last executing test programs: 7m58.340229263s ago: executing program 32 (id=28): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x56}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf7", 0x10}, {&(0x7f0000000f00)="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", 0x268}], 0x2}, 0x4104) 7m44.466186598s ago: executing program 33 (id=65): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x793e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000240)=""/29) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x280, 0x98, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x42, 0x1, 0xfffffff9, 0x29568e77, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmmsg(r5, 0x0, 0x0, 0x8010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0x8b, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x4, 0xffffffffffffffff, 0xb) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') writev(r7, &(0x7f0000000200)=[{&(0x7f0000000100)="01e132", 0x3}, {&(0x7f0000000180)}], 0x2) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 7m9.672160112s ago: executing program 34 (id=285): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00') prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20040800) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6m54.44485701s ago: executing program 35 (id=374): r0 = socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) stat(0x0, &(0x7f0000000380)) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = io_uring_setup(0x18e5, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0xefa, 0x8) syz_io_uring_setup(0x1972, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9, 0x4c032, r6, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 3m19.997867941s ago: executing program 7 (id=1509): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x2, 0x5, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write(r0, &(0x7f0000000000)="b763855d", 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3m19.587917265s ago: executing program 7 (id=1513): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xfffffffffffffffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fadvise64(r3, 0x2, 0x5, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) write(r0, &(0x7f0000000000)="b763855d", 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x50080, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x8, 0x2}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) unshare(0x2c020400) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, r5, 0x2004) write$vga_arbiter(r3, &(0x7f0000000040), 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 3m19.068913841s ago: executing program 7 (id=1520): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000002c0)={0x1000, 0x48, '\x00', 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) 3m18.547233797s ago: executing program 7 (id=1530): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mknodat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xe482, 0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x20, 0xff, 0x0, 0xffff7038}, {0x6, 0x0, 0x83, 0xfffffffd}]}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8949, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8949, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\xe0\xff\xff\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8", 0x2}], 0x1}}], 0x1, 0x2090) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000079a60e558f0000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b509050000000000dbaaf0ff00000000bda804000000000007080000f8ffffffeaa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000080000004600000076000000bf91000000000000b6080000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYBLOB='-'], 0x20}], 0x1}, 0x0) 2m15.321470606s ago: executing program 1 (id=1801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20008050) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}, {&(0x7f0000000240)="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", 0x400}], 0x2, 0x0, 0x0, 0x5865}, 0x20000000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101c80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x646b03, 0xd8}, 0x4a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x258140) 2m15.20145264s ago: executing program 1 (id=1802): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x4be, &(0x7f0000000540)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4064000}, 0x8004014) open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000001c0)='./bus\x00') 2m14.8643024s ago: executing program 1 (id=1804): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0xf5f8, 0x10000, 0x8, 0x3d6, 0x0, r0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) lseek(0xffffffffffffffff, 0xf7, 0x4) add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) 2m14.699655796s ago: executing program 1 (id=1806): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000000c0)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df2502000000", @ANYRES32=r3, @ANYBLOB="1000a204080001000000000008000f0004"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000840), 0x8}, 0x4080, 0x0, 0x43a1bd78, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x655fc5a4e37a3857) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042dbd7000fddbdf25000000001400020077673000000000000000000000000000080005000000000010000700008000002e06f61b50ee7162cd7d7c8af0150f50feb9648de304de5594d2d798f5562a1943a9866796826f692bac023e929c9c15acd8542045ed5d1c7ff5827d3b63d4bac58bfedebe5bcc4ef54d02000000"], 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file0\x00', 0xa105c2, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100280000000000000004000000200001800d000100"], 0x34}}, 0x4040) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000240)='./file0\x00', 0x801000, 0x0, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file2\x00', &(0x7f00000003c0), &(0x7f0000000440)=ANY=[@ANYBLOB="00fb960600bd7fd0ad75aeec8ca9200896f68d7bb39dd54728b5701b3b64b865f54918cf2035e4298b5d1a58981c194d6cd925fa4c90640b897c9b592ad02e6676fe0c17a474b9e88099aaf6f00f7c0400b7e48bb818252c0bf85deced4e1c455000cc4860749da31efe5430b6cffb1585407277785b2ade24d45ecef54f654b2b2444f3d152"], 0x96, 0x3) mkdirat(r9, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r9, &(0x7f0000000880)='./bus/file0\x00', r9, &(0x7f0000000680)='./bus/file0\x00', 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000006c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_ignore}, {@grpid}, {@discard}, {@nouid32}, {@grpjquota, 0x2e}, {@jqfmt_vfsold}, {@sysvgroups}, {@jqfmt_vfsv1}, {@grpid}, {@lazytime}, {@journal_checksum}, {}, {@user_xattr}, {@bh}, {@norecovery}, {@dioread_nolock}], [], 0x2c}, 0x85, 0x4fe, &(0x7f0000000d00)="$eJzs3M1rHOUfAPDvTF77mrS/8vv9+qKNVjFYTZq0ag8erCj0ogh6qMeYxlKbttJGsCXYKFKP4l9QPQqCJy+eFETUi4rXepdCkVwaPcjK7M5sdpNNspuXhnY/H5js88w8M898Z+fZeXaenQTQtgayP0nE9oi4GRF9lWx9gYHKy9zs9Phfs9PjSZRKr/6ZlMvdmZ0eL4oW623LM4NpRPphEvsb1Hv5ytVzY5OTE5fy/PDU+beHL1+5+uTZ82NnJs5MXBg9fvzY0ZFnnh59qqk4rq2wPIvrzr73Lh7Ye/L1T14aL8UbP36R7e/2fHltHBX9jTfU1dTu1ByNUtn8/O7y30eb3cw9YkdNOuncxB2hJR0R0Zmf1jejLzpi/s3rixc/qGa+26QdBDZMdm3atWhuR/6a5lcv4P6UaOPQpoorfvb9t5juZv9js90+Uf2mPz43O12efn65cmzS7Ltsf+Ube8eC9dL89b8Nttmbla+sUOpbof7tEXFq5u8b2RQN70MsI2m6JABA1TcnIuKJRv2/tK5vszMfQ8n6SocjYndE/Cci9lR7QhH/i4j/t1j/wIL8ndmFgwe/bmlxky3J+n/P5mNbxVRZUsSVVHM7yvF3JW+enZw4kh+TwejqyfIjy9Tx7Qu/fbzUsoGa/l82ZfUXfcF8P2519tavc3psamwNIde5/X7Evs5G8SfVkYDsCOyNiH2r2H52zM4+/vmBLL1z2+LlK8e/hCQfuFij0mcRj1Xe/5lYEH9NVVlNS41PDvfG5MSR4eKsWOynX66/UpuvHUKsi7+3uZh6VxtsA9n7vzU//9O67efxp/mMBeO1My3Ucf33j5aMqi7+jrgxN5vEqXzjlTHF9FZnT0RsmT9s2fnfnbxWTnfn894dm5q6NBLRnc+omz86X1+RL8pn8Q8eatz+d0f882n+ObA/IrKT+IGIeDAiDub7/lBEPBwRh5aJ/4fnH3lr+SO0ivN/nWTxn274+Vc9//uT2vH6VSQ6zn3/9VL1N/X513OsnBrM5zTz+dfsDq7l2AEAAMC9Ii2PQSfpUJGuuTm1J7amkxcvTx0eiHcunK6MVfdHV1rc6eqruR86kt8bLvKjWbq7fBdhJssfjYhd5V8abSkvHxq/OLljMwMHys/qFO2/J583NFR5/WPhj16A+09L42i1Pzr78qv13xngrvK8JrQv7R/al/YP7Uv7h/bVqP1fi5jbhF0B7rLmrv8lj5vDfUj/H9qX9g/ta779+8UftJHFj8QX/25lNU/6zyd2n1zT6hueKPVtyJZnWl+rY4MijZp/2rF04SQiVldFpMuX6Y4rV3vXKZzsCrVcmeKhlaY3mK5Y5rmVDkvXmv4nRpY4mCd6IqLZta418Z6u3/mTSfLbfroGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvenfAAAA//8cw9OC") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'gretap0\x00', 0x1000}) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x6, @loopback, 0x2c00000}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)="ee", 0xfffffe32}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x48093) 2m13.676950648s ago: executing program 1 (id=1808): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m13.077274357s ago: executing program 1 (id=1809): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r7 = syz_ublk_setup_io_uring(0x154, &(0x7f0000000380)={0x0, 0xdf6d, 0x100, 0x3, 0x30c}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r7, 0x19, &(0x7f00000002c0)={0x0, 0x2, 0x80}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r6, 0x0, 0x4000010) syz_clone(0x0, &(0x7f0000001340)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59d8a746aab9d94111fc0922b33d6e4618df4ad9f45e1e4c5a419429893f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe", 0x87, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x8, 0x9, 0x10000000000000, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @empty}, 0x10) timerfd_gettime(r0, &(0x7f0000000100)) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r10, 0x2) 2m8.888805651s ago: executing program 5 (id=1814): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0xa, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x4, 0x8}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) readv(r0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000004c0)=""/107, 0x6b}], 0x2) 2m8.093570487s ago: executing program 5 (id=1815): setsockopt(0xffffffffffffffff, 0x10140087, 0x83, &(0x7f0000000200)="1a171e9cdb01b26c112e0adc0e33ddc6b2906b76af5fc3a2b17072f521f6ca534ee8f468747a697d37c029d0a523b8df8b9ed37658a156982e268f4e6f4f000000", 0x41) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) openat$cgroup(r2, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) mmap$binder(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7fffffff}, &(0x7f0000000040)=0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) listns(&(0x7f0000000080)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, &(0x7f00000000c0), 0x259, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x34}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) 2m8.069850137s ago: executing program 38 (id=1764): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8050, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet6_sctp(0xa, 0x1, 0x84) syz_pidfd_open(0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 2m7.880057423s ago: executing program 5 (id=1817): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280"], 0x24}}, 0x0) (fail_nth: 3) 2m7.744942648s ago: executing program 5 (id=1818): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[], 0x0, 0x24a, &(0x7f0000000ac0)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 2m7.629121062s ago: executing program 5 (id=1819): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 2m7.516658815s ago: executing program 5 (id=1820): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x793e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000240)=""/29) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000"], 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x280, 0x98, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x42, 0x1, 0xfffffff9, 0x29568e77, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmmsg(r6, 0x0, 0x0, 0x8010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0x8b, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x4, 0xffffffffffffffff, 0xb) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') writev(r8, &(0x7f0000000200)=[{&(0x7f0000000100)="01e132", 0x3}, {&(0x7f0000000180)}], 0x2) 2m4.339179126s ago: executing program 39 (id=1784): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmdt(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8300}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$inet6(0x10, 0x2, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 2m1.234936226s ago: executing program 40 (id=1797): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0xf5f8, 0x10000, 0x8, 0x3d6, 0x0, r0}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r2, 0x0) mprotect(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) lseek(0xffffffffffffffff, 0xf7, 0x4) r4 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x9) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1cd}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x3}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x810) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='ceph\x00', &(0x7f0000000480)) r7 = fspick(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000200)='ro\x00', &(0x7f0000000240)='syz', 0x0) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) 1m57.913904442s ago: executing program 41 (id=1809): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf250100000014000200776730000000000000000000000000004c00088048000080200004000a004e2300000002fe880000000000000000000000000001d70d000023e20100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922"], 0x74}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = socket$rds(0x15, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r5 = mq_open(&(0x7f0000000000)='bat\x13\x1b\r\xcbs\xecave_5\x00', 0x80, 0x30, 0x0) mq_getsetattr(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) r7 = syz_ublk_setup_io_uring(0x154, &(0x7f0000000380)={0x0, 0xdf6d, 0x100, 0x3, 0x30c}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r7, 0x19, &(0x7f00000002c0)={0x0, 0x2, 0x80}, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x922, 0x12) sendmsg$kcm(r6, 0x0, 0x4000010) syz_clone(0x0, &(0x7f0000001340)="ea9f9fef7008be9caa4230658e0f0cccad32ec921e770d152cc2110df2169e3f25afb722e56fc5ec6da59d8a746aab9d94111fc0922b33d6e4618df4ad9f45e1e4c5a419429893f709f3bc337b874c1bcc63053bc96584e0f5d7ced9c410a50fa8648b5f96a943684c3ef11f33f0006b9cb80473a9e006c174b8963c5ba53d748df42a95a704fe", 0x87, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x8, 0x9, 0x10000000000000, 0x0, 0x7}, 0xffffffffffffffff, 0x1, r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r9) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @empty}, 0x10) timerfd_gettime(r0, &(0x7f0000000100)) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r10, 0x2) 1m53.395175876s ago: executing program 6 (id=1823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20008050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}, {&(0x7f0000000240)="3adcf918c215699490b6ec939c778d50ab7a8b23ce4e466892f0609affb7fad311ad6213d40f89db053d4c41a4b0a8db1af579c7395a6d1d6ac9b0e75ff61027c3933e422e122aa0034f34d9eca455d01282778e733814ebd69bbc5373439632bd793e9d445dbe5734e48445d121a8d1fe7394da4163bc7fbd0af820aeab0b7c2cd9856d5ce80aad7a13ee193aa989456771e305a6dee9ec6b51a0c71f86fa7632997bd6a6de913374e00d0b1deb351ff12432476ed934ef39f55345cf12147ee52442b7b396d00273128a42b6404fed35b2af3ed658bbb26fb68a331996343642b114f200a4b6752e345acef3e52d074155bb37319f4de3bb486fd6f62d7539c3ab0eec18492d8facd4b939c6417ad9d12476c0fbc106678208522180b56a66a0b1253b4a07ee061d03caa5e34544113893794cea5c2b040b78dfda3dce1cba32a606252612f994deff0dbf336a36127db77d466a0e19c3ec86a58429a57812feea5c536108728d1c8e3ec4d910da367d5c8ad98ea5f9786fd3dc18e945853d6d807c3123d23909970cbc52752fab5ccf4940a9865940f4f43ecc8ac276b0851d4d8de6c0e7e7db0853acb52a58a40791c9c64fa336895067be1a3aab8b806f7557e63870b1e901f07f5d184bf987e1c3df8affb176953453ccd50d469d23bed929eb40b0172fb46a59cddf9708c04d842625526c5391df5ebf85ad3ccf5af3ac1e30b4b7d197a886e1bfd2129ad44f022a07c0103b61e9450e7065e2b092215fc0ff4b09070d60335307fbda99aa9dc7ef8a55cb78c06d398addb03e4aef6abbf17ca656e25120f39881fc5fbd1a3c6f5808f35d01fd96ba820123152aab70ef77cf405bd4a3a979d81a41fcb6f5238d8a0d2aa2a771057d7d283d7bd3e3ebe4df6f5ee81881ffb6bc1481c991219f33e747b68b91efa4d348f31c4885576ef00d8c6fbcb0f944442917b82e1746c20894dc001ed4d2be76c5a61ff9c18a6180cf670aac618dbd34ec04eb5c545c7fe30a32279c2c30a70ce9a00bc45776b3bb484de6e8bc240f4842e510b6d0e28b2fbc2f911e99039b060a20ed66917ff2e7fffdcc30fd8706c06bcba39972ef4b18df669e8eecc1d19ed9278ee52618ba7344e2ba56e03ed4fcd05026a6329dc8d40fffd5a3c5b97d17be8721920ed0ed4fdbe18bfa81eeeea19359d1966b5131bf7629ae46a4c60d68626e7729d5f7dde87e44213d8b91aa6b73bbc76590037c956638cb01623b25b2cbfa9bf7661c96d5b2c5583191ae8f0948220b83bfe51c7f5e2c5aba141d8c779596524fe54b5345390d6ec88426cea3e10726867e98d5256e54f67ed574e5cbeaad405da62a45ac64e73d099061ef4cb589802fd3f708be0ba8f6b0a6dafd901005ed30e192caff5f3b56f9d636c7b3c83b153b6fb345fdfcf1d44028b0184e14cca8866756ff", 0x400}], 0x2, 0x0, 0x0, 0x5865}, 0x20000000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101c80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x646b03, 0xd8}, 0x4a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x258140) 1m53.28324711s ago: executing program 6 (id=1836): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc080) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) 1m52.904410592s ago: executing program 6 (id=1838): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/155}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x3fffffffc}, 0x100, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0x5) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r2}, 0x28) write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[], 0xff2e) 1m52.233759083s ago: executing program 42 (id=1820): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x793e, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x2, &(0x7f0000000240)=""/29) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0x3, 0x2002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000"], 0x1c}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x280, 0x98, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x42, 0x1, 0xfffffff9, 0x29568e77, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmmsg(r6, 0x0, 0x0, 0x8010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0x8b, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x4, 0xffffffffffffffff, 0xb) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') writev(r8, &(0x7f0000000200)=[{&(0x7f0000000100)="01e132", 0x3}, {&(0x7f0000000180)}], 0x2) 1m51.806993177s ago: executing program 6 (id=1840): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800000100a700000200000002000004ff01ff06001400001c361831ec8d218b0dc1196c94d12d23497b62d837fcec11a47287af77b81f4d7dee90d078ccf3f61bd090bf776ea3aa950dff63dd37df0ac82b172fe3fbd66af753bab2d6db8193b0e5ee902ff7d6b383e9f9f44f87b197f4f3dced54207e3eb0d5653f96b678bd5bd7ef76c1afe0c395978e28bfbb2e22481e25ee00d930fab124f767016fa8793afc1b8c61fe4ee38cf6d15976c8461f49a9c17b4212298d00"/202], 0x1c}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f00000000c0), 0xf7, 0x579, &(0x7f0000001200)="$eJzs3d1rXGkZAPDnTGby0UYTdS9WYdfiFtpFmzRbdzeIbCuIdwvKKnhXYzoNoZNMSSbbJiyS4h8giOiCN3rljeAfIEgvvFeEBfdeXFGKdhXcC90j52OaJpkx0+5MJkx+P3hz3nPeM+d53jPJmfOVOQGcWuci4lpEjEXEixExU06vlCV2i5LN9/7Dt5azkkSavvH3JJJyWjZbUpbM2fJlk8Vgn/PlcHN759ZSo1HfKMfnW2u35ze3dy6tri2t1Ffq61euLLyy+Oriy4uX+9LPrF+vffUvP/7BL7722m++cOdP1/928XtZvtNle7sf/Vask1q2Lh6pRsTGIIINwVjZn1q0fwAAcJJl+/ifjIjP5fv/MzGW7811N/5YPRl4dgAAAEA/pFen4z9JRAoAAACMrEp+D2xSmSvvBZiOSmVurriH95k4U2k0N1ufv9ncWr9R3Cs7G7XKzdVG/XLEuZliPMnGFx6dUSjGX8rbspLsuwf4RzNTefvccrNxYxgnPAAAAOAUOnvg+P9fM8XxPwAAADBiZoedAAAAADBwjv8BAABg9D3F8f/4IPIAAAAABuLrr7+elbT9/Osbb25v3Wq+eelGffPW3NrW8txyc+P23EqzudJIJyLWjlpeo9m8/cVY37o736pvtuY3t3eurzW31lvXV/c9ArttbCCdAgAAAPb5xGfvv5tExO6XpvIS7Wv73Y7M/a8AjIxKj/Ol2Y/3BpsLcLycgIfTq/r/m93mCyOsVgySYecBDM9RG4DJbnP8fhDZAAAAg3Dh0/ffTZPD1/+re+cGgBHV6/V/YPR0uf6fzhx3IsCxO+L6PzDCau4AhFPv8NX9iX1jnb68I1dc/792dIQ0PXJZAADAQE3nJanMldcCp6PyQVqI2aglN1cb9csR8fGI+ONMbSIbX8hfmfinAQAAAAAAAAAAAAAAAAAAAAAAAADoUZomkT6F6lO9CgAAABiGiMpfk/L5Xxdmzk8fPD8wnnyQPwr4wzRN7/z0jZ/cXWq1Nhay6f/Ip49HROvtcvpLwziDAQAAALS1n/JfHKfXhpwNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKPq/YdvLbfLccZ98JWImO0UvxqT+XAyahFx5p9JVB97XRIRY32Iv3svIp7tFD/J0orZMouD8SsRMZVnMfD4z6Vp2jH+2Y8cHU63+9n259qhv7/xvTk6//1Xi3L1o8bvvv2rPNr+jR2MXy22fx/rMcZn3vnV/GOj39qrThTt1c7bn3b8pMv294VOwaqHJ33nmzs73XJLfx5xoePnT7Iv1nxr7fb85vbOpdW1pZX6Sn39ypWFVxZfXXx58fL8zdVGvfzZMcYPn/v1h93iP/htxJkyfvtNT8sPltli8OWy/0sH+38+q9S6LXnPf9+5+/BTRbV2YBHx4F7ExRc6v//P5sOO6/9n/05z+edA1n6h/ExIdot6RJxrz/z8L//wfNf+35ssa0/+/l88uuu5F7/x/T/3OCsAcAw2t3duLTUa9Y0+VbJ9hENN370T0Xg7TdPelpPtlfYeNInYPdiU7cD1t18bUxHRpalzrOh1yc90TfW9qQ4r82RUrj7JzOnEE/2yJbsDTD7L44Ssw5NaGc9/IX/37SFvmgAAgD7b2/sfdiYAAAAAAAAAAAAAAAAAAABwenX8GrDJPn6d2MThmLvD6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBH+FwAA//8xsdFY") r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000700)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3fffff) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000080)={@loopback}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10) ptrace$cont(0x21, r2, 0x80000001, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file1\x00'}) r5 = getuid() bpf$ENABLE_STATS(0x20, &(0x7f0000000280), 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000005c0)={[{@jqfmt_vfsv0}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@noblock_validity}, {@delalloc}, {@quota}, {@errors_remount}, {@nomblk_io_submit}, {@dioread_nolock}, {@mb_optimize_scan}], [{@euid_lt={'euid<', r4}}, {@uid_gt={'uid>', r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x39, 0x64, 0x63, 0x31, 0x35, 0x1, 0x36], 0x2d, [0x39, 0x5a, 0x33, 0x38], 0x2d, [0x65, 0x65, 0x33, 0x38], 0x2d, [0x39, 0x62, 0x39, 0x38], 0x2d, [0x63, 0x38, 0x31, 0x37, 0x62, 0x34, 