0x15/0x1b [ 362.221521][T28028] warn_alloc+0x145/0x1c0 [ 362.221557][T28028] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 362.221650][T28028] ? __futex_wait+0x1fd/0x260 [ 362.221681][T28028] ? __pfx_futex_wake_mark+0x10/0x10 [ 362.221707][T28028] ? __rcu_read_unlock+0x4e/0x70 [ 362.221799][T28028] ? avc_has_perm_noaudit+0xab/0x130 [ 362.221903][T28028] ? should_fail_ex+0x30/0x280 [ 362.221941][T28028] ? should_failslab+0x8c/0xb0 [ 362.222040][T28028] vmalloc_user_noprof+0x7d/0xb0 [ 362.222069][T28028] ? xskq_create+0x80/0xe0 [ 362.222104][T28028] xskq_create+0x80/0xe0 [ 362.222163][T28028] xsk_init_queue+0x91/0xe0 [ 362.222327][T28028] xsk_setsockopt+0x3f5/0x640 [ 362.222359][T28028] ? __pfx_xsk_setsockopt+0x10/0x10 [ 362.222387][T28028] __sys_setsockopt+0x184/0x200 [ 362.222438][T28028] __x64_sys_setsockopt+0x64/0x80 [ 362.222477][T28028] x64_sys_call+0x21d5/0x3000 [ 362.222535][T28028] do_syscall_64+0xc0/0x2a0 [ 362.222570][T28028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.222603][T28028] RIP: 0033:0x7f2a1dfeaeb9 [ 362.222661][T28028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.222681][T28028] RSP: 002b:00007f2a1ca26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 362.222705][T28028] RAX: ffffffffffffffda RBX: 00007f2a1e266090 RCX: 00007f2a1dfeaeb9 [ 362.222720][T28028] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 362.222878][T28028] RBP: 00007f2a1e058c1f R08: 0000000000000004 R09: 0000000000000000 [ 362.222898][T28028] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.222916][T28028] R13: 00007f2a1e266128 R14: 00007f2a1e266090 R15: 00007ffc56fecb18 [ 362.222938][T28028] [ 362.222946][T28028] Mem-Info: [ 362.284892][T28031] loop2: detected capacity change from 0 to 1024 [ 362.290118][T28028] active_anon:30468 inactive_anon:124 isolated_anon:0 [ 362.290118][T28028] active_file:17575 inactive_file:12802 isolated_file:0 [ 362.290118][T28028] unevictable:15427 dirty:338 writeback:0 [ 362.290118][T28028] slab_reclaimable:4042 slab_unreclaimable:20517 [ 362.290118][T28028] mapped:36047 shmem:17904 pagetables:2216 [ 362.290118][T28028] sec_pagetables:0 bounce:0 [ 362.290118][T28028] kernel_misc_reclaimable:0 [ 362.290118][T28028] free:1817970 free_pcp:9198 free_cma:0 [ 362.303526][T28031] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6270: bad orphan inode 134217728 [ 362.305386][T28028] Node 0 active_anon:121988kB inactive_anon:496kB active_file:70300kB inactive_file:51208kB unevictable:61708kB isolated(anon):0kB isolated(file):0kB mapped:144188kB dirty:1352kB writeback:0kB shmem:71616kB kernel_stack:5616kB pagetables:8864kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 362.305443][T28028] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.311515][T28031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.316115][T28028] lowmem_reserve[]: 0 2879 7858 7858 [ 362.316167][T28028] Node 0 [ 362.325915][T28031] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6270'. [ 362.329778][T28028] DMA32 free:2944744kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948376kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 362.334646][T28031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6270'. [ 362.340458][T28028] lowmem_reserve[]: [ 362.404849][T28035] xt_TCPMSS: Only works on TCP SYN packets [ 362.407611][T28028] 0 0 4978 4978 [ 362.652466][T28028] Node 0 Normal free:4311776kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:121640kB inactive_anon:496kB active_file:70300kB inactive_file:51208kB unevictable:61708kB writepending:1352kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:32912kB local_pcp:1604kB free_cma:0kB [ 362.687736][T28028] lowmem_reserve[]: 0 0 0 0 [ 362.692530][T28028] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 362.705863][T28028] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 2*64kB (M) 4*128kB (M) 4*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944744kB [ 362.722507][T28028] Node 0 Normal: 5272*4kB (UME) 2443*8kB (UME) 2280*16kB (UME) 1248*32kB (UME) 950*64kB (UME) 410*128kB (UM) 293*256kB (UME) 271*512kB (UME) 185*1024kB (UM) 132*2048kB (UME) 832*4096kB (UM) = 4311736kB [ 362.742617][T28028] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 362.751967][T28028] 63832 total pagecache pages [ 362.756799][T28028] 124 pages in swap cache [ 362.761142][T28028] Free swap = 124500kB [ 362.765388][T28028] Total swap = 124996kB [ 362.769577][T28028] 2097051 pages RAM [ 362.773565][T28028] 0 pages HighMem/MovableOnly [ 362.778321][T28028] 81557 pages reserved [ 362.785976][T16396] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.882955][T16396] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.900816][T28057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28057 comm=syz.1.6274 [ 362.964124][T16396] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.053293][T28065] syzkaller1: entered promiscuous mode [ 363.059067][T28065] syzkaller1: entered allmulticast mode [ 363.065931][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.070216][T28020] chnl_net:caif_netlink_parms(): no params data found [ 363.177574][T16396] bridge_slave_1: left allmulticast mode [ 363.183580][T16396] bridge_slave_1: left promiscuous mode [ 363.189648][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.212543][T16396] bridge_slave_0: left allmulticast mode [ 363.218698][T16396] bridge_slave_0: left promiscuous mode [ 363.224599][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.291106][T28100] loop2: detected capacity change from 0 to 4096 [ 363.298157][T28100] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.316188][T28100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.347195][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.422297][T16396] bond1 (unregistering): (slave bridge1): Releasing active interface [ 363.485817][T16396] bond2 (unregistering): (slave bridge2): Releasing active interface [ 363.528854][T16396] bond3 (unregistering): (slave bridge3): Releasing active interface [ 363.583149][T16396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.593361][T16396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.603600][T16396] bond0 (unregistering): Released all slaves [ 363.611435][T16396] bond1 (unregistering): Released all slaves [ 363.621299][T16396] bond2 (unregistering): Released all slaves [ 363.629999][T16396] bond3 (unregistering): Released all slaves [ 363.640748][T28086] pim6reg9: entered allmulticast mode [ 363.660404][T28020] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.667821][T28020] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.676770][T28020] bridge_slave_0: entered allmulticast mode [ 363.684004][T28020] bridge_slave_0: entered promiscuous mode [ 363.694156][T16396] hsr_slave_0: left promiscuous mode [ 363.700394][T16396] hsr_slave_1: left promiscuous mode [ 363.706056][T16396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.713654][T16396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.721369][T16396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.728755][T16396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.739823][T16396] veth1_macvtap: left promiscuous mode [ 363.745491][T16396] veth0_macvtap: left promiscuous mode [ 363.750981][T16396] veth1_vlan: left promiscuous mode [ 363.756245][T16396] veth0_vlan: left promiscuous mode [ 363.821820][T28123] loop2: detected capacity change from 0 to 128 [ 363.830197][T28123] EXT4-fs: Ignoring removed nobh option [ 363.841045][T28123] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 363.856525][T28123] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.856897][T16396] team0 (unregistering): Port device team_slave_1 removed [ 363.893202][T16396] team0 (unregistering): Port device team_slave_0 removed [ 363.939401][T28020] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.947078][T28020] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.955037][T28020] bridge_slave_1: entered allmulticast mode [ 363.961711][T28020] bridge_slave_1: entered promiscuous mode [ 363.983403][T27233] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.994435][T28020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.006090][T28020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.055500][T28020] team0: Port device team_slave_0 added [ 364.062724][T28020] team0: Port device team_slave_1 added [ 364.080187][T28020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.087238][T28020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.113583][T28020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.127342][T28020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.134632][T28020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.161795][T28020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.212473][T28020] hsr_slave_0: entered promiscuous mode [ 364.219044][T28020] hsr_slave_1: entered promiscuous mode [ 364.225443][T28020] debugfs: 'hsr0' already exists in 'hsr' [ 364.231570][T28020] Cannot create hsr debugfs directory [ 364.278726][T28158] FAULT_INJECTION: forcing a failure. [ 364.278726][T28158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.292148][T28158] CPU: 0 UID: 0 PID: 28158 Comm: syz.2.6290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 364.292186][T28158] Tainted: [W]=WARN [ 364.292193][T28158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.292218][T28158] Call Trace: [ 364.292299][T28158] [ 364.292310][T28158] __dump_stack+0x1d/0x30 [ 364.292341][T28158] dump_stack_lvl+0x95/0xd0 [ 364.292363][T28158] dump_stack+0x15/0x1b [ 364.292386][T28158] should_fail_ex+0x263/0x280 [ 364.292424][T28158] should_fail+0xb/0x20 [ 364.292529][T28158] should_fail_usercopy+0x1a/0x20 [ 364.292597][T28158] _copy_from_iter+0xcf/0xea0 [ 364.292621][T28158] ? alloc_pages_mpol+0x217/0x260 [ 364.292768][T28158] copy_page_from_iter+0x178/0x2a0 [ 364.292795][T28158] tun_get_user+0xbbd/0x27c0 [ 364.292827][T28158] ? ref_tracker_alloc+0x1f2/0x2f0 [ 364.292918][T28158] tun_chr_write_iter+0x15e/0x210 [ 364.292940][T28158] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 364.292971][T28158] vfs_write+0x5a6/0x9f0 [ 364.293000][T28158] ksys_write+0xdc/0x1a0 [ 364.293025][T28158] __x64_sys_write+0x40/0x50 [ 364.293049][T28158] x64_sys_call+0x2847/0x3000 [ 364.293103][T28158] do_syscall_64+0xc0/0x2a0 [ 364.293141][T28158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.293168][T28158] RIP: 0033:0x7f2a1dfab78e [ 364.293189][T28158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.293265][T28158] RSP: 