last executing test programs: 4m19.905821328s ago: executing program 32 (id=285): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000004, &(0x7f0000000c00)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@grpid}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x477, &(0x7f0000000780)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10cd0e0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m52.199086648s ago: executing program 33 (id=890): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, @perf_bp={0x0, 0x8}, 0x214, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m42.822600453s ago: executing program 34 (id=1011): syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)) ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) preadv2(r0, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1000000000000094, 0x1000, 0x4005, 0x8) 3m32.339088642s ago: executing program 35 (id=1239): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x40, {{@in, @in=@local, 0x0, 0x0, 0x0, 0x200, 0x2, 0x20, 0x0, 0x18}, {0x0, 0x7, 0xfffffffffffffffd, 0x2, 0x1000000, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28602, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010007200000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000000c0)) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_int(r1, &(0x7f0000000240)=0x2, 0x12) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3c7) 3m26.419120346s ago: executing program 36 (id=1335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000003c0)='./file0\x00', 0x200000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYBLOB="2229e4daa91ec6fa6fd7ca657a9d9f0446f4bbdff89e6765851a5d70b519b302033dd5cbb4d27206c473f94fae84697ab284df33b0630899a5df9e5ce7324342fc20de8fb31fb199caf1595de9aa6509e782ac930a0d5c829089bd4da31bc036392c3206cf9cc114d440114fc43209674f8b4364791569a55b9974f251f78edc4a6b911bde5ace78f844e62ce270ec0a8149fae1d7d9485b87d35518691b74d1ca2256b2827dd43da0b0b69c8b3dc3caf243fb571c3a2f82ad6c3a570eb32d8862a3e399", @ANYBLOB="261fb61f7fa8df3110a5f5c53ddf67660b95dbe2472304e2600fa2d6d38759bcd4adaf188f447131ef2ae4263d98018a2c9f2a0836f14ea40e6648d4bce2126080bf4d4c5b45349e571b194c576f0db70d9b3e0425fb17e2c629fe29efbec3f3a7bfeb6d616b59eff7b9ecc54b0bb5d30cb3ac2c057047b150f136cb18768f635a51fe722baf217d296dfe54b41b4f5d025f3f5796e0392cb908c463f461f45e1712c7ea1ac353262114a1283f57a0711bbe4adb71661ab755623d4b93d8f65da63171ff38f1ffd18c149ff0", @ANYRES64, @ANYRES8], 0x4, 0x301, &(0x7f0000000080)="$eJzs3c9rE00YwPEnSdMk7du3Pby8iCgMFUSRLm3AmweLtCAGlLYRrCBs7VZDtklJQiEitoLg1bOHHjyKIII3LyJee/EvUOutl97soTiy2R/NjzWmlbRVv59D8jQzz850Z9LSaXZ288KTxfxCUkQiElDOQ1Ri3percvb92qeT0+/+8YrV5PjMWFqpqIjcvP9i+G2l//rrf98kZH3o1uZW+sv6iRmRbzN3JapyZVXQWplqrlisOE2o+Vw5byh1zbbMsqVyhbJVqnjl5pxtqQW7uLRUVWZhfqBvqWSVy8osVFXeqqpKUVVKVWXeMXMFZRiGGugTiMhQEEVbyiLtErPPt7WWLa21TqyK1jqk9qofxL3nxK91FkdJ0/i3rdsyOWLd7BkOwrbu6Xj88edx3/+fn3Y2/nrlgLqFAzJ9Y/bKeCYzMaVUUmTx8XJ2Oes+u+Uf+yUntliyNnVudkecOeKRiPM4eTkzMapqhuT04oqXv7KcdX85jC/U8jf8pLp88fPH3HzVmB+Xvt18S9IyKP9JaH7az5doXX6vnDlVl2/IoHy4LUWxZd6ZyXX5D8aUunQ109R+qlavzsNDGB4AAAAAAAAAAPbFUIHd9ftI8K/elGEkap/4CMpTzstOPbdCsL4+KoOyE74+Pxq6vt8jx3sO8RsHAAAAAOAvUq7ey5u2bZW6E8Sepdo0ETdEnEDk0bDTmbYH/N/rcWet94pIa1GsfRMNQeq8297LKa9j0s0T5QfJPfQwJPAv1sibO6/8opSEVY7uaQKM9Iae+WQpIl2dPw2BdFJZkvub2ImOp1ZzEAvaOhZaR0d+fhxt2nH3FQlGsH3WxT29HX4YJJtP1MiGe1y7zQ+Nr8ESHwAAAIDfSN0fTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JAE1/9HvDv9d7J5mL9vf2OReLeIb92Srfk+8ez7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAI+h4AAP//0fmz5A==") rt_sigqueueinfo(0x0, 0x29, &(0x7f0000000000)={0x1b, 0x9, 0x9}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000780)={0xa2}, 0x1) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x43f6, 0x3, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000041000000180100002020732500000000002020207b1ff8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xb34, &(0x7f0000000400)={0x0, 0x10086f3, 0x2, 0x0, 