0x30, 0x62]}}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_lt={'fowner<', r5}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") 1m51.237906415s ago: executing program 6 (id=1844): newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setuid(r0) chdir(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32, @ANYBLOB="631dff4a00022973280000000000a05400", @ANYRES32], 0x50) r1 = socket$kcm(0x29, 0x2, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0}]) io_getevents(r2, 0x1, 0x1, &(0x7f0000000340)=[{}], 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000d40)={@local, 0x0}, &(0x7f0000000d80)=0x14) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="9b", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000080)="cd0bb5560e1c88b91195ef1bca2e4123fe131caf2f2b2a03414eedb3447c6718704cf589bdb00999319c3de28326a0e35a82a45653ca1ace6586dd6ef2bb7f2d5d367fa3006cb5fd653de5e4b9b6f622aef54853c28421c84a833fc91cbc1a90ebab9c3cda76da742a649e6217370e495c9f2213d16f70a55b2a692f6c6a43f52316e6ddcb7400f45cbf05dafa9814b48aa1ecbfa2cf4b29896be9f3d1b9fe3389a8bf3f2e00bcd1bf4941cc2b9f779c2903654165b348e9553d1187164556db01274196de695c52abf5899dd616834c7697fa", 0xd3}, {&(0x7f00000001c0)="8eb5c25f4c6c63a0e115c1fb794e23aed816fc169e7758eb4cac9a27bc6f410310f312a3aa3e5b36d125206943d046d79f8419a28405caed3b224f4b8b5f413e4eba4fb543b7129e5dd10e96a73607866eca9e38afd94bffdc946299e37367ed5a31698d5547464cdcd947a6322e89e9eb2bcb098219746940492174b67d9774dfad411a6c22589a793b796c870855b35ed3acedd48c2f3767838324fd7681096fb648098297a871", 0xa8}, {&(0x7f0000000680)="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", 0xfb}, {&(0x7f0000000780)="d8d078aeba278aa2a05386eb05bd4955b63fa0c9c3d6ce187bc1f42ff9a8e589669794122063b7915f612253ae0c5a4fa0d4d53ed6b463b4320a2e1f2c9d81084fa0e4a067a7ed1b1ef3e5e4923e3c", 0x4f}, {&(0x7f0000000800)="de9698f887a455a5b442b198708ea394e250f03f9e6e41d0e851234ab5d5d1ac5fc9188d1cb0f9ae800f970c693fe3207ced1ddaaebe81d4f9d82ffeac256c9eaf05e367b0f7bc455f769c575c1bfe1eec37a5043d1d04860c3a06210c62a57ade2c8f6c4cf96a50ed43624788a936ea40b81809e7cef4a14a223f15c911dac0639d58f1179587d3ab00fde5d16ede12d8417c9db90c62f4c41b279015318b5ae0360c02e8da7da787e849d5ae6acc0ef5cc233ea24a55d8d173ec19e52bb271b3ec16a882bc0b2ea8cd315299239c5d71cf53adc2fae384440da462e92eabdb4e12aa95", 0xe4}, {&(0x7f0000000900)="79ce45ab498696c90d5cdd938a13376120dfbb4e6305058b749e5a217016a36327757c8c049af90f9253ea49e20dc1bb16ada1a80da0d2a313b4d9518539c2abb0c53eb6503d9462bcc0900c0575a39f4fbd61760f705e8746adac00c3cd3c05034f0007fac0f1e2ef65381ce2602b42cf8a8da235d7da177143b7d41fea4d007bafbfdb276818d5aef09cfd16dc8f90861640af6ea10066e4d81aaa05cb728600a6a957c859645b9e3f180565581fe27658bd063ce2c7197fd9732247f54a8fff24d0a53cbef8156f11a4f450abd87b54a52e", 0xd3}, {&(0x7f0000000a00)="9c31360350dcda362df600c0fbf152597ed2e188a1f3b71db1bdcdcf56cd7b0f42b80c9337e8dbf6133bf9e1e6e7b39ff88382a612accac234a803af05964407fde55f2913111341b359fa", 0x4b}, {&(0x7f0000000a80)="e5b3ddd504225982ac12b6f6e9127b3ad6595138b05c16c118fa8983af46a64a8d9707693825d53d09169824ce03744b11a0de6837fa97446fbaa8aecd6ee9fff818c0ff6be61553eddeeb2feae7e23e430ee0d5c185fe30a487b5d1f7123b2512c37b6ff9c234f7738d2c1ee9ccd20990fd39c53578092a1ac7d53d1195ad4c18ae8420e2d1f6f558c34c477fd9d5a704eec6020ba4237fb65d146542ecf4156258e0e605b67f785f65fad09c392af2b29e6373f39ba010414a15296898077518868187", 0xc4}, {&(0x7f0000000b80)}], 0x9}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000cc0)="4da58568cdcc3c9fe9ee54", 0xb}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="140000000000000000000009000000000600000000000000140000000000000000000000020000003900000000000000400000000000000000000000070000004414a983ac1414aa00000002ac1414bb000000044414a773e000000100000005e0000001000000058307dfac1e000100140000000000000000000000020000000900000000000000110000000000000000000000010000000a000000000000001c00000000000000000000000800000039dce3278322462460f686c5840fa0be6624fa730cbd", @ANYRES32=r4, @ANYBLOB="00000000ac1414aa00000000110000000000000000000000010000000800000000000000"], 0xd8}}], 0x3, 0x24044091) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000000000", @ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000001280)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_lifetime={0x4, 0x4, 0x4, 0x3fc, 0x7ff, 0x4}]}, 0x98}, 0x1, 0x7}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000280)=0xffffffc3, 0x4) sendmmsg(r7, &(0x7f0000000140)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @local, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000029"], 0x18}}], 0x1, 0x24008000) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/arp\x00') preadv(r9, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) ioctl$PIO_UNIMAPCLR(r10, 0x4b68, &(0x7f0000000000)={0x3a2b, 0x5, 0x7}) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1m51.09052951s ago: executing program 7 (id=1829): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x26) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 1m51.022983312s ago: executing program 7 (id=1845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20008050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}, {&(0x7f0000000240)="3adcf918c215699490b6ec939c778d50ab7a8b23ce4e466892f0609affb7fad311ad6213d40f89db053d4c41a4b0a8db1af579c7395a6d1d6ac9b0e75ff61027c3933e422e122aa0034f34d9eca455d01282778e733814ebd69bbc5373439632bd793e9d445dbe5734e48445d121a8d1fe7394da4163bc7fbd0af820aeab0b7c2cd9856d5ce80aad7a13ee193aa989456771e305a6dee9ec6b51a0c71f86fa7632997bd6a6de913374e00d0b1deb351ff12432476ed934ef39f55345cf12147ee52442b7b396d00273128a42b6404fed35b2af3ed658bbb26fb68a331996343642b114f200a4b6752e345acef3e52d074155bb37319f4de3bb486fd6f62d7539c3ab0eec18492d8facd4b939c6417ad9d12476c0fbc106678208522180b56a66a0b1253b4a07ee061d03caa5e34544113893794cea5c2b040b78dfda3dce1cba32a606252612f994deff0dbf336a36127db77d466a0e19c3ec86a58429a57812feea5c536108728d1c8e3ec4d910da367d5c8ad98ea5f9786fd3dc18e945853d6d807c3123d23909970cbc52752fab5ccf4940a9865940f4f43ecc8ac276b0851d4d8de6c0e7e7db0853acb52a58a40791c9c64fa336895067be1a3aab8b806f7557e63870b1e901f07f5d184bf987e1c3df8affb176953453ccd50d469d23bed929eb40b0172fb46a59cddf9708c04d842625526c5391df5ebf85ad3ccf5af3ac1e30b4b7d197a886e1bfd2129ad44f022a07c0103b61e9450e7065e2b092215fc0ff4b09070d60335307fbda99aa9dc7ef8a55cb78c06d398addb03e4aef6abbf17ca656e25120f39881fc5fbd1a3c6f5808f35d01fd96ba820123152aab70ef77cf405bd4a3a979d81a41fcb6f5238d8a0d2aa2a771057d7d283d7bd3e3ebe4df6f5ee81881ffb6bc1481c991219f33e747b68b91efa4d348f31c4885576ef00d8c6fbcb0f944442917b82e1746c20894dc001ed4d2be76c5a61ff9c18a6180cf670aac618dbd34ec04eb5c545c7fe30a32279c2c30a70ce9a00bc45776b3bb484de6e8bc240f4842e510b6d0e28b2fbc2f911e99039b060a20ed66917ff2e7fffdcc30fd8706c06bcba39972ef4b18df669e8eecc1d19ed9278ee52618ba7344e2ba56e03ed4fcd05026a6329dc8d40fffd5a3c5b97d17be8721920ed0ed4fdbe18bfa81eeeea19359d1966b5131bf7629ae46a4c60d68626e7729d5f7dde87e44213d8b91aa6b73bbc76590037c956638cb01623b25b2cbfa9bf7661c96d5b2c5583191ae8f0948220b83bfe51c7f5e2c5aba141d8c779596524fe54b5345390d6ec88426cea3e10726867e98d5256e54f67ed574e5cbeaad405da62a45ac64e73d099061ef4cb589802fd3f708be0ba8f6b0a6dafd901005ed30e192caff5f3b56f9d636c7b3c83b153b6fb345fdfcf1d44028b0184e14cca8866756ff", 0x400}], 0x2, 0x0, 0x0, 0x5865}, 0x20000000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101c80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x646b03, 0xd8}, 0x4a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x258140) 1m49.854992169s ago: executing program 6 (id=1848): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = socket(0x10, 0x3, 0x0) unshare(0x2a020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x5a, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4000074) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa3010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000429bd7000fddbdf250a20f3048000000212"], 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x10) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f00000004c0)) ioctl$SG_BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x8, 0xffff, 0x3, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0x1}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m49.741979583s ago: executing program 43 (id=1848): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r0 = socket(0x10, 0x3, 0x0) unshare(0x2a020480) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x5a, 0x1, 0xfffffffc, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x4000074) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0xa3010, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002200000429bd7000fddbdf250a20f3048000000212"], 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x10) ioctl$TUNGETVNETLE(r4, 0x800454dd, &(0x7f00000004c0)) ioctl$SG_BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000000)={'erspan0\x00', 0x0, 0x20, 0x8, 0xffff, 0x3, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x64, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop]}}}}}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {0x1}, {}, {0x5}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0x1}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0xc24f4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m35.855861106s ago: executing program 44 (id=1845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001}, 0x20008050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}, {&(0x7f0000000240)="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", 0x400}], 0x2, 0x0, 0x0, 0x5865}, 0x20000000) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101c80) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x646b03, 0xd8}, 0x4a) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000440)={0x0, 0x20000006, 0x0, 0x0, 0x11}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x258140) 1m11.172249176s ago: executing program 0 (id=2094): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, 0x0) 1m11.084829378s ago: executing program 0 (id=2096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x80, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x54, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m10.990313851s ago: executing program 0 (id=2098): unshare(0x2c040480) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x7}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x4040000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfefffdfc, {0x0, 0x0, 0x0, r8, {0xb}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close(0x4) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000180), 0x4) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0xab) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r11, &(0x7f0000000240), &(0x7f0000000080)=@udp=r9}, 0x20) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000280)=@urb_type_iso={0x0, {0x5}, 0x81, 0xc3, &(0x7f00000000c0)="e03bdf73a39cabfd7d70c4e6f3bf953c2c9ec2ce873f21e3d597762eddbeceaa4ed88f0a26e9d0a323b08f8a04f99d5ab72a5ab63ec27400110b337577df3a4bbb3b423aae789ccefa92caa50c78f960dcf755c20e5e8c910be26330a90d3263", 0x60, 0x9, 0x4, 0xb, 0x5, 0x9, &(0x7f0000000140)="846cd25901b64d32b028f0a746a950bff5ebd266c7fdd139b7a7415e5bba9e036f0b8d10e2860a2115e25f88b3", [{0x8000, 0xfffffffc, 0xfffffffd}, {0xd, 0x8, 0x6}, {0x0, 0x7, 0x5}, {0x8, 0xff, 0x100}, {0x5, 0x8373, 0x6}, {0x2, 0x9, 0x57}, {0x40, 0x8, 0x5310}, {0xa, 0x0, 0xb7f7}, {0x4, 0xae0, 0xfffffff0}, {0x9, 0xca75, 0x6}, {0x9, 0xd, 0x3}]}) syz_io_uring_setup(0x37, &(0x7f0000000200)={0x0, 0x17c21, 0x1000, 0x2, 0x1000001}, &(0x7f0000000c00), &(0x7f0000000040), &(0x7f0000000000)) 1m10.639021252s ago: executing program 0 (id=2102): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) close(0x3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000000600)={&(0x7f0000000340), 0xc, &(0x7f00000005c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c00c6d50645000000000000000000", @ANYRES16=r4, @ANYBLOB="080625bd7000fbdbdf256a00000008000300", @ANYRES32=r7, @ANYBLOB="0a00060008021100000000000a00060008021100000000000500d2000b0000000500d200080000000a000600ffffffffffff00000a0006000802110000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x2040) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf256500000008000300", @ANYRES32=r7, @ANYBLOB="0800990000800000080001000180000000000000000000000000000000000000e43a51f49bdb2ff41532ed13cdd92fb8e05cfabac0e1f440ba0cd1509c491b6292977dee80ef97d8da519a8a03d4dfbe209984ebd1674ee54d3dee5539b5f781a247d5fbe6fc815850a62fa2155e38885f0269d2ddd802847c"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x84) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000400, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)=@usbdevfs_connect={0x2}) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) mknodat$loop(r0, &(0x7f0000000800)='./bus\x00', 0x2080, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000480)={0x100, 0x0, 'client0\x00', 0x80000002, "7ae839258d7aea71", "186eb3eda6b97aa6452ed04f40ff8271b8284639bf9f803da6ea8a7a288a1a9f", 0x8, 0x6}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000880)={0x0, 0x101, 0x6, 0x65e, 0x8, 0xffff5b83}, &(0x7f0000000a00)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000a40)={r10, 0x7fff}, 0x8) syz_clone(0x801000, &(0x7f00000001c0)="90030cb15f0cf6385900328b63f8c761d93eca82321c2593fe90011887ee5a95c788b4ed05c4ef110a06157ae0f7da0508a59efb7c855e499e52c6ecdf6218d35ff1bd357f56c92963fa", 0x4a, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="7d82ccd82eeb47a4f9fa6f94b1234110e7416c14a2417d51bacf6e2919bc6e5aee1c7d70632eaed51f16a5a48aac43804faddc5e8389d888443f77e1e9f3c8834b794cf7457e51ea7495b32d20182541bcf39977ea78c937d12639eb5b34fdf17b30e6068cabb50fc961a808fc935b0e196a6444e4ad9ed682918bb17f96450ea3ad93") r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0x23, &(0x7f0000000180)=0x80400000, 0x4) 1m9.421041421s ago: executing program 0 (id=2110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback={0x400000000000000}, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x101}}], 0x18}}], 0x2, 0x800) 1m8.559863199s ago: executing program 0 (id=2117): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmdt(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8300}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$inet6(0x10, 0x2, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 1m8.52913665s ago: executing program 45 (id=2117): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) shmdt(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x3) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x7ffd, 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8300}]}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0xa, 0x1, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2800}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$inet6(0x10, 0x2, 0x4) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) 4.178631416s ago: executing program 9 (id=2634): syz_open_dev$loop(&(0x7f0000000080), 0x7fffffffffffffff, 0x40000) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x50, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ae1, 0x8}, 0x400, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x10005d31, 0x208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3}, 0x0, 0x3, r0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x440, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x468, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) openat$incfs(r3, &(0x7f0000001480)='.pending_reads\x00', 0x400000, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0xe0, &(0x7f0000000240)={0x20, 0x1, 0x0, 0x1ff}, 0x8, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4000, 0x46020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd, 0xea}, 0xd00b, 0xc8, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x400000002, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) r8 = dup2(r7, r7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r9, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0x20, 0x1cb, &(0x7f0000000480)}) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTOP(r8, 0x1275, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@quota}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$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") readv(r0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4092, 0xffc}], 0x1) syz_clone3(&(0x7f0000001280)={0x14202100, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140), {0x1c}, &(0x7f0000000180)=""/154, 0x9a, &(0x7f0000000240)=""/4096, &(0x7f0000001240)}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 3.843935857s ago: executing program 2 (id=2635): openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000140)) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 3.801767739s ago: executing program 2 (id=2636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x154, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_USERDATA={0x32, 0xd, 0x1, 0x0, "c67068429e7c117766d18ac7fe6bc66a916295410a960262fc2bb7aa7abffd49526563d810879853c4c45191b057"}, @NFTA_SET_EXPRESSIONS={0xc8, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ccf1915}]}}}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10}]}, 0x154}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3.75508795s ago: executing program 9 (id=2639): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x3}, 0x10000d, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x8000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000ff18"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r3], 0x38}}, 0x0) 3.661547183s ago: executing program 2 (id=2641): bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.634438494s ago: executing program 2 (id=2642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000040, &(0x7f0000000280)={[{@abort}, {@noblock_validity}, {@noquota}, {@errors_remount}, {@orlov}, {@nodioread_nolock}]}, 0xfd, 0x59c, &(0x7f0000001840)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x16}, @void, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0xd, 0x60, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1, {[@rr={0x7, 0x3, 0x7e}]}}, {0x0, 0x17c1, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "c5029b0727402b59c52bb5ab2dc2ac9e97c848c11dab8921", "fcf88afea078dd44ba61387fdaa1e9b063878af25aa29d3a35b994c14e1023eb"}}}}}}}, 0x7a) 3.594056935s ago: executing program 9 (id=2643): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001380)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000001400)=ANY=[], 0x835, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 1.939249358s ago: executing program 2 (id=2645): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1400, 0x0, 0x10000, 0x3, 0x2, 0x80004003, 0x0, 0x0, 0x9, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rmdir(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) socket$packet(0x11, 0x3, 0x300) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002004"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff95000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x3ff, {[@mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "afd4319553060498efdb64a6c12fadaf"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x8, 0x0, 0x10000}, @mss={0x2, 0x4, 0x7}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "ba2d845684a89f90c5952ca2c38371cc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560440", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 1.210139251s ago: executing program 3 (id=2648): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xa7f0, @remote, 0x7}, 0x1c) recvmsg$inet_nvme(r0, &(0x7f0000000200)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}, 0x2000) r1 = memfd_secret(0x80000) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000280), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x40, 0x80, 0x5, 0x3, {{0x21, 0x4, 0x2, 0x32, 0x84, 0x67, 0x0, 0x3, 0x29, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x1b, 0x86, [@empty, @remote, @loopback, @multicast1, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x54, 0x1d, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x68}, {@remote, 0x9}, {@multicast2, 0x1}, {@broadcast, 0x5}, {@private=0xa010100, 0x6}, {@private=0xa010101, 0x7f800}, {@multicast2, 0xc7dc}, {@broadcast, 0x8}, {@private=0xa010101, 0xc0}, {@loopback, 0xfffffffb}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @loopback}, &(0x7f0000000480)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x20, 0x8000, 0x0, 0xd95, {{0x7, 0x4, 0x3, 0x4, 0x1c, 0x68, 0x0, 0xfe, 0x29, 0x0, @private=0xa010101, @multicast2, {[@lsrr={0x83, 0x7, 0x49, [@broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) getpeername$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000740)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x4, 0x37, {{0xf, 0x4, 0x1, 0x0, 0x3c, 0x67, 0x0, 0x20, 0x29, 0x0, @local, @loopback, {[@ssrr={0x89, 0x27, 0xb9, [@broadcast, @broadcast, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010102, @local, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x39}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000000900)=[{}, {}], 0x10, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x28, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000b40)={@mcast1, 0x0}, &(0x7f0000000b80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000bc0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000c00)=0x0, &(0x7f0000000c40)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000d00)={'ip6tnl0\x00', &(0x7f0000000c80)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x80, 0x7, 0xd, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8, 0x700, 0x1b, 0x52e}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e00)={'ip_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x80, 