last executing test programs: 6m48.815783442s ago: executing program 32 (id=23): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000004000000004000000"], 0x50) socket(0x8, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000700)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000c40)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000c80)=0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000280)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(0xffffffffffffffff, &(0x7f0000000d80)="60000000100001000100"/19, 0x13) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m37.638715087s ago: executing program 33 (id=142): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="7c1700003100090029bd700000000000040000006817118014ffa5fa65e83435b538ae8e5a6ea3bebc1fe99e10"], 0x177c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x2085c, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x8000000000000001, r0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6000000002060103000000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x9c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}]}}]}, 0x9c}}, 0x0) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000040000000000000000000000239500000000000000"], &(0x7f0000000ec0)='syzkaller\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={r4, 0x7f, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff42, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffe32, &(0x7f0000001040), 0xfffffffffffffffe, 0x0, 0xf5, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x8, &(0x7f0000001080)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRESHEX=r5], 0x50) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001100)={r5}, 0x4) perf_event_open(&(0x7f0000001140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a18, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c0000002600010022bdf008f9ffffff3f0004000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c953}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f0000000940)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000980), 0xfe11) close(0xffffffffffffffff) 6m37.072479325s ago: executing program 34 (id=148): socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00', @ANYRESHEX=r0, @ANYBLOB="2be86b0f872bd83620b48299922e97d91e21e0bd1479ec35acf1b1b9c060964aa9794eb6930aec54ac541936c68f6e36ea8127f672dcb58b00d639d6fae30768a0abe4291becb2000000d6ff3f9e60f8", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001c40)=ANY=[], 0x20) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x7, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0xf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x386, 0x0, 0x0, 0x9, 0x5, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe33) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={0xffffffffffffffff, 0xfffffffffffffffe, 0x0}, 0x20) r1 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x2, &(0x7f00000008c0)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}], 0x0, 0x3, 0x0, 0x0, 0x40c00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x2, 0xc, 0x4, 0x5c}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000280)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r3, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b70000000000"], &(0x7f0000000680)='GPL\x00', 0x1, 0x100000, &(0x7f0000001d00)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000101d00)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000ac0)='memory.events\x00', 0x26e1, 0x804) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001bc0)={0x70, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}}]}]}, 0x70}}, 0x0) 6m36.583631484s ago: executing program 35 (id=155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000004000000004000000"], 0x50) socket(0x8, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000700)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000c00), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000c40)) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000c80)=0x1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000280)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write(0xffffffffffffffff, &(0x7f0000000d80)="60000000100001000100"/19, 0x13) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 6m35.879945146s ago: executing program 36 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, 0x0, &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000900)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 6m15.284424488s ago: executing program 37 (id=393): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff0}, 0x3830, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400dc}, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) sendmmsg(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000700)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000800)=ANY=[], 0x108}}], 0x2, 0xc040) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) ioctl$TIOCSPTLCK(r8, 0x40045431, &(0x7f0000000840)) r9 = syz_open_pts(r8, 0x8200) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000880)=0x1) 5m38.698532855s ago: executing program 38 (id=808): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x8365, 0x0, 0xffffd304, 0x7, 0x40000204, 0x80, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8000000080000000000000000000aafc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000000000000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006c7a6a68"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a030600000000000000000a0000090900010073797a31000000000900020073797a32000000005c0004805800018007000100637400004c000280080002400000001108000440000000040800024000000012050003"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 5m29.173378502s ago: executing program 39 (id=900): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x8, 0x9b, 0x0, 0x2000000000000008, 0x8, 0x4}, 0x0, 0xaffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) lstat(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000380)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000003c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = open(&(0x7f0000000400)='.\x00', 0x0, 0x244) r6 = syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/resume', 0xa82, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000480)={'icmp6\x00'}, &(0x7f00000004c0)=0x1e) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x10000, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xbb, &(0x7f0000000580)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000006c0)={'macsec0\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_int(r7, &(0x7f0000000700)=0x3, 0xe) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x14, 0x1, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a00000009500000000008000"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m17.149853174s ago: executing program 40 (id=1031): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, r0, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x1000, 0x7}, 0x9696a46c4adce67c, 0x2, 0x790, 0x0, 0x4, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x180) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000640)='./proc\x00', &(0x7f0000000680)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f0000000700)='4', 0x4b) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000740)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @private=0xa010100}, {0x2, 0x4e24, @private=0xa010100}, 0x106, 0x0, 0x0, 0x0, 0xfae9, 0x0, 0x800, 0x6, 0x80}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800) timer_create(0x3, &(0x7f00000000c0)={0x0, 0x11, 0x4}, 0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000100)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x3) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000200)="392c00b5a56547", 0x7}, {0x0}], 0x2) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000004c0)=0x0) sched_setscheduler(r5, 0x5, &(0x7f0000000240)=0x400) perf_event_open(0x0, r1, 0xf, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0xa, 0x4}, 0x50) 5m15.40748817s ago: executing program 41 (id=1046): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x25, &(0x7f0000000140)={0x1, 0x0, 0x40, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="660a000004000000611150000000000085000000a20000009500000000000000e39c5cb1e38dbf2fee1f31a68e2de4305464cf3bade5f776665521f66ad9bc8291cc0ab2b40793a02e41a60d8a643c94fc49a20f9a31392be100000000d6323cb1334fa2539efd0a62ebddb4f48fee66a829a7"], &(0x7f0000000780)='syzkaller\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x1, 0x19}}, './file0\x00'}) r2 = getpgrp(0xffffffffffffffff) prlimit64(r2, 0xe, &(0x7f0000000580)={0x2000e046, 0xffffffffffffffff}, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, r2}) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x2, 0x0, 0x100000007, 0x5}) setns(0xc9, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r5 = socket(0x10, 0x1, 0x1000) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x5, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$inet(0x2, 0x2, 0x0) ioctl(r6, 0x8914, &(0x7f0000000100)="7465716c3000000000000000000000000100"/40) ioctl(r6, 0x8914, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = mq_open(&(0x7f0000000880)='eth0\x00Sf \xdd6D\xbfy\x99\f\xa3%\xd5\x1c\xeb\xda\xe4\xb2k\xb1\fW\xfeky\n\x8d\bx\x0e\x84\xf7\x97G\xf7V\x11\xd3h\x0e\xc7k|\xd5^\t\x00\x00\x00e\x93\x8d\x88\x0eV\x89_\xe8\xd1\x04\xb4bA\xa4 \xe1`\x18\x06s\xc2rcV\xe7\xc3\x99\xe6A\x90\xbaT\xefk#\x86\x1a\x1a\xca/.`)\xc8-|F\x9a\x9c\xa7(\x90.0\xa8\xdb\x14?\xf5_C\xe6j\x01\x0f\x8f\a\n\x8fu\x11\xcfP \bpA\xae=\xb7{r,\xbe\xf6\x7f\xe3\x02\x86q\x9c\xa12v\r\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\x15!\f\x1a\x86H\a\xb6\x06gT\x84\x17:O.f\xaa\x90\x9eb\x9a\x8b\xff\xb3\xa9\xf9\f;g\x16r\x16\xe4Z\x88K9\x1a\xd3\xf0{Y%\xb93\xa6\xb1\xd1\xe2\xf0\xf2\xa4\xa3 \'\xac\"gG\x89\x9c\xb4\x8e:\xe6\x9f_\xe6\x93\x8c2\x80\xac\x03\x10\x9d]j0\x8a\x10\xc1\xe8\x16\x95`\x98\xb9\x8f\x91K\xfb\x9f\x83\r\x1eP\xe2\x12Y?5\xa3\x16\x18\xb7\xca\x80\xa4H:\xd2\x8c\xabz\xc6\xf6w\x19\x17OQ\x99\xea\x8f-\xd7\x8e\x83\xaa\xdd\x0f\xb3+\xdd\xb6\xddh6$\xf9@sPk\xb1\aD\x02I\x0f\x8cd\x17\xa7\x8b.\xe1\xd9\x87\x15\xfdP\xd5.\x99w\xa0Tcg_\xd1-.m\xc39\xaaQ\x11\x8aP-h\xbd\bko\xc7\xb6\xcbvi\v\xafP(q\xa1/\x97\xde\x8b\xee\x04\xce*\xdf\xbd[d\xe6\xed\xe6\x83\x15K\x1e\x89\xc2;\x7f\xd7+\x1b\x81t\xd4\xf2\xad\x87uK\x95\bz\xe9r\xa4\x0e\xae\xc9\xa6)\xb9q\xc9\x8d{', 0x800, 0x80, 0x0) mq_notify(r9, &(0x7f0000000300)={0x0, 0x34, 0x1, @thr={0x0, 0x0}}) 5m14.547195548s ago: executing program 42 (id=1054): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prlimit64(r0, 0xf, &(0x7f0000000040)={0x2, 0x4000000006}, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) bind$netlink(r1, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfb, 0x42ceed484deb36e9}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000240)}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000202, 0x1, 0x40010, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041891}, 0x24040010) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x44080) mount(&(0x7f0000000880)=@sg0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='bdev\x00', 0x2000000, 0x0) syz_open_procfs(0x0, &(0x7f0000000940)='net/snmp6\x00') socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0502103, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x10, 0x1414, 0x1, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) 5m12.908992804s ago: executing program 43 (id=1062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000001bc0)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 4m50.449540626s ago: executing program 44 (id=1303): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x8c, 0x2}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000001c0), 0x0, &(0x7f0000000200)) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x198, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_uuid={0x0, '\x00', {'CRP-syz', 0x0, '0\x00'}}, [@striped={0x0, 0x48, 0x0, 0x60, 'striped\x00', {0x1, 0x20, '32', [{0x20, {@ram_num={'1:', 0x0}, 0x20, '4096'}}]}}]}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000600), 0x0, 0x289, &(0x7f0000000640)="$eJzs3T9oA1UcB/DfXZL+DVoVRBT/gIhoodTBSQRdFAoiRURQoSLiJK1QLW6Nk4uDziqdXIq4WR3FpbgIXat2qAgiFgeLgw6RyyUlpGkb0uRSk88H0svde+/eS+n35VGa1wAm1kJEPBURpYhYjIhKRCTtFR7IHwvN053Z/bWIev2FP5NGvfw812o3HxG1iDQiyq2yrb1Xjv8+fPbhD9+tPPT53suzBby0UueFk+Oj504/e/6Dr1Ye20qb16rNY/vrGKC7b+1ysZxE3D6Ezm6KpDzqEdCL1fe+/DELyR0R8WAj/5VIm5H9aHPqu0o8+ulFbT/+4+CeIscKDF69XsneA2t1YOKkjTVwki5FvmCvRpouLeVr+J9Kc+lbG5vvLL65UVp/o33WKGL5DgxLNeLomW+mv57vyP9vpTz/wPjK8v/i6u7P2fPTc78pA8bSvfkhy//ia9uPhPzDxJF/GA9zfbSRfxgL1T4byT/83/WZ3T7yf+evB0/21xlwo/SY/9+LHBNQDOt/GGOV1pNa12L5hzE1fXWVnvPvT31h7DTz/3g66oEAhWt//wcAJkt9etSfQAZGZdTzDwAAAAAAAAAAAAAAAAAAcN7O7P5a6xGRFNLn959EnDwdEeXO/qPxjw3yvclmGl/n/kqyameSvFnTVF/9v3r/dUZ/fV8M/9PX5Y7zmfaTW34Zev+X+uG+wdync4vK9y8vPrO9HlHLKi+Xy+d//pK4ZG+8nnbMve2K8srrvdxlcDpT/cRLRfR68Xfx390i+r/YymHEt9n8s9xt/knjrsax+/xTbd9iuU9v/3PNGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCY/wIAAP//xHJr6g==") prlimit64(0x0, 0xe, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000900)='.\x00', &(0x7f0000000940)='system.posix_acl_default\x00', &(0x7f0000001c00)=ANY=[@ANYBLOB="02000000010000002400000000f4ffff0f00000000000000200000000000000000000000696a7ebfa0abb3411ab22a8e459e96ddfc09045f3b6b768c84d8b618571c2087eaf66dc3be0a9f8c4b65af9b5b87791ec9b6a7b76880818ec820e2fa8733cf340e77ad6c41c0"], 0x24, 0x1) mkdir(&(0x7f00000009c0)='./control\x00', 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_bp={0x0, 0x3}, 0x100000, 0x0, 0xa, 0x4, 0x9, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0xe, 0x16, &(0x7f0000000b40)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503feff177400407b0008ff0000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b65b0ff000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71040000000000000052bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8702f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a533952a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x46, &(0x7f0000001780)=ANY=[@ANYBLOB="bbbb0000000000000006aabb86dd60c6dd0000090000000000000000000000000000000000bbff0200000000000000000000000000018c00907800800ccb0000000000000000"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001800)='cgroup.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fcdbdf2503000000180001801400020073797a5f74756e0000040000000000a8e2c3270004e80000"], 0x34}}, 0x4000080) fgetxattr(r2, &(0x7f0000001940)=@known='security.selinux\x00', &(0x7f0000001980)=""/138, 0xffffffffffffff98) r5 = openat(0xffffffffffffff9c, &(0x7f0000001a40)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001b00)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) mount$bpf(0x0, &(0x7f0000001b40)='.\x00', &(0x7f0000001b80), 0x400008, &(0x7f0000001bc0)=ANY=[@ANYBLOB="6f626a5f757365723d57696432626ad4d10ac5e0def48b8a4b7b5e8244fe2e2c736563"]) shmdt(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010300000000040000000000000605000100070000000900020073797a310000000014000780080013000000006008001240000000020500050002000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) 4m49.565004355s ago: executing program 45 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000"], 0x48) poll(0x0, 0x0, 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r4, &(0x7f0000000240)=""/133, 0x85, 0x4640) 4m46.801880896s ago: executing program 46 (id=1332): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0x7ff}, 0x8600, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000800)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4000, 0x7, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x18000000, &(0x7f0000000500)=[{&(0x7f0000000540)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000440)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/133, 0x85}], 0x1}, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c80)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f40)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x200002, 0x200003, 0x801, 0x5, 0x7}) r3 = syz_open_procfs(0x0, 0x0) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='R\x10rust\xe3c*sgrVex;De', 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='stat\x00') pread64(r4, &(0x7f0000000400)=""/15, 0xf, 0x4) 4m46.773704549s ago: executing program 0 (id=1334): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) gettid() socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x1046, &(0x7f0000000580)=ANY=[@ANYRES32=r0], 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x2, 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fb000000000000006151a90f38688e3007000000000000000000000000000000000060b08ef04310b0950d0c6612611e0947cb37971ab8affa9d8a4b1112dbe52324bb0503adeab6474c02b1c05c763a6f5f0c2d2b0977a23164ac087c7b5e72798c128e7ea5b3"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000082}, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_config_ext={0xd, 0x1}, 0x1020, 0x0, 0xfffffffd, 0x6, 0x1, 0xfffffffe, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECUREBITS(0x1c, 0x7) setuid(0xee00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000006c0)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="100002000000000020"], 0x3c, 0x3) getgroups(0x0, &(0x7f0000000700)) setregid(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000c80)='.\x00', 0xffffffd3) open(0x0, 0x20000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000cc0)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) socket$rds(0x15, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000001180)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x10008000}, 0x14048010) 4m46.516871715s ago: executing program 0 (id=1336): r0 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe59) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0xf, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800, 0xc5}, 0x90a4, 0x400, 0x7d5d, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x3, &(0x7f00000000c0)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000001c0)={0x1d, 0x0, 0x1, {}, 0x1}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x145042, 0xce) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 4m46.339965783s ago: executing program 0 (id=1337): stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000001d80)='ext4\x00', &(0x7f0000001dc0)='./file0\x00', 0x200000, &(0x7f0000001e00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000001ec0)="$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") open(&(0x7f0000002440)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002480)=@loop={'/dev/loop', 0x0}, &(0x7f00000024c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000002500)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(&(0x7f0000003680)='./file1\x00', 0x0) 4m46.327655444s ago: executing program 0 (id=1338): syz_mount_image$vfat(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x800000, &(0x7f0000000500)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./file2\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="18370000010000000000000000000000dc980000f0ffff706babe69caeec02ff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800007b6a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001859000004000000000000000000000015144000ffffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000852000000400001085100000ffffffff850000003c000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000240), 0x8, 0x10, &(0x7f0000000280)={0x0, 0xffffffff}, 0x10}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x160341) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000016c0)='./file1\x00', 0x1008802, &(0x7f0000001700)=ANY=[@ANYRESHEX=0x0], 0x4, 0x272, &(0x7f0000000dc0)="$eJzs3U9LW1kUAPDzYkRHGCLMgCgD8wb3QR1mrwwKMoGBkSxmViNjZAbjCApCu9B01XVX3bSbfoB2U+i20EXptl+gFIotdKNduSikxKRGY1L/lJhSf7+NB+8579773iMvWeTk7x9WV5bWNpb39nYiM5j0Z6fj4dh+EsORib6oqwQA8DXZr1Zjt1rX67UAAJfD8x8Arp7m8z858fxPKo33BN/dGx/txeIAgK7w+R8Arp6FP//6baZQmP1jNx2MWL25Wdws1v/Wx2eW478oRykmIhfvI6qH6vHt+cLsRFrzejiKq9uN+u3NYt/x+snIxfDJ+rn5wuxkWne8vj+GGvUvhqIUU5GL79vXT7Wr74+I8SPz5yMXz/+JtSjHUtRqm/Vbk2n66++FlvkHDvIAAAAAAAAAAAAAAAAAAAAAAKAb8pmD1jnVgTRt278nn08/ahmv1x/tD/RNm/5Ac4f9gVr7+2RjLNvbvQMAAAAAAAAAAAAAAAAAAMCXYuPa9ZXFcrm0/qng/2f3n5yWc8YgaczbNmcgIj5/ijMG3/706k7nnBvnOT8XCKY7Dz3+set7Px7UTvt5q57u/Dv688bIL51yItu1NWdOuSjZdtt5m+twazVuyMrF1/Pg8Jq+OzX51sJl3eF9rf8ZuTu9+Gjr5ZuzHqdXr0gAAAAAAAAAAAAAAAAAAHB1Nb/02+uVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvNH//v0OQRC3IRkTnnHJpPYnk4Hhthiq93iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwIAAD//7QZm14=") r3 = socket$inet(0x2, 0x2, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000440)={0x2, 0x6, 0x80000000, 0x7, 0x2}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@addrtype={{0x30}, {0xb07, 0x19, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x21, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001080)={@remote, 0x400000}) setitimer(0x2, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) ioctl$FITHAW(r2, 0xc0045878) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8518}, 0x115810, 0xe7e, 0x4ccb66e1, 0x3, 0x800000, 0x3f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) pwrite64(r0, &(0x7f0000000a00)='a', 0x200000c1, 0x9000) 4m45.28943472s ago: executing program 0 (id=1340): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000300)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000001e80)={r3, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000001f40)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001f80)={r4}, 0x8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x0, 0x10}, 0x18) r6 = creat(0x0, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r6, 