0x2df}, &(0x7f0000000000), &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="0b0000000000000002004e24ac1e0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e23e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14142b00000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/529], 0x210) fstat(r0, &(0x7f0000000680)) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 3m26.143613562s ago: executing program 37 (id=1339): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast1, 0x0, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9a82, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000), 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x18240, 0x101) r2 = openat(r1, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='c *:', @ANYRESDEC], 0x22) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@migrate={0x6c, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r4}}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd25, 0x80000001}}, @offload={0xc, 0x1c, {r3}}]}, 0x6c}}, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040)) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[], 0x69) r11 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r12 = dup(r11) r13 = memfd_create(&(0x7f0000002600)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ftruncate(r13, 0xdcb) copy_file_range(r13, 0x0, r12, 0x0, 0x7, 0x0) connect$inet(r5, &(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10) 3m15.896407267s ago: executing program 38 (id=1514): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x10, 0x14, 0x2, 0x3, 0x0, 0x0, 0x6, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delrule={0x1c, 0x21, 0x200, 0x70bd26, 0x25dfdbff, {0x2, 0x10, 0x14, 0x2, 0x3, 0x0, 0x0, 0x6, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) (async) 2m55.616897405s ago: executing program 39 (id=1782): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, @perf_bp={0x0, 0x8}, 0x214, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r1, 0x0, 0x0, 0x40000002, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m51.983063456s ago: executing program 40 (id=1837): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf000}, 0x1e) 2m51.57810266s ago: executing program 41 (id=1845): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001280)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="7d8fbcf0827ec236cae74668a89b20c7a335", 0x12}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)="90507781dd3d70647c0634dd", 0xc}], 0x1}}], 0x3, 0x28048005) 2m43.654299821s ago: executing program 42 (id=1951): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000b00160000000000030000008500000036000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m41.613059699s ago: executing program 43 (id=1972): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000108efffffffffffffff00000000", @ANYRES32=0x0, @ANYBLOB="000900006440000008001b0000000000050010000467d3b6b81cf0"], 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 2m37.668513968s ago: executing program 44 (id=2004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000b00110000000000030000008500000036000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m35.303712056s ago: executing program 45 (id=2028): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x3c7) 2m30.271708618s ago: executing program 46 (id=2069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2}, {}, 0x7, 0x2000000}, [@XFRMA_IF_ID={0x8, 0x1f, 0x12}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8224, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000120000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 2m29.869451472s ago: executing program 47 (id=2075): r0 = syz_open_dev$loop(&(0x7f0000000080), 0xffff, 0x14f600) ioctl$LOOP_CONFIGURE(r0, 0xc0c0128e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x9, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea88de2b7fb0000e60090ba785d96eb760000000000309800e400", "280500000000910000224ad54afac11dfdb8acb9dab45f301f000000000000005f819e01177d3d558dd499286173e5db8900170000000400001000", "f4bd00000080190000f9000000000000000000000000000003004c00", [0x10001fffc, 0x8000000000000003]}}) 2m28.836700132s ago: executing program 