0x80, 0x5, 0xd, {{0x21, 0x4, 0x3, 0xe, 0x84, 0x67, 0x0, 0x4, 0x29, 0x0, @local, @broadcast, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0x6d, [@local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x54, 0x29, 0x1, 0x8, [{@multicast1, 0xff6d}, {@multicast1, 0xffff}, {@private=0xa010101, 0xe}, {@private=0xa010100, 0xae05}, {@multicast1, 0x8}, {@multicast2, 0x6a4a353f}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@local, 0x7fffffff}, {@loopback, 0x23}, {@broadcast, 0x80}]}]}}}}}) getpeername$packet(r1, &(0x7f0000000e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000e80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000f40)={'syztnl1\x00', &(0x7f0000000ec0)={'ip6_vti0\x00', 0x0, 0x2d, 0xa, 0x4, 0x1, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x700, 0x8, 0x7, 0x9}}) getsockname$packet(r0, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000fc0)=0x14) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000001b80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001b40)={&(0x7f0000001000)={0xb34, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xffff, 0x4, 0x9}, {0x8, 0x6, 0xf, 0x8}, {0x4, 0x79, 0xff, 0x100}, {0x7, 0x3a, 0xf3, 0x1}, {0x8, 0x5, 0x80, 0x9}, {0xa0, 0x4, 0xcb, 0xa56}, {0xe312, 0xc, 0x2}, {0x73, 0xd, 0x2, 0x5}, {0x100, 0xfa, 0x51, 0x6}, {0xff, 0x7, 0x8, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1ff, 0xcb, 0x9, 0x1}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xfff8, 0xd, 0xa, 0x1}, {0xffff, 0x27, 0x4, 0x7ff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ef}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6268f209}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x415}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r21}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r22}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800000}}}]}}]}, 0xb34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) eventfd2(0x9, 0x1) 1.150644333s ago: executing program 9 (id=2650): syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040841}, 0x0) fchdir(0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, 0x0, 0x4) unshare(0x2a020400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r3}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7079f00b91802e00fcdbdf25210000000800a663c555", @ANYRES32=r8, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x88, @broadcast, 0x4e23, 0x1, 'lblc\x00', 0x2, 0x8000, 0x12}, 0x2c) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) fallocate(r9, 0x81, 0x13, 0x10) fcntl$getown(r9, 0x9) 1.150268823s ago: executing program 3 (id=2651): socket(0x840000000002, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0x1, 0x3, 0x5, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x358, 0x9) 1.096601005s ago: executing program 3 (id=2652): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000010080)=[{0x50, 0x1, 0x3, 0x3}, {0x6, 0x0, 0x3}]}) write$ppp(r4, &(0x7f0000000400)='k\'', 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) lseek(r3, 0x3, 0x1) r6 = memfd_create(&(0x7f0000000740)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe28\xe3&:1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xaca\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x9) fallocate(r6, 0x0, 0x0, 0x400001) fcntl$addseals(r6, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000580)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@discard}, {@errors_continue}, {@sb={'sb', 0x3d, 0x5d9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0xbcf, &(0x7f00000014c0)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUstvL868R3sbTTmP8trZv/rebf1Wb+9+8tjnHnrddvt+vL8v/r/X+82yjZ+Nl2R0ltw+OFiN92t8o/Wck/aZP/lS2OUfjxdqldX975L78RcTJa519XTXuD7yc6PT5RLg3XfrYcY+GjkXfajZ93/tn9P9wm/w3uf3+279ZTV2r/pT7/u3z5Xru+zfNPv+xN/lut9db3vDA6MzN1JqI3+df6/Wc3zrdxTOMaWf6nfr/x/3+rv//sNaFS/yvJMl+ob7P2i2vG/NvdO+9vlH+29svz/l/d/v2v7nt5i2P84cNXTrXra17/ZiUb/1FSWwsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQEMaEQORpMWISKr1NC0WI45ExK/icFq+OT3zx/Gb/79xNeuLGIyedHyiXBqOiEKtnWTtM9X6avvsmvafI+JYRLxWOFRtF8dulq/mnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArjkTEQCRpMSLSiFgqpGmxmHdUAAAAQMcN5h0AAAAAsOus/wEAAODgs/4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABglx078eBhEhGVC4eqJdNb7+vJNTJgt6V5BwDkpivvAIDcdOcdAJCbba7xTRfgAEo26e9v29PX8VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L9OHn/wMImIyoVD1ZLprff1tDzjxB5GB+ymNO8AgNx0bdTZvXdxAHvvmf/Fj3Y2DmDvtV7jA8+TZJP+/tVjKk/39O1aTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsPwPVkqTFiEir9TQtFiOORsRg9CTjE+XScET8IiI+LfT0Ze2+vIMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg46Zn5yZHy+XS1LNUkp2drqKi0lRJ9kcYtUrer0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORhenZucrRcLk1N5x0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLfp2bnJ0XK5NLWFyr3tHNxUyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy81MAAAD//6/KDT4=") connect$can_bcm(r3, &(0x7f0000000080)={0x1d, r1}, 0x10) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0xf1) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) io_uring_setup(0xefe, 0x0) 967.374629ms ago: executing program 9 (id=2654): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r1, 0x0, 0x8c0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000010700060072720000080008"], 0x54}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000003dd9113f9500"/33], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000faffbfff000000004000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000000000000000000040000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r8 = socket(0x21, 0x2, 0x10000000000002) close(0x3) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000500)={r11, @in6={{0xa, 0x21, 0xfffff800, @mcast1}}}, &(0x7f0000000280)=0x84) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) getgroups(0x1, &(0x7f00000002c0)=[0x0]) keyctl$chown(0x4, 0x0, 0xffffffffffffffff, r12) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, 0x0) 895.375841ms ago: executing program 4 (id=2655): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x20, r0, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) 823.868894ms ago: executing program 4 (id=2656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}], {0x14, 0x10}}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 764.426765ms ago: executing program 4 (id=2657): ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000000)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x1fc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000700)={{0x6, 0x85}, {0xe9, 0x8}, 0x3, 0x1, 0x1}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x2000, 0x7, 0x6000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f00000006c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x1b7d}}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@fat=@debug}, {@nodots}]}, 0x0, 0x239, &(0x7f0000000380)="$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") dup2(r0, r2) 660.974419ms ago: executing program 9 (id=2658): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x2c000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040090) socket$igmp(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2000, 0x9}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000851}, 0xa051) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x9}, 0xc) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)=0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f00000008c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033", 0x0, 0x9ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001900)={'wg0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x3d, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0x58, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0016000600060009000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x10, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x9, 0x1000, &(0x7f0000000900)=""/4096, 0x41100, 0x20, '\x00', r7, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001980)={0x0, 0x4, 0xffff, 0x3}, 0x10, r8, r9, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 535.034243ms ago: executing program 4 (id=2659): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x6352, 0x1000, 0x20da, 0x4, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f0000000e00)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0xff, 0x2b6, &(0x7f0000001240)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$eJzs3V9oXFkZAPDvTpOY7WY7FRbUZdGg4C6uJm2T7boUpAX/UZtSG1+0gZK00yR0kgnJRJsIUrFIwRefRKgU7YOCKMbHvqkIWiz6UCj6UooU1EJbqPocuTNzY0gmzWybzm3T3w9O77ln2jnn3m/uzD2n954bwAurNyIORsSOiHgrIoqN8kIjxfl6Sv/e2MDSRJqSWF4efpBEEhGHB5YmsvdKGsuXG2/wZkT8rjOJsQvr651bWDw7Wi6XZhvr/dWpmf65hcVPTU6NjpfGS9MD777z6f0Dbw/uH9iybb09emLqF5WhAz+9e/TXH/74Jx4kcTB6Gq+t3o6t0hu9jX3SGa+sfiGJ+PpWV5az7lX5pCPHhtCyP73z+g/ybgMA0H6Fxrl/R+38vxg7on7y1n1j5GEx7vx5o393eOTyv9rZTgAAAODxLS9/pLEEAAAAtq9E3x8AAAC2uew6gMMDSxNZate1B3e/0K6a2Mi9QxGxux7/7P7u+isdjXt6u6MzInb+O4nVt/Uma+75fRzVz0X0xjf+UD3//TNpiqd0HzbPpqW/590C8tQ1mHcLyNNrX867BeTpLxfzbgF5unEv7xaQp+PDebeAPB3dn3cLyNOlB3m3gN8cqk8AuH78r1Cb8y8b5Vk7/pPmX3rCuu8XInqj+5ery4z/tFc2/je2bvyvsDL+t2OD8b9dLdZx9Ws3P9Ss/ItfTeM/PJaN/31y5EeltP50+cQbRkvufTvitY5m8U9W4p9sEP9ii3X8/vpg05H+3+5K4/+zn6fxzpL4t9fyTyLeiObxzySPnp+1/8xkubSn/mfTOj768B//bVY+/dc0/tc+kx3/aUrrz/4vgKcvPf53bhD/zb7/d7dYx5XJO01Heod70vi/8a1Hx79wtyv5Su3D2NUoOTdarc7ujehKjqwv3/de98CLJdtH2T5M4//mx5r//n+wtmz+/Z9+Jt7fYp1HThQONCsf/FUa/+993vGfnzT+pzc5/jf6/X+11Tpu3h5tVj7x2TT+x6+IPwAAAAAAAAA8mUJE9ERS6FvJFwp9ffVneL8aOwvlylz1rTOV+enTUXtW9u7oLGRXehXr60m6vrdxPVC2vm/N+kDjepGLxZdq632nKuXTeW88AAAAbHM9EbdOfOfqB15e0///Z7He/wcAAACef2n///UfX76U5v/T6kQ+AAAAwHMl7f8//O79a6H/DwAAANuW/j8AAABsf1n//9jQUBwbGlrOnvs3XRmfPDsx8+6+PX1T86f6TlVmZ/rGK5Xx2ox9U5u/b7lSmdn7dsyf66+W5qr9cwuLJ6cq89PVk7Xnxp4sdbZh24DNXfjb1ZG82wAAALRPzwbz/7+yau7+PRGxKyKuFzvfl831DwAAADz7eiJufemH3/zj3MLi2dFyuTQrIyMjs5LJ+xsKAADYav8/6c+7JQAAAAAAAAAAAAAAAAAAAPDiasd0YnlvIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+P/wUAAP//faYBPg==") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00), 0x0, 0x4000040) sendto$inet(r3, 0x0, 0x0, 0x2004cfe9, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40010) r4 = socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_START_POLL(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000022f5dd263535d4dc4f45ef524cf396257897b95774786c5fc232c7bdd89c4d057461b33540797d9deca2d065163487113f3ac5fb32ad6e62821cd5b7d37843223235a39fa75888d235f33906f3844e1a23113677c3fbd71cda989185dccd85365e69d4764dae2a171345878dca5c0b3f813bdc0fc056d839af89f460103be9d263a86369b84e1037549daac00cc52de33993ad0209be3d", @ANYRES16=r6, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0xfd9, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x24000806) sendmsg$SEG6_CMD_SETHMAC(r1, 0x0, 0x4) 534.006333ms ago: executing program 2 (id=2660): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f00007e1000/0x4000)=nil, 0x4000, 0x2000, 0xb, &(0x7f0000ffe000/0x2000)=nil) r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f00007e6000/0x2000)=nil, 0x2000, 0x15) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e"], 0x10c}}, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x13008, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, r0, 0x0, 0xffffffffffffffff, 0xc) 522.693844ms ago: executing program 3 (id=2661): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0x2}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80}]}}]}, 0x3c}}, 0x24040084) 421.014046ms ago: executing program 3 (id=2662): socket(0x840000000002, 0x3, 0xff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0x1, 0x3, 0x5, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x358, 0x9) 420.294206ms ago: executing program 3 (id=2663): socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r6, 0x1, 0x2) (async) fsmount(r6, 0x1, 0x2) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe, 0x4, @perf_bp={0x0, 0x1}, 0x440, 0x4, 0x9, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xe, 0x4, @perf_bp={0x0, 0x1}, 0x440, 0x4, 0x9, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r8 = fsmount(r7, 0x1, 0xf6) recvmsg(r8, &(0x7f0000000440)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/175, 0xaf}], 0x3, &(0x7f00000003c0)=""/124, 0x7c}, 0x40000000) (async) recvmsg(r8, &(0x7f0000000440)={&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000200)=""/159, 0x9f}, {&(0x7f00000002c0)=""/175, 0xaf}], 0x3, &(0x7f00000003c0)=""/124, 0x7c}, 0x40000000) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) (async) r9 = fsmount(r7, 0x0, 0x0) fchdir(r9) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r11, &(0x7f0000004200)='t', 0x1) (async) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r11, r10, 0x0, 0x7fffffff) (async) sendfile(r11, r10, 0x0, 0x7fffffff) 322.11519ms ago: executing program 8 (id=2664): syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040841}, 0x0) fchdir(0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, 0x0, 0x4) unshare(0x2a020400) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r3}, 0x50) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000080)=r5}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7079f00b91802e00fcdbdf25210000000800a663c555", @ANYRES32=r8, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000100)={0x88, @broadcast, 0x4e23, 0x1, 'lblc\x00', 0x2, 0x8000, 0x12}, 0x2c) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) fallocate(r9, 0x81, 0x13, 0x10) fcntl$getown(r9, 0x9) 237.074942ms ago: executing program 8 (id=2665): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x3}, 0x10000d, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x8000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000ff18"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r3], 0x38}}, 0x0) 157.962255ms ago: executing program 8 (id=2666): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x20, r0, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x142}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) 132.881166ms ago: executing program 4 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020206b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x3, 0x20cc0}}}]}, 0x3c}}, 0x0) 110.217786ms ago: executing program 8 (id=2668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r2) close(r2) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) r4 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1810040, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r7}, 0x8) syz_clone3(&(0x7f0000000540)={0x52aa0000, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000280)=0x0, {0x18}, &(0x7f0000000340)=""/60, 0x3c, &(0x7f00000003c0)=""/89, &(0x7f0000000440)=[r6, r6, r6, r6, r6, r6], 0x6, {r5}}, 0x58) process_vm_readv(r8, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/251, 0xfb}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/4096, 0x1000}], 0x5, &(0x7f0000001c80)=[{&(0x7f0000001a00)=""/68, 0x44}, {&(0x7f0000001a80)=""/250, 0xfa}, {&(0x7f0000001b80)=""/98, 0x62}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/23, 0x17}], 0x5, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000100)={0x5, 0x8, 0x100000, {r2}}, 0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x7b, @private1, 0x7}]}, &(0x7f0000000240)=0x10) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000000)=0xa, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a7a, 0x2b21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x48}}, 0x24000000) 628.67µs ago: executing program 4 (id=2669): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) r3 = open(0x0, 0x181102, 0x0) ftruncate(r3, 0x2007ffb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r5, 0x0}]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0x1000, 0x5, 0x8010, r3, 0x859, '\x00', 0x0, r2, 0x0, 0x2, 0x3, 0x5, @value=r0}, 0x50) io_submit(r6, 0x7, &(0x7f0000001a40)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x1, r7, &(0x7f0000000380)="2c1ccdcbb929743b90a960da2c486cf01220a43330b35ad0666e60961918b532178e89ce4235d20456cdf0748c3f885a8857d35c797ade0220c362b720daf355a121e3e3c0959467b783cbe64536ded3a0e1ad3f4c08b28ca9dcc0645f49580c83613ed53e0cb61a4f32fc6218b5408f531c3021639537196117c3ae85ff32c62e79c536b100c557bf864a3171ff1327fdb5017c16bba21287d55fe9b6c7b042778ba1c998729b4fc6bd5a95028370969a4052b48dafa75a37a826be556917da9be182826254a1c224f95ad856e2584a8a37feb9e1", 0xd5, 0x100000001, 0x0, 0x1, r3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x5, r4, &(0x7f00000004c0)="45904fc326cf3077ae6231d72be93baf629a5fbb182eb7546b05a1d506c56559edc371b82e3be7832b9a883ea362c5135dd28f34a1bc32b38f3895e70513026cc639c0aab0ba0e5c7637ca8696044897b35bf1222e70c8e5488ade900f28395fd6851d0eab92aad1ca6a150f9b34837bbe22ed90e6c8817b59d9b8d3156bd600e61fc39e88853d18d86f35", 0x8b, 0x7af85f9, 0x0, 0x2, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x2fb, r4, &(0x7f00000005c0)="c890462985eeb7c7fd9ec14c91dcf05e7ed7d0b3639353761f821c3271085ce666d4a3da8b49b4e459f2b5cb74891c1a51813f173e41c8a11a6778e81ad3202e98e4d2742855d23dfe5b8b8391ebcd6aec096337dd504f7ba366cff0c2e0c1340fe5d28addc3732cdab53d3e253de70158fd9242625a", 0x76, 0x5, 0x0, 0x0, r2}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000680)="b2144407044ab9e3c0b1b2657a9ba4ca75fd9bc8696b9bf2dc543c054518df1005271beea519c2a4f15aab0226e30d94ec34e8b0e606f5e10ebf8047ee7b6267ece1afa06d5899f1cd60457f685e02424d65fa89c65587ccf3288b40761c62c01fe58cac025e50a9c5f25fdfc67d0ae32ebf24e2c9f65275418556b2965981f0e4b9cd33375f1b6db00615da9e70b1995a6ecc86179ba3efb06bf5dfef83402dbc31115bb522e6ebf27ad4f899ec6c7d510f19323846051313c7b8a0f52aeb5d26e8314463a3e62d69be286c350efd63d96e1e1019c9820d600da5c0131c122e758259a5c9", 0xe5, 0x6, 0x0, 0x0, r2}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0xf8c2, r1, &(0x7f0000000840), 0x0, 0x4, 0x0, 0x3, r2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000008c0)="6b88ddc278cc6f489a0f2102a78688deb2045bbc354083cbb6bb7eb42e9da93cffe2aeb7b661abf1ca71bfc9a7b87077ea6ff112122fccac637595bd4ad045eee0b87108f897bc9ad8b8a117d95f37c88890e8640395e25264c728b6e6a159d5af807c74dc6280dff093be15a561956ef990a03b0011d747db82946406ce661aa68905be4e65507b5c7d555c2ceb77321cffc3af60ea0a3f9ea0f52397c4dce3c62a4bf46c496d7a595a3aa14a09bbd1444a72211968ef19a4e2a82c331a034d784be788", 0xc4, 0x5, 0x0, 0x3}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x3, 0x1, r2, &(0x7f0000000a00)="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", 0x1000, 0xd, 0x0, 0x0, r3}]) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060108000000000000000005000005050005000a00000005000100070000000500040000007a4a0900020073797a310000000014000300686173683a69702c706f72742c6970000c0007800800124000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000001bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000840)={0x34, r10, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0xc004}, 0x5) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r9) sendmsg$NLBL_MGMT_C_ADD(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000400)={0x40, r11, 0x43ea4d35e0958cf7, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, 'veth0_macvtap\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x40}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000001b40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x6c, r11, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x9) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) fadvise64(r0, 0x3, 0xb, 0x3) 331.46µs ago: executing program 8 (id=2670): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000001440)='\r', 0x1, 0x6d91fb6102d8910c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17c1b, 0x51a22}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) (async) socket$inet6(0xa, 0x2, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r0, &(0x7f0000001440)='\r', 0x1, 0x6d91fb6102d8910c, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x17c1b, 0x51a22}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x0, 0xfffffffffffffffe}}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 0s ago: executing program 8 (id=2671): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x40404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1400, 0x0, 0x10000, 0x3, 0x2, 0x80004003, 0x0, 0x0, 0x9, 0x0, 0xbd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd76, 0x8, 0x73, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) rmdir(&(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000280)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) socket$packet(0x11, 0x3, 0x300) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="06"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="002004"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000feffffff95000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x8a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0xc2, 0x0, 0x0, 0x3ff, {[@mss={0x2, 0x4, 0x5}, @md5sig={0x13, 0x12, "afd4319553060498efdb64a6c12fadaf"}, @mptcp=@mp_fclose={0x1e, 0xc, 0x8, 0x0, 0x10000}, @mss={0x2, 0x4, 0x7}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "ba2d845684a89f90c5952ca2c38371cc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560440", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) kernel console output (not intermixed with test programs): kB, limit 307200kB, failcnt 121 [ 460.440765][T14148] memory+swap: usage 238208kB, limit 9007199254740988kB, failcnt 0 [ 460.478515][T14148] kmem: usage 237364kB, limit 9007199254740988kB, failcnt 0 [ 460.515249][T14148] Memory cgroup stats for /syz4: [ 460.515527][T14148] cache 36864 [ 460.577190][T14148] rss 4096 [ 460.583678][T14148] shmem 0 [ 460.596752][T14148] mapped_file 913408 [ 460.607962][T14148] dirty 0 [ 460.618370][T14148] writeback 57344 [ 