0x20, &(0x7f0000000900)={&(0x7f0000000940)=""/4096, 0x1000, 0x0, &(0x7f0000001940)=""/167, 0xa7}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0x9, &(0x7f0000001ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x6}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000001b40)='GPL\x00', 0x4, 0xf1, &(0x7f0000001b80)=""/241, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x17, r6, 0x8, &(0x7f0000001c80)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x1, 0xd, &(0x7f0000000100)=ANY=[@ANYRESHEX=r8, @ANYBLOB="56ce506edf7761899a468b43df5ad327d621bbcd5f92ee25cab33a144a5431b0a109f765c84635404171a04e9bb06dee2157598189f568f6214906aeef81a4a7be89163e1035e281b974b8849f143ede6b9ac0c1263dd65cb75ffcd286df9fa32aa0baab6c02123e94aacf14e50af865ee6d5f143163a1bf875cbd0739e1a89b05ebdf8d90140971aafe4335a4be8defd4a3907cf5994b012b9ecb618bf5e445f0e74db33ec00f02744404fede7062b949b7005a3529ef8d1251da46d301456597d7c31233cc1323946d"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={0x60, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2}]}, @CTA_STATUS={0x8}]}, 0x60}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f0000000680)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/sctp/cookie_hmac_alg\x00', 0x2, 0x0) syz_clone(0x82200011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x7ffffffe, 0x6}, 0x1147b1, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000002040)={0x2, 0x4e21, @local}, 0x10) 4m45.121315047s ago: executing program 0 (id=1342): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2, &(0x7f0000000180), 0xfe, 0x250, &(0x7f0000000540)="$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") r0 = gettid() timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000800)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)={{}, {r3, r4/1000+10000}}) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4000, 0x7, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/133, 0x85}], 0x1}, 0x2) sendto(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000001100)='./bus\x00', 0xe, &(0x7f0000001140)={[{@bsdgroups}, {@nodioread_nolock}, {@nolazytime}]}, 0x3, 0x44b, &(0x7f0000001180)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='system.posix_acl_default\x00') 4m42.303307583s ago: executing program 47 (id=1353): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x5411, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000440)={@multicast1, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa408, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x1a, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b900000095"], &(0x7f0000000f00)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000c80)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000d40)={0x0, 0x2}, 0x8) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000340)=0x3, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000700)='y', 0x1}, {&(0x7f0000000740)="b9", 0x1}, {&(0x7f0000000780)="99", 0x1}, {&(0x7f00000007c0)="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", 0x131}, {&(0x7f0000000940)='~', 0x1}, {&(0x7f0000000980)='x', 0x1}, {&(0x7f00000009c0)="06", 0x1}, {&(0x7f0000000a00)='k', 0x1}, {&(0x7f0000000a40)="1d", 0x1}, {&(0x7f0000000a80)='a', 0x1}, {&(0x7f0000000ac0)='$', 0x1}], 0xc}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a98000000060a010400000000000000000a0004050900010073797a31000000006c000480680001800a000100696e6e6572000000580002800800044000000012340005800c0001007061796c6f6164002400028008000340000000900800024000000000080004400000000008000140000000080800034000000002080002400000008408000140000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x14}}, 0x0) 4m28.699520355s ago: executing program 48 (id=1342): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2, &(0x7f0000000180), 0xfe, 0x250, &(0x7f0000000540)="$eJzs3T9oJFUcB/DvzO565m7RUxtB/AMiooFwdoLN2SgcyHGICCqciNgod8J5h11iZWOhtUoqmyB2RktJE2wUwSpqitgIGiwMFlqs7M4G8mc1ZnfdkcznA5OZybyZ3xt2vm+3ebsBGutskvNJWknmk3SSFHsb3FctZ4e7y3Prl5Ne7+lfi0G7ar+ye96ZJEtJHk2yVhZ5tZ3cWH1+6/eNJx9853rngY9Wn5ub6U0ObW9tPrXz4cW3P73wyI2vv/35YpHz6e67r+krRvyvXSS3/xfF/ieKdt094N+49OYn3/Vzf0eS+wf576RM9eK9e+2mtU4e/uDvzn3vl2/ummVfgenr9Tr998ClHtA4ZZJuinIhSbVdlgsL1Wf471uny9euXntj/pWr16+8XPdIBUxLN9l84vNTn505kP+fWlX+gZOrn/9nLq380N/eadXdG2Am7q5W/fzPv7j4UOQfGkf+obnkH5pL/qG55B+aS/6hueQfTrDOPx+Wf2gu+Yfmkn9orr35BwCapXdqnFnDt05/IjIwc3WPPwAAAAAAAAAAAAAAAAAAwGHLc+uXd5dxr1Ecs/2X7yfbjydpj6rfGvwecXLz4O/p34p+s3212uN2dOiFeye8wIQ+rnn29S0/1lv/q3vqrb94JVl6K8m5dvvw81cMn7/x3XbE8c5LExY4poP5fOzZ2dY/6M+Veutf2Ei+6I8/50aNP2XuHKxHjz/do79i+Uiv/zHhBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJiZvwIAAP//1rxsXQ==") r0 = gettid() timer_create(0x0, &(0x7f00000007c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000800)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x76dc) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) utimes(&(0x7f0000000000)='./bus\x00', &(0x7f00000001c0)={{}, {r3, r4/1000+10000}}) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4000, 0x7, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000003c0), 0x4) recvmsg(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)=""/133, 0x85}], 0x1}, 0x2) sendto(r2, 0x0, 0x0, 0x4000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000280)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x73, 0x0, @empty, @broadcast}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000001100)='./bus\x00', 0xe, &(0x7f0000001140)={[{@bsdgroups}, {@nodioread_nolock}, {@nolazytime}]}, 0x3, 0x44b, &(0x7f0000001180)="$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") fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='system.posix_acl_default\x00') 4m20.87293287s ago: executing program 4 (id=1582): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x14, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa0e1af02a81349f4}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x0, 0x10, 0x10, &(0x7f0000000380)="0000ffffffffa000", &(0x7f0000000440)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001d000100000c00000000000007000000", @ANYRES32=r3, @ANYBLOB="400096040a0002"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4m20.594702498s ago: executing program 4 (id=1584): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0x4004480d, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x7378, 0x0, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)) r1 = io_uring_setup(0x7, &(0x7f0000000880)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000900), 0x2) r2 = socket(0x10, 0x2, 0x0) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f00000005c0), 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 4m20.373536181s ago: executing program 4 (id=1590): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000000900)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) 4m20.319167726s ago: executing program 4 (id=1591): syz_mount_image$ext4(&(0x7f0000001d80)='ext4\x00', &(0x7f0000001dc0)='./file0\x00', 0x200000, &(0x7f0000001e00)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@mblk_io_submit}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nobarrier}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x3, 0x572, &(0x7f0000001ec0)="$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") open(&(0x7f0000002440)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000002480)=@loop={'/dev/loop', 0x0}, &(0x7f00000024c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000002500)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) creat(0x0, 0x0) 4m20.065423362s ago: executing program 4 (id=1596): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0xd4d}}, {@grpquota}]}, 0x1, 0x500, &(0x7f0000000540)="$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") unshare(0x100000) syz_clone(0x34021100, 0x0, 0x17, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000a40), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000a80)={0x0, 0x0, 0x0}) renameat2(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./file2\x00', 0x4) socket$nl_route(0x10, 0x3, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2239}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m19.725140626s ago: executing program 4 (id=1601): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000000900)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) 4m19.706477149s ago: executing program 49 (id=1601): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_emit_ethernet(0x7e, &(0x7f0000000900)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) 3m0.719512242s ago: executing program 2 (id=2568): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000000c00)=[{{&(0x7f0000000c80)=@l2tp6={0xa, 0x5f5, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000d00)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1200000000000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 3m0.64366044s ago: executing program 2 (id=2570): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) ptrace$pokeuser(0x6, 0x0, 0x388, 0x7ffffffffd) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x1000, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) 3m0.458452839s ago: executing program 2 (id=2574): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000ec0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00001d2833fefc0010000d042ebd7000", @ANYRES32=0x0, @ANYBLOB="47420500000000001c00128009000100626f6e64000000000c0002800500010002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x200000000001, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001d80), 0x8, 0x10, &(0x7f0000001dc0), 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000001e00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000001e40)='ext4\x00', &(0x7f0000001e80)='./file1\x00', 0x200000, &(0x7f0000001ec0)={[{@errors_remount}]}, 0xfe, 0x5a1, &(0x7f0000001f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f00000004c0)='GPL\x00', 0x2}, 0x94) mount(0x0, 0x0, &(0x7f0000002500)='configfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x300) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='3', 0x4e) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), 0x0) epoll_wait(r0, 0x0, 0x0, 0x7) 2m59.791359377s ago: executing program 2 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000780)={0x0, 0xffffffffffffffcd, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a00000000102010800000000000000000a0b00048c0001802c00018014000300ff01000000000000000000000000000114000400fc0200000000000000000000000000010c00028005"], 0xa0}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000008c0)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000009c0)={0x0, "0c2081f07780c7634ae299dc6b04d859f1f99e18669e4e64672bb93b608b3bf93a0114a3abdfe4c685966d495b0e112a17c127c30bdc6368249bf7e293bf376a", 0x26}, 0x48, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000a40)={r4}, &(0x7f0000000a80)={'enc=', 'oaep', ' hash=', {'sha256-ni\x00'}}, 0x0, &(0x7f0000000b00)) syz_mount_image$ext4(&(0x7f0000000b40)='ext4\x00', &(0x7f0000000b80)='./file1\x00', 0x2, &(0x7f0000000bc0), 0xfe, 0x250, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r6) openat(0xffffffffffffff9c, &(0x7f0000000ec0)='./tracing/events/sched/filter\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000f00)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x1}}, './proc/thread-self/fail-nth\x00'}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000740)=@generic={&(0x7f0000000580)='\x00', r9}, 0x18) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r10, &(0x7f0000000180)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m58.909332606s ago: executing program 2 (id=2592): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x30}}, 0x4044044) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x6a, &(0x7f0000000a80)={@local, @random='\b\x00 \x00', @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "3ce7b9286b574dc2720ef6057772f09df9d3421eee34e003", "047b90670593e17881953d1e429031066797feb6632a4cea988cc9256fe11df4"}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x2000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007"], 0x18}, 0x8050) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x80) signalfd(r6, &(0x7f0000000180)={[0x6]}, 0x8) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) 2m57.942181794s ago: executing program 2 (id=2595): syz_open_dev$sg(0x0, 0x0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x81) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001540)='./proc\x00', &(0x7f0000001580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001600)='27', 0x2) write$selinux_validatetrans(r0, 0x0, 0x0) capset(0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bind$xdp(r1, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x4580, 0xc4) add_key(&(0x7f0000001680)='asymmetric\x00', 0x0, &(0x7f00000016c0)="308205", 0x3, 0xffffffffffffffff) 2m57.861269013s ago: executing program 50 (id=2595): syz_open_dev$sg(0x0, 0x0, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, 0x0, 0x0, 0x81) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001540)='./proc\x00', &(0x7f0000001580)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000015c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001600)='27', 0x2) write$selinux_validatetrans(r0, 0x0, 0x0) capset(0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) getsockopt$inet_pktinfo(r1, 0x0, 0x8, 0x0, 0x0) bind$xdp(r1, 0x0, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x4580, 0xc4) add_key(&(0x7f0000001680)='asymmetric\x00', 0x0, &(0x7f00000016c0)="308205", 0x3, 0xffffffffffffffff) 1m23.499184638s ago: executing program 3 (id=3671): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac47037fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5ed838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca", 0xcd}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000240)="32d33a47d96ceacc565129f837dfc4ec8df24612082800303fbc4c7dae05b96c2dc595b8a5", 0x25}, {&(0x7f0000000500)="9cf1495e028e22049259947af71c968820aac2153e36e05237044004130a31b25cd08e4a582dd094e3cd495eb7e28321e85d8e7da6651a68cb993498df2236fcab1ea0a1cc628ddbe16ac9191d6917ee7f319afaae6058b0a13fa0258fb74bf114e1a95c71a81b46d5d333aef5db36219c3bd7f905a25f5bb07bd3055d210022f04b5acf6a8e20086a71b6b5c7bb87d9c7a209b7f0e56dac72bf77c9773d1b702c45c9460829ffbf704fbbe1635b301183a8867463de2a0fae686630b7db109ed37404eadf39e858bee704a9d000bc1aae96b1b4d52957", 0xd7}, {&(0x7f0000000640)="e705ba567be6127d85d39375b10960531cc5504726702fa92b283ee716613616ab01f6e820db6e5cfcb4d90015ea23d7800aec9822", 0x35}, {&(0x7f0000000680)="c05d0dc2fdda573c5872e33584e8735fd9f8a0151935edc78b9bbf6424e2b7f2e669ca0b5b0bd870399b43266e2c9f824a313cfa3f930b6dc49c44b254c37f5fab1c177b3889472eb7d4850957cc", 0x4e}, {&(0x7f0000000780)="55bee026e579cd98c199b0adfda09fae5228b8f7b883add4099e88200a72dfc6782dc3af4564c1f19ae2f530ef2c3fc6fb946257c569c4d9f6e35f8e75b3d268400ad5a5cad70c1706b377aaaaf28c721f0446c5c73597b18a8fa3cca93bb82329b19a1402716827c227450da61339af5844af4b70dbeb85a4fdd5ac60765c105db1b74f9b903c92d5467dc1c5f72a", 0x8f}, {&(0x7f0000000840)="fab32dba0a84fa9993200bb35203dd3961c8", 0x12}], 0x6}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000010c0)="3fa7ff9e6f6e0e08c5fb3086421898e47a2eb7017b", 0x15}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{&(0x7f0000002d80)="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", 0x34a}], 0x1) 1m22.464024313s ago: executing program 3 (id=3688): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x6e24, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r1, 0x0, 0x0) 1m22.403292609s ago: executing program 3 (id=3690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000002030300000000000000010000010000080001"], 0x1c}}, 0x0) 1m22.331997717s ago: executing program 3 (id=3691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r0, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0x2000) 1m22.331733517s ago: executing program 3 (id=3692): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2de32e1738b8ef9c, @perf_config_ext={0x52, 0x9b7f}, 0x22d264327e9e8aaf, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x28) shutdown(r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m22.173081243s ago: executing program 3 (id=3694): socket$netlink(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x71, 0x1, @perf_config_ext={0x7ffffffd, 0x5}, 0x10c0e8, 0xfffffffffffffffe, 0x7, 0x2, 0x809, 0x8001, 0x7ffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr(r2, 0x0, &(0x7f00000002c0)='\x00', 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/trace\x00', 0x81, 0x0) writev(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f00000005c0)="f8", 0x1}], 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000640)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x148) socket$kcm(0x2, 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf855, 0x4) syz_open_dev$sg(0x0, 0x0, 0x401) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 1m22.090890001s ago: executing program 51 (id=3694): socket$netlink(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x71, 0x1, @perf_config_ext={0x7ffffffd, 0x5}, 0x10c0e8, 0xfffffffffffffffe, 0x7, 0x2, 0x809, 0x8001, 0x7ffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsetxattr(r2, 0x0, &(0x7f00000002c0)='\x00', 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./trace/trace\x00', 0x81, 0x0) writev(r3, &(0x7f0000000580)=[{0x0}, {&(0x7f00000005c0)="f8", 0x1}], 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000640)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x148) socket$kcm(0x2, 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000740)={0x1, &(0x7f0000000780)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf855, 0x4) syz_open_dev$sg(0x0, 0x0, 0x401) capset(0x0, &(0x7f0000000100)={0x0, 0x0, 0x100000}) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) 47.215211004s ago: executing program 6 (id=4037): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) 46.148839192s ago: executing program 6 (id=4044): pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) r2 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './mnt\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r3, 0x16, 0x1, 0x175, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0]}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f0000000380)={0x1, 0x1, 0x1, 0xfffe}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0x2040, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000640)='./mnt\x00', &(0x7f0000000680)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./mnt/trace_pipe\x00', 0x40543, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 46.049849412s ago: executing program 6 (id=4045): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000880), 0x4) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000900)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a00)="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", 0x23f}], 0x1}, 0x48800) 45.990153668s ago: executing program 6 (id=4047): syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f0000001a80)='./bus\x00', 0x20081e, &(0x7f0000001d80)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000001dc0)="$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") symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./bus\x00') creat(&(0x7f0000003800)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./bus\x00', 0x0, 0x1044010, 0x0) r0 = open(&(0x7f00000038c0)='./bus\x00', 0x8000, 0xa0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x8e, 0xfffffffffffff353}, 0x4, 0x80000000, 0xffff, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xa4, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x12, 0x0, 0x0, {{0x9}, {0x4}, {0xfffffffffffffcd4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ftruncate(r2, 0x6000000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYRES64=r2, @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20044044) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x200, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x19328, 0x10000000000, 0xfffffffd, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000840)='./myproc\x00', &(0x7f0000000880)='proc\x00', 0x0, 0x0) r5 = creat(&(0x7f00000008c0)='./myproc/interrupts\x00', 0x20) lseek(r5, 0x2000000008, 0x0) 45.717738666s ago: executing program 6 (id=4051): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x482, &(0x7f0000000000)="060000007f000001005000", 0xb) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x2, 0x2, 0x9, 0x7, 0x3, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@crypt={0x0, 0x2000, 0x0, 0x88, 'crypt\x00', {'aes-xts-plain64', 0x20, @fixed='0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef', 0x20, '0', 0x20, {@ram={'/dev/ram', 0x1}, 0x20, '0'}}}]}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}}) r2 = openat$dm_dev(0xffffffffffffff9c, &(0x7f00000006c0)='./dm0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000700)="0102030405060708", 0x8, 0x0) getpgrp(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x26020480) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = dup3(0xffffffffffffffff, r4, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000009c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000b40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000b80)=@generic={0x0, r8}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) setresgid(0xee00, 0xee01, 0x0) setfsgid(0x0) 45.413138876s ago: executing program 6 (id=4052): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fcntl$setstatus(r2, 0x4, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setfsuid(0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000002c40)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) 45.365512962s ago: executing program 52 (id=4052): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fcntl$setstatus(r2, 0x4, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setfsuid(0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000002c40)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) 5.043966597s ago: executing program 5 (id=4358): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="fc00000019000100c7a4d2340000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000dd622d5f64632705b3fde7a9ec98f97b6c2a1f2b9304b4f4a18d839510608a50aa0fba114ad1f0f5a6ed06e1b503a9e9de29a33d9c764b84d175a86125392a86de2f91c7204bfd7371101f89ffb19511000000000000001cb482b8d4a99636143a0620e9979af9d88f2b1cce4ca8e43712c10da1abb49b55946ec0165848fb4a1788b94e3f692c13c41169cd47342ff1ef83f0bf8173d7800c5e0be4bb7cd6c947d04e611b684ab5310364aaec4f974c864f0668758a3dc202da11", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f000000000000000500000000000000020000000000000801000000000000000100000000000000440005007f000001000000000000000000000000000000003c00000002000000000000000000000000000000000000000600000004010000000000000500000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048810) semget(0x2, 0x4, 0x39c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x3}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="f5", 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000800)={0x0, 0x0, 0x1}, 0x8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) syz_open_procfs(0x0, &(0x7f0000000880)='attr/prev\x00') r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000a40)={'gretap0\x00', r4, 0x700, 0x20, 0x9, 0x5, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @empty, @empty}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000c80)='GPL\x00', 0x2, 0xde, &(0x7f0000000cc0)=""/222, 0x0, 0x1e, '\x00', r4}, 0x94) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x9}, &(0x7f00000003c0)=0x9, 0x0, 0x5, 0xfffffffffffffff7, 0xbd, 0x1, 0x2, 0xd}}], 0x58, 0x40}, 0x0) 4.370508636s ago: executing program 5 (id=4362): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/sda1\x00', 0x0) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0xa0400, 0x14) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xd09a}, 0x810, 0x3, 0x40b7, 0x3, 0x9, 0xfff, 0x8003}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0xffffffffffffff15, 0x10, &(0x7f0000000e40), 0xf000000}, 0x48) 3.682282776s ago: executing program 7 (id=4370): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev/sda1\x00', 0x0) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x8410, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0xa0400, 0x14) getdents64(r0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xd09a}, 0x810, 0x3, 0x40b7, 0x3, 0x9, 0xfff, 0x8003}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf670000000000002606000000000001670600000c000000170300000ee600a8bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000e00), 0xffffffffffffff15, 0x10, &(0x7f0000000e40), 0xf000000}, 0x48) 3.669377127s ago: executing program 5 (id=4371): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fcntl$setstatus(r2, 0x4, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fspick(0xffffffffffffff9c, &(0x7f0000002c40)='.