48 (id=2084): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x11, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x9092, 0x0, 0x43a1bd76, 0x0, 0xa, 0x6, 0x5, 0x0, 0x0, 0x0, 0x46}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x422002, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB='b *'], 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) close_range(r2, r4, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}, 0x1, 0x1000000, 0x0, 0x40488d5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000180), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000600)=[@in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}, 0x4007, 0x6}, 0x90) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000f1401007870d6e97eb062d21100450069625f6d756c74696361737400000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) ioctl$FS_IOC_FIEMAP(r11, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="03b6e225143a3a42002fe6d3000000000000000000355e7339610642e8866fdc1da9ba00000000c0ffff06000000030000000100000000000000020000000000000006000000000000000100000000000000000000000000000000000000000000000600"]) fsconfig$FSCONFIG_SET_FLAG(r9, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r12, 0x0) 2m26.464213079s ago: executing program 49 (id=2103): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}, 0x1, 0x4000000}, 0x0) 2m22.619860343s ago: executing program 50 (id=2112): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x12100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x20000000000}, 0x50, 0x1, 0x0, 0x0, 0x1c, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000000)={'a', ' *:* ', 'rw\x00'}, 0x9) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\tw', @ANYBLOB='w'], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) sendto(r2, 0x0, 0x0, 0xc00d0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f00000000c0)=0x2) ioctl$USBDEVFS_FREE_STREAMS(r5, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = syz_open_dev$usbfs(&(0x7f0000000140), 0x2, 0x210202) ioctl$USBDEVFS_DROP_PRIVILEGES(r7, 0x4004551e, &(0x7f00000002c0)=0x4) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m19.794261167s ago: executing program 7 (id=2135): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x198, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_simple={0x4c, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0x1d, 0x6, "c92acebef543cf5eac95ff99fd6f0f8ca3945cf1e27303fef4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, {0x134, 0x1, [@m_simple={0x104, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x40000000, 0x0, 0x9}}]}, {0xb4, 0x6, "3ac47d8f66b9ada606aa60a7fc99c95c9fbb58402dd443e92602f7994c557e40094500a136bb53cc323abe8e9a032feb3b1811b3f9149f6f05ff436ae121782b9f13ed2deb3fee8a17863c1d88b38005a4604a93ebbc213530b8e07f71d1175d1580cb57e68478f9edf7f8e766c01a7ba01dde9f5efc04e3eb55e8d86d594f207de74400f37d97ac2edd9679a28a6d5d37c8f9ba5b04948e6430ab3a406dc245121481beaaa9593cd5449ffcce2ab15c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x2c, 0x17, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080) syz_emit_ethernet(0x22, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf808004502001400671a0002679078ac14140d7f000001"], 0x0) r0 = socket(0x10, 0x803, 0x0) process_vm_writev(0x0, &(0x7f0000000500)=[{0x0}, {0xffffffffffffffff}, {0xfffffffffffffffc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) unshare(0x8000280) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff08) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x5a, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0281000700000d030000c037020000dadc183124d119d097083e7758b091a84657c75bb9dea99b6e87dbdd04ca963d4bedd41f5e4acdc4f33001591a663bcebe06ec1c41da543c06b808e851"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3218f72e}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xc1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f00000006c0)={[{@sysvgroups}, {@noblock_validity}, {@nolazytime}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fowner_gt}, {@obj_user={'obj_user', 0x3d, ','}}, {@obj_role={'obj_role', 0x3d, '.)