002b:00007f2a1ca46fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.293292][T28158] RAX: ffffffffffffffda RBX: 00007f2a1ca476c0 RCX: 00007f2a1dfab78e [ 364.293310][T28158] RDX: 00000000000000ae RSI: 0000200000000000 RDI: 00000000000000c8 [ 364.293326][T28158] RBP: 00007f2a1ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 364.293412][T28158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.293427][T28158] R13: 00007f2a1e266038 R14: 00007f2a1e265fa0 R15: 00007ffc56fecb18 [ 364.293451][T28158] [ 364.580004][T28166] syzkaller1: entered promiscuous mode [ 364.585617][T28166] syzkaller1: entered allmulticast mode [ 364.704044][T28188] loop2: detected capacity change from 0 to 128 [ 364.729395][T28188] FAT-fs (loop2): bogus number of reserved sectors [ 364.736227][T28188] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 364.747467][T28188] FAT-fs (loop2): Can't find a valid FAT filesystem [ 364.776022][T28188] loop2: detected capacity change from 0 to 512 [ 364.804601][T28020] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 364.822954][T28020] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.838903][T28188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 364.851242][T28020] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.859377][T28188] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.872621][T28020] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.896877][T28207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=28207 comm=syz.1.6302 [ 364.916533][T28020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.933310][T28020] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.953589][ T1681] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.960904][ T1681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.981717][T28215] loop6: detected capacity change from 0 to 512 [ 365.015138][T28215] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 365.025145][T16388] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.032479][T16388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.065285][T28215] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 365.076875][T28215] System zones: 1-12 [ 365.083130][T28215] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.6299: corrupted in-inode xattr: e_value size too large [ 365.101309][T28215] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.6299: couldn't read orphan inode 15 (err -117) [ 365.114288][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 365.122339][T28215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.136675][T28215] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.233493][T28020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.249306][T28253] netlink: 'syz.2.6307': attribute type 2 has an invalid length. [ 365.267985][T28253] netlink: 'syz.2.6307': attribute type 10 has an invalid length. [ 365.278810][T28253] batman_adv: batadv0: Adding interface: netdevsim1 [ 365.285685][T28253] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.312063][T28253] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 365.508842][T28020] veth0_vlan: entered promiscuous mode [ 365.519998][T28020] veth1_vlan: entered promiscuous mode [ 365.537259][T28020] veth0_macvtap: entered promiscuous mode [ 365.545653][T28020] veth1_macvtap: entered promiscuous mode [ 365.559867][T28020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.571793][T28020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.630708][T16400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.633489][T28283] FAULT_INJECTION: forcing a failure. [ 365.633489][T28283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.652798][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.2.6311 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 365.652836][T28283] Tainted: [W]=WARN [ 365.652845][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 365.652940][T28283] Call Trace: [ 365.652948][T28283] [ 365.652958][T28283] __dump_stack+0x1d/0x30 [ 365.652990][T28283] dump_stack_lvl+0x95/0xd0 [ 365.653017][T28283] dump_stack+0x15/0x1b [ 365.653041][T28283] should_fail_ex+0x263/0x280 [ 365.653083][T28283] should_fail+0xb/0x20 [ 365.653124][T28283] should_fail_usercopy+0x1a/0x20 [ 365.653164][T28283] _copy_to_user+0x20/0xa0 [ 365.653250][T28283] simple_read_from_buffer+0xb5/0x130 [ 365.653293][T28283] proc_fail_nth_read+0x10e/0x150 [ 365.653327][T28283] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.653391][T28283] vfs_read+0x1ab/0x7f0 [ 365.653411][T28283] ? __rcu_read_unlock+0x4e/0x70 [ 365.653516][T28283] ? __fget_files+0x184/0x1c0 [ 365.653604][T28283] ? mutex_lock+0x57/0x90 [ 365.653632][T28283] ksys_read+0xdc/0x1a0 [ 365.653660][T28283] __x64_sys_read+0x40/0x50 [ 365.653690][T28283] x64_sys_call+0x2889/0x3000 [ 365.653719][T28283] do_syscall_64+0xc0/0x2a0 [ 365.653812][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.653839][T28283] RIP: 0033:0x7f2a1dfab78e [ 365.653859][T28283] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 365.653936][T28283] RSP: 002b:00007f2a1ca46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.653998][T28283] RAX: ffffffffffffffda RBX: 00007f2a1ca476c0 RCX: 00007f2a1dfab78e [ 365.654088][T28283] RDX: 000000000000000f RSI: 00007f2a1ca470a0 RDI: 0000000000000003 [ 365.654113][T28283] RBP: 00007f2a1ca47090 R08: 0000000000000000 R09: 0000000000000000 [ 365.654131][T28283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.654147][T28283] R13: 00007f2a1e266038 R14: 00007f2a1e265fa0 R15: 00007ffc56fecb18 [ 365.654171][T28283] [ 365.856213][ T1681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.868774][ T1681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.878030][ T1681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.013257][T28325] netlink: 'syz.1.6317': attribute type 1 has an invalid length. [ 366.064181][T28325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.080374][T28325] 8021q: adding VLAN 0 to HW filter on device bond4 [ 366.088768][T28325] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 366.101847][T28325] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 366.136437][T28340] gretap1: entered promiscuous mode [ 366.144485][T28340] bond4: (slave gretap1): making interface the new active one [ 366.152638][T28340] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 366.248148][T28350] syzkaller1: entered promiscuous mode [ 366.253782][T28350] syzkaller1: entered allmulticast mode [ 366.333546][T28348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.383122][T28333] SELinux: Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped). [ 366.393448][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 366.393466][ T29] audit: type=1400 audit(2000000416.674:7885): avc: denied { relabelto } for pid=28331 comm="syz.2.6320" name="notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0" [ 366.427395][ T29] audit: type=1400 audit(2000000416.674:7886): avc: denied { associate } for pid=28331 comm="syz.2.6320" name="notes" dev="sysfs" ino=210 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0" [ 366.470252][ T29] audit: type=1400 audit(2000000416.702:7887): avc: denied { execute_no_trans } for pid=28332 comm="syz.6.6319" path=2F6D656D66643A5B0BDB58AE5B1A02FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=92147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 366.470671][T28333] __nla_validate_parse: 3 callbacks suppressed [ 366.470687][T28333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6320'. [ 366.522330][T28333] bond1: option ad_actor_sys_prio: invalid value (0) [ 366.529326][T28333] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 366.542827][T28333] bond1 (unregistering): Released all slaves [ 366.649658][T28397] loop2: detected capacity change from 0 to 1024 [ 366.675922][T28397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 366.690289][T28397] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.703374][T28397] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.6325: lblock 0 mapped to illegal pblock 0 (length 6) [ 366.717889][T28397] EXT4-fs (loop2): Remounting filesystem read-only [ 366.746966][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 366.779789][T28415] netlink: 'syz.2.6327': attribute type 7 has an invalid length. [ 366.807605][T16404] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.813179][T28415] netlink: 'syz.2.6327': attribute type 7 has an invalid length. [ 366.822186][T16404] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.852273][T16404] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.862207][T16404] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.940393][ T29] audit: type=1400 audit(2000000417.179:7888): avc: denied { lock } for pid=28441 comm="syz.8.6332" path="socket:[94242]" dev="sockfs" ino=94242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 366.967873][ T29] audit: type=1400 audit(2000000417.179:7889): avc: denied { mount } for pid=28441 comm="syz.8.6332" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 367.091873][T28460] geneve2: entered promiscuous mode [ 367.257445][T28481] loop3: detected capacity change from 0 to 2048 [ 367.283338][T28481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.322434][T28481] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.381669][ T29] audit: type=1326 audit(2000000417.591:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 367.411276][ T29] audit: type=1326 audit(2000000417.591:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 367.436406][ T29] audit: type=1326 audit(2000000417.591:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 367.460544][ T29] audit: type=1326 audit(2000000417.619:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 367.484372][ T29] audit: type=1326 audit(2000000417.619:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28502 comm="syz.2.6343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 367.538674][T28503] loop2: detected capacity change from 0 to 8192 [ 367.606135][ T6534] Bluetooth: hci0: Frame reassembly failed (-84) [ 367.887705][T28534] netlink: 'syz.6.6347': attribute type 1 has an invalid length. [ 367.991546][T16404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:38: bg 0: block 345: padding at end of block bitmap is not set [ 368.006788][T16404] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 368.020152][T16404] EXT4-fs (loop3): This should not happen!! Data will be lost [ 368.020152][T16404] [ 368.054469][T16404] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2031 