\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f0000000400), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) 2.703192675s ago: executing program 5 (id=4380): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) r1 = socket$inet(0x2, 0xa, 0xf) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000100)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020056ff", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r2, &(0x7f0000000340)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000003c0)="48050000150019", 0x7}], 0x1) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000400)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$inet(r1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000000200)='./file1\x00', 0x64842, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xd85, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r7, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0x80}], 0x1) 2.66154987s ago: executing program 8 (id=4381): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) stat(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000740)={0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', 0x100, 0x80, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x12, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x88}, @generic={0x7, 0x6, 0xd, 0x9, 0xffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001180)='syzkaller\x00', 0xa4, 0xf8, &(0x7f00000011c0)=""/248, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x9e7}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x10000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="a40000003400000127bd7000fcdbdf259c66a313667b4be9f5f1bc9b8af3ba29b3f874b6b17df5c93a049110511182283b971cc900f1cbc76843509f494fb16d2b0530eb609bd350941e9148e26458edb4e5b596516584e31cc9e57659abefd9baf122d486c693dc3483cee93ca312dcf22cb81f7f813121ea9794af3bffffffff0000000009ae08787d24b20e1217a5dcb7c1541a4f419339c272d94f585d3e4add8ec536dc6cc05e48000000"], 0xa4}], 0x1, &(0x7f0000001440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r7, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r8, r0, r0, r6, r0, r0]}}], 0xb0, 0x4000000}, 0x44095) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) clock_adjtime(0xffffffd3, &(0x7f00000001c0)={0x0, 0x0, 0x8c1f, 0x0, 0x0, 0x2, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x8000000000000001, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x3, 0x658, 0x200000, 0x0, 0x0, 0x0, 0x80000000000000}) open(&(0x7f0000001640)='./bus\x00', 0x14927e, 0x9) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000016c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x100, 0x100, 0xfeffffff, 0x0, 0x100, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1], 0x0, 0x4}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x44, 0xd6ff, 0x2, 0x8, 0x0, 0x28, 0x6, 0x40, 0x20}, {0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'batadv_slave_1\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) mount(&(0x7f0000001700)=@loop={'/dev/loop', 0x0}, &(0x7f0000001740)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000018c0)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newneigh={0x2c, 0x1c, 0x401, 0x0, 0x1, {0x2, 0x0, 0x0, 0x1, 0x2, 0x15}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}}, 0x0) 2.615338734s ago: executing program 9 (id=4382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x8, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x59}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="ec", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'netdevsim0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x63a, &(0x7f0000000900)="$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") r9 = open(&(0x7f0000000f40)='./file1\x00', 0x14e142, 0x90) pwritev2(r9, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r10, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x2, 0x6, @l2={'eth', 0x3a, 'sit0\x00'}}}}, ["", "", "", "", ""]}, 0x34}}, 0xc000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000080000000005000b0002"], 0x34}}, 0x4044890) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000000002010400000000000000000a000010040001801800038014000180080001007f00000108000200ac1414bb3c0002802c00018014000300fc0000000000000000000000000000011400040000000000000000000000ffffac1414170c0002800500010086000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 2.477104468s ago: executing program 8 (id=4384): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000180)=[{{0x77359400}, 0x14, 0xe, 0x625c}], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8804, 0xff, 0x9, 0x0, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000980), 0x3, 0x42f, &(0x7f0000002ec0)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./file1\x00', 0x80342, 0xcc) pwrite64(r0, &(0x7f0000003340)='2', 0xfdef, 0xfecc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000003380)=0x7873) writev(r0, &(0x7f00000033c0)=[{&(0x7f0000003400)="e81ed974a3d79d711ede", 0xa}, {0x0}, {0x0}], 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 2.420422714s ago: executing program 7 (id=4385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0xc, 0x40, 0x9, 0x8, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x80, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x90) 2.398963146s ago: executing program 9 (id=4386): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000180)=[{{0x77359400}, 0x14, 0xe, 0x625c}], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8804, 0xff, 0x9, 0x0, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000980), 0x3, 0x42f, &(0x7f0000002ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./file1\x00', 0x80342, 0xcc) pwrite64(r0, &(0x7f0000003340)='2', 0xfdef, 0xfecc) ioctl$FIBMAP(r0, 0x1, &(0x7f0000003380)=0x7873) writev(r0, &(0x7f00000033c0)=[{&(0x7f0000003400)="e81ed974a3d79d711ede", 0xa}, {0x0}, {0x0}], 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 2.336833522s ago: executing program 7 (id=4387): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f000000000000000500000000000000020000000000000801000000000000000100000000000000440005007f000001000000000000000000000000000000003c00000002000000000000000000000000000000000000000600000004010000000000000500000000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048810) semget(0x2, 0x4, 0x39c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setns(0xc9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000740)={0x0, 0x3}, 0x8) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="f5", 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000800)={0x0, 0x0, 0x1}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r3, 0x4b72, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)) syz_open_procfs(0x0, &(0x7f0000000880)='attr/prev\x00') r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000a40)={'gretap0\x00', r5, 0x700, 0x20, 0x9, 0x5, {{0x5, 0x4, 0x2, 0x5, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @empty, @empty}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x2, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000c80)='GPL\x00', 0x2, 0xde, &(0x7f0000000cc0)=""/222, 0x0, 0x1e, '\x00', r5}, 0x94) sendmsg$rds(r1, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x9}, &(0x7f00000003c0)=0x9, 0x0, 0x5, 0xfffffffffffffff7, 0xbd, 0x1, 0x2, 0xd}}], 0x58, 0x40}, 0x0) 1.890945998s ago: executing program 9 (id=4388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0xc, 0x40, 0x9, 0x8, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x80, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nicvf0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x90) 1.833970544s ago: executing program 7 (id=4390): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fcntl$setstatus(r2, 0x4, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fspick(0xffffffffffffff9c, &(0x7f0000002c40)='.\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f0000000400), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) 1.769060401s ago: executing program 8 (id=4391): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fcntl$setstatus(r1, 0x4, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) setfsuid(0x0) r2 = fspick(0xffffffffffffff9c, &(0x7f0000002c40)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f0000000400), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) 1.719320015s ago: executing program 9 (id=4392): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') fcntl$setstatus(r2, 0x4, 0x800) setfsuid(0x0) fspick(0xffffffffffffff9c, &(0x7f0000002c40)='.\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x22, &(0x7f0000000400), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "000000000000000000000300"}}}]}, 0x48}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) 1.684317399s ago: executing program 5 (id=4393): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffffd) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x1000, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000480)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@data_err_ignore}, {}, {@nojournal_checksum}]}, 0x1, 0x50a, &(0x7f0000000500)="$eJzs3c9vU0ceAPDvc2ySwLJkWRYJlt3lx642WmkTCLRw6IVKlXpo1apUVTlGSYhSDFQkh4KiYqSKnpF6rzhWvbVSr+2x6ql/AD30UKlCQi0XoJe6evZ7juNf+UFIlPjzkQwz43lvZvxm7PEbv5cA+tbR9J8k4k8RcT8i9tWjyzMcrf/35NHi1NNHi1NRqVYv/JLU8j1O45l8uz1ZZLQQUfgoad7hvTwwf+Pm5clyeeZ6VGrx8YUr74/P37j5/7krk7MzszNXJ86dO3P61NkXJ15orfLQio1K2pPSdj0+/OG1I4devXj39aliPbXY2FlzO9q8E3n2ul8rK1Yh8te2i/80728H2NsUTtrbdWtTK8OqDWXdsJSO/8Xy8Yv15KTTGAJ2lmq1Wh3s/nSl2up2WwqwbSWx1TUAtkb+QZ9+/80f9ZTSZkw/ttzD8/UvQI8fLVZvRUw9abS/GIUsT6nl+22qx5xpTY5GxLuV3z5NH9HrPMSPG1QgAND3vjmfTQOTaJn/FeJgU74/Z2soIxHxl4jYHxF/jYgDEfG3iGV5l0kiqj3KP9Ca0Cj/y2wVofBgvW1bjXT+91K2tpU/snLzLCMDWWxvRD5hnjmZvSajURq8NFeeOdVl/7tWKL95/pc+0vLzuWBWjwfFlsnm9OTC5Ppa2+7h7YjDxdb2J8X0wOXLOElEHIqIw2vY70hTeO5/nx1pRFq+Vqzc/ppqx+WIDVg/q96L+G/9+Fdi2fFfKjFpXp8stK1Pjg9FeebkeNoLTnYs47vv77zZrfwV2//VT62bvHL26wvP2uyG9Pjvbur/ka/fLrV/JIlIGuu18xHVgbWVceeHj6ei87Lsuvv/ruTtWjgfXx9MLixcPxWxK3mtPX1iads8nudP2z96ovP4359tk9b77xGRduJ/RMQ/Iwbyuh+LiOMRcaJH+799+d/vdXtulf3/uUnbP93x/W/Z8V9ar18WeONGa0oeyDdOUwYuH7v/tMubR9b+fb2P/5laaDTi9+j6/pcs617d6tUaeOYXEAAAALaBQtR++18Ya4QLhbGx+jmgA7G7UL42v/CviLg6Xb9GYCRKhUtz5Zn8hNxIlJL8/OdIU3yiJX46O2/8ycBwLT42da08vdWNhz63pzbmk7bxn/p5jed5gW1oB12HBqzRSuP/4N1Nqgiw6Xz+Q/9qGv/d7mxR8UsZ2Jl8/kP/6jD+Z2/F5z2vXSgOP8cKAZui6vMf+lrv8V+7RaafAsAOVYy3GuHaZc9u/gl9w/wf+tKqLpJfd6A62Pmpoehwx4Ch51ON4Q5lbUkgnVmtYav8/Gq3PKWIWF3pw+upcz4F7JonCmvb4WC0PzUQvbZKOt/HISIqXbcq9XjFGoHZgxve+fN7omx0t/liaZyWVnm4nzWw8t/XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Eb+CAAA//9XSMy1") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x21c0, 0x103) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newlink={0x50, 0x10, 0x401, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8b00, 0x46950}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e40), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 1.307317607s ago: executing program 1 (id=4394): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) stat(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000000740)={0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', 0x100, 0x80, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000008c0), 0x4000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x12, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x88}, @generic={0x7, 0x6, 0xd, 0x9, 0xffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x5}]}, &(0x7f0000001180)='syzkaller\x00', 0xa4, 0xf8, &(0x7f00000011c0)=""/248, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000012c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x9e7}, 0x94) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001400), 0x10000, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="a40000003400000127bd7000fcdbdf259c66a313667b4be9f5f1bc9b8af3ba29b3f874b6b17df5c93a049110511182283b971cc900f1cbc76843509f494fb16d2b0530eb609bd350941e9148e26458edb4e5b596516584e31cc9e57659abefd9baf122d486c693dc3483cee93ca312dcf22cb81f7f813121ea9794af3bffffffff0000000009ae08787d24b20e1217a5dcb7c1541a4f419339c272d94f585d3e4add8ec536dc6cc05e48000000"], 0xa4}], 0x1, &(0x7f0000001440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r6, r7, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r8, r0, r0, r6, r0, r0]}}], 0xb0, 0x4000000}, 0x44095) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x189802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) clock_adjtime(0xffffffd3, &(0x7f00000001c0)={0x0, 0x0, 0x8c1f, 0x0, 0x0, 0x2, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x2a, 0x8000000000000001, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x3, 0x658, 0x200000, 0x0, 0x0, 0x0, 0x80000000000000}) open(&(0x7f0000001640)='./bus\x00', 0x14927e, 0x9) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000016c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x670, 0x5, 0x498, 0x100, 0x100, 0xfeffffff, 0x0, 0x100, 0x400, 0x400, 0xffffffff, 0x400, 0x400, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0x0, 0x5, 0x48}}, @common=@inet=@tcp={{0x30}, {[], [0x4e20], 0x0, 0x0, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x300, 0x300]}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x3, 0x1], 0x0, 0x4}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x3, 0x0}, @remote, @icmp_id}}}}, {{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_team\x00', {0x44, 0xd6ff, 0x2, 0x8, 0x0, 0x28, 0x6, 0x40, 0x20}, {0x1}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'veth0\x00', 'batadv_slave_1\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4f8) mount(&(0x7f0000001700)=@loop={'/dev/loop', 0x0}, &(0x7f0000001740)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000018c0)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newneigh={0x2c, 0x1c, 0x401, 0x0, 0x1, {0x2, 0x0, 0x0, 0x1, 0x2, 0x15}, [@NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010100}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}}, 0x0) 1.135516845s ago: executing program 5 (id=4395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xfe) r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cgroup.max.descendants\x00', 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000300), 0x12) sendfile(r5, r4, 0x0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f01, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') r8 = epoll_create(0x10000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000380)={0x9000001d}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40040) setsockopt$inet6_udp_int(r9, 0x11, 0x68, &(0x7f00000001c0)=0xa40, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000806000000000400aaaaaaaaaa2986dd6de7136600e91101addb0000000000000000000000000000ff0200000000000000000000000000014f194e20002b"], 0x65) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000440)={r10, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x80000000, 0xb8, 0x4, 0x2, 0x8, 0x5}, &(0x7f0000000500)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000540)={r10, 0x58, "4c3c35f71601275e52af2f820ef24ac10abaefa8a7ac57e94d92dd5a67e942553fb2844369462daf22906b9d9df6ea1cedd5cb602c18024630389cab43685c08eb1bb1e61031136f021778fe68b74fefc78c901c5aab6ed5"}, &(0x7f00000005c0)=0x60) capset(0x0, &(0x7f0000000b40)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000c80)='./file2\x00', 0x4) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 764.555892ms ago: executing program 1 (id=4396): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x8, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x59}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r1}, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r4, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r3, 0x221, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x24}}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="ec", 0x1}], 0x1, &(0x7f0000000380)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'netdevsim0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) syz_read_part_table(0x63a, &(0x7f0000000900)="$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") r9 = open(&(0x7f0000000f40)='./file1\x00', 0x14e142, 0x90) pwritev2(r9, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="85", 0x140000}], 0xf, 0x7000, 0x0, 0x3) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r10, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x2, 0x6, @l2={'eth', 0x3a, 'sit0\x00'}}}}, ["", "", "", "", ""]}, 0x34}}, 0xc000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000080000000005000b0002"], 0x34}}, 0x4044890) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c0000000002010400000000000000000a000010040001801800038014000180080001007f00000108000200ac1414bb3c0002802c00018014000300fc0000000000000000000000000000011400040000000000000000000000ffffac1414170c0002800500010086000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 665.389762ms ago: executing program 1 (id=4397): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$eJzs3M9PE2kYwPGnPyhtCZTDZje7yYZ3dy/rZQLVs9IYSIxNJEiNPxKTAabadGxJp8HUGJGTV+PNf8AD4ciNRPkHuHjTixdvXEw8yME4ptMZSssUpLSUH99PQubhfd5nOm9byDMNL1u3Xz7KZy0tq5clGFUSEBHZFhmWoHgC7jHoxBHZ7blcGPj64e+bd+5eT6XTE9NKTaZmLiaVUkMjbx8/jbnT1vtlc/j+1pfk583fN//c+jHzMGepnKUKxbLS1WzxU1mfNQ01n7PymlJTpqFbhsoVLKNUyxdr+axZXFioKL0wPxhfKBmWpfRCReWNiioXVblUUaEHeq6gNE1Tg3HBQTIr09N6qs3iuQ5fDLqkVErpIRGJ7clkVnpyQQAAoKea+/+gqE72/6v/bpQHbq0Nuf3/esSv/7/0sXauhv4/KiK+/b/3+L79v364/n9vR3RK2XZbZUfq/3EyjET2DAXqYTVZSulx9+fXsXxvddQJ6P8BAAAAAAAAAAAAAAAAAAAAADgNtm07Ydt2wjt6X/0iEnU2ltS+9ykNiciVHlwyOugIrz/OgPrGvfCQiPliMbOYqR3dCRsiYjqvf0K+O+8HVzX2dh6pqmF5Zy659UuLmZCTSWUlJ6YYMiaJPmmut+3Ja+mJMVXTWN8n8d31SUnIb/71Sd/6iPz/3656TRLyfk6KYsq8u2HOq382ptTVG+mm+pgzDwAAAACAs0BTO3zv3zWtVb5Wv3N/Pdr0+UCofn896nt/Hpa/wr1dOwAAAAAA54VVeZLXTdMo7QSDItI4EpPmOZ0Mwl06s7fCX63y/paheyvdJ/AevCEVdQc7/rQEDvG0tAiC0k7VSHU1qin1z7LP2vcLvI+NWs2RqXF35HXLOd0J/nj15lvnTnh5LXrAStsPQvu/AfqO57cPAAAAgONUb/q9kfHeXhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfQcfx3tF6vEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpfgYAAP//2a0C7Q==") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, 0x0) 593.36411ms ago: executing program 1 (id=4398): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000180)=[{{0x77359400}, 0x14, 0xe, 0x625c}], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') getdents64(r0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_bp={0x0, 0x8}, 0x8804, 0xff, 0x9, 0x0, 0xc283, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000980), 0x3, 0x42f, &(0x7f0000002ec0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./file1\x00', 0x80342, 0xcc) pwrite64(r1, &(0x7f0000003340)='2', 0xfdef, 0xfecc) ioctl$FIBMAP(r1, 0x1, &(0x7f0000003380)=0x7873) writev(r1, &(0x7f00000033c0)=[{&(0x7f0000003400)="e81ed974a3d79d711ede", 0xa}, {0x0}, {0x0}], 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) 541.178295ms ago: executing program 8 (id=4399): mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./mnt\x00', &(0x7f0000001c40)='tracefs\x00', 0x0, 0x0) r0 = openat$binderfs_proc_dir(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execveat(r0, &(0x7f0000000040)='\x00', &(0x7f00000001c0)={[&(0x7f0000000080)='tracefs\x00', &(0x7f00000000c0)='%%({\x00', &(0x7f0000000100)='tracefs\x00', &(0x7f0000000140)='tracefs\x00', &(0x7f0000000180)='+[o]\x00']}, &(0x7f00000002c0)={[&(0x7f0000000200)='tracefs\x00', &(0x7f0000000240)='tracefs\x00', &(0x7f0000000280)=':(\'.]