460.626313][T14148] workingset_refault_anon 84 [ 460.643361][T14148] workingset_refault_file 0 [ 460.653234][T14148] swap 540672 [ 460.663310][T14148] swapcached 978944 [ 460.676887][T14148] pgpgin 81111 [ 460.683736][T14148] pgpgout 81079 [ 460.700647][T14148] pgfault 106460 [ 460.707917][T14148] pgmajfault 42 [ 460.715907][T14148] inactive_anon 57344 [ 460.725915][T14148] active_anon 36864 [ 460.734276][T14148] inactive_file 0 [ 460.745286][T14148] active_file 36864 [ 460.753381][T14148] unevictable 0 [ 460.760749][T14148] hierarchical_memory_limit 314572800 [ 460.778765][T14148] hierarchical_memsw_limit 9223372036854771712 [ 460.792320][T14148] total_cache 36864 [ 460.805591][T14148] total_rss 4096 [ 460.813597][T14148] total_shmem 0 [ 460.824012][T14148] total_mapped_file 913408 [ 460.832784][T14148] total_dirty 0 [ 460.840573][T14148] total_writeback 57344 [ 460.849121][T14148] total_workingset_refault_anon 84 [ 460.867936][T14148] total_workingset_refault_file 0 [ 460.876356][T14148] total_swap 540672 [ 460.885668][T14148] total_swapcached 978944 [ 460.907215][T14290] loop2: detected capacity change from 0 to 256 [ 460.923869][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.939192][T14148] total_pgpgin 81140 [ 460.957343][T14148] total_pgpgout 81108 [ 460.971981][T14148] total_pgfault 106495 [ 460.998977][T14148] total_pgmajfault 42 [ 461.023174][T14148] total_inactive_anon 57344 [ 461.038032][T14148] total_active_anon 36864 [ 461.047260][T14148] total_inactive_file 0 [ 461.047292][T14299] lo speed is unknown, defaulting to 1000 [ 461.061226][T14148] total_active_file 36864 [ 461.080257][T14148] total_unevictable 0 [ 461.092590][T14148] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2155,pid=14148,uid=0 [ 461.114545][T14148] Memory cgroup out of memory: Killed process 14148 (syz.4.2155) total-vm:94304kB, anon-rss:1228kB, file-rss:23372kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 461.148909][T14290] FAT-fs (loop2): Directory bread(block 64) failed [ 461.155476][T14290] FAT-fs (loop2): Directory bread(block 65) failed [ 461.173997][T14290] FAT-fs (loop2): Directory bread(block 66) failed [ 461.195586][T14290] FAT-fs (loop2): Directory bread(block 67) failed [ 461.226577][T14290] FAT-fs (loop2): Directory bread(block 68) failed [ 461.233550][T14290] FAT-fs (loop2): Directory bread(block 69) failed [ 461.240673][T14290] FAT-fs (loop2): Directory bread(block 70) failed [ 461.252089][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 461.268679][T14299] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2167'. [ 461.272554][T14290] FAT-fs (loop2): Directory bread(block 71) failed [ 461.308037][T14290] FAT-fs (loop2): Directory bread(block 72) failed [ 461.315205][T14290] FAT-fs (loop2): Directory bread(block 73) failed [ 461.328777][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 461.328791][ T28] audit: type=1400 audit(1780685217.427:5637): avc: denied { write } for pid=14317 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.596739][ T28] audit: type=1400 audit(1780685217.687:5638): avc: denied { write } for pid=14323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.591826][ T28] audit: type=1400 audit(1780685218.687:5639): avc: denied { write } for pid=14339 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 462.643655][T14341] loop3: detected capacity change from 0 to 128 [ 463.618066][T14341] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 463.816326][T14336] syz.2.2165: attempt to access beyond end of device [ 463.816326][T14336] loop2: rw=2049, sector=1224, nr_sectors = 76 limit=256 [ 464.137272][T14337] loop4: detected capacity change from 0 to 1024 [ 464.162740][T14337] EXT4-fs: Ignoring removed bh option [ 464.300023][ T28] audit: type=1400 audit(1780685219.907:5640): avc: denied { module_load } for pid=14289 comm="syz.2.2165" path="/2/file1/bus" dev="loop2" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 464.444129][T14350] netem: change failed [ 464.449786][T14352] netlink: 'syz.8.2172': attribute type 1 has an invalid length. [ 464.480033][T14350] can0: slcan on ptm0. [ 464.512132][T14352] bond1: entered promiscuous mode [ 464.529194][T14352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.552850][ T28] audit: type=1400 audit(1780685220.647:5641): avc: denied { write } for pid=14343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.610606][T14360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.636538][T14349] can0 (unregistered): slcan off ptm0. [ 464.673415][T14337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.749109][T14360] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 464.792735][T14371] loop2: detected capacity change from 0 to 128 [ 464.867554][ T28] audit: type=1400 audit(1780685220.827:5642): avc: denied { write } for pid=14367 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 464.930075][T14360] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 465.039983][T14360] bond1: (slave ip6gre1): making interface the new active one [ 465.049984][T14360] ip6gre1: entered promiscuous mode [ 465.057750][T14360] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 465.068387][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.248426][T14383] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 465.256320][T14383] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 465.264249][T14383] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 465.274876][T14383] xt_hashlimit: max too large, truncated to 1048576 [ 466.098971][ T3019] 8021q: adding VLAN 0 to HW filter on device eth1 [ 466.437193][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2181'. [ 467.445569][T14390] loop2: detected capacity change from 0 to 1024 [ 467.497673][T14404] loop9: detected capacity change from 0 to 1024 [ 467.507164][T14404] EXT4-fs: Ignoring removed bh option [ 468.530404][T14409] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2182'. [ 469.162708][ T28] audit: type=1400 audit(1780685225.257:5643): avc: denied { accept } for pid=14413 comm="syz.2.2184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 469.247289][T14404] EXT4-fs warning (device loop9): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop9. [ 469.302555][T14406] lo speed is unknown, defaulting to 1000 [ 469.572030][ T28] audit: type=1400 audit(1780685225.667:5644): avc: denied { write } for pid=14429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.611370][ T28] audit: type=1400 audit(1780685225.707:5645): avc: denied { write } for pid=14440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.743498][ T28] audit: type=1400 audit(1780685225.837:5646): avc: denied { write } for pid=14445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.786967][ T28] audit: type=1400 audit(1780685225.887:5647): avc: denied { write } for pid=14456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.854223][T14461] loop3: detected capacity change from 0 to 512 [ 469.863133][ T3019] 8021q: adding VLAN 0 to HW filter on device eth4 [ 469.921144][T14463] loop2: detected capacity change from 0 to 256 [ 470.034927][T14465] loop3: detected capacity change from 0 to 4096 [ 470.062093][T14465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.984444][T14463] FAT-fs (loop2): Directory bread(block 64) failed [ 471.217979][T14463] FAT-fs (loop2): Directory bread(block 65) failed [ 471.229133][T14463] FAT-fs (loop2): Directory bread(block 66) failed [ 471.235668][T14463] FAT-fs (loop2): Directory bread(block 67) failed [ 471.242394][T14463] FAT-fs (loop2): Directory bread(block 68) failed [ 471.510679][T14482] loop9: detected capacity change from 0 to 1024 [ 471.978162][T14463] FAT-fs (loop2): Directory bread(block 69) failed [ 471.997614][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.226674][T14463] FAT-fs (loop2): Directory bread(block 70) failed [ 472.242963][T14463] FAT-fs (loop2): Directory bread(block 71) failed [ 472.356708][T14482] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 472.368532][T14482] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 472.380421][T14482] EXT4-fs error (device loop9): ext4_get_journal_inode:5896: comm syz.9.2190: inode #1: comm syz.9.2190: iget: illegal inode # [ 472.394460][T14482] loop9: lost filesystem error report for type 5 error -117 [ 472.406444][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 472.420158][ C1] EXT4-fs (loop9): initial error at time 1780685228: ext4_get_journal_inode:5896 [ 472.429288][ C1] EXT4-fs (loop9): last error at time 1780685228: ext4_get_journal_inode:5896 [ 472.626150][T14482] EXT4-fs (loop9): no journal found [ 472.631920][T14482] EXT4-fs (loop9): can't get journal size [ 472.646774][T14482] EXT4-fs (loop9): failed to initialize system zone (-22) [ 472.654761][T14482] EXT4-fs (loop9): mount failed [ 472.666390][T14463] FAT-fs (loop2): Directory bread(block 72) failed [ 472.666415][T14463] FAT-fs (loop2): Directory bread(block 73) failed [ 472.743765][ T28] audit: type=1400 audit(1780685228.837:5648): avc: denied { write } for pid=14467 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.817148][ T28] audit: type=1400 audit(1780685228.917:5649): avc: denied { write } for pid=14497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.859584][T14503] netlink: 'syz.4.2195': attribute type 1 has an invalid length. [ 472.869356][T14496] geneve2: entered allmulticast mode [ 472.990093][T14503] bond3: entered promiscuous mode [ 473.000990][T14499] loop2: detected capacity change from 0 to 512 [ 473.001639][T14503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.035627][T14499] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 473.041290][T14514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 473.053616][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2192'. [ 473.064526][T14499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 473.065058][T14514] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 473.081667][T14499] System zones: 1-12 [ 473.092280][T14514] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 473.104610][T14499] EXT4-fs (loop2): orphan cleanup on readonly fs [ 473.111053][T14514] bond3: (slave ip6gre1): making interface the new active one [ 473.111075][T14514] ip6gre1: entered promiscuous mode [ 473.113159][T14514] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 473.115781][T14495] lo speed is unknown, defaulting to 1000 [ 473.152601][ T28] audit: type=1400 audit(1780685229.247:5650): avc: denied { write } for pid=14505 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.210164][T14499] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2194: bg 0: block 361: padding at end of block bitmap is not set [ 473.236033][T14499] loop2: lost filesystem error report for type 5 error -117 [ 473.236442][T14499] EXT4-fs (loop2): Remounting filesystem read-only [ 473.250349][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 473.250383][ C1] EXT4-fs (loop2): initial error at time 1780685229: ext4_validate_block_bitmap:441 [ 473.250448][ C1] EXT4-fs (loop2): last error at time 1780685229: ext4_validate_block_bitmap:441 [ 473.270354][T14508] lo speed is unknown, defaulting to 1000 [ 473.306517][T14499] EXT4-fs (loop2): 1 truncate cleaned up [ 473.312135][T14516] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2196'. [ 473.313324][ T28] audit: type=1400 audit(1780685229.407:5651): avc: denied { write } for pid=14530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 473.372051][T14499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 473.661879][ T28] audit: type=1400 audit(1780685229.757:5652): avc: denied { load_policy } for pid=14498 comm="syz.2.2194" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 473.687570][T14536] netlink: 'syz.9.2196': attribute type 21 has an invalid length. [ 473.722042][T14504] nfs: Bad value for 'fsc' [ 473.772064][T14499] SELinux: failed to load policy [ 473.773777][T14536] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2196'. [ 473.791936][T14536] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2196'. [ 473.867507][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 474.014154][T14569] loop2: detected capacity change from 0 to 512 [ 474.021076][T14569] ext4: Unknown parameter 'noacl' [ 474.500913][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 474.500930][ T28] audit: type=1400 audit(1780685230.597:5657): avc: denied { write } for pid=14559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.575804][ T28] audit: type=1400 audit(1780685230.667:5658): avc: denied { write } for pid=14583 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.596135][T14586] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 474.641761][T14586] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 474.692751][T14595] xt_hashlimit: max too large, truncated to 1048576 [ 474.693568][T14596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=14596 comm=syz.8.2208 [ 474.715988][T14586] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 474.822899][ T28] audit: type=1400 audit(1780685230.917:5659): avc: denied { write } for pid=14592 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.883056][ T28] audit: type=1400 audit(1780685230.957:5660): avc: denied { write } for pid=14612 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.024354][ T28] audit: type=1400 audit(1780685231.117:5661): avc: denied { write } for pid=14616 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.063899][ T28] audit: type=1400 audit(1780685231.117:5662): avc: denied { write } for pid=14627 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.220130][ T28] audit: type=1400 audit(1780685231.317:5663): avc: denied { unmount } for pid=12445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 475.273492][ T28] audit: type=1400 audit(1780685231.367:5664): avc: denied { write } for pid=14629 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.317173][ T28] audit: type=1400 audit(1780685231.417:5665): avc: denied { write } for pid=14651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 475.356565][T14655] loop3: detected capacity change from 0 to 512 [ 475.374480][ T28] audit: type=1400 audit(1780685231.467:5666): avc: denied { cmd } for pid=14650 comm="syz.8.2215" path="socket:[41730]" dev="sockfs" ino=41730 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 475.433548][T14655] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 475.466125][T14655] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #17: comm syz.3.2216: corrupted in-inode xattr: e_name out of bounds [ 475.497601][T14655] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 475.497884][T14655] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2216: couldn't read orphan inode 17 (err -117) [ 475.507132][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 475.507172][ C1] EXT4-fs (loop3): initial error at time 1780685231: ext4_iget_extra_inode:5128: inode 17 [ 475.507206][ C1] EXT4-fs (loop3): last error at time 1780685231: ext4_iget_extra_inode:5128: inode 17 [ 475.602135][T14655] loop3: lost filesystem error report for type 5 error -117 [ 475.602724][T14655] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.610146][T14674] lo speed is unknown, defaulting to 1000 [ 475.829285][T14691] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 475.888894][T14674] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2218'. [ 475.977327][T14674] netlink: 'syz.9.2218': attribute type 21 has an invalid length. [ 475.994669][T14674] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2218'. [ 476.010421][T14674] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2218'. [ 476.074919][T14732] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2226'. [ 476.196029][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.575162][T14773] netlink: 'syz.3.2228': attribute type 21 has an invalid length. [ 476.583512][T14773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2228'. [ 476.899475][T14778] Option ' ' to dns_resolver key: bad/missing value [ 477.240276][T14782] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2233'. [ 477.615211][T14802] loop9: detected capacity change from 0 to 512 [ 477.648832][T14802] EXT4-fs: Ignoring removed nobh option [ 477.694100][T14802] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 477.742776][T14811] lo speed is unknown, defaulting to 1000 [ 477.818125][T14802] EXT4-fs (loop9): 1 truncate cleaned up [ 477.824422][T14802] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.947803][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.995253][ T3019] 8021q: adding VLAN 0 to HW filter on device eth21 [ 478.101923][T14811] netlink: 'syz.8.2241': attribute type 21 has an invalid length. [ 478.123979][T14811] __nla_validate_parse: 1 callbacks suppressed [ 478.123995][T14811] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2241'. [ 478.134814][T14834] syzkaller0: entered promiscuous mode [ 478.147193][T14834] syzkaller0: entered allmulticast mode [ 478.172458][T14829] IPVS: Scheduler module ip_vs_ not found [ 478.182280][T14811] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2241'. [ 478.268294][T14848] FAULT_INJECTION: forcing a failure. [ 478.268294][T14848] name failslab, interval 1, probability 0, space 0, times 0 [ 478.271103][T14847] loop9: detected capacity change from 0 to 512 [ 478.310322][T14848] CPU: 1 UID: 0 PID: 14848 Comm: syz.3.2247 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 478.310370][T14848] Tainted: [W]=WARN [ 478.310456][T14848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.310469][T14848] Call Trace: [ 478.310476][T14848] [ 478.310483][T14848] __dump_stack+0x1d/0x30 [ 478.310507][T14848] dump_stack_lvl+0x95/0xd0 [ 478.310527][T14848] dump_stack+0x15/0x1b [ 478.310554][T14848] should_fail_ex+0x263/0x280 [ 478.310572][T14848] ? rtnl_newlink+0x5c/0x1400 [ 478.310584][T14847] ext4: Unknown parameter 'measure' [ 478.310600][T14848] should_failslab+0x8c/0xb0 [ 478.310684][T14848] __kmalloc_cache_noprof+0x5f/0x400 [ 478.310713][T14848] ? __pfx_rtnl_newlink+0x10/0x10 [ 478.310742][T14848] rtnl_newlink+0x5c/0x1400 [ 478.310811][T14848] ? analyze_subprog+0x5073/0x5120 [ 478.310878][T14848] ? xas_load+0x413/0x430 [ 478.310903][T14848] ? xas_load+0x413/0x430 [ 478.310932][T14848] ? try_charge_memcg+0x206/0xa10 [ 478.310959][T14848] ? __rcu_read_unlock+0x4e/0x70 [ 478.310980][T14848] ? __css_rstat_updated+0xbb/0x280 [ 478.311038][T14848] ? __rcu_read_unlock+0x4e/0x70 [ 478.311058][T14848] ? avc_has_perm_noaudit+0xab/0x130 [ 478.311086][T14848] ? cred_has_capability+0x224/0x2a0 [ 478.311200][T14848] ? selinux_capable+0x31/0x40 [ 478.311224][T14848] ? security_capable+0x7b/0x90 [ 478.311308][T14848] ? ns_capable+0x7c/0xb0 [ 478.311348][T14848] ? __pfx_rtnl_newlink+0x10/0x10 [ 478.311376][T14848] rtnetlink_rcv_msg+0x64b/0x720 [ 478.311430][T14848] ? avc_has_perm_noaudit+0xab/0x130 [ 478.311458][T14848] netlink_rcv_skb+0x123/0x220 [ 478.311559][T14848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 478.311592][T14848] rtnetlink_rcv+0x1c/0x30 [ 478.311617][T14848] netlink_unicast+0x5a8/0x680 [ 478.311667][T14848] netlink_sendmsg+0x5c8/0x6f0 [ 478.311696][T14848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.311760][T14848] ____sys_sendmsg+0x563/0x5b0 [ 478.311788][T14848] ___sys_sendmsg+0x195/0x1e0 [ 478.311840][T14848] __x64_sys_sendmsg+0xd4/0x160 [ 478.311867][T14848] x64_sys_call+0x194c/0x3020 [ 478.311890][T14848] do_syscall_64+0x12c/0x3b0 [ 478.311967][T14848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.311989][T14848] RIP: 0033:0x7fb1d63cce59 [ 478.312006][T14848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.312085][T14848] RSP: 002b:00007fb1d4e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.312105][T14848] RAX: ffffffffffffffda RBX: 00007fb1d6645fa0 RCX: 00007fb1d63cce59 [ 478.312119][T14848] RDX: 0000000020000840 RSI: 0000200000000200 RDI: 0000000000000006 [ 478.312133][T14848] RBP: 00007fb1d4e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 478.312146][T14848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.312204][T14848] R13: 00007fb1d6646038 R14: 00007fb1d6645fa0 R15: 00007ffca117ad98 [ 478.312299][T14848] [ 478.414663][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 478.456643][ T3019] 8021q: adding VLAN 0 to HW filter on device eth23 [ 478.588718][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2245'. [ 478.674958][T14864] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2250'. [ 478.692401][T14867] syzkaller0: entered promiscuous mode [ 478.706211][T14867] syzkaller0: entered allmulticast mode [ 478.731724][T14867] tipc: Started in network mode [ 478.742472][T14867] tipc: Node identity a22150f5df9c, cluster identity 4711 [ 478.754549][T14867] tipc: Enabled bearer , priority 0 [ 478.778347][T14880] sctp: [Deprecated]: syz.2.2252 (pid 14880) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.778347][T14880] Use struct sctp_sack_info instead [ 478.827641][T14886] loop5: detected capacity change from 0 to 8 [ 478.912152][T14867] tipc: Resetting bearer [ 478.923904][T14867] tipc: Disabling bearer [ 478.932749][ T3019] 8021q: adding VLAN 0 to HW filter on device eth24 [ 478.968288][T14894] loop2: detected capacity change from 0 to 512 [ 479.012308][T14894] ext4: Unknown parameter 'noacl' [ 479.130706][T14898] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2257'. [ 479.238424][T14899] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2257'. [ 479.429963][T14901] loop3: detected capacity change from 0 to 512 [ 479.450160][T14901] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 479.505565][T14901] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.2260: Allocating blocks 41-42 which overlap fs metadata [ 479.537261][T14901] loop3: lost filesystem error report for type 5 error -117 [ 479.538583][T14901] __quota_error: 54 callbacks suppressed [ 479.538674][T14901] Quota error (device loop3): write_blk: dquota write failed [ 479.551729][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 479.551749][ C0] EXT4-fs (loop3): initial error at time 1780685235: ext4_mb_mark_diskspace_used:4222 [ 479.551776][ C0] EXT4-fs (loop3): last error at time 1780685235: ext4_mb_mark_diskspace_used:4222 [ 479.585390][T14901] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 479.595001][T14901] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 479.605098][T14901] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2260: Failed to acquire dquot type 1 [ 479.620173][T14901] loop3: lost filesystem error report for type 5 error -117 [ 479.620372][T14901] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 479.656508][ T28] audit: type=1400 audit(1780685235.747:5721): avc: denied { remount } for pid=14914 comm="syz.4.2262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 479.684663][ T28] audit: type=1400 audit(1780685235.777:5722): avc: denied { write } for pid=14905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.715260][ T3019] 8021q: adding VLAN 0 to HW filter on device eth22 [ 479.720004][T14901] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.2260: corrupted inode contents [ 479.744613][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 479.744857][T14901] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #12: comm syz.3.2260: mark_inode_dirty error [ 479.780886][ T28] audit: type=1400 audit(1780685235.777:5723): avc: denied { write } for pid=14925 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 479.829385][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 479.829617][T14901] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.2260: corrupted inode contents [ 479.873857][T14927] loop9: detected capacity change from 0 to 764 [ 479.935091][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 479.935275][T14901] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #12: comm syz.3.2260: mark_inode_dirty error [ 480.033652][T14932] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 480.060078][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 480.060360][T14901] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.2260: corrupted inode contents [ 480.088180][T14929] xt_hashlimit: max too large, truncated to 1048576 [ 480.096395][ T28] audit: type=1400 audit(1780685236.187:5724): avc: denied { unmount } for pid=11144 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 480.135083][T14932] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 480.143640][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 480.144014][T14901] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 480.171885][T14932] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 480.185163][T14901] loop3: lost filesystem error report for type 5 error -117 [ 480.185412][T14901] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #12: comm syz.3.2260: corrupted inode contents [ 480.228606][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 480.228851][T14901] EXT4-fs error (device loop3): ext4_truncate:4690: inode #12: comm syz.3.2260: mark_inode_dirty error [ 480.268406][T14901] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 480.268697][T14901] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 480.305076][T14901] loop3: lost filesystem error report for type 5 error -117 [ 480.305398][T14901] EXT4-fs (loop3): 1 truncate cleaned up [ 480.334684][T14901] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.471149][ T28] audit: type=1400 audit(1780685236.567:5725): avc: denied { write } for pid=14900 comm="syz.3.2260" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 480.495587][T14901] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.2260: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 480.567150][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.730064][ T28] audit: type=1400 audit(1780685236.817:5726): avc: denied { create } for pid=14941 comm="syz.8.2266" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 480.835429][ T28] audit: type=1400 audit(1780685236.927:5727): avc: denied { unlink } for pid=12445 comm="syz-executor" name="file0" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 481.152407][T14965] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2269'. [ 481.165020][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2269'. [ 481.230308][T14974] loop3: detected capacity change from 0 to 128 [ 481.273186][T14974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2270'. [ 482.317919][T14987] xt_hashlimit: size too large, truncated to 1048576 [ 482.567909][T14998] loop4: detected capacity change from 0 to 512 [ 482.610454][T14998] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2278: inode has both inline data and extents flags [ 482.635260][T14998] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 482.636453][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 482.652037][ C0] EXT4-fs (loop4): initial error at time 1780685238: ext4_orphan_get:1397: inode 15 [ 482.661457][ C0] EXT4-fs (loop4): last error at time 1780685238: ext4_orphan_get:1397: inode 15 [ 482.800777][T14998] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2278: couldn't read orphan inode 15 (err -117) [ 482.831045][T14998] loop4: lost filesystem error report for type 5 error -117 [ 483.212597][T14998] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.277126][T15006] ªªªªªª: renamed from vlan0 (while UP) [ 483.518383][T15011] __nla_validate_parse: 1 callbacks suppressed [ 483.518520][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2278'. [ 483.538764][T15011] xt_hashlimit: max too large, truncated to 1048576 [ 483.545841][T15011] ipt_REJECT: TCP_RESET invalid for non-tcp [ 484.008918][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.019719][T15006] loop9: detected capacity change from 0 to 4096 [ 484.028948][T15006] EXT4-fs: inline encryption not supported [ 484.044090][T15006] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 484.066368][T15016] loop3: detected capacity change from 0 to 512 [ 484.237567][T15023] SET target dimension over the limit! [ 484.249476][T15023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 484.265804][T15025] SET target dimension over the limit! [ 484.354752][T15032] loop3: detected capacity change from 0 to 512 [ 484.384280][T15032] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2288: inode has both inline data and extents flags [ 484.401150][T15032] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 484.401326][T15032] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2288: couldn't read orphan inode 15 (err -117) [ 484.410606][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 484.410626][ C1] EXT4-fs (loop3): initial error at time 1780685240: ext4_orphan_get:1397: inode 15 [ 484.410661][ C1] EXT4-fs (loop3): last error at time 1780685240: ext4_orphan_get:1397: inode 15 [ 484.453762][T15032] loop3: lost filesystem error report for type 5 error -117 [ 484.454274][T15032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.688541][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 484.702961][T15042] xt_hashlimit: max too large, truncated to 1048576 [ 484.710808][T15042] ipt_REJECT: TCP_RESET invalid for non-tcp [ 484.807901][T15040] loop2: detected capacity change from 0 to 512 [ 484.834201][T15040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 484.878767][T15040] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 484.887193][T15040] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 484.895641][T15040] System zones: 0-1, 15-15, 18-18, 34-34 [ 484.902781][T15040] EXT4-fs (loop2): orphan cleanup on readonly fs [ 484.909745][T15040] __quota_error: 4 callbacks suppressed [ 484.909774][T15040] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 484.925556][T15040] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 484.940546][T15040] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 484.955816][T15040] EXT4-fs (loop2): 1 truncate cleaned up [ 484.967882][T15040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.089486][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.163304][T15060] loop9: detected capacity change from 0 to 512 [ 485.178110][T15057] loop4: detected capacity change from 0 to 512 [ 485.197227][T15057] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 485.210780][T15060] ext4: Unknown parameter 'noacl' [ 485.222992][T15064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2300'. [ 485.233280][T15064] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2300'. [ 485.239004][T15057] EXT4-fs (loop4): 1 truncate cleaned up [ 485.249678][ T28] audit: type=1400 audit(1780685241.347:5732): avc: denied { read } for pid=15061 comm="syz.2.2300" name="/" dev="configfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 485.273666][T15064] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2300'. [ 485.283961][T15064] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2300'. [ 485.293320][ T28] audit: type=1400 audit(1780685241.347:5733): avc: denied { read open } for pid=15061 comm="syz.2.2300" path="/" dev="configfs" ino=2021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 485.302066][T15057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 485.394492][ T28] audit: type=1400 audit(1780685241.487:5734): avc: denied { write } for pid=15058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.395528][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.427672][ T28] audit: type=1400 audit(1780685241.517:5735): avc: denied { write } for pid=15056 comm="syz.4.2298" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.462337][ T28] audit: type=1400 audit(1780685241.547:5736): avc: denied { write } for pid=15056 comm="syz.4.2298" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.494218][ T28] audit: type=1400 audit(1780685241.547:5737): avc: denied { write } for pid=15056 comm="syz.4.2298" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.526136][ T28] audit: type=1400 audit(1780685241.547:5738): avc: denied { rename } for pid=15056 comm="syz.4.2298" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 485.579107][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.600817][T15090] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2304'. [ 485.618737][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 485.628276][ T28] audit: type=1400 audit(1780685241.557:5739): avc: denied { write } for pid=15056 comm="syz.4.2298" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 485.685408][T15100] FAULT_INJECTION: forcing a failure. [ 485.685408][T15100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.712643][ T28] audit: type=1400 audit(1780685241.587:5740): avc: denied { write } for pid=15082 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 485.739759][T15100] CPU: 0 UID: 0 PID: 15100 Comm: syz.2.2308 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 485.739791][T15100] Tainted: [W]=WARN [ 485.739799][T15100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.739811][T15100] Call Trace: [ 485.739819][T15100] [ 485.739827][T15100] __dump_stack+0x1d/0x30 [ 485.739931][T15100] dump_stack_lvl+0x95/0xd0 [ 485.739952][T15100] dump_stack+0x15/0x1b [ 485.739971][T15100] should_fail_ex+0x263/0x280 [ 485.739990][T15100] should_fail+0xb/0x20 [ 485.740012][T15100] should_fail_usercopy+0x1a/0x20 [ 485.740034][T15100] _copy_from_user+0x1c/0xb0 [ 485.740080][T15100] evdev_ioctl_handler+0x4cf/0x16d0 [ 485.740114][T15100] ? __fget_files+0x184/0x1c0 [ 485.740134][T15100] ? mutex_lock+0x57/0x90 [ 485.740174][T15100] ? __pfx_evdev_ioctl+0x10/0x10 [ 485.740216][T15100] evdev_ioctl+0x24/0x30 [ 485.740243][T15100] __se_sys_ioctl+0xce/0x140 [ 485.740283][T15100] __x64_sys_ioctl+0x43/0x50 [ 485.740309][T15100] x64_sys_call+0x1563/0x3020 [ 485.740331][T15100] do_syscall_64+0x12c/0x3b0 [ 485.740436][T15100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.740456][T15100] RIP: 0033:0x7f4dcc0ace59 [ 485.740474][T15100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.740491][T15100] RSP: 002b:00007f4dcab07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 485.740513][T15100] RAX: ffffffffffffffda RBX: 00007f4dcc325fa0 RCX: 00007f4dcc0ace59 [ 485.740553][T15100] RDX: 0000000000000000 RSI: 0000000080104592 RDI: 0000000000000003 [ 485.740564][T15100] RBP: 00007f4dcab07090 R08: 0000000000000000 R09: 0000000000000000 [ 485.740578][T15100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.740630][T15100] R13: 00007f4dcc326038 R14: 00007f4dcc325fa0 R15: 00007fff1a3ae008 [ 485.740650][T15100] [ 485.961022][T15115] loop3: detected capacity change from 0 to 512 [ 485.970626][T15118] loop2: detected capacity change from 0 to 1024 [ 486.012999][T15115] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2310: inode has both inline data and extents flags [ 486.060307][T15125] xt_hashlimit: max too large, truncated to 1048576 [ 486.060768][T15115] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 486.073085][T15123] lo speed is unknown, defaulting to 1000 [ 486.088612][T15118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.103665][T15115] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2310: couldn't read orphan inode 15 (err -117) [ 486.115514][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 486.115533][ C1] EXT4-fs (loop3): initial error at time 1780685242: ext4_orphan_get:1397: inode 15 [ 486.115557][ C1] EXT4-fs (loop3): last error at time 1780685242: ext4_orphan_get:1397: inode 15 [ 486.168975][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.196702][T15115] loop3: lost filesystem error report for type 5 error -117 [ 486.203238][T15115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.504491][T15152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2310'. [ 486.517952][T15152] xt_hashlimit: max too large, truncated to 1048576 [ 486.525543][T15152] ipt_REJECT: TCP_RESET invalid for non-tcp [ 486.747608][T15123] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2312'. [ 486.769993][T15155] loop2: detected capacity change from 0 to 512 [ 486.797852][T15155] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 486.824516][T15155] EXT4-fs (loop2): orphan cleanup on readonly fs [ 486.848136][T15155] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 486.866814][T15129] netlink: 'syz.4.2312': attribute type 21 has an invalid length. [ 486.886769][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.922421][T15155] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 486.951169][T15155] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #16: comm syz.2.2316: corrupted xattr block 31: invalid header [ 486.998465][T15155] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 487.001141][T15155] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 487.010397][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 487.010433][ C1] EXT4-fs (loop2): initial error at time 1780685243: ext4_xattr_delete_inode:2972: inode 16 [ 487.010512][ C1] EXT4-fs (loop2): last error at time 1780685243: ext4_xattr_delete_inode:2972: inode 16 [ 487.011307][T15173] loop3: detected capacity change from 0 to 2048 [ 487.030016][T15155] EXT4-fs (loop2): 1 orphan inode deleted [ 487.066122][T15155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 487.110880][T15173] loop3: p1 p3 p4 [ 487.119433][T15173] loop3: p4 size 589824 extends beyond EOD, truncated [ 487.190195][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.246457][T11121] udevd[11121]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 487.248555][T11167] udevd[11167]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 487.268972][T11163] udevd[11163]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 487.304914][T15198] EXT4-fs: Ignoring removed bh option [ 487.340668][T15198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.360025][T15198] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.371082][T15199] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 487.436902][T15213] FAULT_INJECTION: forcing a failure. [ 487.436902][T15213] name failslab, interval 1, probability 0, space 0, times 0 [ 487.485426][T15213] CPU: 0 UID: 0 PID: 15213 Comm: syz.3.2325 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 487.485517][T15213] Tainted: [W]=WARN [ 487.485524][T15213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.485535][T15213] Call Trace: [ 487.485543][T15213] [ 487.485550][T15213] __dump_stack+0x1d/0x30 [ 487.485576][T15213] dump_stack_lvl+0x95/0xd0 [ 487.485659][T15213] dump_stack+0x15/0x1b [ 487.485755][T15213] should_fail_ex+0x263/0x280 [ 487.485779][T15213] ? ip_vs_rht_alloc+0x42/0x7b0 [ 487.485807][T15213] should_failslab+0x8c/0xb0 [ 487.485835][T15213] __kmalloc_cache_noprof+0x5f/0x400 [ 487.485932][T15213] ip_vs_rht_alloc+0x42/0x7b0 [ 487.485953][T15213] ? ip_vs_rht_desired_size+0x5c/0x1a0 [ 487.485980][T15213] ip_vs_add_service+0x2cb/0xee0 [ 487.486027][T15213] ? selinux_capable+0x31/0x40 [ 487.486057][T15213] ? should_fail_ex+0xd9/0x280 [ 487.486076][T15213] ? __ip_vs_svc_fwm_find+0x267/0x290 [ 487.486109][T15213] do_ip_vs_set_ctl+0x913/0xae0 [ 487.486176][T15213] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 487.486202][T15213] ? ip4_datagram_release_cb+0x3ee/0x420 [ 487.486236][T15213] nf_setsockopt+0x199/0x1b0 [ 487.486258][T15213] ip_setsockopt+0x102/0x110 [ 487.486330][T15213] raw_setsockopt+0xbd/0x150 [ 487.486360][T15213] sock_common_setsockopt+0x69/0x80 [ 487.486461][T15213] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 487.486499][T15213] __sys_setsockopt+0x184/0x200 [ 487.486584][T15213] __x64_sys_setsockopt+0x64/0x80 [ 487.486605][T15213] x64_sys_call+0x2327/0x3020 [ 487.486624][T15213] do_syscall_64+0x12c/0x3b0 [ 487.486717][T15213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.486736][T15213] RIP: 0033:0x7fb1d63cce59 [ 487.486750][T15213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.486765][T15213] RSP: 002b:00007fb1d4e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 487.486831][T15213] RAX: ffffffffffffffda RBX: 00007fb1d6645fa0 RCX: 00007fb1d63cce59 [ 487.486844][T15213] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 487.486855][T15213] RBP: 00007fb1d4e1f090 R08: 000000000000002c R09: 0000000000000000 [ 487.486868][T15213] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 487.486889][T15213] R13: 00007fb1d6646038 R14: 00007fb1d6645fa0 R15: 00007ffca117ad98 [ 487.486906][T15213] [ 487.771309][T15222] ¿: renamed from vlan0 (while UP) [ 487.869111][T15228] syz.4.2328: attempt to access beyond end of device [ 487.869111][T15228] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 487.902196][T15228] syz.4.2328: attempt to access beyond end of device [ 487.902196][T15228] loop4: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 487.935750][T15228] syz.4.2328: attempt to access beyond end of device [ 487.935750][T15228] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 487.976674][T15228] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 488.162315][T15264] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 488.186953][T15264] EXT4-fs (loop4): inodes count not valid: 104 vs 32 [ 488.203133][T15256] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 488.478535][T15275] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 488.488476][T15275] FAT-fs (loop4): Filesystem has been set read-only [ 488.570665][T15283] netlink: 'syz.3.2337': attribute type 21 has an invalid length. [ 488.579048][T15283] __nla_validate_parse: 6 callbacks suppressed [ 488.579076][T15283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2337'. [ 489.659178][T15314] lo speed is unknown, defaulting to 1000 [ 489.985285][ T28] kauditd_printk_skb: 148 callbacks suppressed [ 489.985299][ T28] audit: type=1400 audit(1780685502.136:5889): avc: denied { write } for pid=15329 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.056147][T15331] set_capacity_and_notify: 5 callbacks suppressed [ 490.056235][T15331] loop4: detected capacity change from 0 to 128 [ 490.128410][T15331] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 490.158493][T15331] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.202293][ T28] audit: type=1400 audit(1780685502.356:5890): avc: denied { getopt } for pid=15340 comm="syz.8.2346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 490.248464][ T28] audit: type=1400 audit(1780685502.356:5891): avc: denied { write } for pid=15321 comm="syz.4.2344" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.346227][ T28] audit: type=1400 audit(1780685502.496:5892): avc: denied { write } for pid=15321 comm="syz.4.2344" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 490.412680][ T28] audit: type=1400 audit(1780685502.546:5893): avc: denied { write } for pid=15339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.477920][ T28] audit: type=1400 audit(1780685502.616:5894): avc: denied { write } for pid=15356 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.644579][ T28] audit: type=1400 audit(1780685502.796:5895): avc: denied { write } for pid=15359 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.703397][ T28] audit: type=1400 audit(1780685502.856:5896): avc: denied { write } for pid=15370 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.888406][ T28] audit: type=1400 audit(1780685503.046:5897): avc: denied { setattr } for pid=15397 