with error 28 [ 368.067714][T16404] EXT4-fs (loop3): This should not happen!! Data will be lost [ 368.067714][T16404] [ 368.077869][T16404] EXT4-fs (loop3): Total free blocks count 0 [ 368.084122][T16404] EXT4-fs (loop3): Free/Dirty block details [ 368.090170][T16404] EXT4-fs (loop3): free_blocks=0 [ 368.095379][T16404] EXT4-fs (loop3): dirty_blocks=2048 [ 368.101058][T16404] EXT4-fs (loop3): Block reservation details [ 368.263672][T28534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.351828][T28565] syzkaller1: entered promiscuous mode [ 368.357357][T28565] syzkaller1: entered allmulticast mode [ 368.401094][T28538] netlink: 596 bytes leftover after parsing attributes in process `syz.8.6349'. [ 368.457725][T28588] loop3: detected capacity change from 0 to 512 [ 368.619356][T28604] SELinux: security_context_str_to_sid (_:;Y-_·¡È §é‡IQÉR³§Ï›¨V§OùѹãoΞ>óäÑãG¦LŸ?./mnt) failed with errno=-22 [ 368.793173][T28617] netlink: 'syz.1.6365': attribute type 1 has an invalid length. [ 368.806960][T28617] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.823293][T28617] bond5: (slave bridge4): making interface the new active one [ 368.831730][T28617] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 369.107524][T28660] netlink: 320 bytes leftover after parsing attributes in process `syz.8.6375'. [ 369.189724][T28671] netlink: 'syz.6.6378': attribute type 1 has an invalid length. [ 369.204225][T28671] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.225782][T28671] bond2: (slave bridge2): making interface the new active one [ 369.234862][T28671] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 369.285967][T28680] loop3: detected capacity change from 0 to 256 [ 369.299005][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.326646][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.338697][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.352353][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.368816][T28679] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.379540][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.390300][T28679] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.400678][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.411652][T28679] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.422594][T28680] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 369.439598][T28676] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 369.448218][T28681] loop6: detected capacity change from 0 to 1024 [ 369.490446][T28681] EXT4-fs: inline encryption not supported [ 369.520301][T28681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.548110][T28678] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 369.618150][T25724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.835712][ T6232] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 369.842096][ T3511] Bluetooth: hci0: command 0x1003 tx timeout [ 369.965126][T28740] loop6: detected capacity change from 0 to 512 [ 369.999023][T28740] EXT4-fs: Ignoring removed nobh option [ 370.005211][T28740] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 370.015850][T28663] delete_channel: no stack [ 370.042747][T28740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 370.051034][T28740] EXT4-fs (loop6): orphan cleanup on readonly fs [ 370.059108][T28740] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.6396: attempt to clear invalid blocks 1024 len 1 [ 370.082937][T28740] EXT4-fs (loop6): Remounting filesystem read-only [ 370.090044][T28740] EXT4-fs (loop6): 1 truncate cleaned up [ 370.096849][T28740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 370.316505][T28762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6403'. [ 370.517314][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6411'. [ 370.537327][T28790] loop2: detected capacity change from 0 to 2048 [ 370.603969][ T3307] loop2: p2 < > p3 < p5 > p4 [ 370.608800][ T3307] loop2: partition table partially beyond EOD, truncated [ 370.637995][ T3307] loop2: p2 start 4278190080 is beyond EOD, truncated [ 370.670406][ T3307] loop2: p4 size 8192 extends beyond EOD, truncated [ 370.677926][ T3307] loop2: p5 size 8192 extends beyond EOD, truncated [ 370.703729][T28790] loop2: p2 < > p3 < p5 > p4 [ 370.708722][T28790] loop2: partition table partially beyond EOD, truncated [ 370.731371][T28790] loop2: p2 start 4278190080 is beyond EOD, truncated [ 370.750835][T28790] loop2: p4 size 8192 extends beyond EOD, truncated [ 370.775390][T28790] loop2: p5 size 8192 extends beyond EOD, truncated [ 370.820789][ T3002] loop2: p2 < > p3 < p5 > p4 [ 370.825769][ T3002] loop2: partition table partially beyond EOD, truncated [ 370.863257][ T3002] loop2: p2 start 4278190080 is beyond EOD, truncated [ 370.876437][ T3002] loop2: p4 size 8192 extends beyond EOD, truncated [ 370.902366][ T3002] loop2: p5 size 8192 extends beyond EOD, truncated [ 371.048726][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 371.060527][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 371.064700][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 371.087020][T25724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 371.124986][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 371.132297][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 371.146755][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 371.177635][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 371.178580][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 371.189276][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 371.209053][T28821] xt_hashlimit: size too large, truncated to 1048576 [ 371.670375][T28857] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6437'. [ 371.679523][T28857] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6437'. [ 371.753322][T28870] netlink: 'syz.1.6437': attribute type 1 has an invalid length. [ 371.814554][T28878] loop3: detected capacity change from 0 to 512 [ 371.821884][T28870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 371.852629][T28857] bond6: (slave bridge5): making interface the new active one [ 371.881039][T28878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 371.903807][T28857] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 371.916809][T28878] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.6443: bad orphan inode 131083 [ 371.941596][T28878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.966475][T28886] loop2: detected capacity change from 0 to 128 [ 371.997995][T28886] FAT-fs (loop2): bogus number of reserved sectors [ 372.004820][T28886] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 372.016117][T28886] FAT-fs (loop2): Can't find a valid FAT filesystem [ 372.085673][T28886] loop2: detected capacity change from 0 to 512 [ 372.136427][T28878] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.3.6443: path /30/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=1560281102, rec_len=1024, size=60 fake=0 [ 372.137429][T28886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 372.172158][T28886] ext4 filesystem being mounted at /55/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.226665][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.239651][T28894] netlink: 'syz.8.6445': attribute type 21 has an invalid length. [ 372.247779][T28894] netlink: 'syz.8.6445': attribute type 4 has an invalid length. [ 372.265970][T28906] loop6: detected capacity change from 0 to 128 [ 372.298301][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 372.328265][T28909] loop3: detected capacity change from 0 to 512 [ 372.352573][T28909] EXT4-fs: Ignoring removed nobh option [ 372.358389][T28909] EXT4-fs: Ignoring removed bh option [ 372.375750][T28909] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 372.384310][T28909] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.6451: invalid indirect mapped block 256 (level 1) [ 372.415430][T28909] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.6451: invalid indirect mapped block 2683928664 (level 1) [ 372.432168][T28909] EXT4-fs (loop3): 1 truncate cleaned up [ 372.438771][T28909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.460618][T28909] bpf: Bad value for 'gid' [ 372.465215][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 372.465232][ T29] audit: type=1400 audit(2000000422.343:7952): avc: denied { mounton } for pid=28907 comm="syz.3.6451" path="/31/file0/file0/file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.500740][T28909] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.6451: Invalid block bitmap block 3 in block_group 0 [ 372.530192][T28909] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.6451: Invalid block bitmap block 3 in block_group 0 [ 372.546315][T28920] syzkaller1: entered promiscuous mode [ 372.551980][T28920] syzkaller1: entered allmulticast mode [ 372.555672][T28909] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.6451: Invalid block bitmap block 3 in block_group 0 [ 372.607937][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.676293][T28924] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6456'. [ 372.685903][T28933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6462'. [ 372.740060][T28939] loop3: detected capacity change from 0 to 128 [ 372.771193][T28939] FAT-fs (loop3): bogus number of reserved sectors [ 372.777982][T28939] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 372.789084][T28939] FAT-fs (loop3): Can't find a valid FAT filesystem [ 372.793283][T28943] hugetlbfs: syz.1.6465 (28943): Using mlock ulimits for SHM_HUGETLB is obsolete [ 372.798855][T28924] netlink: 'syz.8.6456': attribute type 1 has an invalid length. [ 372.826518][T28946] SET target dimension over the limit! [ 372.832664][T28939] loop3: detected capacity change from 0 to 512 [ 372.838785][T28946] netlink: 'syz.1.6466': attribute type 21 has an invalid length. [ 372.847319][T28946] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6466'. [ 372.859228][T28924] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.891135][T28950] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6467'. [ 372.936556][T28946] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6466'. [ 372.952209][T28939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 372.976667][T28939] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.992194][T28948] bond4: (slave bridge2): making interface the new active one [ 373.001324][T28948] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 373.043284][T28961] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6470'. [ 