!\x00']}, 0x400) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, 0x0, 0x802, 0x130) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103ffd, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c0) setxattr$incfs_metadata(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0, 0x0) unshare(0xc040480) ioprio_set$pid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x80000000, 0xb8, 0x4, 0x2, 0x8, 0x5}, 0x0) r4 = socket(0x1, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, 0x0, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r5, &(0x7f0000002200)=""/16384, 0x4000) 482.937201ms ago: executing program 7 (id=4400): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000180)=[{{0x77359400}, 0x14, 0xe, 0x625c}], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') getdents64(r0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000140)="89", 0x1) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x4000, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x14, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@dev={0xac, 0x14, 0x14, 0x1a}}, {@local}, {@dev}, {@dev}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x8, 0x0, [{0x0, 0x2}]}]}}}}}}}, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x10}}, 0x4000050) sendmsg$inet6(r3, &(0x7f00000001c0)={&(0x7f0000000200)={0xa, 0x4e22, 0x80000010, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6000000000000000290000000400000029080000000000000102000004010807"], 0x60}, 0x4004800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000440)={@mcast1, 0x2, 0x1, 0xff, 0x0, 0xfffb}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) r5 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x40000001, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtaction={0x18, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e}, 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000740)={0x3, 0x8, 0x58, &(0x7f00000006c0)=""/88}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 232.200806ms ago: executing program 8 (id=4403): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x11) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x9, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x36, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000480)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bridge0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000500)="09000000e70014000000d97bfbf788a83baa88a8000088a8ffff8100009988", 0x1f, 0x200000c5, &(0x7f0000000540)={0x11, 0x3, r5, 0x1, 0xc, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe9249a04db8a87d2}}, 0x14) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) 159.661694ms ago: executing program 9 (id=4404): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002680)='./file2\x00', 0x14552, &(0x7f0000002640)=ANY=[@ANYRES16=0x0, @ANYRESHEX=0x0], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101002, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000700)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT, @ANYBLOB="eba3c03f1a4cd8dbaae51d979c5f640a88b65ff579acdd9fa2bc81e41cc5d92d3155ac301a21b4b0c7421f8bbeeb165eabf60bd70d30a6665fc1267af347186d973b662df43d12458c83caf0c41d1cafdd32900017f76bd66b8fefd083e9f691e95c1dbf28981a7a2362125a83c197d948b5106107fab8f5c7b305c5a19b9e9997c87e94556323df6944c95db5f1501a7f57ef97fc7b779b041c7c919eae09e723742ce2e4e2c347c9dd7f95de1b80b70ee7161d652302fc2653964eeedbb902a8b2f61df0f481fdc0b7d0458a1fc56378", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0], 0x1, 0x304, &(0x7f0000000bc0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet(0x2, 0x1, 0x100) set_mempolicy(0x8006, 0x0, 0x5) ioperm(0x200, 0x7ff, 0x2) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x103c00, 0x0) 119.824578ms ago: executing program 7 (id=4405): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x7) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffffd) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x1000, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000480)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@data_err_ignore}, {}, {@nojournal_checksum}]}, 0x1, 0x50a, &(0x7f0000000500)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x21c0, 0x103) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newlink={0x50, 0x10, 0x401, 0x870bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8b00, 0x46950}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000e40), 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 20.697858ms ago: executing program 8 (id=4406): mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000180)=[{{0x77359400}, 0x14, 0xe, 0x625c}], 0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net\x00') getdents64(r0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 p3 [ 398.005869][T22594] loop9: p3 size 134217728 extends beyond EOD, truncated [ 398.055177][T22603] loop8: detected capacity change from 0 to 512 [ 398.072236][T22603] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 398.072279][T22603] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 398.112373][T22603] EXT4-fs (loop8): 1 truncate cleaned up [ 398.132463][T22603] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.213328][T22613] loop9: detected capacity change from 0 to 512 [ 398.251816][T22613] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4041: invalid indirect mapped block 256 (level 2) [ 398.251957][T22613] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 398.255166][T22613] EXT4-fs (loop9): 2 truncates cleaned up [ 398.291129][T22613] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.439693][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4041'. [ 398.541931][T22408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.580923][T11107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.603806][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 398.874456][T22408] veth0_vlan: entered promiscuous mode [ 398.882154][T22408] veth1_vlan: entered promiscuous mode [ 398.925525][T22670] loop6: detected capacity change from 0 to 512 [ 398.933110][T22408] veth0_macvtap: entered promiscuous mode [ 398.946959][T22408] veth1_macvtap: entered promiscuous mode [ 398.958307][T22670] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.958396][T22670] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 398.988722][T22408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.996553][T22408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.030383][T22670] netlink: 'syz.6.4047': attribute type 12 has an invalid length. [ 399.030416][T22670] netlink: 'syz.6.4047': attribute type 29 has an invalid length. [ 399.030451][T22670] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4047'. [ 399.030524][T22670] netlink: 59 bytes leftover after parsing attributes in process `syz.6.4047'. [ 399.082472][T15886] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.082661][T15886] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.082698][T15886] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.082790][T15886] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.128200][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4049'. [ 399.169092][T20972] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 399.170107][T20972] EXT4-fs error (device loop6): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 399.227961][T22641] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 399.227994][T22641] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 399.266314][T22641] EXT4-fs (loop9): 1 truncate cleaned up [ 399.276736][T22641] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.410717][T20972] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.451754][T15887] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.574116][T15887] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.654747][T15887] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.695403][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 399.695420][ T29] audit: type=1400 audit(1700001118.876:7739): avc: denied { write } for pid=22718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 399.743552][T15887] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.756320][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.815417][T15886] netdevsim netdevsim6 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.860325][ T5333] netdevsim netdevsim6 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.870490][T15887] bridge_slave_1: left allmulticast mode [ 399.870559][T15887] bridge_slave_1: left promiscuous mode [ 399.870764][T15887] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.873752][T15887] bridge_slave_0: left allmulticast mode [ 399.873796][T15887] bridge_slave_0: left promiscuous mode [ 399.873921][T15887] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.950518][T22723] loop9: p1 < > p3 [ 399.951196][T22723] loop9: p3 size 134217728 extends beyond EOD, truncated [ 400.151137][T15887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.155108][T15887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.173608][ T29] audit: type=1400 audit(1700001119.319:7740): avc: denied { create } for pid=22728 comm="syz.9.4056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.174678][T15887] bond0 (unregistering): Released all slaves [ 400.208570][T15880] netdevsim netdevsim6 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.208974][T15880] netdevsim netdevsim6 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.301963][T22712] rxe_eth0 speed is unknown, defaulting to 1000 [ 400.424593][T15887] hsr_slave_0: left promiscuous mode [ 400.424924][T15887] hsr_slave_1: left promiscuous mode [ 400.425342][T15887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.425357][T15887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.444416][T15887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.444473][T15887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.478376][T15887] veth1_macvtap: left promiscuous mode [ 400.478405][T15887] veth0_macvtap: left promiscuous mode [ 400.478458][T15887] veth1_vlan: left promiscuous mode [ 400.478493][T15887] veth0_vlan: left promiscuous mode [ 400.504943][ T29] audit: type=1400 audit(1700001119.633:7741): avc: denied { unmount } for pid=11107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 400.611290][ T29] audit: type=1400 audit(1700001119.734:7742): avc: denied { create } for pid=22757 comm="syz.9.4064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.612187][ T29] audit: type=1400 audit(1700001119.734:7743): avc: denied { ioctl } for pid=22757 comm="syz.9.4064" path="socket:[65285]" dev="sockfs" ino=65285 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 400.613265][ T29] audit: type=1400 audit(1700001119.734:7744): avc: denied { read } for pid=22757 comm="syz.9.4064" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 400.613431][ T29] audit: type=1400 audit(1700001119.734:7745): avc: denied { open } for pid=22757 comm="syz.9.4064" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 400.616597][ T29] audit: type=1400 audit(1700001119.734:7746): avc: denied { read write } for pid=22757 comm="syz.9.4064" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 400.616627][ T29] audit: type=1400 audit(1700001119.734:7747): avc: denied { open } for pid=22757 comm="syz.9.4064" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 400.629151][T22758] Cannot find set identified by id 0 to match [ 400.631632][T22761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4062'. [ 400.639867][ T29] audit: type=1400 audit(1700001119.743:7748): avc: denied { mounton } for pid=22757 comm="syz.9.4064" path="/223/bus" dev="tmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 400.839437][T22769] set_capacity_and_notify: 3 callbacks suppressed [ 400.839571][T22769] loop5: detected capacity change from 0 to 512 [ 400.855770][T15887] team0 (unregistering): Port device team_slave_1 removed [ 400.867109][T15887] team0 (unregistering): Port device team_slave_0 removed [ 400.999256][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 401.229802][T22779] device-mapper: table: 252:11: crypt: unknown target type [ 401.229933][T22779] device-mapper: ioctl: error adding target to table [ 401.291132][T22771] loop5: detected capacity change from 0 to 512 [ 401.377913][T22771] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4065: invalid indirect mapped block 256 (level 2) [ 401.378019][T22771] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 401.378459][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 401.378480][ C1] EXT4-fs (loop5): initial error at time 1700001120: ext4_free_branches:1040: inode 11 [ 401.378504][ C1] EXT4-fs (loop5): last error at time 1700001120: ext4_free_branches:1040: inode 11 [ 401.387980][T22771] EXT4-fs (loop5): 2 truncates cleaned up [ 401.399946][T22771] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.567468][T22771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4065'. [ 401.583426][T15887] Bluetooth: hci0: Frame reassembly failed (-84) [ 401.638716][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 401.664776][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 401.670454][T22803] loop8: detected capacity change from 0 to 8192 [ 401.682266][T22803] bio_check_eod: 5963 callbacks suppressed [ 401.682283][T22803] syz.8.4070: attempt to access beyond end of device [ 401.682283][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.682313][T22803] buffer_io_error: 5963 callbacks suppressed [ 401.682408][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685155][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685155][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685183][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685221][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685221][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685245][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685346][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685346][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685381][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685412][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685412][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685435][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685535][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685535][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685558][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685591][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685591][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685621][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685704][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685704][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685728][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685755][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685755][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685817][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.685845][T22803] syz.8.4070: attempt to access beyond end of device [ 401.685845][T22803] loop8: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 401.685938][T22803] Buffer I/O error on dev loop8, logical block 57847, async page read [ 401.840159][T22712] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.840203][T22712] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.840254][T22712] bridge_slave_0: entered allmulticast mode [ 401.840842][T22712] bridge_slave_0: entered promiscuous mode [ 401.847586][T22712] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.847617][T22712] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.847686][T22712] bridge_slave_1: entered allmulticast mode [ 401.848081][T22712] bridge_slave_1: entered promiscuous mode [ 401.904994][T22712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.913445][T22712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.972715][T22712] team0: Port device team_slave_0 added [ 401.980080][T22712] team0: Port device team_slave_1 added [ 402.031939][T22712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.031952][T22712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.032028][T22712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.036891][T22712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.036904][T22712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.036953][T22712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.150696][T22712] hsr_slave_0: entered promiscuous mode [ 402.151133][T22712] hsr_slave_1: entered promiscuous mode [ 402.156585][T22712] debugfs: 'hsr0' already exists in 'hsr' [ 402.156600][T22712] Cannot create hsr debugfs directory [ 402.339305][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 402.422743][T22712] netdevsim netdevsim7 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.458883][T22712] netdevsim netdevsim7 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.558568][T22712] netdevsim netdevsim7 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.583926][T22712] netdevsim netdevsim7 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 402.696137][T22712] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 402.702711][T22712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.704720][T22712] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 402.717270][T22849] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 402.718956][T22850] loop8: detected capacity change from 0 to 2048 [ 402.726546][T22712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.729644][T22712] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 402.735567][T22712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.735938][T22712] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 402.746808][T22712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.748555][T22850] loop8: p1 < > p3 [ 402.755679][T22850] loop8: p3 size 134217728 extends beyond EOD, truncated [ 402.911252][T22869] device-mapper: table: 252:13: crypt: unknown target type [ 402.911308][T22869] device-mapper: ioctl: error adding target to table [ 402.949652][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 402.950734][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4079'. [ 403.067774][T22712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.093130][T22712] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.097808][T15887] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.097846][T15887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.105433][T15887] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.105466][T15887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.336321][T22876] loop5: detected capacity change from 0 to 512 [ 403.409707][T22876] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4080: invalid indirect mapped block 256 (level 2) [ 403.409750][T22876] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 403.415068][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 403.415097][ C1] EXT4-fs (loop5): initial error at time 1700001122: ext4_free_branches:1040: inode 11 [ 403.415128][ C1] EXT4-fs (loop5): last error at time 1700001122: ext4_free_branches:1040: inode 11 [ 403.456429][T22876] EXT4-fs (loop5): 2 truncates cleaned up [ 403.482628][T22876] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.528923][T22712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.566368][T22876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4080'. [ 403.696129][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 403.815915][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 403.908273][T22930] netlink: 'syz.9.4083': attribute type 7 has an invalid length. [ 403.908313][T22930] netlink: 'syz.9.4083': attribute type 8 has an invalid length. [ 403.908795][T22930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4083'. [ 403.921890][T22930] vlan2: entered promiscuous mode [ 404.049268][T22712] veth0_vlan: entered promiscuous mode [ 404.060994][T22712] veth1_vlan: entered promiscuous mode [ 404.090280][T22947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4085'. [ 404.105297][T22712] veth0_macvtap: entered promiscuous mode [ 404.115861][T22712] veth1_macvtap: entered promiscuous mode [ 404.142478][T22712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.151231][T22712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.227672][T15887] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.228585][T15887] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.228623][T15887] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.228715][T15887] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.361747][T22935] rxe_eth0 speed is unknown, defaulting to 1000 [ 404.366535][T22946] loop8: detected capacity change from 0 to 512 [ 