comm="syz.9.2353" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 490.896648][T15398] loop9: detected capacity change from 0 to 512 [ 490.933595][T15398] EXT4-fs: Ignoring removed nobh option [ 490.951781][T15398] EXT4-fs (loop9): 1 orphan inode deleted [ 490.959482][T15398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.968283][ T28] audit: type=1400 audit(1780685503.086:5898): avc: denied { write } for pid=15376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.100585][T11144] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.114761][T15414] loop3: detected capacity change from 0 to 1024 [ 491.176019][T15421] FAULT_INJECTION: forcing a failure. [ 491.176019][T15421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.192403][T15414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 491.217737][T15414] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.249272][T15421] CPU: 1 UID: 0 PID: 15421 Comm: syz.4.2358 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 491.249307][T15421] Tainted: [W]=WARN [ 491.249315][T15421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 491.249325][T15421] Call Trace: [ 491.249382][T15421] [ 491.249391][T15421] __dump_stack+0x1d/0x30 [ 491.249414][T15421] dump_stack_lvl+0x95/0xd0 [ 491.249431][T15421] dump_stack+0x15/0x1b [ 491.249446][T15421] should_fail_ex+0x263/0x280 [ 491.249538][T15421] should_fail+0xb/0x20 [ 491.249555][T15421] should_fail_usercopy+0x1a/0x20 [ 491.249578][T15421] _copy_from_user+0x1c/0xb0 [ 491.249602][T15421] evdev_ioctl_handler+0x4cf/0x16d0 [ 491.249664][T15421] ? __fget_files+0x184/0x1c0 [ 491.249720][T15421] ? mutex_lock+0x57/0x90 [ 491.249743][T15421] ? __pfx_evdev_ioctl+0x10/0x10 [ 491.249807][T15421] evdev_ioctl+0x24/0x30 [ 491.249834][T15421] __se_sys_ioctl+0xce/0x140 [ 491.249862][T15421] __x64_sys_ioctl+0x43/0x50 [ 491.249890][T15421] x64_sys_call+0x1563/0x3020 [ 491.249943][T15421] do_syscall_64+0x12c/0x3b0 [ 491.249970][T15421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.250014][T15421] RIP: 0033:0x7fd5c61bce59 [ 491.250030][T15421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.250047][T15421] RSP: 002b:00007fd5c4c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.250068][T15421] RAX: ffffffffffffffda RBX: 00007fd5c6435fa0 RCX: 00007fd5c61bce59 [ 491.250108][T15421] RDX: 0000200000000300 RSI: 0000000080104592 RDI: 0000000000000003 [ 491.250120][T15421] RBP: 00007fd5c4c17090 R08: 0000000000000000 R09: 0000000000000000 [ 491.250131][T15421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.250142][T15421] R13: 00007fd5c6436038 R14: 00007fd5c6435fa0 R15: 00007fff172ab228 [ 491.250229][T15421] [ 491.514046][T15430] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2360'. [ 491.523567][T15439] No such timeout policy "syz1" [ 491.657292][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 491.793680][T15468] loop4: detected capacity change from 0 to 2048 [ 491.850388][T15468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.903220][T15468] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 492.005960][T15492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2372'. [ 492.053627][T15492] loop3: detected capacity change from 0 to 512 [ 492.083816][T15492] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 492.100356][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.126124][T15492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.177794][T15492] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 492.226490][T15499] loop4: detected capacity change from 0 to 256 [ 492.253724][T15492] net_ratelimit: 12 callbacks suppressed [ 492.253738][T15492] openvswitch: netlink: Flow key attr not present in new flow. [ 492.307433][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.446193][T15505] loop4: detected capacity change from 0 to 128 [ 492.833130][T15510] loop3: detected capacity change from 0 to 512 [ 492.840953][T15510] ext4: Unknown parameter 'obj_role' [ 493.109045][T15515] loop4: detected capacity change from 0 to 512 [ 493.141027][T15515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.197953][T15515] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.353423][T15530] loop2: detected capacity change from 0 to 512 [ 493.405041][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.509595][T15434] Bluetooth: hci0: command 0x1003 tx timeout [ 493.526501][ T6224] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 493.564029][T15544] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2388: inode has both inline data and extents flags [ 493.587386][T15544] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 493.587578][T15544] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2388: couldn't read orphan inode 15 (err -117) [ 493.596750][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 493.596768][ C0] EXT4-fs (loop2): initial error at time 1780685505: ext4_orphan_get:1397: inode 15 [ 493.596820][ C0] EXT4-fs (loop2): last error at time 1780685505: ext4_orphan_get:1397: inode 15 [ 493.669916][T15548] EXT4-fs: Ignoring removed nomblk_io_submit option [ 493.830552][T15549] netlink: 'syz.4.2385': attribute type 21 has an invalid length. [ 493.839038][T15549] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2385'. [ 493.904359][T15544] loop2: lost filesystem error report for type 5 error -117 [ 493.926057][T15544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.947716][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.978076][T15548] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 1024: comm syz.3.2386: invalid block [ 494.055226][T15548] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 494.056012][T15548] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2386: invalid indirect mapped block 1024 (level 0) [ 494.065243][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 494.065263][ C1] EXT4-fs (loop3): initial error at time 1780685506: ext4_get_branch:178: inode 13: block 1024 [ 494.065298][ C1] EXT4-fs (loop3): last error at time 1780685506: ext4_get_branch:178: inode 13: block 1024 [ 494.129878][T15548] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 494.130521][T15548] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2386: bg 0: block 35: padding at end of block bitmap is not set [ 494.454854][T15548] loop3: lost filesystem error report for type 5 error -117 [ 494.455392][T15548] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 494.530738][T15548] loop3: lost filesystem error report for type 5 error -117 [ 494.531654][T15548] EXT4-fs (loop3): 1 truncate cleaned up [ 494.571973][T15564] openvswitch: netlink: ct_state flags 000070b3 unsupported [ 494.592054][T15548] EXT4-fs (loop3): mounted filesystem 0000b300-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.610209][T15560] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 494.995772][T11238] EXT4-fs (loop3): unmounting filesystem 0000b300-0000-0000-0000-000000000000. [ 495.068109][T15566] sctp: [Deprecated]: syz.3.2392 (pid 15566) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.068109][T15566] Use struct sctp_sack_info instead [ 495.182485][T15568] set_capacity_and_notify: 2 callbacks suppressed [ 495.182584][T15568] loop3: detected capacity change from 0 to 512 [ 495.242988][T15568] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.280449][T15568] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 495.298321][T15568] __quota_error: 93 callbacks suppressed [ 495.298399][T15568] Quota error (device loop3): write_blk: dquota write failed [ 495.312316][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 495.312465][ C1] EXT4-fs (loop3): initial error at time 1780685507: ext4_mb_generate_buddy:1317 [ 495.312713][ C1] EXT4-fs (loop3): last error at time 1780685507: ext4_mb_generate_buddy:1317 [ 495.347836][T15568] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 495.360005][T15568] Quota error (device loop3): write_blk: dquota write failed [ 495.369876][T15568] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 495.380692][T15568] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2393: Failed to acquire dquot type 1 [ 495.398358][T15568] loop3: lost filesystem error report for type 5 error -28 [ 495.401728][T15568] EXT4-fs (loop3): 1 truncate cleaned up [ 495.443489][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.478763][T15568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.723184][T15589] FAULT_INJECTION: forcing a failure. [ 495.723184][T15589] name failslab, interval 1, probability 0, space 0, times 0 [ 495.763501][T15589] CPU: 1 UID: 0 PID: 15589 Comm: syz.9.2401 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 495.763536][T15589] Tainted: [W]=WARN [ 495.763542][T15589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.763577][T15589] Call Trace: [ 495.763584][T15589] [ 495.763591][T15589] __dump_stack+0x1d/0x30 [ 495.763613][T15589] dump_stack_lvl+0x95/0xd0 [ 495.763634][T15589] dump_stack+0x15/0x1b [ 495.763650][T15589] should_fail_ex+0x263/0x280 [ 495.763734][T15589] should_failslab+0x8c/0xb0 [ 495.763764][T15589] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 495.763809][T15589] ? __alloc_skb+0x2d6/0x690 [ 495.763831][T15589] __alloc_skb+0x2d6/0x690 [ 495.763851][T15589] ? __alloc_skb+0x200/0x690 [ 495.763867][T15589] netlink_alloc_large_skb+0xbf/0xf0 [ 495.763889][T15589] netlink_sendmsg+0x40c/0x6f0 [ 495.763965][T15589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.763994][T15589] ____sys_sendmsg+0x563/0x5b0 [ 495.764018][T15589] ___sys_sendmsg+0x195/0x1e0 [ 495.764057][T15589] __x64_sys_sendmsg+0xd4/0x160 [ 495.764093][T15589] x64_sys_call+0x194c/0x3020 [ 495.764187][T15589] do_syscall_64+0x12c/0x3b0 [ 495.764217][T15589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.764257][T15589] RIP: 0033:0x7f1cbc28ce59 [ 495.764274][T15589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.764289][T15589] RSP: 002b:00007f1cbacdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.764309][T15589] RAX: ffffffffffffffda RBX: 00007f1cbc505fa0 RCX: 00007f1cbc28ce59 [ 495.764327][T15589] RDX: 000000002000c004 RSI: 0000200000000000 RDI: 0000000000000009 [ 495.764341][T15589] RBP: 00007f1cbacdf090 R08: 0000000000000000 R09: 0000000000000000 [ 495.764436][T15589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.764450][T15589] R13: 00007f1cbc506038 R14: 00007f1cbc505fa0 R15: 00007ffd8051c668 [ 495.764470][T15589] [ 495.993670][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2403'. [ 496.002696][T15594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'. [ 496.017593][T15594] netlink: 'syz.2.2403': attribute type 11 has an invalid length. [ 496.042999][ T5305] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.060746][ T5305] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.087762][ T5305] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.105431][ T5305] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 496.165879][T15604] loop2: detected capacity change from 0 to 512 [ 496.201553][T15604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2407: bg 0: block 127: padding at end of block bitmap is not set [ 496.221213][T15604] loop2: lost filesystem error report for type 5 error -117 [ 496.221616][T15604] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.2407: bit already cleared for inode 11 [ 496.228991][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 496.229008][ C1] EXT4-fs (loop2): initial error at time 1780685508: ext4_validate_block_bitmap:441 [ 496.229035][ C1] EXT4-fs (loop2): last error at time 1780685508: ext4_validate_block_bitmap:441 [ 496.265395][T15604] loop2: lost filesystem error report for type 5 error -117 [ 496.265582][T15604] EXT4-fs (loop2): 1 orphan inode deleted [ 496.278980][T15604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 496.294532][T15604] netlink: 'syz.2.2407': attribute type 3 has an invalid length. [ 496.322478][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.332603][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.375927][T15602] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.416671][T15620] xt_hashlimit: size too large, truncated to 1048576 [ 496.438819][T15622] FAULT_INJECTION: forcing a failure. [ 496.438819][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 496.464925][T15622] CPU: 0 UID: 0 PID: 15622 Comm: syz.3.2414 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 496.464959][T15622] Tainted: [W]=WARN [ 496.464966][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.464979][T15622] Call Trace: [ 496.464986][T15622] [ 496.465001][T15622] __dump_stack+0x1d/0x30 [ 496.465022][T15622] dump_stack_lvl+0x95/0xd0 [ 496.465117][T15622] dump_stack+0x15/0x1b [ 496.465136][T15622] should_fail_ex+0x263/0x280 [ 496.465174][T15622] ? sctp_auth_set_key+0x115/0x4f0 [ 496.465204][T15622] should_failslab+0x8c/0xb0 [ 496.465226][T15622] __kmalloc_cache_noprof+0x5f/0x400 [ 496.465326][T15622] sctp_auth_set_key+0x115/0x4f0 [ 496.465466][T15622] ? should_failslab+0x8c/0xb0 [ 496.465502][T15622] sctp_setsockopt_auth_key+0x2d7/0x3e0 [ 496.465524][T15622] sctp_setsockopt+0x4cc/0xea0 [ 496.465582][T15622] sock_common_setsockopt+0x69/0x80 [ 496.465607][T15622] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 496.465687][T15622] __sys_setsockopt+0x184/0x200 [ 496.465706][T15622] __x64_sys_setsockopt+0x64/0x80 [ 496.465724][T15622] x64_sys_call+0x2327/0x3020 [ 496.465806][T15622] do_syscall_64+0x12c/0x3b0 [ 496.465888][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.465905][T15622] RIP: 0033:0x7fb1d63cce59 [ 496.465918][T15622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.465933][T15622] RSP: 002b:00007fb1d4e1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.465998][T15622] RAX: ffffffffffffffda RBX: 00007fb1d6645fa0 RCX: 00007fb1d63cce59 [ 496.466009][T15622] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 496.466019][T15622] RBP: 00007fb1d4e1f090 R08: 0000000000000009 R09: 0000000000000000 [ 496.466030][T15622] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 496.466040][T15622] R13: 00007fb1d6646038 R14: 00007fb1d6645fa0 R15: 00007ffca117ad98 [ 496.466055][T15622] [ 496.821165][T15644] FAULT_INJECTION: forcing a failure. [ 496.821165][T15644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.834626][T15644] CPU: 1 UID: 0 PID: 15644 Comm: syz.2.2417 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 496.834660][T15644] Tainted: [W]=WARN [ 496.834719][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.834732][T15644] Call Trace: [ 496.834738][T15644] [ 496.834746][T15644] __dump_stack+0x1d/0x30 [ 496.834822][T15644] dump_stack_lvl+0x95/0xd0 [ 496.834843][T15644] dump_stack+0x15/0x1b [ 496.834861][T15644] should_fail_ex+0x263/0x280 [ 496.834961][T15644] should_fail+0xb/0x20 [ 496.835048][T15644] should_fail_usercopy+0x1a/0x20 [ 496.835112][T15644] _copy_from_user+0x1c/0xb0 [ 496.835138][T15644] ___sys_sendmsg+0xc1/0x1e0 [ 496.835175][T15644] __x64_sys_sendmsg+0xd4/0x160 [ 496.835201][T15644] x64_sys_call+0x194c/0x3020 [ 496.835266][T15644] do_syscall_64+0x12c/0x3b0 [ 496.835297][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.835326][T15644] RIP: 0033:0x7f4dcc0ace59 [ 496.835419][T15644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.835453][T15644] RSP: 002b:00007f4dcab07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.835475][T15644] RAX: ffffffffffffffda RBX: 00007f4dcc325fa0 RCX: 00007f4dcc0ace59 [ 496.835497][T15644] RDX: 0000000004084000 RSI: 0000200000000180 RDI: 0000000000000003 [ 496.835526][T15644] RBP: 00007f4dcab07090 R08: 0000000000000000 R09: 0000000000000000 [ 496.835539][T15644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.835550][T15644] R13: 00007f4dcc326038 R14: 00007f4dcc325fa0 R15: 00007fff1a3ae008 [ 496.835570][T15644] [ 497.046922][ T28] audit: type=1400 audit(1780685509.166:5992): avc: denied { write } for pid=15624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.072173][ T28] audit: type=1400 audit(1780685509.186:5993): avc: denied { write } for pid=15647 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.145735][ T28] audit: type=1400 audit(1780685509.296:5994): avc: denied { name_bind } for pid=15658 comm="syz.2.2420" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 497.177016][ T28] audit: type=1400 audit(1780685509.296:5995): avc: denied { write } for pid=15650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.244329][ T28] audit: type=1400 audit(1780685509.396:5996): avc: denied { write } for pid=15669 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.303871][ T28] audit: type=1400 audit(1780685509.456:5997): avc: denied { setattr } for pid=15681 comm="syz.2.2426" name="ns" dev="proc" ino=45098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 497.347665][T15684] netlink: 'syz.9.2427': attribute type 4 has an invalid length. [ 497.361300][T15684] netlink: 'syz.9.2427': attribute type 1 has an invalid length. [ 497.378156][T15684] xt_socket: unknown flags 0x48 [ 497.387890][T15684] netlink: 'syz.9.2427': attribute type 4 has an invalid length. [ 497.390838][T15688] xt_hashlimit: max too large, truncated to 1048576 [ 497.405541][T15688] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 497.927858][T15715] loop9: detected capacity change from 0 to 512 [ 497.984918][T15715] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 498.003219][T15715] EXT4-fs (loop9): 1 truncate cleaned up [ 498.015232][T15715] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.038188][T15729] xt_bpf: check failed: parse error [ 498.101081][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.246306][T15758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 498.275406][T15758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2440'. [ 498.388858][T15763] FAULT_INJECTION: forcing a failure. [ 498.388858][T15763] name failslab, interval 1, probability 0, space 0, times 0 [ 498.402007][T15763] CPU: 0 UID: 0 PID: 15763 Comm: syz.9.2442 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 498.402082][T15763] Tainted: [W]=WARN [ 498.402090][T15763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 498.402100][T15763] Call Trace: [ 498.402105][T15763] [ 498.402112][T15763] __dump_stack+0x1d/0x30 [ 498.402137][T15763] dump_stack_lvl+0x95/0xd0 [ 498.402154][T15763] dump_stack+0x15/0x1b [ 498.402169][T15763] should_fail_ex+0x263/0x280 [ 498.402227][T15763] should_failslab+0x8c/0xb0 [ 498.402315][T15763] __kvmalloc_node_noprof+0x155/0x640 [ 498.402333][T15763] ? __rcu_read_unlock+0x4e/0x70 [ 498.402352][T15763] ? bpf_test_run_xdp_live+0x137/0x1360 [ 498.402429][T15763] bpf_test_run_xdp_live+0x137/0x1360 [ 498.402522][T15763] ? avc_has_perm+0x101/0x190 [ 498.402548][T15763] ? selinux_file_open+0x2e6/0x330 [ 498.402576][T15763] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 498.402628][T15763] ? _copy_from_user+0x89/0xb0 [ 498.402651][T15763] ? bpf_test_init+0xf4/0x130 [ 498.402672][T15763] bpf_prog_test_run_xdp+0x57b/0xa10 [ 498.402718][T15763] ? __rcu_read_unlock+0x4e/0x70 [ 498.402742][T15763] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 498.402768][T15763] bpf_prog_test_run+0x204/0x340 [ 498.402792][T15763] __sys_bpf+0x52e/0x7e0 [ 498.402905][T15763] __x64_sys_bpf+0x41/0x50 [ 498.402922][T15763] x64_sys_call+0x10cb/0x3020 [ 498.402989][T15763] do_syscall_64+0x12c/0x3b0 [ 498.403034][T15763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.403052][T15763] RIP: 0033:0x7f1cbc28ce59 [ 498.403067][T15763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.403081][T15763] RSP: 002b:00007f1cbacdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.403099][T15763] RAX: ffffffffffffffda RBX: 00007f1cbc505fa0 RCX: 00007f1cbc28ce59 [ 498.403136][T15763] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 498.403194][T15763] RBP: 00007f1cbacdf090 R08: 0000000000000000 R09: 0000000000000000 [ 498.403205][T15763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.403216][T15763] R13: 00007f1cbc506038 R14: 00007f1cbc505fa0 R15: 00007ffd8051c668 [ 498.403230][T15763] [ 498.702136][T15766] loop2: detected capacity change from 0 to 256 [ 498.715996][T15766] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 498.842806][T15772] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 498.850833][T15772] FAT-fs (loop2): Filesystem has been set read-only [ 498.861629][T15772] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 498.869721][T15772] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 498.869765][T15772] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 499.026264][T15791] loop4: detected capacity change from 0 to 1024 [ 499.034473][T15791] EXT4-fs: Ignoring removed orlov option [ 499.049819][T15791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 499.076167][T15791] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 499.092678][T15791] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2454: bg 0: block 112: padding at end of block bitmap is not set [ 499.108392][T15791] EXT4-fs (loop4): Remounting filesystem read-only [ 499.222822][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 499.291369][T15819] netlink: 'syz.4.2461': attribute type 322 has an invalid length. [ 499.304860][T15819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1001 sclass=netlink_route_socket pid=15819 comm=syz.4.2461 [ 499.326816][T15820] loop3: detected capacity change from 0 to 4096 [ 499.346178][T15820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.400750][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.413316][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.421177][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.428930][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.436682][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.444135][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.452035][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.459799][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.467369][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.474762][T11742] hid-generic 0103:0004:0000.0005: unknown main item tag 0x0 [ 499.482680][T11742] hid-generic 0103:0004:0000.0005: hidraw0: HID v0.05 Device [syz0] on syz1 [ 499.509564][T15831] fido_id[15831]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 500.150880][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.773958][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 500.773974][ T28] audit: type=1400 audit(1780685512.926:6013): avc: denied { read } for pid=15854 comm="syz.9.