^'}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000500)={'filter\x00', 0x0, [0x7f, 0x7, 0x20000004, 0x5, 0x100000c]}, &(0x7f0000000040)=0x54) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r5, &(0x7f0000003f80)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000007fffffff00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xb}, {&(0x7f0000000080)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f0000000240)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x93, 0x1, 0x0, [{@broadcast}, {}, {@private}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000009c0)='R', 0x1}], 0x1}}], 0x4, 0xc080) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r6, &(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x100b) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x31d043, 0x0) lseek(r9, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 2m19.184364243s ago: executing program 7 (id=2148): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getdents64(r2, &(0x7f0000000100)=""/208, 0xd0) unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x200) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b80000001500e999"], 0xb8}}, 0x0) 2m19.136322195s ago: executing program 2 (id=2149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x20, r1, 0x6966c132ee9ca8e5, 0x70bd2a, 0x25df5bfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x20048010) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffd000/0x3000)=nil) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="37cdbaf272daf2f0f6a1d648ba38fe00066c82cca2fd0af6c5946562412e67af4a262a6ee2b5cadd048850f988fd10ed18a37c17bf119d25a9250b7fd9e0ae00c3dd2051b3b124a3c503394f5f45f820bbaf", @ANYRESHEX=r4, @ANYRESDEC=r4], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_socket_connect_nvme_tcp() syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r9, @ANYBLOB="00000016010000001800120008000100736974000c00020008"], 0x38}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000100039042cbd7000eaffffff000003e4", @ANYRES32=r9, @ANYBLOB="001100000000000040001280080001007369740034000280050009002900000008000200ac1414bb08000c000000010006000d00", @ANYRES8], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) recvmsg$inet_nvme(r6, &(0x7f0000001440)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000240)=""/100, 0x64}, {&(0x7f00000002c0)=""/17, 0x11}, {&(0x7f0000000300)=""/62, 0x3e}, {&(0x7f0000000340)=""/35, 0x23}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x5, &(0x7f0000001400)=""/27, 0x1b}, 0x10002) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pim6reg\x00'}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8850}, 0x20000000) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000002140)=""/4120) 2m19.126622146s ago: executing program 7 (id=2150): getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r0, 0x1, 0x0, @multicast}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1fffe00c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01", @ANYRES32=r5, @ANYBLOB='\b\x00\t\x00'], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0xd0, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x50) 2m19.000123803s ago: executing program 2 (id=2154): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0xb6, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x41b03, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x112040, 0xffffffff, 0xfffffffa, 0x0, 0x80000d9f, 0x2, 0x85, 0x0, 0x402, 0x0, 0x8000000000000001}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd056fea56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0xb6, 0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x41b03, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x112040, 0xffffffff, 0xfffffffa, 0x0, 0x80000d9f, 0x2, 0x85, 0x0, 0x402, 0x0, 0x8000000000000001}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd056fea56a888e", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) (async) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) (async) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000200)) (async) 