404.396760][T22946] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 404.396783][T22946] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 404.438095][T22946] EXT4-fs (loop8): 1 truncate cleaned up [ 404.446585][T22946] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.561533][T22957] loop7: detected capacity change from 0 to 128 [ 404.634446][T22957] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 404.636725][T22957] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.048371][T11107] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.179235][T22712] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 405.179663][T22987] loop8: detected capacity change from 0 to 2048 [ 405.204336][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 405.204352][ T29] audit: type=1400 audit(1700001123.971:7777): avc: denied { write } for pid=22991 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.250033][T22987] loop8: p1 < > p3 [ 405.253002][T22987] loop8: p3 size 134217728 extends beyond EOD, truncated [ 405.431503][T22993] loop9: detected capacity change from 0 to 512 [ 405.452201][T22993] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 405.452232][T22993] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 405.498625][ T29] audit: type=1400 audit(1700001124.239:7778): avc: denied { write } for pid=22998 comm="syz.8.4090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 405.499247][T22993] EXT4-fs (loop9): 1 truncate cleaned up [ 405.529042][T22993] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.545669][ T29] audit: type=1400 audit(1700001124.285:7779): avc: denied { write } for pid=22992 comm="syz.9.4088" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.653133][ T29] audit: type=1400 audit(1700001124.377:7780): avc: denied { write } for pid=22997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.811008][ T29] audit: type=1400 audit(1700001124.534:7781): avc: denied { write } for pid=23018 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.883519][T19395] bond2: (slave syz_tun): Removing an active aggregator [ 405.883755][T19395] bond2: (slave syz_tun): Releasing backup interface [ 405.885532][T15887] smc: removing ib device syz1 [ 406.056603][T23017] loop5: detected capacity change from 0 to 512 [ 406.067514][T23017] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 406.067580][T23017] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 406.089651][T23017] EXT4-fs (loop5): 1 truncate cleaned up [ 406.141116][T23017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.186998][ T29] audit: type=1400 audit(1700001124.867:7782): avc: denied { write } for pid=23016 comm="syz.5.4092" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.240379][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.305392][T23040] netlink: 'syz.9.4095': attribute type 7 has an invalid length. [ 406.305478][T23040] netlink: 'syz.9.4095': attribute type 8 has an invalid length. [ 406.310665][T23040] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4095'. [ 406.347576][T23040] vlan2: entered promiscuous mode [ 406.392763][T23037] device-mapper: table: 252:11: crypt: unknown target type [ 406.392809][T23037] device-mapper: ioctl: error adding target to table [ 406.396577][ T29] audit: type=1400 audit(1700001125.070:7783): avc: denied { write } for pid=23022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.424346][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.498701][ T29] audit: type=1400 audit(1700001125.162:7784): avc: denied { write } for pid=23050 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.626794][T23020] rxe_eth0 speed is unknown, defaulting to 1000 [ 406.676674][T23057] loop9: detected capacity change from 0 to 512 [ 406.704666][T23057] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 406.704773][T23057] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 406.747110][T23057] EXT4-fs (loop9): 1 truncate cleaned up [ 406.783052][T23057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.792135][ T29] audit: type=1400 audit(1700001125.430:7785): avc: denied { write } for pid=23056 comm="syz.9.4099" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 406.838942][T23052] loop5: detected capacity change from 0 to 512 [ 406.872236][T23052] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 406.872348][T23052] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 406.899192][T23052] EXT4-fs (loop5): 1 truncate cleaned up [ 406.930532][ T29] audit: type=1400 audit(1700001125.559:7786): avc: denied { write } for pid=23055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.944094][T23052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.203638][T23077] loop7: detected capacity change from 0 to 512 [ 407.256997][T23077] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4101: invalid indirect mapped block 256 (level 2) [ 407.257127][T23077] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 407.270823][T23077] EXT4-fs (loop7): 2 truncates cleaned up [ 407.311640][T23077] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.321092][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.551920][T23098] loop5: detected capacity change from 0 to 8192 [ 407.566234][T23098] bio_check_eod: 1327 callbacks suppressed [ 407.566247][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566247][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566272][T23098] buffer_io_error: 1327 callbacks suppressed [ 407.566281][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566442][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566442][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566468][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566498][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566498][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566523][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566632][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566632][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566664][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566696][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566696][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566721][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566797][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566797][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566842][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566883][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566883][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.566906][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.566936][T23098] syz.5.4103: attempt to access beyond end of device [ 407.566936][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.567004][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.567044][T23098] syz.5.4103: attempt to access beyond end of device [ 407.567044][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.567089][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.567119][T23098] syz.5.4103: attempt to access beyond end of device [ 407.567119][T23098] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 407.567189][T23098] Buffer I/O error on dev loop5, logical block 57847, async page read [ 407.767123][ T3425] bridge_slave_1: left allmulticast mode [ 407.767160][ T3425] bridge_slave_1: left promiscuous mode [ 407.767258][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.786418][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 407.789851][ T3425] pimreg9: left allmulticast mode [ 407.944312][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.032062][T23110] device-mapper: table: 252:15: crypt: unknown target type [ 408.032212][T23110] device-mapper: ioctl: error adding target to table [ 408.067630][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.073706][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.094205][ T3425] bond0 (unregistering): Released all slaves [ 408.097898][ T3425] bond1 (unregistering): Released all slaves [ 408.103741][ T3425] bond2 (unregistering): Released all slaves [ 408.114134][ T3425] bond3 (unregistering): (slave dummy0): Removing an active aggregator [ 408.114345][ T3425] bond3 (unregistering): (slave dummy0): Releasing backup interface [ 408.117038][ T3425] bond3 (unregistering): Released all slaves [ 408.322501][T23114] loop7: detected capacity change from 0 to 512 [ 408.332885][T23114] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 408.332959][T23114] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 408.386654][T23114] EXT4-fs (loop7): 1 truncate cleaned up [ 408.432542][T23137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4109'. [ 408.440587][T23137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23137 comm=syz.5.4109 [ 408.459252][T23139] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4112'. [ 408.510464][T23114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.579419][ T3425] hsr_slave_0: left promiscuous mode [ 408.582354][ T3425] hsr_slave_1: left promiscuous mode [ 408.583087][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.583103][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.588468][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.588576][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.592276][T23143] loop9: detected capacity change from 0 to 2048 [ 408.607432][T23143] loop9: p1 < > p3 [ 408.609706][T23143] loop9: p3 size 134217728 extends beyond EOD, truncated [ 408.611232][ T3425] veth1_macvtap: left promiscuous mode [ 408.611257][ T3425] veth0_macvtap: left promiscuous mode [ 408.611376][ T3425] veth1_vlan: left promiscuous mode [ 408.611410][ T3425] veth0_vlan: left promiscuous mode [ 408.705868][T12812] udevd[12812]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 408.715113][T10765] udevd[10765]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 408.752219][T12812] udevd[12812]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 408.753420][T10765] udevd[10765]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 408.789339][T23152] netlink: 'syz.9.4114': attribute type 7 has an invalid length. [ 408.789364][T23152] netlink: 'syz.9.4114': attribute type 8 has an invalid length. [ 408.797133][T23152] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4114'. [ 408.804541][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.928215][T15887] smc: removing ib device syz2 [ 409.084899][T23169] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4117'. [ 409.170810][T23152] vlan2: entered promiscuous mode [ 409.306742][T23020] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.306812][T23020] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.306905][T23020] bridge_slave_0: entered allmulticast mode [ 409.342314][T23020] bridge_slave_0: entered promiscuous mode [ 409.354278][T23020] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.354325][T23020] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.354396][T23020] bridge_slave_1: entered allmulticast mode [ 409.354890][T23020] bridge_slave_1: entered promiscuous mode [ 409.500505][T23020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.508391][T23020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.631170][T23198] Cannot find set identified by id 0 to match [ 409.666417][T23020] team0: Port device team_slave_0 added [ 409.667228][T23020] team0: Port device team_slave_1 added [ 409.787232][T23203] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4122'. [ 409.846698][T23192] loop5: detected capacity change from 0 to 512 [ 409.857756][T23020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.857827][T23020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.857854][T23020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.858388][T23020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.858401][T23020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.858554][T23020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.040076][ T3425] IPVS: stop unused estimator thread 0... [ 410.052837][T23020] hsr_slave_0: entered promiscuous mode [ 410.053223][T23020] hsr_slave_1: entered promiscuous mode [ 410.053449][T23020] debugfs: 'hsr0' already exists in 'hsr' [ 410.053460][T23020] Cannot create hsr debugfs directory [ 410.155817][T23210] loop9: detected capacity change from 0 to 512 [ 410.221471][T23210] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4124: invalid indirect mapped block 256 (level 2) [ 410.221558][T23210] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 410.224239][T23210] EXT4-fs (loop9): 2 truncates cleaned up [ 410.234957][T23210] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.270748][T23210] geneve1: entered promiscuous mode [ 410.357324][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4124'. [ 410.462362][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 410.481603][T23225] loop5: detected capacity change from 0 to 2048 [ 410.486004][T23020] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 410.493559][T23020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.496731][T23020] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 410.497092][T23228] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4127'. [ 410.504508][T23020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.504795][T23020] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 410.512136][T23225] loop5: p1 < > p3 [ 410.515104][T23020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.515659][T23020] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 410.518831][T23225] loop5: p3 size 134217728 extends beyond EOD, truncated [ 410.531675][T23020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.651068][T23238] netlink: 'syz.5.4128': attribute type 7 has an invalid length. [ 410.651108][T23238] netlink: 'syz.5.4128': attribute type 8 has an invalid length. [ 410.656658][T23238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4128'. [ 410.679912][T23238] vlan2: entered promiscuous mode [ 410.679953][T23238] gretap0: entered promiscuous mode [ 410.697567][T23239] FAULT_INJECTION: forcing a failure. [ 410.697567][T23239] name failslab, interval 1, probability 0, space 0, times 0 [ 410.697596][T23239] CPU: 1 UID: 0 PID: 23239 Comm: syz.9.4127 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 410.697624][T23239] Tainted: [W]=WARN [ 410.697631][T23239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 410.697643][T23239] Call Trace: [ 410.697649][T23239] [ 410.697657][T23239] __dump_stack+0x1d/0x30 [ 410.697706][T23239] dump_stack_lvl+0x95/0xd0 [ 410.697726][T23239] dump_stack+0x15/0x1b [ 410.697774][T23239] should_fail_ex+0x259/0x270 [ 410.697860][T23239] ? newque+0x4e/0x240 [ 410.697952][T23239] should_failslab+0x8c/0xb0 [ 410.697987][T23239] __kmalloc_cache_noprof+0x5d/0x3e0 [ 410.698029][T23239] ? newque+0x4e/0x240 [ 410.698072][T23239] newque+0x4e/0x240 [ 410.698106][T23239] ipcget+0x2dc/0x480 [ 410.698132][T23239] ? __se_sys_futex+0x2f6/0x370 [ 410.698158][T23239] ? xfd_validate_state+0x45/0xf0 [ 410.698258][T23239] __x64_sys_msgget+0xad/0xe0 [ 410.698293][T23239] x64_sys_call+0x147e/0x2550 [ 410.698341][T23239] do_syscall_64+0x112/0x360 [ 410.698373][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.698393][T23239] RIP: 0033:0x7f745fe3fb19 [ 410.698408][T23239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.698429][T23239] RSP: 002b:00007f745e432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 410.698460][T23239] RAX: ffffffffffffffda RBX: 00007f74600c6270 RCX: 00007f745fe3fb19 [ 410.698477][T23239] RDX: 0000000000000000 RSI: 0000000000000722 RDI: 0000000000000000 [ 410.698492][T23239] RBP: 00007f745fed7b70 R08: 0000000000000000 R09: 0000000000000000 [ 410.698506][T23239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.698638][T23239] R13: 00007f74600c6308 R14: 00007f74600c6270 R15: 00007fff90348858 [ 410.698660][T23239] [ 410.758589][T23020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.779944][T23020] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.791935][ T3425] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.791969][ T3425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.798981][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.799039][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.799493][T23243] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4130'. [ 410.847813][T23020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.090135][T23264] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4136'. [ 411.256673][T23259] loop9: detected capacity change from 0 to 512 [ 411.305868][T23020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.513016][T23273] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 411.513112][T23273] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 411.554333][T23273] EXT4-fs (loop5): 1 truncate cleaned up [ 411.559577][T23279] loop9: p1 < > p3 [ 411.561869][T23279] loop9: p3 size 134217728 extends beyond EOD, truncated [ 411.565088][T23273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.585690][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 411.585703][ T29] audit: type=1400 audit(1700001129.851:7804): avc: denied { write } for pid=23272 comm="syz.5.4137" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.649403][ T29] audit: type=1400 audit(1700001129.916:7805): avc: denied { tracepoint } for pid=23292 comm="syz.9.4140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 411.660808][T12812] udevd[12812]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 411.662182][T10765] udevd[10765]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 411.692831][T10765] udevd[10765]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 411.699774][T12812] udevd[12812]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 411.795890][T23020] veth0_vlan: entered promiscuous mode [ 411.803668][T23020] veth1_vlan: entered promiscuous mode [ 411.840283][T23020] veth0_macvtap: entered promiscuous mode [ 411.848177][T23020] veth1_macvtap: entered promiscuous mode [ 411.870379][T23020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.883157][T23020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.931515][T15887] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.931879][T15887] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.931954][T15887] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.931991][T15887] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.976945][T23293] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 412.000623][ T29] audit: type=1400 audit(1700001130.239:7806): avc: denied { read } for pid=2964 comm="acpid" name="event2" dev="devtmpfs" ino=3094 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.000671][ T29] audit: type=1400 audit(1700001130.239:7807): avc: denied { open } for pid=2964 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3094 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.000699][ T29] audit: type=1400 audit(1700001130.239:7808): avc: denied { ioctl } for pid=2964 comm="acpid" path="/dev/input/event2" dev="devtmpfs" ino=3094 ioctlcmd=0x80604520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 412.313090][T23302] set_capacity_and_notify: 2 callbacks suppressed [ 412.313108][T23302] loop8: detected capacity change from 0 to 8192 [ 412.336678][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.382176][T23309] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4142'. [ 412.433028][T23309] FAULT_INJECTION: forcing a failure. [ 412.433028][T23309] name failslab, interval 1, probability 0, space 0, times 0 [ 412.433133][T23309] CPU: 1 UID: 0 PID: 23309 Comm: syz.5.4142 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 412.433163][T23309] Tainted: [W]=WARN [ 412.433171][T23309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 412.433186][T23309] Call Trace: [ 412.433194][T23309] [ 412.433203][T23309] __dump_stack+0x1d/0x30 [ 412.433297][T23309] dump_stack_lvl+0x95/0xd0 [ 412.433362][T23309] dump_stack+0x15/0x1b [ 412.433386][T23309] should_fail_ex+0x259/0x270 [ 412.433468][T23309] ? newque+0x4e/0x240 [ 412.433502][T23309] should_failslab+0x8c/0xb0 [ 412.433538][T23309] __kmalloc_cache_noprof+0x5d/0x3e0 [ 412.433620][T23309] ? newque+0x4e/0x240 [ 412.433717][T23309] newque+0x4e/0x240 [ 412.433790][T23309] ipcget+0x2dc/0x480 [ 412.433879][T23309] ? __se_sys_futex+0x2f6/0x370 [ 412.433968][T23309] ? xfd_validate_state+0x45/0xf0 [ 412.434004][T23309] __x64_sys_msgget+0xad/0xe0 [ 412.434033][T23309] x64_sys_call+0x147e/0x2550 [ 412.434094][T23309] do_syscall_64+0x112/0x360 [ 412.434183][T23309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.434209][T23309] RIP: 0033:0x7ff82e7bfb19 [ 412.434286][T23309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.434306][T23309] RSP: 002b:00007ff82d20f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 412.434346][T23309] RAX: ffffffffffffffda RBX: 00007ff82ea45fa0 RCX: 00007ff82e7bfb19 [ 412.434363][T23309] RDX: 0000000000000000 RSI: 0000000000000722 RDI: 0000000000000000 [ 412.434378][T23309] RBP: 00007ff82e857b70 R08: 0000000000000000 R09: 0000000000000000 [ 412.434390][T23309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.434402][T23309] R13: 00007ff82ea46038 R14: 00007ff82ea45fa0 R15: 00007ffe3d0b49d8 [ 412.434419][T23309] [ 412.447170][T23309] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.477385][T23314] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4144'. [ 412.930396][T23330] loop9: detected capacity change from 0 to 512 [ 412.957980][T23327] loop5: detected capacity change from 0 to 512 [ 412.988192][T23333] loop7: detected capacity change from 0 to 2048 [ 413.006924][T23327] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4147: invalid indirect mapped block 256 (level 2) [ 413.007021][T23327] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 413.026632][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 413.026659][ C0] EXT4-fs (loop5): initial error at time 1700001131: ext4_free_branches:1040: inode 11 [ 413.026720][ C0] EXT4-fs (loop5): last error at time 1700001131: ext4_free_branches:1040: inode 11 [ 413.039223][T23327] EXT4-fs (loop5): 2 truncates cleaned up [ 413.043330][T23327] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.045762][T23333] loop7: p1 < > p3 [ 413.054828][T23333] loop7: p3 size 134217728 extends beyond EOD, truncated [ 413.178352][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4150'. [ 413.185963][T23340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23340 comm=syz.7.4150 [ 413.201599][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 413.403532][T23339] loop9: detected capacity change from 0 to 512 [ 413.412322][T23342] loop5: detected capacity change from 0 to 8192 [ 413.420554][T23339] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 413.420630][T23339] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 413.450660][T23342] bio_check_eod: 3936 callbacks suppressed [ 413.450676][T23342] syz.5.4152: attempt to access beyond end of device [ 413.450676][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.450701][T23342] buffer_io_error: 3936 callbacks suppressed [ 413.450784][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.450944][T23342] syz.5.4152: attempt to access beyond end of device [ 413.450944][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451044][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451115][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451115][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451135][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451163][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451163][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451183][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451243][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451243][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451332][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451356][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451356][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451399][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451507][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451507][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451532][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451566][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451566][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451585][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451613][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451613][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451687][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.451716][T23342] syz.5.4152: attempt to access beyond end of device [ 413.451716][T23342] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 413.451741][T23342] Buffer I/O error on dev loop5, logical block 57847, async page read [ 413.464535][T23339] EXT4-fs (loop9): 1 truncate cleaned up [ 413.472921][T23339] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.500054][ T29] audit: type=1400 audit(1700001131.624:7809): avc: denied { write } for pid=23337 comm="syz.9.4151" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.823759][T23347] loop8: detected capacity change from 0 to 8192 [ 414.250654][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.283599][T23353] netlink: 'syz.9.4155': attribute type 7 has an invalid length. [ 414.283660][T23353] netlink: 'syz.9.4155': attribute type 8 has an invalid length. [ 414.285596][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4155'. [ 414.307105][T23353] vlan2: entered promiscuous mode [ 414.521267][T23351] loop7: detected capacity change from 0 to 512 [ 414.540217][T23351] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 414.540247][T23351] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 414.564944][T23351] EXT4-fs (loop7): 1 truncate cleaned up [ 414.576349][T23351] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.765944][T23360] loop9: detected capacity change from 0 to 512 [ 414.839117][T23360] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4157: invalid indirect mapped block 256 (level 2) [ 414.839237][T23360] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 414.857279][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 414.857308][ C0] EXT4-fs (loop9): initial error at time 1700001132: ext4_free_branches:1040: inode 11 [ 414.857340][ C0] EXT4-fs (loop9): last error at time 1700001132: ext4_free_branches:1040: inode 11 [ 414.864159][ T29] audit: type=1400 audit(1700001132.879:7810): avc: denied { write } for pid=23350 comm="syz.7.4154" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.901423][T23360] EXT4-fs (loop9): 2 truncates cleaned up [ 414.906759][T23360] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.933489][ T29] audit: type=1400 audit(1700001132.944:7811): avc: denied { write } for pid=23359 comm="syz.9.4157" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.990655][ T29] audit: type=1400 audit(1700001132.999:7812): avc: denied { write } for pid=23362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.023772][T23378] loop5: detected capacity change from 0 to 8192 [ 415.105084][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 415.126559][ T29] audit: type=1400 audit(1700001133.128:7813): avc: denied { write } for pid=23386 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.306616][T23392] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 415.306658][T23392] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 415.337161][T23392] EXT4-fs (loop8): 1 truncate cleaned up [ 415.349753][T23392] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.355144][T23390] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4162: invalid indirect mapped block 256 (level 2) [ 415.355220][T23390] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.357998][T23390] EXT4-fs (loop9): 2 truncates cleaned up [ 415.410924][T23390] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.466978][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.512441][T23390] __nla_validate_parse: 1 callbacks suppressed [ 415.512492][T23390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4162'. [ 415.714982][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 415.717075][ T3425] Bluetooth: hci0: Frame reassembly failed (-84) [ 415.743345][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.944934][T23406] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4166: invalid indirect mapped block 256 (level 2) [ 415.944999][T23406] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.946484][T23404] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4165: invalid indirect mapped block 256 (level 2) [ 415.946605][T23404] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 415.949112][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 415.949212][ C0] EXT4-fs (loop9): initial error at time 1700001133: ext4_free_branches:1040: inode 11 [ 415.949318][ C0] EXT4-fs (loop9): last error at time 1700001133: ext4_free_branches:1040: inode 11 [ 415.949470][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 415.949501][ C0] EXT4-fs (loop7): initial error at time 1700001133: ext4_free_branches:1040: inode 11 [ 415.949621][ C0] EXT4-fs (loop7): last error at time 1700001133: ext4_free_branches:1040: inode 11 [ 416.066564][T23406] EXT4-fs (loop7): 2 truncates cleaned up [ 416.075291][T23404] EXT4-fs (loop9): 2 truncates cleaned up [ 416.079675][T23406] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.101718][T23404] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.160792][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4165'. [ 416.280130][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 416.311405][T23415] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4168'. [ 416.420936][T23418] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4168'. [ 416.422999][T23406] geneve2: entered promiscuous mode [ 416.691463][T23406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4166'. [ 416.837019][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 416.983365][T23425] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 416.983494][T23425] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 417.007895][T23425] EXT4-fs (loop7): 1 truncate cleaned up [ 417.010891][T23425] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.038184][T23427] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4172: invalid indirect mapped block 256 (level 2) [ 417.039514][T23427] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 417.043059][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 417.043087][ C1] EXT4-fs (loop5): initial error at time 1700001134: ext4_free_branches:1040: inode 11 [ 417.043135][ C1] EXT4-fs (loop5): last error at time 1700001134: ext4_free_branches:1040: inode 11 [ 417.044105][T23427] EXT4-fs (loop5): 2 truncates cleaned up [ 417.048508][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 417.048533][ T29] audit: type=1400 audit(1700001134.901:7816): avc: denied { write } for pid=23424 comm="syz.7.4170" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.049900][T23427] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.058267][ T29] audit: type=1400 audit(1700001134.910:7817): avc: denied { write } for pid=23426 comm="syz.5.4172" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.087407][T23427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4172'. [ 417.127164][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 417.357064][T23437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 417.360836][T23433] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4183: invalid indirect mapped block 256 (level 2) [ 417.360912][T23433] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 417.362787][T23437] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.365110][T23433] EXT4-fs (loop9): 2 truncates cleaned up [ 417.388255][ T29] audit: type=1400 audit(1700001135.215:7818): avc: denied { write } for pid=23432 comm="syz.9.4183" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.399370][ T29] audit: type=1400 audit(1700001135.224:7819): avc: denied { create } for pid=23436 comm="syz.5.4173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 417.431024][T23433] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4183'. [ 417.463364][ T29] audit: type=1400 audit(1700001135.288:7820): avc: denied { write } for pid=23436 comm="syz.5.4173" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.463395][ T29] audit: type=1400 audit(1700001135.288:7821): avc: denied { write } for pid=23436 comm="syz.5.4173" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 417.463476][ T29] audit: type=1400 audit(1700001135.288:7822): avc: denied { rename } for pid=23436 comm="syz.5.4173" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 417.463510][ T29] audit: type=1400 audit(1700001135.288:7823): avc: denied { unlink } for pid=23436 comm="syz.5.4173" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 417.485930][ T29] audit: type=1400 audit(1700001135.288:7824): avc: denied { sys_admin } for pid=23436 comm="syz.5.4173" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 417.925848][ T29] audit: type=1400 audit(1700001135.713:7825): avc: denied { write } for pid=23449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.954665][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 417.955852][T19695] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 418.075346][T23462] set_capacity_and_notify: 9 callbacks suppressed [ 418.075366][T23462] loop5: detected capacity change from 0 to 8192 [ 418.301739][T23475] loop7: detected capacity change from 0 to 512 [ 418.317409][T23475] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 418.317431][T23475] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 418.341895][T23477] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4180'. [ 418.351060][T23475] EXT4-fs (loop7): 1 truncate cleaned up [ 418.395981][T23466] loop8: detected capacity change from 0 to 512 [ 418.439031][T23466] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 418.439063][T23466] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 418.493738][T23466] EXT4-fs (loop8): 1 truncate cleaned up [ 418.953796][T23487] loop9: detected capacity change from 0 to 8192 [ 418.973051][T23487] bio_check_eod: 6478 callbacks suppressed [ 418.973067][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973067][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973113][T23487] buffer_io_error: 6478 callbacks suppressed [ 418.973125][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973396][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973396][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973427][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973458][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973458][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973544][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973569][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973569][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973593][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973632][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973632][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973657][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973686][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973686][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973719][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973748][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973748][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973772][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.973879][T23487] syz.9.4181: attempt to access beyond end of device [ 418.973879][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.973904][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.974069][T23487] syz.9.4181: attempt to access beyond end of device [ 418.974069][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.974102][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 418.974169][T23487] syz.9.4181: attempt to access beyond end of device [ 418.974169][T23487] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 418.974194][T23487] Buffer I/O error on dev loop9, logical block 57847, async page read [ 419.196380][T23494] device-mapper: table: 252:13: crypt: unknown target type [ 419.196456][T23494] device-mapper: ioctl: error adding target to table [ 419.318588][T23491] loop7: detected capacity change from 0 to 8192 [ 419.540833][T23502] loop8: detected capacity change from 0 to 512 [ 419.607011][T23502] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #11: comm syz.8.4186: invalid indirect mapped block 256 (level 2) [ 419.607055][T23502] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 419.613207][T23502] EXT4-fs (loop8): 2 truncates cleaned up [ 419.769137][T23509] loop5: detected capacity change from 0 to 512 [ 419.796845][T23509] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 419.796888][T23509] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 419.818179][T23509] EXT4-fs (loop5): 1 truncate cleaned up [ 419.969323][T23521] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4191'. [ 420.080766][T23517] loop9: detected capacity change from 0 to 512 [ 420.088617][T23522] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4191'. [ 420.120190][T23517] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 420.120223][T23517] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 420.143951][T23517] EXT4-fs (loop9): 1 truncate cleaned up [ 420.425321][T23531] loop8: detected capacity change from 0 to 8192 [ 420.744161][T23546] FAULT_INJECTION: forcing a failure. [ 420.744161][T23546] name failslab, interval 1, probability 0, space 0, times 0 [ 420.744196][T23546] CPU: 1 UID: 0 PID: 23546 Comm: syz.7.4198 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 420.744227][T23546] Tainted: [W]=WARN [ 420.744235][T23546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 420.744249][T23546] Call Trace: [ 420.744335][T23546] [ 420.744343][T23546] __dump_stack+0x1d/0x30 [ 420.744368][T23546] dump_stack_lvl+0x95/0xd0 [ 420.744392][T23546] dump_stack+0x15/0x1b [ 420.744415][T23546] should_fail_ex+0x259/0x270 [ 420.744447][T23546] ? newque+0x4e/0x240 [ 420.744527][T23546] should_failslab+0x8c/0xb0 [ 420.744613][T23546] __kmalloc_cache_noprof+0x5d/0x3e0 [ 420.744734][T23546] ? newque+0x4e/0x240 [ 420.744767][T23546] newque+0x4e/0x240 [ 420.744858][T23546] ipcget+0x2dc/0x480 [ 420.744887][T23546] ? __se_sys_futex+0x2f6/0x370 [ 420.744908][T23546] ? xfd_validate_state+0x45/0xf0 [ 420.744997][T23546] __x64_sys_msgget+0xad/0xe0 [ 420.745033][T23546] x64_sys_call+0x147e/0x2550 [ 420.745080][T23546] do_syscall_64+0x112/0x360 [ 420.745109][T23546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.745129][T23546] RIP: 0033:0x7f96f703fb19 [ 420.745143][T23546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.745235][T23546] RSP: 002b:00007f96f5a8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 420.745255][T23546] RAX: ffffffffffffffda RBX: 00007f96f72c5fa0 RCX: 00007f96f703fb19 [ 420.745271][T23546] RDX: 0000000000000000 RSI: 0000000000000722 RDI: 0000000000000000 [ 420.745286][T23546] RBP: 00007f96f70d7b70 R08: 0000000000000000 R09: 0000000000000000 [ 420.745349][T23546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.745384][T23546] R13: 00007f96f72c6038 R14: 00007f96f72c5fa0 R15: 00007ffdbc2e7628 [ 420.745406][T23546] [ 420.773463][T23546] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 421.006720][T15880] Bluetooth: hci0: Frame reassembly failed (-84) [ 421.163648][T23543] loop5: detected capacity change from 0 to 512 [ 421.337981][T23570] __nla_validate_parse: 2 callbacks suppressed [ 421.338025][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4203'. [ 421.350831][T23561] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 421.350907][T23561] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 421.356210][T23561] EXT4-fs (loop9): 1 truncate cleaned up [ 421.463512][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4203'. [ 421.586354][T23580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4197'. [ 421.681032][T23584] netlink: 'syz.8.4217': attribute type 12 has an invalid length. [ 421.681052][T23584] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4217'. [ 421.814782][T23592] netlink: 'syz.1.4219': attribute type 12 has an invalid length. [ 421.814808][T23592] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4219'. [ 422.293381][T23602] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4211'. [ 422.300502][T23602] FAULT_INJECTION: forcing a failure. [ 422.300502][T23602] name failslab, interval 1, probability 0, space 0, times 0 [ 422.300551][T23602] CPU: 1 UID: 0 PID: 23602 Comm: syz.9.4211 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 422.300583][T23602] Tainted: [W]=WARN [ 422.300590][T23602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 422.300620][T23602] Call Trace: [ 422.300653][T23602] [ 422.300661][T23602] __dump_stack+0x1d/0x30 [ 422.300688][T23602] dump_stack_lvl+0x95/0xd0 [ 422.300790][T23602] dump_stack+0x15/0x1b [ 422.300893][T23602] should_fail_ex+0x259/0x270 [ 422.300922][T23602] ? newque+0x4e/0x240 [ 422.300958][T23602] should_failslab+0x8c/0xb0 [ 422.301065][T23602] __kmalloc_cache_noprof+0x5d/0x3e0 [ 422.301124][T23602] ? newque+0x4e/0x240 [ 422.301156][T23602] newque+0x4e/0x240 [ 422.301188][T23602] ipcget+0x2dc/0x480 [ 422.301245][T23602] ? __se_sys_futex+0x2f6/0x370 [ 422.301271][T23602] ? xfd_validate_state+0x45/0xf0 [ 422.301315][T23602] __x64_sys_msgget+0xad/0xe0 [ 422.301348][T23602] x64_sys_call+0x147e/0x2550 [ 422.301377][T23602] do_syscall_64+0x112/0x360 [ 422.301437][T23602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.301460][T23602] RIP: 0033:0x7f745fe3fb19 [ 422.301477][T23602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.301512][T23602] RSP: 002b:00007f745e897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 422.301534][T23602] RAX: ffffffffffffffda RBX: 00007f74600c5fa0 RCX: 00007f745fe3fb19 [ 422.301550][T23602] RDX: 0000000000000000 RSI: 0000000000000722 RDI: 0000000000000000 [ 422.301565][T23602] RBP: 00007f745fed7b70 R08: 0000000000000000 R09: 0000000000000000 [ 422.301579][T23602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.301620][T23602] R13: 00007f74600c6038 R14: 00007f74600c5fa0 R15: 00007fff90348858 [ 422.301641][T23602] [ 422.410059][T23606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23606 comm=syz.9.4224 [ 422.660863][T23612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4215'. [ 422.681595][T23610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4213'. [ 422.802897][T23613] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4215'. [ 422.963085][T23618] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4216'. [ 423.230524][T19695] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 423.372051][T23622] loop7: p1 < > p3 [ 423.372732][T23622] loop7: p3 size 134217728 extends beyond EOD, truncated [ 423.509819][T23625] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.735075][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 423.735090][ T29] audit: type=1400 audit(1700001141.067:7836): avc: denied { write } for pid=23630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.769676][T23641] set_capacity_and_notify: 5 callbacks suppressed [ 423.769695][T23641] loop8: detected capacity change from 0 to 8192 [ 423.874400][T23629] loop7: detected capacity change from 0 to 512 [ 423.892072][ T29] audit: type=1400 audit(1700001141.224:7837): avc: denied { write } for pid=23650 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 423.940222][T23647] loop9: detected capacity change from 0 to 512 [ 423.953669][T23629] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4222: invalid indirect mapped block 256 (level 2) [ 423.953724][T23629] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 423.954627][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 423.954647][ C0] EXT4-fs (loop7): initial error at time 1700001141: ext4_free_branches:1040: inode 11 [ 423.954679][ C0] EXT4-fs (loop7): last error at time 1700001141: ext4_free_branches:1040: inode 11 [ 423.975091][T23629] EXT4-fs (loop7): 2 truncates cleaned up [ 423.980916][T23647] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 423.980931][T23647] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 423.982109][T23647] EXT4-fs (loop9): 1 truncate cleaned up [ 423.988676][ T29] audit: type=1400 audit(1700001141.307:7838): avc: denied { write } for pid=23645 comm="syz.9.4226" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.673729][T23671] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23671 comm=syz.8.4231 [ 424.771392][T23666] loop9: detected capacity change from 0 to 512 [ 424.826621][T23666] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4229: invalid indirect mapped block 256 (level 2) [ 424.826676][T23666] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 424.833192][T23666] EXT4-fs (loop9): 2 truncates cleaned up [ 425.002760][T23676] loop5: detected capacity change from 0 to 2048 [ 425.041763][T23676] loop5: p1 < > p3 [ 425.042321][T23676] loop5: p3 size 134217728 extends beyond EOD, truncated [ 425.247701][T23682] loop5: detected capacity change from 0 to 512 [ 425.249858][T23679] loop9: detected capacity change from 0 to 512 [ 425.250465][T23682] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 425.250551][T23682] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 425.252602][T23679] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 425.252615][T23679] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 425.312149][T23682] EXT4-fs (loop5): 1 truncate cleaned up [ 425.337642][T23679] EXT4-fs (loop9): 1 truncate cleaned up [ 425.393304][ T29] audit: type=1400 audit(1700001142.599:7839): avc: denied { write } for pid=23678 comm="syz.9.4234" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.412427][ T29] audit: type=1400 audit(1700001142.609:7840): avc: denied { write } for pid=23681 comm="syz.5.4235" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.817410][T23696] loop8: detected capacity change from 0 to 512 [ 425.882668][T23694] loop7: detected capacity change from 0 to 512 [ 425.918652][T23694] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 425.918685][T23694] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 425.941601][T23694] EXT4-fs (loop7): 1 truncate cleaned up [ 425.950273][T23694] EXT4-fs mount: 26 callbacks suppressed [ 425.950335][T23694] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.987053][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.058087][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.059771][T23702] vlan2: entered promiscuous mode [ 426.236085][T23701] loop8: detected capacity change from 0 to 512 [ 426.262931][T23701] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 426.263018][T23701] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 426.267506][ T29] audit: type=1400 audit(1700001143.412:7841): avc: denied { write } for pid=23693 comm="syz.7.4238" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.294587][T23701] EXT4-fs (loop8): 1 truncate cleaned up [ 426.330198][T23701] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.333568][T23704] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4242: invalid indirect mapped block 256 (level 2) [ 426.333674][T23704] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 426.337924][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 426.337942][ C0] EXT4-fs (loop9): initial error at time 1700001143: ext4_free_branches:1040: inode 11 [ 426.337976][ C0] EXT4-fs (loop9): last error at time 1700001143: ext4_free_branches:1040: inode 11 [ 426.406640][T23704] EXT4-fs (loop9): 2 truncates cleaned up [ 426.413705][ T29] audit: type=1400 audit(1700001143.541:7842): avc: denied { write } for pid=23699 comm="syz.8.4241" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.447425][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.461745][T23704] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.546295][T23707] EXT4-fs: Ignoring removed nobh option [ 426.589684][T23707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.598903][ T29] audit: type=1400 audit(1700001143.707:7843): avc: denied { write } for pid=23706 comm="syz.5.4243" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.612254][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 426.650163][ T29] audit: type=1400 audit(1700001143.762:7844): avc: denied { write } for pid=23706 comm="syz.5.4243" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.651938][ T29] audit: type=1400 audit(1700001143.762:7845): avc: denied { write } for pid=23706 comm="syz.5.4243" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 426.705339][T23707] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 426.724016][T23707] EXT4-fs (loop5): Remounting filesystem read-only [ 426.842501][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.931119][T23732] __nla_validate_parse: 4 callbacks suppressed [ 426.931172][T23732] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4249'. [ 426.934934][T23732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23732 comm=syz.9.4249 [ 426.972517][T23717] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4245: invalid indirect mapped block 256 (level 2) [ 426.972634][T23717] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 426.977014][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 426.977032][ C1] EXT4-fs (loop7): initial error at time 1700001144: ext4_free_branches:1040: inode 11 [ 426.977077][ C1] EXT4-fs (loop7): last error at time 1700001144: ext4_free_branches:1040: inode 11 [ 426.980194][T23717] EXT4-fs (loop7): 2 truncates cleaned up [ 426.993632][T23717] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.027951][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.273685][T23735] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 427.273710][T23735] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 427.313659][T23735] EXT4-fs (loop5): 1 truncate cleaned up [ 427.324729][T23735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.382296][T23717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4245'. [ 427.686761][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 427.944256][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.018513][T23756] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 428.165956][T23758] bio_check_eod: 20872 callbacks suppressed [ 428.165974][T23758] syz.7.4257: attempt to access beyond end of device [ 428.165974][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166014][T23758] buffer_io_error: 20872 callbacks suppressed [ 428.166027][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166212][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166212][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166236][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166268][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166268][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166292][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166322][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166322][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166420][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166450][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166450][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166474][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166590][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166590][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166689][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166720][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166720][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166745][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166770][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166770][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166790][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166816][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166816][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166841][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.166908][T23758] syz.7.4257: attempt to access beyond end of device [ 428.166908][T23758] loop7: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 428.166933][T23758] Buffer I/O error on dev loop7, logical block 57847, async page read [ 428.224819][T23764] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4260'. [ 428.306719][T23762] device-mapper: table: 252:13: crypt: unknown target type [ 428.306773][T23762] device-mapper: ioctl: error adding target to table [ 428.511585][T23776] tipc: Enabling of bearer rejected, failed to enable media [ 428.562394][T23778] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 428.562409][T23778] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 428.566661][T23778] EXT4-fs (loop8): 1 truncate cleaned up [ 428.567102][T23778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.744415][T23782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4264'. [ 428.745227][T23782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23782 comm=syz.5.4264 [ 428.807394][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.853737][T23788] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4267'. [ 429.153836][T23796] FAULT_INJECTION: forcing a failure. [ 429.153836][T23796] name failslab, interval 1, probability 0, space 0, times 0 [ 429.153892][T23796] CPU: 1 UID: 0 PID: 23796 Comm: syz.8.4269 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 429.153927][T23796] Tainted: [W]=WARN [ 429.153935][T23796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.153949][T23796] Call Trace: [ 429.153960][T23796] [ 429.153969][T23796] __dump_stack+0x1d/0x30 [ 429.153998][T23796] dump_stack_lvl+0x95/0xd0 [ 429.154099][T23796] dump_stack+0x15/0x1b [ 429.154119][T23796] should_fail_ex+0x259/0x270 [ 429.154145][T23796] ? newque+0x4e/0x240 [ 429.154178][T23796] should_failslab+0x8c/0xb0 [ 429.154217][T23796] __kmalloc_cache_noprof+0x5d/0x3e0 [ 429.154252][T23796] ? newque+0x4e/0x240 [ 429.154285][T23796] newque+0x4e/0x240 [ 429.154312][T23796] ipcget+0x2dc/0x480 [ 429.154351][T23796] ? __se_sys_futex+0x2f6/0x370 [ 429.154377][T23796] ? xfd_validate_state+0x45/0xf0 [ 429.154411][T23796] __x64_sys_msgget+0xad/0xe0 [ 429.154484][T23796] x64_sys_call+0x147e/0x2550 [ 429.154511][T23796] do_syscall_64+0x112/0x360 [ 429.154548][T23796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.154627][T23796] RIP: 0033:0x7f89c046fb19 [ 429.154653][T23796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.154671][T23796] RSP: 002b:00007f89beebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000044 [ 429.154690][T23796] RAX: ffffffffffffffda RBX: 00007f89c06f5fa0 RCX: 00007f89c046fb19 [ 429.154741][T23796] RDX: 0000000000000000 RSI: 0000000000000722 RDI: 0000000000000000 [ 429.154813][T23796] RBP: 00007f89c0507b70 R08: 0000000000000000 R09: 0000000000000000 [ 429.154828][T23796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.154842][T23796] R13: 00007f89c06f6038 R14: 00007f89c06f5fa0 R15: 00007ffc0e815f68 [ 429.154865][T23796] [ 429.168894][T23796] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 429.218947][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 429.218962][ T29] audit: type=1400 audit(1700001146.135:7913): avc: denied { unmount } for pid=23020 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 429.245173][ T29] audit: type=1400 audit(1700001146.163:7914): avc: denied { create } for pid=23797 comm="syz.8.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 429.246772][ T29] audit: type=1400 audit(1700001146.163:7915): avc: denied { ioctl } for pid=23797 comm="syz.8.4270" path="socket:[69465]" dev="sockfs" ino=69465 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 429.252747][ T29] audit: type=1400 audit(1700001146.172:7916): avc: denied { read } for pid=23797 comm="syz.8.4270" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 429.252775][ T29] audit: type=1400 audit(1700001146.172:7917): avc: denied { open } for pid=23797 comm="syz.8.4270" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 429.264465][ T29] audit: type=1400 audit(1700001146.172:7918): avc: denied { read write } for pid=23797 comm="syz.8.4270" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.268178][ T29] audit: type=1400 audit(1700001146.181:7920): avc: denied { name_bind } for pid=23793 comm="syz.7.4268" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 429.273204][ T29] audit: type=1400 audit(1700001146.172:7919): avc: denied { open } for pid=23797 comm="syz.8.4270" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 429.312781][ T29] audit: type=1400 audit(1700001146.227:7921): avc: denied { ioctl } for pid=23793 comm="syz.7.4268" path="socket:[69467]" dev="sockfs" ino=69467 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 429.336348][T23798] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 429.346633][ T29] audit: type=1400 audit(1700001146.246:7922): avc: denied { mounton } for pid=23797 comm="syz.8.4270" path="/28/bus" dev="tmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 429.401610][T15883] Bluetooth: hci0: Frame reassembly failed (-84) [ 429.413333][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4266'. [ 429.780325][T23810] tipc: Enabling of bearer rejected, failed to enable media [ 429.900885][T23811] device-mapper: table: 252:13: crypt: unknown target type [ 429.900980][T23811] device-mapper: ioctl: error adding target to table [ 429.952118][T23808] set_capacity_and_notify: 8 callbacks suppressed [ 429.952145][T23808] loop8: detected capacity change from 0 to 512 [ 429.981965][T23815] device-mapper: table: 252:15: crypt: unknown target type [ 429.982017][T23815] device-mapper: ioctl: error adding target to table [ 429.987456][T23808] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 429.987640][T23808] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 430.009857][T23808] EXT4-fs (loop8): 1 truncate cleaned up [ 430.037547][T23808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.119951][T23824] loop5: detected capacity change from 0 to 512 [ 430.127448][T23824] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 430.127463][T23824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 430.137824][T23824] EXT4-fs (loop5): 1 truncate cleaned up [ 430.138220][T23824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.291996][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.560146][T23834] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4281'. [ 430.821768][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.874518][T23840] netlink: 'syz.8.4282': attribute type 7 has an invalid length. [ 430.874584][T23840] netlink: 'syz.8.4282': attribute type 8 has an invalid length. [ 430.875627][T23840] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4282'. [ 430.896282][T23840] vlan2: entered promiscuous mode [ 430.896312][T23840] gretap0: entered promiscuous mode [ 430.932774][T23844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4284'. [ 430.937190][T23844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23844 comm=syz.9.4284 [ 430.985114][T23842] loop5: detected capacity change from 0 to 128 [ 431.042926][T23842] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 431.045054][T23842] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.134545][T22408] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.153083][T23849] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 431.276110][T23853] loop5: detected capacity change from 0 to 8192 [ 431.353353][T23856] device-mapper: table: 252:14: crypt: unknown target type [ 431.353408][T23856] device-mapper: ioctl: error adding target to table [ 431.546137][T23861] device-mapper: table: 252:14: crypt: unknown target type [ 431.546273][T23861] device-mapper: ioctl: error adding target to table [ 431.646463][T19695] Bluetooth: hci0: command 0x1003 tx timeout [ 431.646541][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 431.657899][T23865] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 431.811092][T23868] sit0: entered allmulticast mode [ 431.889951][T23867] loop8: detected capacity change from 0 to 512 [ 431.922133][T23867] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 431.922220][T23867] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 431.958641][T23867] EXT4-fs (loop8): 1 truncate cleaned up [ 431.971836][T23867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.281524][T23876] loop7: detected capacity change from 0 to 512 [ 432.313635][T23882] loop5: detected capacity change from 0 to 8192 [ 432.331452][T23876] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4294: invalid indirect mapped block 256 (level 2) [ 432.331604][T23876] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 432.336676][T23876] EXT4-fs (loop7): 2 truncates cleaned up [ 432.340824][T23876] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.676700][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.709370][T23889] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4298'. [ 432.838060][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 432.882181][T23894] device-mapper: table: 252:15: crypt: unknown target type [ 432.882265][T23894] device-mapper: ioctl: error adding target to table [ 432.950057][T23900] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 433.061378][T23904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4303'. [ 433.063669][T23904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23904 comm=syz.7.4303 [ 433.084729][T23902] loop8: detected capacity change from 0 to 8192 [ 433.454914][T23909] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4304'. [ 433.561666][T15883] Bluetooth: hci0: Frame reassembly failed (-84) [ 433.729884][T23914] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 433.778676][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4305'. [ 433.821438][T23915] vlan3: entered promiscuous mode [ 433.878865][T23914] sit0: entered allmulticast mode [ 434.130271][T23921] EXT4-fs warning (device sda1): ext4_group_extend:1872: need to use ext2online to resize further [ 434.299218][ T3425] Bluetooth: hci1: Frame reassembly failed (-84) [ 434.305090][T23934] netlink: 'syz.1.4312': attribute type 7 has an invalid length. [ 434.305117][T23934] netlink: 'syz.1.4312': attribute type 8 has an invalid length. [ 434.305710][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4312'. [ 434.310507][T23934] vlan3: entered promiscuous mode [ 434.321433][T23931] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 434.463763][T23938] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4316'. [ 435.059982][T23945] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 435.206462][T23950] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 435.365981][T23952] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4321'. [ 435.370191][T23952] vlan2: entered promiscuous mode [ 435.512591][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4322'. [ 435.523093][T23954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23954 comm=syz.8.4322 [ 435.548588][T23947] loop7: detected capacity change from 0 to 512 [ 435.590618][T23947] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4319: invalid indirect mapped block 256 (level 2) [ 435.590748][T23947] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 435.596522][T23947] EXT4-fs (loop7): 2 truncates cleaned up [ 435.606294][T23947] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.793502][T23960] tipc: Enabling of bearer rejected, failed to enable media [ 435.795910][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 435.890381][T23962] loop9: detected capacity change from 0 to 8192 [ 435.901428][T23962] bio_check_eod: 12179 callbacks suppressed [ 435.901516][T23962] syz.9.4325: attempt to access beyond end of device [ 435.901516][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.901569][T23962] buffer_io_error: 12179 callbacks suppressed [ 435.901580][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.902691][T23962] syz.9.4325: attempt to access beyond end of device [ 435.902691][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.902720][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.902757][T23962] syz.9.4325: attempt to access beyond end of device [ 435.902757][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.902813][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.902839][T23962] syz.9.4325: attempt to access beyond end of device [ 435.902839][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.902883][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.902913][T23962] syz.9.4325: attempt to access beyond end