373.153987][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 373.252932][T28973] syzkaller1: entered promiscuous mode [ 373.258661][T28973] syzkaller1: entered allmulticast mode [ 373.388468][T28982] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6478'. [ 373.437619][T28986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6480'. [ 373.483128][T28995] loop2: detected capacity change from 0 to 128 [ 373.507356][T28986] netlink: 'syz.3.6480': attribute type 1 has an invalid length. [ 373.517715][T28995] FAT-fs (loop2): bogus number of reserved sectors [ 373.524323][T28995] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 373.524789][T28986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.535463][T28995] FAT-fs (loop2): Can't find a valid FAT filesystem [ 373.555566][T28986] bond1: (slave bridge1): making interface the new active one [ 373.563713][T28986] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 373.631155][T28995] loop2: detected capacity change from 0 to 512 [ 373.667621][T28995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 373.683613][T29012] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6486'. [ 373.711432][T28995] ext4 filesystem being mounted at /66/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.739269][T29014] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6490: invalid indirect mapped block 256 (level 2) [ 373.782671][T29014] EXT4-fs (loop3): 2 truncates cleaned up [ 373.792007][T29014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.819232][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.842273][T29017] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6488'. [ 373.858647][T29019] random: crng reseeded on system resumption [ 373.865629][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 373.889941][T29019] bond2: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 373.903302][T29019] bond2 (unregistering): Released all slaves [ 373.967925][T29024] syzkaller1: entered promiscuous mode [ 373.973717][T29024] syzkaller1: entered allmulticast mode [ 374.079484][ T29] audit: type=1400 audit(2000000423.859:7953): avc: denied { connect } for pid=29037 comm="syz.3.6498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.191259][T29055] FAT-fs (loop3): bogus number of reserved sectors [ 374.198155][T29055] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 374.209256][T29055] FAT-fs (loop3): Can't find a valid FAT filesystem [ 374.287059][T29067] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6507: bad orphan inode 15 [ 374.313405][T29067] ext4_test_bit(bit=14, block=5) = 0 [ 374.319267][T29067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.388510][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.903763][ T36] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 374.917884][ T36] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.005703][T29101] EXT4-fs: Ignoring removed mblk_io_submit option [ 375.012617][T29101] EXT4-fs: test_dummy_encryption option not supported [ 375.279041][ T29] audit: type=1400 audit(2000000424.981:7954): avc: denied { accept } for pid=29128 comm="syz.1.6522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 375.333787][T29138] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 375.348740][T29138] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6525: bad orphan inode 16 [ 375.366214][T29138] ext4_test_bit(bit=15, block=4) = 0 [ 375.371612][T29138] EXT4-fs (loop2): 1 orphan inode deleted [ 375.403824][T29138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.463911][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.502249][T29143] netlink: 'syz.1.6524': attribute type 1 has an invalid length. [ 375.529652][T29143] 8021q: adding VLAN 0 to HW filter on device bond7 [ 375.590587][T29121] 9p: Bad value for 'wfdno' [ 375.599294][T29153] bond7: (slave bridge6): making interface the new active one [ 375.636559][T29153] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 375.694602][T29161] x_tables: duplicate underflow at hook 3 [ 375.694692][T29163] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 4, id = 0 [ 376.448555][ T29] audit: type=1326 audit(2000000426.066:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 376.472706][ T29] audit: type=1326 audit(2000000426.066:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 376.496544][ T29] audit: type=1326 audit(2000000426.066:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 376.521294][ T29] audit: type=1326 audit(2000000426.066:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 376.545215][ T29] audit: type=1326 audit(2000000426.066:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 376.569432][ T29] audit: type=1326 audit(2000000426.066:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 376.593923][ T29] audit: type=1326 audit(2000000426.066:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29203 comm="syz.2.6540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 377.015123][T29230] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29230 comm=syz.1.6553 [ 377.158265][ T8933] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 377.170336][ T8933] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 377.225920][T29247] set_capacity_and_notify: 5 callbacks suppressed [ 377.225942][T29247] loop3: detected capacity change from 0 to 4096 [ 377.255594][T29247] EXT4-fs: Ignoring removed mblk_io_submit option [ 377.262139][T29247] EXT4-fs: test_dummy_encryption option not supported [ 377.640360][T29319] loop3: detected capacity change from 0 to 128 [ 377.647868][T29319] FAT-fs (loop3): bogus number of reserved sectors [ 377.654499][T29319] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 377.665983][T29319] FAT-fs (loop3): Can't find a valid FAT filesystem [ 377.779246][T29329] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 377.939635][T29337] netlink: 'syz.3.6569': attribute type 1 has an invalid length. [ 378.110424][T29371] loop6: detected capacity change from 0 to 1024 [ 378.144304][T29337] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.208909][T29356] bond2: (slave bridge2): making interface the new active one [ 378.239031][T29356] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 378.307966][T29399] loop2: detected capacity change from 0 to 512 [ 378.318123][T29399] /dev/loop2: Can't open blockdev [ 378.408147][T29408] openvswitch: netlink: Key type 1542 is out of range max 32 [ 378.474187][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 378.474265][ T29] audit: type=1326 audit(2000000427.965:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.504772][ T29] audit: type=1326 audit(2000000427.965:8024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.557132][T29415] loop2: detected capacity change from 0 to 1024 [ 378.581730][ T29] audit: type=1326 audit(2000000428.031:8025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.596856][T29406] syzkaller0: entered promiscuous mode [ 378.606277][ T29] audit: type=1326 audit(2000000428.031:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.611736][T29406] syzkaller0: entered allmulticast mode [ 378.636594][ T29] audit: type=1326 audit(2000000428.031:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.636627][ T29] audit: type=1326 audit(2000000428.040:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.689899][ T29] audit: type=1326 audit(2000000428.040:8029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.714117][ T29] audit: type=1326 audit(2000000428.040:8030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.738075][ T29] audit: type=1326 audit(2000000428.040:8031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.762212][ T29] audit: type=1326 audit(2000000428.040:8032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29414 comm="syz.2.6583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a1dfeaeb9 code=0x7ffc0000 [ 378.798740][T29415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.813380][T29415] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.838644][T29420] cgroup: subsys name conflicts with all [ 379.060646][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 379.105229][T29432] __nla_validate_parse: 6 callbacks suppressed [ 379.105261][T29432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6588'. [ 379.134036][T29436] loop2: detected capacity change from 0 to 256 [ 379.154309][T29432] netlink: 'syz.1.6588': attribute type 1 has an invalid length. [ 379.179757][T29432] 8021q: adding VLAN 0 to HW filter on device bond8 [ 379.202013][T29432] bond8: (slave bridge7): making interface the new active one [ 379.231717][T29432] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 379.570784][T29467] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6591'. [ 379.604757][T29465] 9p: Bad value for 'rfdno' [ 379.614177][T29465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6603'. [ 379.624146][T29465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6603'. [ 379.680885][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6604'. [ 379.727693][T29472] netlink: 'syz.8.6604': attribute type 1 has an invalid length. [ 379.770731][T29472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.926220][T29472] bond5: (slave bridge3): making interface the new active one [ 379.947776][T29472] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 380.319194][T29538] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 380.413949][T29544] loop2: detected capacity change from 0 to 128 [ 380.430448][T29544] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.443197][T29544] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.502653][T27233] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.593502][T29564] loop2: detected capacity change from 0 to 512 [ 380.593540][T29563] 9p: Bad value for 'wfdno' [ 380.601353][T29564] EXT4-fs: Ignoring removed bh option [ 380.611340][T29564] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 380.620789][T13085] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 380.632293][T13085] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.645845][T29564] EXT4-fs (loop2): 1 truncate cleaned up [ 380.652220][T29564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.683683][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.908856][T29574] netlink: 'syz.6.6645': attribute type 1 has an invalid length. [ 380.933705][T29574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.955868][T29574] 8021q: adding VLAN 0 to HW filter on