2m18.88952624s ago: executing program 7 (id=2156): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$eJzs3c9rHFUcAPDvbJKmTauJIPjjFBA0ULoxNbYKHioeRLBQ0LPtstmGmk22ZDelCQEtIngRVDwIeunZH/Xm1R9X/S88iKVqWqx4kMhsZtpts5smbZKt7ucD07w3b7bvfffNvHm7M8wG0LNG038KEY9FxAdJxHC2PomIgWaqP+LY2nbXV5bL6ZLE6uprvyfNba6tLJej5TWp/Vnm0Yj4/t2Ig4X19dYXl2ZK1Wplfi3bFxFnx+uLS4fOzJamK9OVuSMTk5OHjz579Mj2xfrnT0sHLn/48lNfHfv7nUcuvf9DEsfiQFbWGsd2GY3R7D0ZSN/CW7y03ZV1WdLtBnBXCtnB1x/pGDAcfc0UAPB/9lZErAIAPSZx/geAHpN/D3BtZbmcL939RmJ3XXkxIvauxZ9f31wr6c+u2e1tXgcdupbccmUkiYiRbah/NCI+++aNL9Ildug6JEA7b1+IiFMjo+vH/2TdPQtb9fQGZXuyv6O3rTf+we75Np3/PNdu/le4Mf+JNvOfwTbH7t244/G/bxsq2UA6/3uh5d626y3xZ0b6stwDzTnfQHL6TLWSjm0PRsRYDAym+YkN6hi7+s/VTmWt878/Pnrz87T+9O/NLQq/9g/e+pqpUqN0LzG3unIh4vH+dvEnN/o/6TD/PbHJOl55/r1PO5Wl8afx5sv6+CO7O2lnrF6MeLJt/9+8oy1NjTdmO9yfON7cHcbznaKNr3/+ZKhT/a39ny5p/flngd2Q9v/QxvGPJK33a9bXjv2t+PHi8Hedyu4cf/v9f0/yejOdzyPOlxqN+YmIPcmr69cfvvnaPJ9vn8Y/9kT743+j/T/9THhqk/H3X/7tyw3j39/d/p/aUv+3S6SDdIeimVL10vWZvk71b67/J5upsWzNZsa/Ti29PXEv7x0AAAAAAAAAAAAAAAAAAAAAAAAAbFYhIg5EUijeSBcKxeLab3g/HEOFaq3eOHi6tjA3Fc3fyh6JgUL+qMvhluehTmTPw8/zh2/LPxMRD0XEx4P7kvw5ilNdjh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvs7/P5/6pfBbrcOANgxe7vdAABg1zn/A0Dvcf4HgN7j/A8Avcf5HwB6j/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zE8ePpsvrXynI5zU+dW1yYqZ07NFWpzxRnF8rFcm3+bHG6VpuuVorl2uyd/r9qrXZ2MuYWzo83KvXGeH1x6eRsbWGucfLMbGm6crIysCtRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDW1BeXZkrVamVe4i4Sq/dHM7qf6Mt2p/ulPbuaSO6PZmxzossDEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/xL8BAAD//7KsH7I=") r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) write$cgroup_subtree(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r2, &(0x7f0000000040)=""/107, 0x6b, 0x2102, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xfffffd5d, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) mprotect(&(0x7f0000673000/0x2000)=nil, 0x2000, 0x1000000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000a80)="df7d796d", 0x4) ptrace(0x10, r4) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x925]}, 0x8) shutdown(r0, 0x2) 2m18.88370603s ago: executing program 2 (id=2157): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000200060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2m18.71382399s ago: executing program 7 (id=2159): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents(r0, &(0x7f0000000ec0)=""/4096, 0x1000) clock_adjtime(0x64d4257fe8a6a137, &(0x7f0000000640)={0xfffffffffffffffd, 0xfffffffffffffff8, 0x10000, 0x7, 0x1, 0x8, 0x1, 0x800, 0x8, 0x8, 0x7fff, 0x4, 0x7fffffffffffffff, 0x7, 0x4, 0x8, 0x6, 0xfffffffffffffffb, 0x6, 0x10000, 0x3, 0xff, 0x0, 0x8, 0xffffffff, 0x400}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffffeff5}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffffeff5}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x80001800, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet6(r1, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x80001800, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4000080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xefc, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}}, 0x41, 0x2b}, 0x90) getdents(r0, 0x0, 0x0) 2m18.374741419s ago: executing program 7 (id=2164): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x52dc, 0x5, [{0x1, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0xa, 0x1}, {0xf}]}) 2m18.315244063s ago: executing program 51 (id=2164): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)={0x52dc, 0x5, [{0x1, 0x1}, {0xf, 0x1}, {0xe, 0x1}, {0xa, 0x1}, {0xf}]}) 2m17.868308239s ago: executing program 2 (id=2168): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) write$cgroup_subtree(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvfrom(r2, &(0x7f0000000040)=""/107, 0x6b, 0x2102, 0x0, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, 0x0, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xfffffd5d, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r2, @ANYRES16=r3], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1, 