of device [ 435.902913][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.902937][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.903036][T23962] syz.9.4325: attempt to access beyond end of device [ 435.903036][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.903062][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.903097][T23962] syz.9.4325: attempt to access beyond end of device [ 435.903097][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.903146][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.903235][T23962] syz.9.4325: attempt to access beyond end of device [ 435.903235][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.903257][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.903286][T23962] syz.9.4325: attempt to access beyond end of device [ 435.903286][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.903311][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 435.903447][T23962] syz.9.4325: attempt to access beyond end of device [ 435.903447][T23962] loop9: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 435.903474][T23962] Buffer I/O error on dev loop9, logical block 57847, async page read [ 436.066630][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 436.252980][T23968] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 436.282680][T15880] Bluetooth: hci0: Frame reassembly failed (-84) [ 436.499371][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 436.499399][T19695] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 436.583306][T23974] loop8: detected capacity change from 0 to 8192 [ 436.626582][T23976] Cannot find set identified by id 0 to match [ 436.653184][T23973] loop7: detected capacity change from 0 to 2048 [ 436.654724][T23973] EXT4-fs: Ignoring removed nobh option [ 436.719180][T23973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.754018][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 436.754034][ T29] audit: type=1400 audit(1700001153.086:7950): avc: denied { write } for pid=23971 comm="syz.7.4328" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.759202][ T29] audit: type=1400 audit(1700001153.086:7951): avc: denied { write } for pid=23971 comm="syz.7.4328" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.759255][ T29] audit: type=1400 audit(1700001153.086:7952): avc: denied { write } for pid=23971 comm="syz.7.4328" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.838542][ T29] audit: type=1400 audit(1700001153.086:7953): avc: denied { remove_name } for pid=23971 comm="syz.7.4328" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 436.838568][ T29] audit: type=1400 audit(1700001153.169:7954): avc: denied { rename } for pid=23971 comm="syz.7.4328" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 436.838652][ T29] audit: type=1400 audit(1700001153.169:7955): avc: denied { unlink } for pid=23971 comm="syz.7.4328" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 436.887519][T23973] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 436.900328][T23973] EXT4-fs (loop7): Remounting filesystem read-only [ 436.979198][ T29] audit: type=1400 audit(1700001153.298:7956): avc: denied { write } for pid=23971 comm="syz.7.4328" name="ipv6_route" dev="proc" ino=4026532681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 436.985144][T23983] device-mapper: table: 252:16: crypt: unknown target type [ 436.985199][T23983] device-mapper: ioctl: error adding target to table [ 437.147237][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.247951][T23999] device-mapper: table: 252:11: crypt: unknown target type [ 437.248019][T23999] device-mapper: ioctl: error adding target to table [ 437.420416][T23996] loop9: detected capacity change from 0 to 512 [ 437.438069][T23996] EXT4-fs error (device loop9): ext4_free_branches:1040: inode #11: comm syz.9.4337: invalid indirect mapped block 256 (level 2) [ 437.438132][T23996] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 437.451831][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 437.451862][ C1] EXT4-fs (loop9): initial error at time 1700001153: ext4_free_branches:1040: inode 11 [ 437.451893][ C1] EXT4-fs (loop9): last error at time 1700001153: ext4_free_branches:1040: inode 11 [ 437.478251][T23994] loop5: detected capacity change from 0 to 512 [ 437.498609][T23996] EXT4-fs (loop9): 2 truncates cleaned up [ 437.514030][T23996] EXT4-fs (loop9): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.543240][T23994] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4336: invalid indirect mapped block 256 (level 2) [ 437.543294][T23994] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 437.550068][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 437.550133][ C0] EXT4-fs (loop5): initial error at time 1700001153: ext4_free_branches:1040: inode 11 [ 437.550252][ C0] EXT4-fs (loop5): last error at time 1700001153: ext4_free_branches:1040: inode 11 [ 437.553402][T23994] EXT4-fs (loop5): 2 truncates cleaned up [ 437.563131][T23994] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.629844][T24007] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 437.672303][T24009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24009 comm=syz.7.4339 [ 437.722049][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 437.795927][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 437.864800][T24011] loop9: detected capacity change from 0 to 512 [ 437.883079][T24011] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 437.883112][T24011] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 437.912947][T24011] EXT4-fs (loop9): 1 truncate cleaned up [ 437.915659][T24011] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.938167][ T29] audit: type=1400 audit(1700001154.184:7957): avc: denied { write } for pid=24010 comm="syz.9.4340" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.010858][T24013] loop8: detected capacity change from 0 to 512 [ 438.039420][T24013] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #11: comm syz.8.4341: invalid indirect mapped block 256 (level 2) [ 438.039518][T24013] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.061763][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 438.061787][ C0] EXT4-fs (loop8): initial error at time 1700001154: ext4_free_branches:1040: inode 11 [ 438.061823][ C0] EXT4-fs (loop8): last error at time 1700001154: ext4_free_branches:1040: inode 11 [ 438.079902][T24013] EXT4-fs (loop8): 2 truncates cleaned up [ 438.128299][T24013] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.191356][ T29] audit: type=1400 audit(1700001154.406:7958): avc: denied { write } for pid=24012 comm="syz.8.4341" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.193188][ T29] audit: type=1400 audit(1700001154.424:7959): avc: denied { create } for pid=24012 comm="syz.8.4341" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 438.284987][T24016] loop5: detected capacity change from 0 to 512 [ 438.298444][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.323674][T24016] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4342: invalid indirect mapped block 256 (level 2) [ 438.323707][T24016] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 438.324338][T24016] EXT4-fs (loop5): 2 truncates cleaned up [ 438.324749][T24016] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.329275][T24013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4341'. [ 438.459535][T24026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4342'. [ 438.475368][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 438.492861][T23933] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 438.547805][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 438.649950][T24032] device-mapper: table: 252:16: crypt: unknown target type [ 438.649968][T24032] device-mapper: ioctl: error adding target to table [ 438.691042][T24030] loop8: detected capacity change from 0 to 8192 [ 438.769268][T24039] tipc: Enabling of bearer rejected, failed to enable media [ 438.779383][T24037] tipc: Enabling of bearer rejected, failed to enable media [ 438.863947][T24040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4348'. [ 438.922432][T24040] vlan3: entered promiscuous mode [ 438.972986][T24028] EXT4-fs: Ignoring removed nobh option [ 439.053463][T24028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.080681][T24045] Cannot find set identified by id 0 to match [ 439.087340][T24028] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 439.094968][T24028] EXT4-fs (loop9): Remounting filesystem read-only [ 439.232794][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.360133][T24055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4363'. [ 439.429175][T24055] vlan3: entered promiscuous mode [ 439.653013][T24061] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.654119][T24061] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.846769][T22408] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.902710][T24068] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4358'. [ 440.151302][T24075] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24075 comm=syz.1.4359 [ 440.333993][T24077] device-mapper: table: 252:11: crypt: unknown target type [ 440.334010][T24077] device-mapper: ioctl: error adding target to table [ 440.383724][T24069] EXT4-fs error (device loop8): ext4_free_branches:1040: inode #11: comm syz.8.4357: invalid indirect mapped block 256 (level 2) [ 440.383799][T24069] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 440.386514][T24082] tipc: Enabling of bearer rejected, failed to enable media [ 440.388319][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 440.388346][ C0] EXT4-fs (loop8): initial error at time 1700001156: ext4_free_branches:1040: inode 11 [ 440.388394][ C0] EXT4-fs (loop8): last error at time 1700001156: ext4_free_branches:1040: inode 11 [ 440.438904][T24069] EXT4-fs (loop8): 2 truncates cleaned up [ 440.445838][T24069] EXT4-fs (loop8): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.567809][T24086] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4357'. [ 440.711349][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 440.796194][T24090] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 440.939881][T24088] EXT4-fs: Ignoring removed nobh option [ 440.957013][T24088] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.970515][T24097] netlink: 'syz.8.4367': attribute type 12 has an invalid length. [ 440.970532][T24097] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4367'. [ 440.996900][T24093] set_capacity_and_notify: 6 callbacks suppressed [ 440.996916][T24093] loop7: detected capacity change from 0 to 2048 [ 440.998153][T24088] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 441.031610][T24088] EXT4-fs (loop9): Remounting filesystem read-only [ 441.054760][T24093] loop7: p1 < > p3 [ 441.055984][T24093] loop7: p3 size 134217728 extends beyond EOD, truncated [ 441.075338][ T2979] loop7: p1 < > p3 [ 441.075834][ T2979] loop7: p3 size 134217728 extends beyond EOD, truncated [ 441.155587][T24104] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4368'. [ 441.193824][T24104] vlan2: entered promiscuous mode [ 441.242742][T12812] udevd[12812]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 441.243362][T10765] udevd[10765]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 441.318934][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.333438][T24112] loop5: detected capacity change from 0 to 8192 [ 441.357521][T24112] bio_check_eod: 25001 callbacks suppressed [ 441.357537][T24112] syz.5.4371: attempt to access beyond end of device [ 441.357537][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.357564][T24112] buffer_io_error: 25001 callbacks suppressed [ 441.357576][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361067][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361067][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361096][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361155][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361155][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361181][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361211][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361211][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361312][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361340][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361340][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361408][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361430][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361430][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361519][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361542][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361542][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361563][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361591][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361591][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361671][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361772][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361772][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361799][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.361867][T24112] syz.5.4371: attempt to access beyond end of device [ 441.361867][T24112] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 441.361886][T24112] Buffer I/O error on dev loop5, logical block 57847, async page read [ 441.523798][T24116] netlink: 'syz.9.4372': attribute type 12 has an invalid length. [ 441.523825][T24116] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4372'. [ 441.562389][T24118] loop8: detected capacity change from 0 to 2048 [ 441.602968][T24118] loop8: p1 < > p3 [ 441.607444][T24118] loop8: p3 size 134217728 extends beyond EOD, truncated [ 441.826735][T12812] udevd[12812]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 441.835596][T10765] udevd[10765]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 441.860529][T24128] loop9: detected capacity change from 0 to 2048 [ 441.860855][T24128] EXT4-fs: Ignoring removed nobh option [ 441.962806][T24133] loop8: detected capacity change from 0 to 512 [ 441.965700][T24128] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.039837][T24128] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 442.045889][T24128] EXT4-fs (loop9): Remounting filesystem read-only [ 442.123872][T24141] netlink: 'syz.8.4379': attribute type 12 has an invalid length. [ 442.123890][T24141] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4379'. [ 442.233217][T24146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24146 comm=syz.5.4380 [ 442.262356][T24148] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 442.280982][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.284867][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 442.284881][ T29] audit: type=1400 audit(1700001158.191:7979): avc: denied { unlink } for pid=17149 comm="syz-executor" name="file0" dev="tmpfs" ino=1507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 442.365566][T24151] loop9: detected capacity change from 0 to 2048 [ 442.407266][T24151] loop9: p1 < > p3 [ 442.408974][T24151] loop9: p3 size 134217728 extends beyond EOD, truncated [ 442.528523][T24159] loop9: detected capacity change from 0 to 512 [ 442.543976][T24159] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 442.544171][T24159] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 442.581991][T24159] EXT4-fs (loop9): 1 truncate cleaned up [ 442.585096][T24159] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.589428][ T29] audit: type=1400 audit(1700001158.477:7980): avc: denied { write } for pid=24158 comm="syz.9.4386" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.591332][T24155] loop8: detected capacity change from 0 to 512 [ 442.657816][T24155] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 442.657946][T24155] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 442.690810][T24155] EXT4-fs (loop8): 1 truncate cleaned up [ 442.703585][T24155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.735963][ T29] audit: type=1400 audit(1700001158.606:7981): avc: denied { write } for pid=24154 comm="syz.8.4384" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.991226][T18490] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.119636][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.253896][T24183] loop9: detected capacity change from 0 to 8192 [ 443.265417][T24179] loop7: detected capacity change from 0 to 8192 [ 443.342821][T24185] EXT4-fs error (device loop5): ext4_free_branches:1040: inode #11: comm syz.5.4393: invalid indirect mapped block 256 (level 2) [ 443.342919][T24185] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 443.359101][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 443.359123][ C0] EXT4-fs (loop5): initial error at time 1700001159: ext4_free_branches:1040: inode 11 [ 443.359165][ C0] EXT4-fs (loop5): last error at time 1700001159: ext4_free_branches:1040: inode 11 [ 443.407896][T24185] EXT4-fs (loop5): 2 truncates cleaned up [ 443.425036][T24185] EXT4-fs (loop5): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.479007][ T29] audit: type=1400 audit(1700001159.289:7982): avc: denied { write } for pid=24184 comm="syz.5.4393" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.746206][T22408] EXT4-fs (loop5): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 443.764855][T24193] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 443.897323][T15883] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.378060][T24206] tipc: Enabling of bearer rejected, failed to enable media [ 444.476658][T24208] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 444.476674][T24208] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 444.478274][T24208] EXT4-fs (loop7): 1 truncate cleaned up [ 444.478589][T24208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.494253][ T29] audit: type=1400 audit(1700001160.231:7983): avc: denied { write } for pid=24207 comm="syz.7.4400" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.570027][T24211] tipc: Enabling of bearer rejected, failed to enable media [ 444.639628][T24213] __nla_validate_parse: 3 callbacks suppressed [ 444.639660][T24213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4402'. [ 444.675277][T24213] vlan3: entered promiscuous mode [ 444.731351][T24215] netlink: 'syz.8.4403': attribute type 12 has an invalid length. [ 444.731370][T24215] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4403'. [ 444.762915][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.015918][T24222] EXT4-fs error (device loop7): ext4_free_branches:1040: inode #11: comm syz.7.4405: invalid indirect mapped block 256 (level 2) [ 445.016028][T24222] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 445.018640][T24222] EXT4-fs (loop7): 2 truncates cleaned up [ 445.025585][T24222] EXT4-fs (loop7): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.060658][T24225] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 445.060679][T24225] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 445.064615][ T2979] ================================================================== [ 445.064646][ T2979] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 445.064688][ T2979] [ 445.064694][ T2979] write to 0xffff8881072e84b0 of 8 bytes by task 10765 on cpu 0: [ 445.064711][ T2979] dentry_unlink_inode+0x65/0x290 [ 445.064741][ T2979] d_delete+0x164/0x180 [ 445.064768][ T2979] d_delete_notify+0x32/0x100 [ 445.064800][ T2979] vfs_unlink+0x287/0x4a0 [ 445.064816][ T2979] filename_unlinkat+0x1db/0x400 [ 445.064834][ T2979] __se_sys_unlink+0x2b/0xe0 [ 445.064852][ T2979] __x64_sys_unlink+0x1f/0x30 [ 445.064870][ T2979] x64_sys_call+0x18ee/0x2550 [ 445.064895][ T2979] do_syscall_64+0x112/0x360 [ 445.064925][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.064947][ T2979] [ 445.064952][ T2979] read to 0xffff8881072e84b0 of 8 bytes by task 2979 on cpu 1: [ 445.064969][ T2979] step_into_slowpath+0x12c/0x4c0 [ 445.064993][ T2979] path_lookupat+0x2eb/0x4c0 [ 445.065023][ T2979] filename_lookup+0x18f/0x390 [ 445.065046][ T2979] do_readlinkat+0x74/0x2f0 [ 445.065071][ T2979] __x64_sys_readlink+0x47/0x60 [ 445.065094][ T2979] x64_sys_call+0x1d41/0x2550 [ 445.065119][ T2979] do_syscall_64+0x112/0x360 [ 445.065147][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.065169][ T2979] [ 445.065173][ T2979] value changed: 0xffff88811b608e18 -> 0x0000000000000000 [ 445.065185][ T2979] [ 445.065190][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 445.065204][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 445.065235][ T2979] Tainted: [W]=WARN [ 445.065243][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 445.065255][ T2979] ================================================================== [ 445.080058][T24225] EXT4-fs (loop8): 1 truncate cleaned up [ 445.093989][T24225] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.105398][ T29] audit: type=1400 audit(1700001160.803:7984): avc: denied { write } for pid=24221 comm="syz.7.4405" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.118391][ T29] audit: type=1400 audit(1700001160.812:7985): avc: denied { write } for pid=24224 comm="syz.8.4406" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 445.202667][T24222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4405'. [ 445.331717][T22712] EXT4-fs (loop7): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 445.467897][T23020] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.119393][T19695] Bluetooth: hci0: Opcode 0x1003 failed: -110