device bond3 [ 380.963700][T29574] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 380.983641][T29574] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 381.017438][T29582] gretap1: entered promiscuous mode [ 381.029979][T29582] bond3: (slave gretap1): making interface the new active one [ 381.038183][T29582] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 381.081692][T29574] macvlan2: entered promiscuous mode [ 381.087049][T29574] macvlan2: entered allmulticast mode [ 381.099357][T29574] bond3: entered promiscuous mode [ 381.318298][T29574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 381.340560][T29574] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 381.368248][T29574] bond3: left promiscuous mode [ 381.383510][T29606] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6650'. [ 381.394183][T29606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6650'. [ 381.410529][T29606] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6650'. [ 381.420039][T29606] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6650'. [ 381.441587][T29603] netlink: 'syz.3.6649': attribute type 1 has an invalid length. [ 381.449501][T29606] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6650'. [ 381.481686][T29603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.527135][T29601] bond3: (slave bridge3): making interface the new active one [ 381.560704][T29601] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 381.788353][T29646] loop3: detected capacity change from 0 to 8192 [ 381.806625][T29653] netlink: 'syz.2.6661': attribute type 13 has an invalid length. [ 381.855117][T29653] gretap0: refused to change device tx_queue_len [ 381.874224][T29653] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 381.936298][T29669] Failed to initialize the IGMP autojoin socket (err -2) [ 382.065880][T29689] loop3: detected capacity change from 0 to 1024 [ 382.178985][T29704] netlink: 'syz.1.6667': attribute type 1 has an invalid length. [ 382.198868][T29704] 8021q: adding VLAN 0 to HW filter on device bond9 [ 382.219951][T29691] bond9: (slave bridge8): making interface the new active one [ 382.228474][T29691] bond9: (slave bridge8): Enslaving as an active interface with an up link [ 382.272568][T29708] FAT-fs (loop2): bogus number of reserved sectors [ 382.279333][T29708] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 382.290779][T29708] FAT-fs (loop2): Can't find a valid FAT filesystem [ 382.328201][T29706] IPVS: Error during creation of socket; terminating [ 382.377947][T29716] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29716 comm=syz.3.6675 [ 382.466796][T29729] vlan2: entered allmulticast mode [ 382.472201][T29729] vlan1: entered allmulticast mode [ 382.477529][T29729] veth0_vlan: entered allmulticast mode [ 382.551752][T29736] team0: entered promiscuous mode [ 382.556974][T29736] team_slave_0: entered promiscuous mode [ 382.563334][T29736] team_slave_1: entered promiscuous mode [ 382.581348][T29736] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 382.593695][T29736] team0: left promiscuous mode [ 382.598872][T29736] team_slave_0: left promiscuous mode [ 382.604622][T29736] team_slave_1: left promiscuous mode [ 382.690570][T29749] set_capacity_and_notify: 1 callbacks suppressed [ 382.690589][T29749] loop2: detected capacity change from 0 to 128 [ 382.733758][T29749] FAT-fs (loop2): bogus number of reserved sectors [ 382.740775][T29749] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 382.743718][T29751] loop3: detected capacity change from 0 to 512 [ 382.751873][T29749] FAT-fs (loop2): Can't find a valid FAT filesystem [ 382.788179][T29751] EXT4-fs: Ignoring removed oldalloc option [ 382.826773][T29751] EXT4-fs: error -4 creating inode table initialization thread [ 382.840782][T29751] EXT4-fs (loop3): mount failed [ 382.875791][T29760] bridge_slave_0: left allmulticast mode [ 382.881558][T29760] bridge_slave_0: left promiscuous mode [ 382.887672][T29760] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.907496][T29764] netlink: 'syz.2.6690': attribute type 1 has an invalid length. [ 382.941304][T29760] bond0: (slave bond_slave_0): Releasing backup interface [ 382.975526][T29760] bond0: (slave bond_slave_1): Releasing backup interface [ 382.988749][T29760] team0: Port device team_slave_0 removed [ 382.999652][T29760] team0: Port device team_slave_1 removed [ 383.006923][T29760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.014649][T29760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.024288][T29760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.031912][T29760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.042766][T29760] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 383.066616][T29764] bond1: entered promiscuous mode [ 383.072422][T29764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.105058][T29775] bond1: (slave bridge1): making interface the new active one [ 383.112889][T29775] bridge1: entered promiscuous mode [ 383.129255][T29775] bridge1: left promiscuous mode [ 383.367392][T29791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.382120][T29791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.394708][T29791] Failed to initialize the IGMP autojoin socket (err -2) [ 383.599385][T29796] wireguard: wireguard0: Could not create IPv4 socket [ 383.903633][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 383.903658][ T29] audit: type=1400 audit(2000000433.045:8336): avc: denied { mount } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 383.939809][ T29] audit: type=1400 audit(2000000433.083:8337): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 383.965908][ T29] audit: type=1400 audit(2000000433.111:8338): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 383.988598][ T29] audit: type=1400 audit(2000000433.111:8339): avc: denied { read open } for pid=29810 comm="syz.8.6708" path="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.012187][ T29] audit: type=1400 audit(2000000433.148:8340): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.035755][ T29] audit: type=1400 audit(2000000433.148:8341): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.039396][T29808] netlink: 'syz.3.6707': attribute type 1 has an invalid length. [ 384.061877][ T29] audit: type=1400 audit(2000000433.195:8342): avc: denied { ioctl } for pid=29810 comm="syz.8.6708" path="/" dev="configfs" ino=1602 ioctlcmd=0x9362 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.090959][ T29] audit: type=1400 audit(2000000433.223:8343): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.098633][T29808] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.113387][ T29] audit: type=1400 audit(2000000433.223:8344): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.158592][ T29] audit: type=1400 audit(2000000433.289:8345): avc: denied { search } for pid=29810 comm="syz.8.6708" name="/" dev="configfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.166750][T29808] bond4: (slave bridge4): making interface the new active one [ 384.201159][T29808] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 384.255719][T29817] netlink: 'syz.3.6709': attribute type 3 has an invalid length. [ 384.348796][T29825] loop3: detected capacity change from 0 to 512 [ 384.372174][T29825] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 384.405430][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.413789][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.438044][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.458229][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.466668][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.496718][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.505808][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.513307][T29830] 9pnet_fd: Insufficient options for proto=fd [ 384.514120][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.528822][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.537449][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.546089][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.554322][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.562862][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.571130][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.580788][T29825] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 384.589805][T29825] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 384.707178][T29836] random: crng reseeded on system resumption [ 384.722910][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 384.734002][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 384.781049][T29841] __nla_validate_parse: 7 callbacks suppressed [ 384.781068][T29841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6715'. [ 384.840783][T29847] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29847 comm=syz.8.6721 [ 384.906776][T29851] loop2: detected capacity change from 0 to 128 [ 384.933491][T29853] loop3: detected capacity change from 0 to 128 [ 384.940008][T29851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6723'. [ 384.951734][T29853] EXT4-fs: Ignoring removed nobh option [ 384.977011][T29853] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.002254][T29853] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 385.077055][T29868] random: crng reseeded on system resumption [ 385.152348][T28020] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.162447][T29878] loop2: detected capacity change from 0 to 512 [ 385.184918][T29878] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 385.214343][T29866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6729'. [ 385.248982][T29866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6729'. [ 385.434625][T29891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6738'. [ 385.451678][T29891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.467050][T29891] 8021q: adding VLAN 0 to HW filter on device bond5 [ 385.475011][T29891] bond5: (slave gre1): The slave device specified does not support setting the MAC address [ 385.486808][T29891] bond5: (slave gre1): Error -95 calling set_mac_address [ 385.629779][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.639148][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.648922][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.657643][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.667027][T29903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.676372][T29903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.960275][T29909] netlink: 