0x8f, 0x3b16) mprotect(&(0x7f0000673000/0x2000)=nil, 0x2000, 0x1000000) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000a80)="df7d796d", 0x4) ptrace(0x10, r4) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0x925]}, 0x8) shutdown(r0, 0x2) 2m17.442740584s ago: executing program 2 (id=2170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r3 = syz_io_uring_setup(0x5c4, &(0x7f0000000500)={0x0, 0x101a32, 0x0, 0x2, 0x16d}, &(0x7f00000002c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0xfffffffffffffe3c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x2) 2m17.224362846s ago: executing program 2 (id=2172): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002"], 0x44}, 0x1, 0x3000000, 0x0, 0x50}, 0x48044) 2m17.15617235s ago: executing program 52 (id=2172): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002"], 0x44}, 0x1, 0x3000000, 0x0, 0x50}, 0x48044) 2m2.176035381s ago: executing program 5 (id=2343): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000003680)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r6, r6, 0x0) fstat(r0, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() fstat(r0, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$random(0xffffffffffffff9c, &(0x7f00000037c0), 0x20000, 0x0) r11 = open(&(0x7f0000000000)='./file1\x00', 0x20041, 0x0) sendfile(r11, r11, 0x0, 0x1000000201005) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003d80)={{{@in6=@private0, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@private}}, &(0x7f0000003e80)=0xe8) r14 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r14}, &(0x7f0000000000)) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setreuid(r15, r15) fstat(r0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r17, 0xc08c5332, &(0x7f0000000180)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r17, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) sendmmsg$unix(r0, &(0x7f0000004080)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)="0c5235ff75110da3fa64fe1ffab248587ac7e7a270db38a587e70599efec5830bb53e8437c629bca1790a344444249f3ffa430982c1638c14b2ce1679a846c54ca3511457e98863f8007dd081cbb2a1fad3135000f286a4f6a39e3e23e8a550d8406cf4693d05178be3248727d74f0b25620ea2cef1d613b54558a942f7660bf48fc2b53418e6feba5c0742519df700ecde1e1d86cf5b869262f31c0873cef5513db954d1177dfd11a0c2b7fb0bde7d53199514b3c79fdabb41d5428a0f3408e1ec8221af1b083c059113006f266db77348b2e", 0xd3}, {&(0x7f0000000500)="050b26ee021fd612cd1d6e522dd0ae1282d8ff343d9bbd8e3083ce8843606c183389da5dce9853a90044158d4fdbb54917b55b85d9fe694046c159302c70cf104d6c8653ad6186e3f7822711a1fd2f508ae8fecedd004e26e4796e6b26631bbb34fc984089c7132feaea93c9ce529a8201965c982a4e692eba27b642a1f299d4ed", 0x81}, {&(0x7f0000000240)="49c28204489eb9cdc6cc6bedbfd7a6a8b70c85bce0eab61ab0575c5a2e9063e7b0c3ae3819f51aa6d594c8fa6c396cacd8d92f2db2dcd5c6c69e32c6b5cbe171cb09722477c843dabd8f4b8844", 0x4d}, {&(0x7f0000000340)="e60072dd857e5c0a89c83f689136a8ffd949ecc3313a3b1cebb295739669389198ec5ef399fc20dd9d22b85575698563d3a23254cb9e1fad5cc3f7391ba88ad93fa0dc8ee089e8d2e4f4791d41a74cf1d21d5b0324adc3db78e41a1497aee2431ecd629ada4ae9230aae14c370ebbe", 0x6f}, {&(0x7f0000000040)="2c158dcadc9c924729817f79991a09cd07ba86", 0x13}, {&(0x7f00000005c0)="1fa8bcf13b8e5ba1d5a73b5f056307c2b7b04dc5c3aac641629f325e448ab2a774cf", 0x22}, {&(0x7f0000000600)="d51f2aa665c0f901c77aeb421704a677e7825f6c4474cb5dc365a17037a7a49347beac42a7f8deed9c3e9e5e2dbaf7254621062cf405f82b18994b3f01ab00bbb8664d13725d9b827d12e70c4537b90635d3be7ae8c59c4325fa79dbcdb7b5d8af8b0552248ac7ea09842c501d", 0x6d}, {&(0x7f0000000680)="5068f07157bedd76875b2549dbcff7aeebbfc225c863beb3e1f94c31dfb028411b2af988ed82a36399800185c8b8afa341d8bb9ac7dccbe4f3657d1ff66b58ee5cb3777083db43d956461526b45d17c04bcb376bbfc0a229f8130b3dfb5e9883cafceec9737a088cc2560a2ad4c92f8ca5689b39e0dfd4d8f5d5edf3ceba3fca3ac2983d92366ce3d3eb4b2323c9804e9e0895d9b64933a35918018229190297c95bf9280fa606ba5bf7a75b11275113fd3b30c0f3276b4d85d4069e9f87328c92159bac90cddc575c08640279e9eff4be87aace4024efe2bfe1689dd984ac96", 