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 501.235715][T15864] lo speed is unknown, defaulting to 1000 [ 501.488563][T15865] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2477'. [ 501.499399][T15872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2479'. [ 501.550489][T15864] netlink: 'syz.4.2477': attribute type 21 has an invalid length. [ 501.558482][T15864] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2477'. [ 501.567863][T15864] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2477'. [ 501.909050][T15876] loop2: detected capacity change from 0 to 1024 [ 501.933667][T15876] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 501.942527][T15876] System zones: 0-1, 3-36 [ 501.956533][T15876] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2481: bad orphan inode 134217728 [ 501.967656][T15876] loop2: lost filesystem error report for type 5 error -117 [ 501.969047][T15876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.215716][T15887] nr0: port 1(veth1_virt_wifi) entered blocking state [ 502.223617][T15887] nr0: port 1(veth1_virt_wifi) entered disabled state [ 502.233658][T15887] veth1_virt_wifi: entered allmulticast mode [ 502.241613][T15887] veth1_virt_wifi: entered promiscuous mode [ 502.560394][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.516914][ T28] audit: type=1400 audit(1780685515.676:6014): avc: denied { listen } for pid=15916 comm="syz.2.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 503.698121][ T28] audit: type=1400 audit(1780685515.696:6015): avc: denied { connect } for pid=15908 comm="syz.4.2493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 503.779754][T15923] lo speed is unknown, defaulting to 1000 [ 504.032665][T15923] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2496'. [ 504.107476][T15923] netlink: 'syz.9.2496': attribute type 21 has an invalid length. [ 504.115715][T15923] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2496'. [ 504.125793][T15923] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2496'. [ 504.158661][T15940] pimreg: entered allmulticast mode [ 504.167329][T15940] loop3: detected capacity change from 0 to 256 [ 504.199650][T15940] syz.3.2501: attempt to access beyond end of device [ 504.199650][T15940] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 504.219142][T15940] veth1_to_bond: entered allmulticast mode [ 504.227047][T15940] pimreg: left allmulticast mode [ 504.277746][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2501'. [ 504.332572][T15943] loop4: detected capacity change from 0 to 256 [ 504.340182][T15943] msdos: Bad value for 'uid' [ 504.346088][T15939] veth1_to_bond: left allmulticast mode [ 504.352400][T15943] msdos: Bad value for 'uid' [ 504.388854][T15943] lo speed is unknown, defaulting to 1000 [ 504.690345][ T28] audit: type=1400 audit(1780685516.846:6016): avc: denied { audit_read } for pid=15956 comm="syz.8.2508" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 505.810541][ T28] audit: type=1400 audit(1780685517.966:6017): avc: denied { write } for pid=15973 comm="syz.2.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 505.879990][T15970] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.990492][T15987] loop9: detected capacity change from 0 to 512 [ 505.999054][T15987] FAT-fs (loop9): bogus number of FAT sectors [ 506.005242][T15987] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 506.014376][T15987] FAT-fs (loop9): Can't find a valid FAT filesystem [ 506.060097][T15970] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.093840][T15990] loop9: detected capacity change from 0 to 512 [ 506.113574][T15985] loop3: detected capacity change from 0 to 1024 [ 506.129763][T15985] EXT4-fs: Ignoring removed orlov option [ 506.166800][T15990] EXT4-fs (loop9): 1 orphan inode deleted [ 506.175125][T15990] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.200338][T15989] netlink: 'syz.2.2519': attribute type 322 has an invalid length. [ 506.246036][T15990] bond1: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 506.258056][T15990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.281033][T15985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 506.294502][T15970] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.314711][T15985] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 506.349803][T15978] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2515: bg 0: block 112: padding at end of block bitmap is not set [ 506.368025][T15997] lo speed is unknown, defaulting to 1000 [ 506.380113][T15970] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.397772][T15978] EXT4-fs (loop3): Remounting filesystem read-only [ 506.464197][T10954] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.480215][T10954] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.489273][T10954] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.510541][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 506.523253][T10954] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.602514][T15997] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2520'. [ 506.647524][T15997] netlink: 'syz.2.2520': attribute type 21 has an invalid length. [ 506.655573][T15997] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2520'. [ 506.665529][T15997] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2520'. [ 506.770654][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.846717][ T28] audit: type=1400 audit(1780685518.996:6018): avc: denied { write } for pid=16007 comm="syz.3.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 507.080822][T16010] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 507.104138][T16021] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2527'. [ 507.209715][ T28] audit: type=1400 audit(1780685519.296:6019): avc: denied { read } for pid=16020 comm="syz.8.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 507.355554][ T28] audit: type=1400 audit(1780685519.506:6020): avc: denied { create } for pid=16028 comm="syz.3.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 507.427561][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 507.437228][T16038] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2530'. [ 507.446301][T16038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 507.522029][ T28] audit: type=1400 audit(1780685519.676:6021): avc: denied { mounton } for pid=16049 comm="syz.8.2536" path="/149/file0" dev="tmpfs" ino=805 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 507.546701][T16050] ./file0: Can't lookup blockdev [ 507.687042][T16052] loop2: detected capacity change from 0 to 1024 [ 507.702049][T16052] EXT4-fs: Ignoring removed bh option [ 507.798420][T16052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.233279][T16061] futex_wake_op: syz.9.2538 tries to shift op by 144; fix this program [ 508.311178][T16063] lo speed is unknown, defaulting to 1000 [ 508.569761][T16063] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2539'. [ 508.641221][T16063] netlink: 'syz.9.2539': attribute type 21 has an invalid length. [ 508.652664][T16063] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2539'. [ 508.690121][T16063] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2539'. [ 508.729647][T16082] FAULT_INJECTION: forcing a failure. [ 508.729647][T16082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.743033][T16082] CPU: 1 UID: 0 PID: 16082 Comm: syz.3.2546 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 508.743062][T16082] Tainted: [W]=WARN [ 508.743069][T16082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.743085][T16082] Call Trace: [ 508.743093][T16082] [ 508.743103][T16082] __dump_stack+0x1d/0x30 [ 508.743175][T16082] dump_stack_lvl+0x95/0xd0 [ 508.743222][T16082] dump_stack+0x15/0x1b [ 508.743300][T16082] should_fail_ex+0x263/0x280 [ 508.743329][T16082] should_fail+0xb/0x20 [ 508.743348][T16082] should_fail_usercopy+0x1a/0x20 [ 508.743377][T16082] _copy_from_user+0x1c/0xb0 [ 508.743453][T16082] ___sys_sendmsg+0xc1/0x1e0 [ 508.743497][T16082] __x64_sys_sendmsg+0xd4/0x160 [ 508.743526][T16082] x64_sys_call+0x194c/0x3020 [ 508.743602][T16082] do_syscall_64+0x12c/0x3b0 [ 508.743632][T16082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.743656][T16082] RIP: 0033:0x7fb1d63cce59 [ 508.743674][T16082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.743708][T16082] RSP: 002b:00007fb1d4e1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.743725][T16082] RAX: ffffffffffffffda RBX: 00007fb1d6645fa0 RCX: 00007fb1d63cce59 [ 508.743737][T16082] RDX: 0000000000000800 RSI: 0000200000000880 RDI: 0000000000000003 [ 508.743748][T16082] RBP: 00007fb1d4e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 508.743760][T16082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.743772][T16082] R13: 00007fb1d6646038 R14: 00007fb1d6645fa0 R15: 00007ffca117ad98 [ 508.743835][T16082] [ 509.161049][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.195269][T16091] loop2: detected capacity change from 0 to 512 [ 509.203192][T16091] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2549: inode has both inline data and extents flags [ 509.219772][T16091] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 509.221160][T16091] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2549: couldn't read orphan inode 15 (err -117) [ 509.230341][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 509.230358][ C1] EXT4-fs (loop2): initial error at time 1780685521: ext4_orphan_get:1397: inode 15 [ 509.230384][ C1] EXT4-fs (loop2): last error at time 1780685521: ext4_orphan_get:1397: inode 15 [ 509.267357][T16091] loop2: lost filesystem error report for type 5 error -117 [ 509.267877][T16091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.893810][T16103] xt_hashlimit: max too large, truncated to 1048576 [ 509.900615][T16103] ipt_REJECT: TCP_RESET invalid for non-tcp [ 510.178432][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.195908][T16117] loop4: detected capacity change from 0 to 1764 [ 510.367174][T16121] loop3: detected capacity change from 0 to 1024 [ 510.381556][T16121] EXT4-fs: Ignoring removed bh option [ 510.487334][ T28] audit: type=1400 audit(1780685522.576:6022): avc: denied { kexec_image_load } for pid=16112 comm="syz.4.2557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 510.627567][T16121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.839830][T16134] lo speed is unknown, defaulting to 1000 [ 511.047546][T16137] tipc: Started in network mode [ 511.070925][T16137] tipc: Node identity 7f000001, cluster identity 4711 [ 511.083605][T16137] tipc: Enabled bearer , priority 10 [ 511.291637][T16135] netlink: 'syz.2.2563': attribute type 21 has an invalid length. [ 511.820939][T16156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=16156 comm=syz.9.2569 [ 511.874478][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.004499][T16159] loop3: detected capacity change from 0 to 512 [ 512.289337][ T3391] tipc: Node number set to 2130706433 [ 512.297689][T16159] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2571: inode has both inline data and extents flags [ 512.313608][T16159] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 512.313867][T16159] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2571: couldn't read orphan inode 15 (err -117) [ 512.323081][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 512.323104][ C0] EXT4-fs (loop3): initial error at time 1780685524: ext4_orphan_get:1397: inode 15 [ 512.323157][ C0] EXT4-fs (loop3): last error at time 1780685524: ext4_orphan_get:1397: inode 15 [ 512.360340][T16159] loop3: lost filesystem error report for type 5 error -117 [ 512.382989][T16159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 512.420704][T16170] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20004 [ 512.433854][T16170] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001 [ 512.570270][T16190] FAULT_INJECTION: forcing a failure. [ 512.570270][T16190] name failslab, interval 1, probability 0, space 0, times 0 [ 512.572227][T16189] __nla_validate_parse: 6 callbacks suppressed [ 512.572288][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2581'. [ 512.596027][T16190] CPU: 0 UID: 0 PID: 16190 Comm: syz.9.2582 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 512.596059][T16190] Tainted: [W]=WARN [ 512.596114][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.596125][T16190] Call Trace: [ 512.596134][T16190] [ 512.596143][T16190] __dump_stack+0x1d/0x30 [ 512.596189][T16190] dump_stack_lvl+0x95/0xd0 [ 512.596235][T16190] dump_stack+0x15/0x1b [ 512.596253][T16190] should_fail_ex+0x263/0x280 [ 512.596273][T16190] should_failslab+0x8c/0xb0 [ 512.596343][T16190] __kvmalloc_node_noprof+0x155/0x640 [ 512.596363][T16190] ? path_openat+0x1ab2/0x2050 [ 512.596387][T16190] ? seq_read_iter+0x143/0x940 [ 512.596416][T16190] seq_read_iter+0x143/0x940 [ 512.596496][T16190] ? _parse_integer_limit+0x170/0x190 [ 512.596527][T16190] seq_read+0x279/0x2c0 [ 512.596614][T16190] ? __pfx_seq_read+0x10/0x10 [ 512.596638][T16190] vfs_readv+0x432/0x6e0 [ 512.596716][T16190] do_readv+0xe9/0x210 [ 512.596736][T16190] __x64_sys_readv+0x45/0x50 [ 512.596846][T16190] x64_sys_call+0x27c0/0x3020 [ 512.596869][T16190] do_syscall_64+0x12c/0x3b0 [ 512.596899][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.596920][T16190] RIP: 0033:0x7f1cbc28ce59 [ 512.596936][T16190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.597028][T16190] RSP: 002b:00007f1cbacdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 512.597048][T16190] RAX: ffffffffffffffda RBX: 00007f1cbc505fa0 RCX: 00007f1cbc28ce59 [ 512.597166][T16190] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 512.597179][T16190] RBP: 00007f1cbacdf090 R08: 0000000000000000 R09: 0000000000000000 [ 512.597192][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.597204][T16190] R13: 00007f1cbc506038 R14: 00007f1cbc505fa0 R15: 00007ffd8051c668 [ 512.597221][T16190] [ 512.721589][T16198] loop4: detected capacity change from 0 to 512 [ 512.817069][T16198] EXT4-fs: Ignoring removed nobh option [ 512.829938][T16198] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 512.864124][T16198] EXT4-fs (loop4): 1 truncate cleaned up [ 512.870814][T16198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.983709][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.993473][T16205] loop9: detected capacity change from 0 to 256 [ 513.030578][ T28] audit: type=1400 audit(1780685525.186:6023): avc: denied { ioctl } for pid=16206 comm="syz.2.2587" path="pid:[4026532427]" dev="nsfs" ino=4026532427 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 513.089021][T16210] lo speed is unknown, defaulting to 1000 [ 513.348251][T16210] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2586'. [ 513.418591][T16210] netlink: 'syz.3.2586': attribute type 21 has an invalid length. [ 513.429397][T16210] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2586'. [ 513.440664][T16210] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2586'. [ 513.492062][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.599685][T12445] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 513.612097][T12445] CPU: 0 UID: 0 PID: 12445 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 513.612126][T12445] Tainted: [W]=WARN [ 513.612132][T12445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 513.612143][T12445] Call Trace: [ 513.612151][T12445] [ 513.612204][T12445] __dump_stack+0x1d/0x30 [ 513.612226][T12445] dump_stack_lvl+0x95/0xd0 [ 513.612246][T12445] dump_stack+0x15/0x1b [ 513.612265][T12445] dump_header+0x80/0x240 [ 513.612340][T12445] oom_kill_process+0x295/0x350 [ 513.612490][T12445] out_of_memory+0x97d/0xb80 [ 513.612517][T12445] try_charge_memcg+0x62f/0xa10 [ 513.612587][T12445] charge_memcg+0x6d/0x120 [ 513.612609][T12445] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 513.612635][T12445] __swap_cache_prepare_and_add+0x69/0x4a0 [ 513.612724][T12445] ? alloc_pages_mpol+0x217/0x260 [ 513.612752][T12445] swap_cache_alloc_folio+0xa2/0x120 [ 513.612878][T12445] swap_cluster_readahead+0x25f/0x3c0 [ 513.612908][T12445] swapin_readahead+0xde/0x840 [ 513.612931][T12445] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 513.612973][T12445] ? hrtimer_start_range_ns+0x58c/0x10a0 [ 513.613110][T12445] ? __rcu_read_unlock+0x4e/0x70 [ 513.613190][T12445] ? swap_cache_get_folio+0x1e0/0x1f0 [ 513.613212][T12445] do_swap_page+0x31e/0x2180 [ 513.613234][T12445] ? __schedule+0x951/0xd40 [ 513.613329][T12445] ? __rcu_read_lock+0x36/0x50 [ 513.613349][T12445] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 513.613374][T12445] handle_mm_fault+0xb30/0x2e70 [ 513.613401][T12445] ? vma_start_read+0x1c7/0x2c0 [ 513.613450][T12445] do_user_addr_fault+0x62f/0x1050 [ 513.613478][T12445] ? trace_page_fault_user+0x1f/0xa0 [ 513.613548][T12445] exc_page_fault+0x62/0xa0 [ 513.613572][T12445] asm_exc_page_fault+0x26/0x30 [ 513.613593][T12445] RIP: 0033:0x7f5ad7847fd7 [ 513.613609][T12445] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 513.613699][T12445] RSP: 002b:00007ffc8fcac0c0 EFLAGS: 00010202 [ 513.613717][T12445] RAX: 0000000000000000 RBX: 000055556a344500 RCX: 00007f5ad7847fd7 [ 513.613732][T12445] RDX: 00007ffc8fcac100 RSI: 0000000000000000 RDI: 0000000000000000 [ 513.613745][T12445] RBP: 00007ffc8fcac16c R08: 0000000000000000 R09: 0000000000000000 [ 513.613759][T12445] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 513.613773][T12445] R13: 00000000000927c0 R14: 000000000007d325 R15: 00007ffc8fcac1c0 [ 513.613824][T12445] [ 513.613989][T12445] memory: usage 307200kB, limit 307200kB, failcnt 269 [ 513.864964][T12445] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 513.873005][T12445] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 513.880328][T12445] Memory cgroup stats for /syz8: [ 513.880590][T12445] cache 4096 [ 513.888773][T12445] rss 0 [ 513.891581][T12445] shmem 0 [ 513.894515][T12445] mapped_file 10416128 [ 513.898606][T12445] dirty 0 [ 513.901590][T12445] writeback 0 [ 513.904872][T12445] workingset_refault_anon 43 [ 513.909838][T12445] workingset_refault_file 1 [ 513.914536][T12445] swap 204800 [ 513.917905][T12445] swapcached 8654848 [ 513.921799][T12445] pgpgin 329379 [ 513.925247][T12445] pgpgout 329378 [ 513.928900][T12445] pgfault 349904 [ 513.932733][T12445] pgmajfault 12 [ 513.936203][T12445] inactive_anon 0 [ 513.940151][T12445] active_anon 0 [ 513.943608][T12445] inactive_file 4096 [ 513.947917][T12445] active_file 0 [ 513.951395][T12445] unevictable 0 [ 513.954952][T12445] hierarchical_memory_limit 314572800 [ 513.960164][T16232] loop4: detected capacity change from 0 to 512 [ 513.960635][T12445] hierarchical_memsw_limit 9223372036854771712 [ 513.972891][T12445] total_cache 4096 [ 513.976804][T12445] total_rss 0 [ 513.976812][T12445] total_shmem 0 [ 513.976819][T12445] total_mapped_file 10416128 [ 513.976879][T12445] total_dirty 0 [ 513.976886][T12445] total_writeback 0 [ 513.976894][T12445] total_workingset_refault_anon 43 [ 513.976902][T12445] total_workingset_refault_file 1 [ 513.976909][T12445] total_swap 204800 [ 513.976916][T12445] total_swapcached 8654848 [ 513.976922][T12445] total_pgpgin 329379 [ 513.976929][T12445] total_pgpgout 329378 [ 513.987991][T16232] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2595: inode has both inline data and extents flags [ 513.996514][T12445] total_pgfault 349904 [ 514.001635][T16232] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.042242][T12445] total_pgmajfault 12 [ 514.057732][T16232] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2595: couldn't read orphan inode 15 (err -117) [ 514.069803][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 514.069829][ C0] EXT4-fs (loop4): initial error at time 1780685526: ext4_orphan_get:1397: inode 15 [ 514.069855][ C0] EXT4-fs (loop4): last error at time 1780685526: ext4_orphan_get:1397: inode 15 [ 514.100092][T16237] loop3: detected capacity change from 0 to 512 [ 514.106553][T12445] total_inactive_anon 0 [ 514.110867][T12445] total_active_anon 0 [ 514.133208][T12445] total_inactive_file 4096 [ 514.138613][T16237] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2597: inode has both inline data and extents flags [ 514.145217][T16232] loop4: lost filesystem error report for type 5 error -117 [ 514.151934][T12445] total_active_file 0 [ 514.155416][T16237] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 514.159925][T16232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.170899][T16237] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2597: couldn't read orphan inode 15 (err -117) [ 514.172654][T12445] total_unevictable 0 [ 514.184820][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 514.207006][ C0] EXT4-fs (loop3): initial error at time 1780685526: ext4_orphan_get:1397: inode 15 [ 514.216398][ C0] EXT4-fs (loop3): last error at time 1780685526: ext4_orphan_get:1397: inode 15 [ 514.216757][T12445] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2584,pid=16201,uid=0 [ 514.237736][T16237] loop3: lost filesystem error report for type 5 error -117 [ 514.251321][T12445] Memory cgroup out of memory: Killed process 16201 (syz.8.2584) total-vm:96352kB, anon-rss:1236kB, file-rss:32508kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 514.322316][T16237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.541266][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 514.554006][T16247] xt_hashlimit: max too large, truncated to 1048576 [ 514.561127][T16247] ipt_REJECT: TCP_RESET invalid for non-tcp [ 514.586240][T16248] loop9: detected capacity change from 0 to 512 [ 514.657294][T16248] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 514.686788][T16248] EXT4-fs (loop9): orphan cleanup on readonly fs [ 514.724944][T16248] Quota error (device loop9): dq_insert_tree: Quota tree root isn't allocated! [ 514.880066][T16248] Quota error (device loop9): qtree_write_dquot: Error -5 occurred while creating quota [ 514.903117][T16248] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2598: Failed to acquire dquot type 1 [ 514.915703][T16248] loop9: lost filesystem error report for type 5 error -5 [ 514.916427][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 514.930010][ C0] EXT4-fs (loop9): initial error at time 1780685527: ext4_acquire_dquot:7034 [ 514.938805][ C0] EXT4-fs (loop9): last error at time 1780685527: ext4_acquire_dquot:7034 [ 514.948440][T16248] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2598: bg 0: block 40: padding at end of block bitmap is not set [ 514.963627][T16248] loop9: lost filesystem error report for type 5 error -117 [ 514.963806][T16248] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 515.027945][T16248] loop9: lost filesystem error report for type 5 error -117 [ 515.028209][T16248] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #16: comm syz.9.2598: data will be lost [ 515.092544][T16248] EXT4-fs (loop9): 1 truncate cleaned up [ 515.105889][T16248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 515.190026][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.213384][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.230691][T16258] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 515.239683][T16258] tipc: Enabled bearer , priority 10 [ 515.256845][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 515.267456][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 515.279967][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.314357][ T28] audit: type=1400 audit(1780685527.466:6024): avc: denied { write } for pid=16265 comm="syz.4.