'syz.8.6746': attribute type 1 has an invalid length. [ 385.993004][T29909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.026719][T29909] bond6: (slave bridge4): making interface the new active one [ 386.051285][T29909] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 386.322147][T29938] loop6: detected capacity change from 0 to 128 [ 386.358843][T29938] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6757'. [ 386.379808][T29935] loop3: detected capacity change from 0 to 4096 [ 386.408365][T29935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.436722][T29935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.553926][T29942] loop2: detected capacity change from 0 to 4096 [ 386.561240][T29942] EXT4-fs: Ignoring removed mblk_io_submit option [ 386.567933][T29942] EXT4-fs: test_dummy_encryption option not supported [ 386.745870][T29955] loop6: detected capacity change from 0 to 128 [ 386.840845][T29957] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.846303][T29960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6766'. [ 386.858053][T29957] ext4 filesystem being mounted at /120/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.877005][T29961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6766'. [ 386.878998][T29955] EXT4-fs: Ignoring removed nobh option [ 386.908194][T29955] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.908438][T27233] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.941029][T29955] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.009955][T29977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6772'. [ 387.103972][T25724] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.150525][T29975] futex_wake_op: syz.8.6771 tries to shift op by 32; fix this program [ 387.180951][T29998] EXT4-fs: Ignoring removed nobh option [ 387.206599][T29995] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 387.228217][T29995] SELinux: failed to load policy [ 387.247874][T29998] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.262698][T29998] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.290952][T30005] FAT-fs (loop3): bogus number of reserved sectors [ 387.297522][T30005] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 387.308555][T30005] FAT-fs (loop3): Can't find a valid FAT filesystem [ 387.443945][T30011] netlink: 'syz.1.6782': attribute type 1 has an invalid length. [ 387.735256][T30019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.766922][T30019] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6787'. [ 387.878321][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.987429][T25724] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.364348][T30042] futex_wake_op: syz.3.6795 tries to shift op by 32; fix this program [ 388.668142][T30080] set_capacity_and_notify: 4 callbacks suppressed [ 388.668164][T30080] loop3: detected capacity change from 0 to 1024 [ 388.691168][T30080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.736301][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.805650][T30085] loop2: detected capacity change from 0 to 4096 [ 388.834951][T30085] EXT4-fs: Ignoring removed mblk_io_submit option [ 388.841568][T30085] EXT4-fs: test_dummy_encryption option not supported [ 388.927166][T30087] netlink: 'syz.3.6810': attribute type 1 has an invalid length. [ 388.953476][T30087] 8021q: adding VLAN 0 to HW filter on device bond6 [ 388.981338][T30087] bond6: (slave bridge5): making interface the new active one [ 388.993736][T30087] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 389.039060][T30101] loop3: detected capacity change from 0 to 128 [ 389.046030][T30101] EXT4-fs: Ignoring removed nobh option [ 389.071775][T30101] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.084673][T30101] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 389.182720][T30115] 9p: Bad value for 'rfdno' [ 389.194103][T30115] loop2: detected capacity change from 0 to 256 [ 389.252453][T30115] FAT-fs (loop2): Directory bread(block 64) failed [ 389.252517][T28020] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.259184][T30115] FAT-fs (loop2): Directory bread(block 65) failed [ 389.275420][T30115] FAT-fs (loop2): Directory bread(block 66) failed [ 389.289797][T30115] FAT-fs (loop2): Directory bread(block 67) failed [ 389.296583][T30127] loop3: detected capacity change from 0 to 512 [ 389.299145][T30115] FAT-fs (loop2): Directory bread(block 68) failed [ 389.311219][T30127] ext4: Unknown parameter 'permit_directio' [ 389.318408][T30115] FAT-fs (loop2): Directory bread(block 69) failed [ 389.333067][T30115] FAT-fs (loop2): Directory bread(block 70) failed [ 389.343715][T30115] FAT-fs (loop2): Directory bread(block 71) failed [ 389.352112][T30131] loop3: detected capacity change from 0 to 128 [ 389.359091][T30115] FAT-fs (loop2): Directory bread(block 72) failed [ 389.365902][T30133] 9p: Bad value for 'wfdno' [ 389.372223][T30131] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.383125][T30115] FAT-fs (loop2): Directory bread(block 73) failed [ 389.393593][T30133] ip6tnl1: entered promiscuous mode [ 389.416368][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 389.416387][ T29] audit: type=1400 audit(2000000438.200:8403): avc: denied { watch watch_reads } for pid=30130 comm="syz.3.6828" path="/127/file0/file0" dev="loop3" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 389.553500][ T29] audit: type=1400 audit(2000000438.331:8404): avc: denied { write } for pid=30148 comm="syz.1.6836" path="socket:[98572]" dev="sockfs" ino=98572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 389.611237][T30149] bond0: entered promiscuous mode [ 389.616435][T30149] bond_slave_0: entered promiscuous mode [ 389.622303][T30149] bond_slave_1: entered promiscuous mode [ 389.641566][T30149] batadv0: entered promiscuous mode [ 389.647747][T30149] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 389.671342][ T29] audit: type=1400 audit(2000000438.443:8405): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 389.761943][T30171] netlink: 'syz.2.6845': attribute type 6 has an invalid length. [ 389.769932][T30171] netlink: 'syz.2.6845': attribute type 5 has an invalid length. [ 389.938742][T30196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30196 comm=syz.2.6848 [ 389.954660][T30196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 390.094984][T30196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30196 comm=syz.2.6848 [ 390.226847][T30202] netlink: 'syz.2.6849': attribute type 1 has an invalid length. [ 390.245344][T30202] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.261988][T30202] bond2: (slave bridge1): making interface the new active one [ 390.278302][T30202] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 390.646080][T30208] __nla_validate_parse: 9 callbacks suppressed [ 390.646099][T30208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6851'. [ 390.662233][T30209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6850'. [ 390.845779][ T29] audit: type=1326 audit(2000000439.538:8406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 390.872797][ T29] audit: type=1326 audit(2000000439.566:8407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 390.897181][ T29] audit: type=1326 audit(2000000439.566:8408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 390.922093][ T29] audit: type=1326 audit(2000000439.566:8409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 390.946670][ T29] audit: type=1326 audit(2000000439.631:8410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 390.971019][ T29] audit: type=1326 audit(2000000439.631:8411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 390.995255][ T29] audit: type=1326 audit(2000000439.631:8412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.6853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 391.272661][T30241] loop2: detected capacity change from 0 to 128 [ 391.298188][T30241] FAT-fs (loop2): bogus number of reserved sectors [ 391.304793][T30241] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 391.316135][T30241] FAT-fs (loop2): Can't find a valid FAT filesystem [ 391.325790][T30242] Failed to initialize the IGMP autojoin socket (err -2) [ 391.417872][T30251] veth0_to_team: entered promiscuous mode [ 391.424106][T30251] veth0_to_team: entered allmulticast mode [ 391.438578][T30249] loop2: detected capacity change from 0 to 512 [ 391.445180][T30251] loop3: detected capacity change from 0 to 128 [ 391.457962][T30251] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 391.485631][T30249] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.6863: iget: bad extended attribute block 1 [ 391.506413][T30249] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6863: couldn't read orphan inode 15 (err -117) [ 391.546346][T30249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.609608][T30259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6867'. [ 391.652545][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.777838][T30276] loop3: detected capacity change from 0 to 128 [ 391.796267][T30276] FAT-fs (loop3): bogus number of reserved sectors [ 391.803443][T30276] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 391.814460][T30276] FAT-fs (loop3): Can't find a valid FAT filesystem [ 392.132889][T30300] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6883'. [ 392.237846][T30302] netlink: 'syz.1.6884': attribute type 83 has an invalid length. [ 392.467300][T30329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6895'. [ 392.479271][T30319] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.486230][T30319] EXT4-fs: test_dummy_encryption option not supported [ 392.622325][T30344] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.802650][T30354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6903'. [ 392.814060][T30354] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6903'. [ 392.906280][T30366] EXT4-fs: Ignoring removed nobh option [ 392.935759][T30366] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 392.963945][T30366] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 392.994366][T30375] random: crng reseeded on system resumption [ 393.174846][T27233] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.195749][T30399] FAT-fs (loop3): bogus number of reserved sectors [ 393.202519][T30399] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 393.213731][T30399] FAT-fs (loop3): Can't find a valid FAT filesystem [ 393.421901][T30413] Failed to initialize the IGMP autojoin socket (err -2) [ 393.525364][T30415] netlink: 'syz.8.6929': attribute type 1 has an invalid length. [ 393.622330][T30427] EXT4-fs: Ignoring removed bh option [ 393.627966][T30427] EXT4-fs: Ignoring removed nobh option [ 393.635308][T30428] EXT4-fs: Ignoring removed nobh option [ 393.658509][T30428] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 393.672700][T30427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.688509][T30428] ext4 filesystem being mounted at /155/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 393.799952][T30427] netlink: 'syz.3.6933': attribute type 83 has an invalid length. [ 393.848365][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.919663][T27233] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.921209][T30415] 8021q: adding VLAN 0 to HW filter on device bond7 [ 393.952429][T30436] IPv6: addrconf: prefix option has invalid lifetime [ 393.958282][T30424] bond7: (slave bridge5): making interface the new active one [ 393.968779][T30424] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 394.850126][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 394.850199][ T29] audit: type=1400 audit(2000000443.289:8717): avc: denied { read } for pid=30474 comm="syz.2.6952" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 394.879505][ T29] audit: type=1400 audit(2000000443.289:8718): avc: denied { open } for pid=30474 comm="syz.2.6952" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 394.947781][T30477] netlink: 'syz.1.6953': attribute type 4 has an invalid length. [ 394.955815][T30477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6953'. [ 394.979695][T30479] random: crng reseeded on system resumption [ 395.061197][T30484] set_capacity_and_notify: 5 callbacks suppressed [ 395.061280][T30484] loop2: detected capacity change from 0 to 1024 [ 395.093111][T30484] EXT4-fs: Ignoring removed nobh option [ 395.118192][T30484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.247630][T30507] random: crng reseeded on system resumption [ 395.341859][ T29] audit: type=1400 audit(2000000443.748:8719): avc: denied { map } for pid=30483 comm="syz.2.6958" path="/165/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.365847][ T29] audit: type=1400 audit(2000000443.748:8720): avc: denied { execute } for pid=30483 comm="syz.2.6958" path="/165/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.406665][ T29] audit: type=1400 audit(2000000443.804:8721): avc: denied { ioctl } for pid=30483 comm="syz.2.6958" path="/165/file1/file1" dev="loop2" ino=15 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 395.473350][T30515] Failed to initialize the IGMP autojoin socket (err -2) [ 395.492264][T30517] vhci_hcd vhci_hcd.0: invalid port number 65 [ 395.498548][T30517] vhci_hcd vhci_hcd.0: invalid port number 65 [ 395.505113][ T29] audit: type=1400 audit(2000000443.888:8722): avc: denied { append } for pid=30516 comm="syz.3.6969" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 395.542921][T30527] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 395.572697][T30526] syz_tun: entered allmulticast mode [ 395.591049][T30526] team0: Port device syz_tun added [ 395.665427][ T29] audit: type=1326 audit(2000000444.047:8723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30532 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf38b0aeb9 code=0x7ffc0000 [ 395.692300][ T29] audit: type=1326 audit(2000000444.075:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30532 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf38b0aeb9 code=0x7ffc0000 [ 395.716200][ T29] audit: type=1326 audit(2000000444.075:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30532 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf38b0aeb9 code=0x7ffc0000 [ 395.743738][ T29] audit: type=1326 audit(2000000444.122:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30532 comm="syz.8.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fdf38b0aeb9 code=0x7ffc0000 [ 395.789504][T30531] netlink: 'syz.3.6973': attribute type 1 has an invalid length. [ 395.805067][T30531] 8021q: adding VLAN 0 to HW filter on device bond7 [ 395.828464][T30531] bond7: (slave bridge6): making interface the new active one [ 395.836950][T30531] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 395.990227][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.098909][T30560] loop3: detected capacity change from 0 to 128 [ 396.110446][T30560] FAT-fs (loop3): bogus number of reserved sectors [ 396.117173][T30560] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 396.128196][T30560] FAT-fs (loop3): Can't find a valid FAT filesystem [ 396.187035][T30568] loop3: detected capacity change from 0 to 512 [ 396.225334][T30576] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 396.252141][T30576] 8021q: adding VLAN 0 to HW filter on device bond3 [ 396.291387][T30582] loop3: detected capacity change from 0 to 1024 [ 396.307684][T30582] EXT4-fs: Ignoring removed nobh option [ 396.315784][T30587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6992'. [ 396.328201][T30563] bond3: (slave bridge2): making interface the new active one [ 396.339306][T30563] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 396.350051][T30582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.364179][T30588] netlink: 'syz.6.6990': attribute type 8 has an invalid length. [ 396.487724][T30602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.499229][T30604] loop2: detected capacity change from 0 to 128 [ 396.508006][T30602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.519639][T30604] FAT-fs (loop2): bogus number of reserved sectors [ 396.526424][T30604] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 396.537471][T30604] FAT-fs (loop2): Can't find a valid FAT filesystem [ 396.582260][T30602] program syz.1.6997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.606306][T30617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7002'. [ 396.615331][T30617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7002'. [ 396.630129][T30617] loop2: detected capacity change from 0 to 512 [ 396.649211][T30617] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 396.659813][T30617] EXT4-fs (loop2): orphan cleanup on readonly fs [ 396.666955][T30617] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.7002: Failed to acquire dquot type 1 [ 396.679178][T30617] EXT4-fs (loop2): Remounting filesystem read-only [ 396.686274][T30617] EXT4-fs (loop2): 1 truncate cleaned up [ 396.692504][T30617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 396.718804][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.782014][T30639] loop2: detected capacity change from 0 to 128 [ 396.790739][T30639] FAT-fs (loop2): bogus number of reserved sectors [ 396.797361][T30639] FAT-fs (loop2): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 396.808516][T30639] FAT-fs (loop2): Can't find a valid FAT filesystem [ 397.182796][T28020] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.282882][T30693] loop3: detected capacity change from 0 to 128 [ 397.293823][T30693] FAT-fs (loop3): bogus number of reserved sectors [ 397.300795][T30693] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 397.312117][T30693] FAT-fs (loop3): Can't find a valid FAT filesystem [ 397.373533][T30703] loop3: detected capacity change from 0 to 128 [ 397.413344][T30703] EXT4-fs: Ignoring removed nobh option [ 397.433617][T30703] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 397.451632][T30703] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.483566][T30706] netlink: 766 bytes leftover after parsing attributes in process `syz.8.7036'. [ 397.658993][T28020] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.726809][T30743] loop3: detected capacity change from 0 to 128 [ 397.739407][T30698] netlink: 'syz.6.7030': attribute type 1 has an invalid length. [ 397.782105][T30698] 8021q: adding VLAN 0 to HW filter on device bond4 [ 397.810918][T30698] bond4: (slave bridge3): making interface the new active one [ 397.822487][T30698] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 398.058613][T30755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7055'. [ 398.096829][T30755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=30755 comm=syz.1.7055 [ 398.164974][T30761] FAT-fs (loop6): bogus number of reserved sectors [ 398.171848][T30761] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 398.183201][T30761] FAT-fs (loop6): Can't find a valid FAT filesystem [ 398.772520][T30777] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7064'. [ 398.781648][T30777] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7064'. [ 398.931029][T30781] EXT4-fs: Ignoring removed mblk_io_submit option [ 398.937757][T30781] EXT4-fs: test_dummy_encryption option not supported [ 399.228658][T30778] netlink: 'syz.8.7064': attribute type 1 has an invalid length. [ 399.247255][T30780] Failed to initialize the IGMP autojoin socket (err -2) [ 399.262420][T30778] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.450545][T30775] bond8: (slave bridge6): making interface the new active one [ 399.472676][T30775] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 399.574330][T30793] Failed to initialize the IGMP autojoin socket (err -2) [ 399.595971][T30811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.615595][T30811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.679336][T30811] program syz.3.7074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.268413][T30829] Failed to initialize the IGMP autojoin socket (err -2) [ 400.441192][T30852] random: crng reseeded on system resumption [ 400.453491][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 400.453509][ T29] audit: type=1326 audit(2000000448.528:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.489376][ T29] audit: type=1326 audit(2000000448.528:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.513077][ T29] audit: type=1326 audit(2000000448.566:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.534663][T30863] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7087'. [ 400.537319][ T29] audit: type=1326 audit(2000000448.566:9053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.546362][T30863] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7087'. [ 400.580211][ T29] audit: type=1326 audit(2000000448.566:9054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.607231][T30856] Failed to initialize the IGMP autojoin socket (err -2) [ 400.608531][ T29] audit: type=1326 