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 515.424514][T16275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2604'. [ 515.452913][ T28] audit: type=1400 audit(1780685527.586:6025): avc: denied { accept } for pid=16265 comm="syz.4.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 515.583497][T16279] xt_hashlimit: size too large, truncated to 1048576 [ 515.632960][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2609'. [ 515.642061][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2609'. [ 515.654692][T16280] loop9: detected capacity change from 0 to 256 [ 516.024380][T16288] loop9: detected capacity change from 0 to 512 [ 516.038754][T16288] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.051872][T16291] loop2: detected capacity change from 0 to 256 [ 516.076725][T16288] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.2612: Allocating blocks 41-42 which overlap fs metadata [ 516.090864][T16288] loop9: lost filesystem error report for type 5 error -117 [ 516.091119][T16288] Quota error (device loop9): write_blk: dquota write failed [ 516.098454][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 516.098472][ C1] EXT4-fs (loop9): initial error at time 1780685528: ext4_mb_mark_diskspace_used:4222 [ 516.098499][ C1] EXT4-fs (loop9): last error at time 1780685528: ext4_mb_mark_diskspace_used:4222 [ 516.131435][T16288] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 516.140579][T16288] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4222: comm syz.9.2612: Allocating blocks 41-42 which overlap fs metadata [ 516.154943][T16288] loop9: lost filesystem error report for type 5 error -117 [ 516.163751][T16288] Quota error (device loop9): write_blk: dquota write failed [ 516.186517][T16288] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 516.207194][T16288] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.2612: Failed to acquire dquot type 1 [ 516.242171][T16299] loop3: detected capacity change from 0 to 512 [ 516.290733][T16288] loop9: lost filesystem error report for type 5 error -117 [ 516.370937][T16304] loop2: detected capacity change from 0 to 512 [ 516.512800][T16308] EXT4-fs: Ignoring removed i_version option [ 516.551254][T16288] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 516.578606][T16308] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.611971][T16299] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2614: inode has both inline data and extents flags [ 516.658829][T16304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.660256][T16288] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.2612: corrupted inode contents [ 516.684097][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 516.684330][T16299] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 516.697784][T16288] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #12: comm syz.9.2612: mark_inode_dirty error [ 516.706976][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 516.707010][ C0] EXT4-fs (loop3): initial error at time 1780685528: ext4_orphan_get:1397: inode 15 [ 516.707049][ C0] EXT4-fs (loop3): last error at time 1780685528: ext4_orphan_get:1397: inode 15 [ 516.743631][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 516.743895][T16299] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2614: couldn't read orphan inode 15 (err -117) [ 516.765430][T16299] loop3: lost filesystem error report for type 5 error -117 [ 516.769046][T16288] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.2612: corrupted inode contents [ 516.789193][T16299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.824191][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 516.824500][T16288] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.2612: mark_inode_dirty error [ 516.848551][T16308] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.2618: Allocating blocks 41-42 which overlap fs metadata [ 516.862420][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 516.862687][T16288] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.2612: corrupted inode contents [ 516.892662][T16308] loop4: lost filesystem error report for type 5 error -117 [ 516.892925][T16308] Quota error (device loop4): write_blk: dquota write failed [ 516.900355][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 516.900377][ C0] EXT4-fs (loop4): initial error at time 1780685529: ext4_mb_mark_diskspace_used:4222 [ 516.900402][ C0] EXT4-fs (loop4): last error at time 1780685529: ext4_mb_mark_diskspace_used:4222 [ 516.996040][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.011454][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 517.011845][T16288] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 517.048049][T16288] loop9: lost filesystem error report for type 5 error -117 [ 517.048275][T16288] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.2612: corrupted inode contents [ 517.068429][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 517.069177][T16308] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2618: Failed to acquire dquot type 1 [ 517.078801][T16288] EXT4-fs error (device loop9): ext4_truncate:4690: inode #12: comm syz.9.2612: mark_inode_dirty error [ 517.106045][T16308] loop4: lost filesystem error report for type 5 error -117 [ 517.106121][T16288] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 517.122203][T16308] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 517.133071][T16288] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 517.155357][T16288] EXT4-fs (loop9): 1 truncate cleaned up [ 517.157016][T16323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.161671][T16288] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.180873][T16308] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2618: corrupted inode contents [ 517.200457][T16323] ext4 filesystem being mounted at /84/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.204090][T16288] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.2612: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 517.220531][T16308] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 517.231863][T16308] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.2618: mark_inode_dirty error [ 517.256376][T16308] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 517.259715][T16308] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2618: corrupted inode contents [ 517.281472][T16308] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.2618: mark_inode_dirty error [ 517.293097][T16308] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2618: corrupted inode contents [ 517.305218][T16308] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 517.314154][T16308] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.2618: corrupted inode contents [ 517.326471][T16308] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.2618: mark_inode_dirty error [ 517.340453][T16308] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 517.354601][T16308] EXT4-fs (loop4): 1 truncate cleaned up [ 517.361090][T16308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.406710][T16332] xt_hashlimit: size too large, truncated to 1048576 [ 517.407702][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.422619][T15380] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:19: Failed to release dquot type 1 [ 517.504387][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.527940][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.563107][T16339] netlink: 'syz.3.2623': attribute type 10 has an invalid length. [ 517.590807][T16334] FAT-fs (loop4): FAT read failed (blocknr 128) [ 517.628390][T15380] Bluetooth: hci0: Frame reassembly failed (-84) [ 517.640339][T16345] __nla_validate_parse: 2 callbacks suppressed [ 517.640354][T16345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2624'. [ 517.963921][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.987878][T16365] set_capacity_and_notify: 3 callbacks suppressed [ 517.987907][T16365] loop4: detected capacity change from 0 to 512 [ 518.070635][T16365] EXT4-fs: Ignoring removed bh option [ 518.076168][T16365] EXT4-fs: inline encryption not supported [ 518.082639][T16365] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 518.097638][T16365] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 518.112550][T16365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2629: bg 0: block 248: padding at end of block bitmap is not set [ 518.127456][T16365] __quota_error: 132 callbacks suppressed [ 518.127468][T16365] Quota error (device loop4): write_blk: dquota write failed [ 518.136348][T16367] loop2: detected capacity change from 0 to 32768 [ 518.140610][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 518.140627][ C0] EXT4-fs (loop4): last error at time 1780685530: ext4_validate_block_bitmap:441 [ 518.140682][T16365] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 518.172668][T16365] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.2629: Failed to acquire dquot type 1 [ 518.184562][T16365] EXT4-fs (loop4): 1 truncate cleaned up [ 518.187478][T16367] loop2: p1 p2 p3 < p5 p6 > [ 518.190727][T16365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 518.196153][T16367] loop2: p2 size 16775168 extends beyond EOD, truncated [ 518.215973][T16367] loop2: p5 start 4294970168 is beyond EOD, truncated [ 518.310477][T16373] loop2: detected capacity change from 0 to 512 [ 518.321158][T16373] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2633: inode has both inline data and extents flags [ 518.334845][T16373] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2633: couldn't read orphan inode 15 (err -117) [ 518.346721][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 518.346739][ C0] EXT4-fs (loop2): initial error at time 1780685530: ext4_orphan_get:1397: inode 15 [ 518.346763][ C0] EXT4-fs (loop2): last error at time 1780685530: ext4_orphan_get:1397: inode 15 [ 518.373142][T16373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.490047][T16376] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 518.497688][T16376] vhci_hcd vhci_hcd.0: invalid port number 255 [ 518.508145][T16376] netlink: 'syz.9.2634': attribute type 10 has an invalid length. [ 518.562774][ T28] audit: type=1400 audit(1780685530.716:6155): avc: denied { write } for pid=16375 comm="syz.9.2634" name="file0" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 518.596003][ T28] audit: type=1400 audit(1780685530.716:6156): avc: denied { open } for pid=16375 comm="syz.9.2634" path="/132/file0" dev="tmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 518.639239][ T28] audit: type=1400 audit(1780685530.776:6157): avc: denied { ioctl } for pid=16375 comm="syz.9.2634" path="/132/file0" dev="tmpfs" ino=729 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 518.664514][T16378] loop9: detected capacity change from 0 to 512 [ 518.671964][T16378] EXT4-fs: old and new quota format mixing [ 518.727254][T16376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.736716][T16376] team0: Port device bond0 added [ 518.761136][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.823390][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 518.840547][T16384] tipc: Started in network mode [ 518.851531][T16384] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 518.874205][T16384] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 518.888001][T16384] tipc: Enabled bearer , priority 10 [ 518.895929][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 518.916134][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2636'. [ 518.995016][T16396] loop2: detected capacity change from 0 to 1024 [ 518.997321][T16398] loop4: detected capacity change from 0 to 512 [ 519.014069][T16396] EXT4-fs: Ignoring removed orlov option [ 519.108491][T16398] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.2637: inode has both inline data and extents flags [ 519.134514][T16396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 519.157009][T16398] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2637: couldn't read orphan inode 15 (err -117) [ 519.168988][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 519.169013][ C1] EXT4-fs (loop4): initial error at time 1780685531: ext4_orphan_get:1397: inode 15 [ 519.169045][ C1] EXT4-fs (loop4): last error at time 1780685531: ext4_orphan_get:1397: inode 15 [ 519.172516][T16396] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.183238][T16398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.208653][T16396] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2642: bg 0: block 112: padding at end of block bitmap is not set [ 519.300193][T16407] loop9: detected capacity change from 0 to 1024 [ 519.323622][T16407] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 519.391759][T16396] EXT4-fs (loop2): Remounting filesystem read-only [ 519.590806][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2644'. [ 519.612299][T16407] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.406506][ T6224] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 520.436537][ T9835] tipc: Node number set to 1 [ 520.437575][T16414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2637'. [ 520.451799][ T28] audit: type=1326 audit(1780685532.606:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.3.2623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1d638d68e code=0x7ffc0000 [ 520.457012][T16414] xt_hashlimit: max too large, truncated to 1048576 [ 520.484088][T16414] ipt_REJECT: TCP_RESET invalid for non-tcp [ 520.538690][ T28] audit: type=1326 audit(1780685532.696:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.3.2623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d63cce59 code=0x7ffc0000 [ 520.689853][ T28] audit: type=1326 audit(1780685532.726:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16338 comm="syz.3.2623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb1d638d68e code=0x7ffc0000 [ 521.374701][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 521.419931][ T28] audit: type=1400 audit(1780685533.556:6161): avc: denied { ioctl } for pid=16423 comm="syz.3.2648" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=48254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 521.458291][T11780] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.501121][T16431] loop2: detected capacity change from 0 to 512 [ 521.510848][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.528640][T16431] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2645: inode has both inline data and extents flags [ 521.556429][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 521.562894][ C0] EXT4-fs (loop2): initial error at time 1780685533: ext4_orphan_get:1397: inode 15 [ 521.564685][T16431] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2645: couldn't read orphan inode 15 (err -117) [ 521.572317][ C0] EXT4-fs (loop2): last error at time 1780685533: ext4_orphan_get:1397: inode 15 [ 521.609618][T16431] fserror_report: 8 callbacks suppressed [ 521.609666][T16431] loop2: lost filesystem error report for type 5 error -117 [ 521.616302][T16431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.645956][T16434] ªªªªªª: renamed from vlan0 [ 521.717515][T16446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2654'. [ 521.739714][T16434] loop3: detected capacity change from 0 to 4096 [ 521.742483][T16434] EXT4-fs: inline encryption not supported [ 521.754459][T16448] netlink: 'syz.4.2655': attribute type 322 has an invalid length. [ 521.764588][T16434] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 521.856907][ T28] audit: type=1326 audit(1780685534.016:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.4.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c61bce59 code=0x7ffc0000 [ 521.904403][T16453] loop4: detected capacity change from 0 to 128 [ 522.028669][T16455] lo speed is unknown, defaulting to 1000 [ 522.071677][T13879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.104695][T16458] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 522.114453][T16458] FAT-fs (loop4): Filesystem has been set read-only [ 522.188460][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2660'. [ 522.259765][T16469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.265751][T16455] netlink: 168 bytes leftover after parsing attributes in process `syz.9.2658'. [ 522.280954][T16469] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 522.342702][T16458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.412358][T16455] netlink: 'syz.9.2658': attribute type 21 has an invalid length. [ 522.421523][T16455] netlink: 128 bytes leftover after parsing attributes in process `syz.9.2658'. [ 522.432824][T16455] netlink: 3 bytes leftover after parsing attributes in process `syz.9.2658'. [ 522.457114][T16484] netlink: 'syz.8.2666': attribute type 322 has an invalid length. [ 522.479976][T11144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.551808][T16486] gretap2: entered allmulticast mode [ 522.608317][T16470] ================================================================== [ 522.616438][T16470] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 522.624523][T16470] [ 522.626837][T16470] write to 0xffff8881214ffe20 of 8 bytes by task 16476 on cpu 1: [ 522.634536][T16470] filemap_splice_read+0x523/0x780 [ 522.639831][T16470] splice_direct_to_actor+0x26e/0x670 [ 522.645199][T16470] do_splice_direct+0x119/0x1a0 [ 522.650055][T16470] do_sendfile+0x382/0x650 [ 522.654475][T16470] __x64_sys_sendfile64+0x105/0x150 [ 522.659670][T16470] x64_sys_call+0x2dc4/0x3020 [ 522.664344][T16470] do_syscall_64+0x12c/0x3b0 [ 522.668938][T16470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.674823][T16470] [ 522.677140][T16470] write to 0xffff8881214ffe20 of 8 bytes by task 16470 on cpu 0: [ 522.684846][T16470] filemap_splice_read+0x523/0x780 [ 522.689964][T16470] splice_direct_to_actor+0x26e/0x670 [ 522.695336][T16470] do_splice_direct+0x119/0x1a0 [ 522.700186][T16470] do_sendfile+0x382/0x650 [ 522.704600][T16470] __x64_sys_sendfile64+0x105/0x150 [ 522.709794][T16470] x64_sys_call+0x2dc4/0x3020 [ 522.714475][T16470] do_syscall_64+0x12c/0x3b0 [ 522.719072][T16470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.724966][T16470] [ 522.727285][T16470] value changed: 0x0000000000002fed -> 0x0000000000002fee [ 522.734383][T16470] [ 522.736697][T16470] Reported by Kernel Concurrency Sanitizer on: [ 522.742835][T16470] CPU: 0 UID: 0 PID: 16470 Comm: syz.3.2663 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 522.753765][T16470] Tainted: [W]=WARN [ 522.757574][T16470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.767622][T16470] ================================================================== [ 523.222431][T11238] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.