audit(2000000448.566:9055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.638070][ T29] audit: type=1326 audit(2000000448.566:9056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.639242][T30863] netlink: 'syz.6.7087': attribute type 1 has an invalid length. [ 400.680949][T30863] 8021q: adding VLAN 0 to HW filter on device bond5 [ 400.699027][ T29] audit: type=1326 audit(2000000448.762:9057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 400.723448][ T29] audit: type=1326 audit(2000000448.762:9058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30853 comm="syz.1.7101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaf0c8aeb9 code=0x7ffc0000 [ 401.092424][ T29] audit: type=1400 audit(2000000449.127:9059): avc: denied { accept } for pid=30882 comm="syz.3.7097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 401.094311][T30851] bond5: (slave bridge4): making interface the new active one [ 401.980518][T30865] set_capacity_and_notify: 2 callbacks suppressed [ 401.980540][T30865] loop2: detected capacity change from 0 to 4096 [ 402.012741][T30865] EXT4-fs: Ignoring removed mblk_io_submit option [ 402.019369][T30865] EXT4-fs: test_dummy_encryption option not supported [ 402.226172][T30851] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 402.235973][T30878] Failed to initialize the IGMP autojoin socket (err -2) [ 402.249981][T30890] loop2: detected capacity change from 0 to 128 [ 402.259760][T30887] netlink: 766 bytes leftover after parsing attributes in process `syz.3.7097'. [ 402.268547][T30890] EXT4-fs: Ignoring removed nobh option [ 402.278006][T16404] bridge_slave_1: left allmulticast mode [ 402.283840][T16404] bridge_slave_1: left promiscuous mode [ 402.289774][T16404] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.299370][T16404] bridge_slave_0: left allmulticast mode [ 402.305042][T16404] bridge_slave_0: left promiscuous mode [ 402.310997][T16404] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.334968][T30890] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 402.361901][T30890] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 402.479931][T30899] loop3: detected capacity change from 0 to 128 [ 402.488058][T30899] FAT-fs (loop3): bogus number of reserved sectors [ 402.495513][T30899] FAT-fs (loop3): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 402.506570][T30899] FAT-fs (loop3): Can't find a valid FAT filesystem [ 402.546862][T30901] random: crng reseeded on system resumption [ 402.588628][T27233] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.604503][T16404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.619203][T16404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.639553][T16404] bond0 (unregistering): Released all slaves [ 402.706274][T16404] tipc: Left network mode [ 402.728146][T16404] hsr_slave_0: left promiscuous mode [ 402.746312][T16404] hsr_slave_1: left promiscuous mode [ 402.752111][T16404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.759588][T16404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.775763][T30921] loop6: detected capacity change from 0 to 128 [ 402.791517][T16404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.799102][T16404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.809998][T16404] veth1_macvtap: left promiscuous mode [ 402.816671][T16404] veth0_macvtap: left promiscuous mode [ 402.823843][T16404] veth1_vlan: left promiscuous mode [ 402.829457][T16404] veth0_vlan: left promiscuous mode [ 402.866981][T30928] random: crng reseeded on system resumption [ 402.930670][T16404] team0 (unregistering): Port device team_slave_1 removed [ 402.941583][T16404] team0 (unregistering): Port device team_slave_0 removed [ 402.987668][T30933] netlink: 'syz.3.7110': attribute type 1 has an invalid length. [ 402.996200][T30921] FAT-fs (loop6): bogus number of reserved sectors [ 403.002811][T30921] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 403.014441][T30921] FAT-fs (loop6): Can't find a valid FAT filesystem [ 403.051554][T30933] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.066178][T30926] bond8: (slave bridge7): making interface the new active one [ 403.085421][T30926] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 403.987894][ T3409] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 404.007908][ T3409] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.073438][T30952] loop2: detected capacity change from 0 to 4096 [ 404.085127][T30952] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.091816][T30952] EXT4-fs: test_dummy_encryption option not supported [ 404.217437][T13085] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 404.237355][T13085] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 404.301575][T30954] loop3: detected capacity change from 0 to 4096 [ 404.311092][T30954] EXT4-fs: Ignoring removed mblk_io_submit option [ 404.318244][T30954] EXT4-fs: test_dummy_encryption option not supported [ 404.613394][T30963] Failed to initialize the IGMP autojoin socket (err -2) [ 404.619486][T30964] random: crng reseeded on system resumption [ 404.671853][T30970] veth0_to_team: left promiscuous mode [ 404.677418][T30970] veth0_to_team: left allmulticast mode [ 404.894661][T30971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30971 comm=syz.6.7133 [ 404.949333][T30971] netlink: 'syz.6.7133': attribute type 1 has an invalid length. [ 405.081038][T30971] bond6: (slave bridge5): making interface the new active one [ 405.098627][T30971] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 405.139737][T30980] netlink: 'syz.2.7128': attribute type 1 has an invalid length. [ 405.177673][T30980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.212703][T30978] bond4: (slave bridge3): making interface the new active one [ 405.233691][T30978] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 405.342635][T30986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7129'. [ 405.477211][T30987] loop2: detected capacity change from 0 to 512 [ 405.496877][T30987] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 405.582529][T30993] syzkaller0: entered promiscuous mode [ 405.588546][T30993] syzkaller0: entered allmulticast mode [ 405.616662][T30993] tipc: Started in network mode [ 405.621655][T30993] tipc: Node identity cad62dac45e9, cluster identity 4711 [ 405.628851][T30993] tipc: Enabled bearer , priority 0 [ 405.645510][T30986] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.7129: Unimplemented hash flags: 0x0001 [ 405.662665][T30986] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.7129: Corrupt directory, running e2fsck is recommended [ 405.681701][T30986] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.7129: path /201/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 405.709020][T30993] netlink: 'syz.3.7131': attribute type 1 has an invalid length. [ 405.768589][T30993] tipc: Resetting bearer [ 405.786664][T30993] tipc: Disabling bearer [ 406.310459][ T3410] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 406.320111][ T3410] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 406.345250][T27233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.368879][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 406.368898][ T29] audit: type=1400 audit(2000000454.057:9064): avc: denied { write } for pid=31003 comm="syz.3.7136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 406.368993][T31004] ================================================================== [ 406.403775][T31004] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 406.410511][T31004] [ 406.412954][T31004] write to 0xffffffff86a826b8 of 8 bytes by task 29 on cpu 1: [ 406.420608][T31004] data_alloc+0x31c/0x390 [ 406.424989][T31004] prb_reserve+0x8d7/0xae0 [ 406.429622][T31004] vprintk_store+0x54a/0x910 [ 406.434261][T31004] vprintk_emit+0x1a4/0x600 [ 406.438993][T31004] vprintk_default+0x26/0x30 [ 406.443871][T31004] vprintk+0x1d/0x30 [ 406.447876][T31004] _printk+0x79/0xa0 [ 406.451789][T31004] kauditd_hold_skb+0x1b1/0x1c0 [ 406.456684][T31004] kauditd_send_queue+0x273/0x2c0 [ 406.461817][T31004] kauditd_thread+0x442/0x680 [ 406.466513][T31004] kthread+0x488/0x510 [ 406.470685][T31004] ret_from_fork+0x148/0x280 [ 406.475480][T31004] ret_from_fork_asm+0x1a/0x30 [ 406.480344][T31004] [ 406.482779][T31004] read to 0xffffffff86a826b8 of 8 bytes by task 31004 on cpu 0: [ 406.490596][T31004] prb_reserve+0x207/0xae0 [ 406.495033][T31004] vprintk_store+0x54a/0x910 [ 406.499830][T31004] vprintk_emit+0x1a4/0x600 [ 406.504452][T31004] vprintk_default+0x26/0x30 [ 406.509502][T31004] vprintk+0x1d/0x30 [ 406.513514][T31004] _printk+0x79/0xa0 [ 406.517442][T31004] __nla_validate_parse+0x1226/0x1cf0 [ 406.522929][T31004] __nla_parse+0x40/0x60 [ 406.527275][T31004] res_get_common_doit+0xc2/0x5f0 [ 406.532317][T31004] nldev_res_get_srq_doit+0x31/0x40 [ 406.537615][T31004] rdma_nl_rcv+0x477/0x5b0 [ 406.542038][T31004] netlink_unicast+0x5c0/0x690 [ 406.546825][T31004] netlink_sendmsg+0x5c8/0x6f0 [ 406.551620][T31004] ____sys_sendmsg+0x5af/0x600 [ 406.556565][T31004] ___sys_sendmsg+0x195/0x1e0 [ 406.562039][T31004] __x64_sys_sendmsg+0xd4/0x160 [ 406.567077][T31004] x64_sys_call+0x17ba/0x3000 [ 406.572031][T31004] do_syscall_64+0xc0/0x2a0 [ 406.576821][T31004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.583106][T31004] [ 406.585523][T31004] value changed: 0x0000000000019150 -> 0x00000000000c6450 [ 406.592901][T31004] [ 406.595257][T31004] Reported by Kernel Concurrency Sanitizer on: [ 406.601511][T31004] CPU: 0 UID: 0 PID: 31004 Comm: syz.3.7136 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 406.613428][T31004] Tainted: [W]=WARN [ 406.617247][T31004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.627733][T31004] ================================================================== [ 406.368885][T31004] netlink: 'syz.3.7136': attribute type 6 has an invalid length. [ 406.661922][T31000] loop6: detected capacity change from 0 to 128 [ 406.770735][T31000] FAT-fs (loop6): bogus number of reserved sectors [ 406.778019][T31000] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 406.789376][T31000] FAT-fs (loop6): Can't find a valid FAT filesystem [ 407.068356][T23366] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 407.086658][T23366] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 407.112364][T31008] loop2: detected capacity change from 0 to 4096 [ 407.129596][T31008] EXT4-fs: Ignoring removed mblk_io_submit option [ 407.136119][T31008] EXT4-fs: test_dummy_encryption option not supported