0xe0}], 0x8, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r0, r0, r0]}}, @cred={{0x1c}}], 0x150, 0x4004815}}, {{&(0x7f0000000b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000c00)="463b8804b65fb3dbd4eb7d514262f8e278214543b0da14b74547b264c375c92e6a5275bde48b94debd80ed2924575b6c8cdde71206a1cedc8d98c850366e00273d7cf1dd2751c061f79c9bf7d3c0", 0x4e}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000c921d4db71c09568dfd712546b00e97e8d950d1f9c662566df7bc1a56b05c2dcc827292949cbe5cacc38e6259ef62807a97dc85b053529d941ea5f4d449665a4252da444527917b8e668b790f4b0e6191ef05f6d08ae83967faa930097ace492f14f42f023650b2379bf9d8565f302430e5bfd3897c900214233d74245d2a3ac26d90ffcecdaa20a8c5befe5c2b151910d36c8e68d4fe162eb2444b2c3240e03a793b94564e5091f5dcc68ffdec690430f84f2fb87f7e04eb92f612a833fb377bbbc110997e90a19246cd2d40a82609c01531a2e07cdd869f3f44ef4f885107ba636dac70762e8fac6011c953305d7c56831ad978f4334209dca27a3135a0c5d9cb1b702251bfe3726de83"], 0x50, 0x44}}, {{&(0x7f0000000ec0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000f40)="b243522bf32649325a94277a3e348f6411b7a99d3cd7cdea33a0b2743dc410fc4e", 0x21}], 0x1, 0x0, 0x0, 0x20000000}}, {{&(0x7f0000000fc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001040), 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000001080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003340)=[{&(0x7f0000001100)="9055543a8ff58d190e171570936b7580583c", 0x12}, {&(0x7f0000000cc0)="dd2684e707a019864b46e79350cdd51aa129e96e3ae1b7415562221da670ffa02d4d87b32e452f81e976f2cafadd345d12249f51349ee3021da04764e72eb5fabd17099bfa71db154782b5348e2e894019067b292aeb36db829ed7b7cd6cc371d84d4b632d82278de2ad5d7e10d4d200bacb170500b2256b85a31f1fca9f354f99067ab8d2541e5c14797a52c53c353dfbda32133991dbd3223a47", 0x9b}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="9b091328a3be35bdb84ae30f68ca188d8134859dbd7b7796025ce18453be6a4e6c14213837cf", 0x26}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000003240)="702c2deadad642ecf155fa9279f3ddb7ff1b5e6edc70d970a21ecc2cc902dbe616f9d08dfdf400461500e162a8b42831d53ebe8b405f3ff68774d7a7f11e0dbcfde49c45778f8c52de2e2973466d032eb1331a96b02693de44ea2f28bd55b69af618b9c5ea8d5b2e53dcda4cefbbb989d961e81fe4dc324bdbfe8d762e99ea4fd01faa305bdfc3dba2014ce174470fe3c2c74e71f51dfe6d41dd82ff854241f1b90ba4dff851c38bb5ef3ac5d7099a1f17ac31462e3f195c5ee128c2f089770244ddc9b9393056866c3feb837d7d420344", 0xd1}], 0x6, &(0x7f0000003800)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r10, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x158, 0x4000081}}, {{&(0x7f0000003980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003d00)=[{&(0x7f0000003a00)="997a2dae08c1d63534157bf691c331b198776e6d806efabf94b19e36840ccb1f50ff9407bbc6a8ee261f5feb511510c01a427734b8f38e1bcea6fd20ef752b6f741de624312cd9f39bbb1e213d777a77cf65338f0c8b06d36e5871b6ce84c8df3fdab4e33c76f87722da38840338cbfd3481c3b79a7cac32e13e23e87e57687e1bf05cd9509121b2dd1183234c9535df1f529b0cde24e5b379d7f6bda38eb9f9ab1848150d550dd7", 0xa8}, {&(0x7f0000003ac0)="e8c73e41ecdfd2c9a86270aa555043b3c1fb16843ee7c13070070c1ff06b064cb0332babd7e6c2c5eedb57db6e11cea632fe9ab718caa1b62bbe3d7c1dca2953248cbe44ac78e4039d780395e27d36ea7c3580130efb8073f4da1e2f9feef831eab2c3e9d71164bbcdde93c935e77af1e74890e347c52d5ccad3c630c10f793e67ce38aff9c9396e719698b3367d472b8495cf0cfce7e34a4db2946360834424160fd45dddc07e8056cd11fc00e3824b51ae3319a7bfa6aa", 0xb8}, {&(0x7f0000003b80)="3da1f9a633e209102b5667ae69883f2a", 0x10}, {&(0x7f0000003bc0)="c28caa0dcacc6e6e72daeef744c6f38708e6886dd75eb8f7f419b50aba03140304310d7f8cab879654930e433c9f2ee9a6f3bd8b7fe126254f939dd034d68719429abb8038a67661f0f33a591632f0be676e87903444114c065e3e45bec1ba72c6c0eca2842aac9621a3acd20d291e79976234a11e85335529692d185199e25145b8780ac73ad5ca7431e41e89d8a795a7b4b4bfbb4d41382feb532a9d5dfb47bae98e95edc8d967de706d049ed3d0790b1e2a7dbe568f099c60ff3031cebf172f03af683d4f804539b50236c0219c4d581890769f4f9f67dc4a782a467807158f41efb10e7cf658ee2c8917a44730165f78dc14dfe4", 0xf6}, {&(0x7f0000003cc0)="132bb195cfd15398ddb7eed4307b56fbb5244fe718586755aeddbf1e8be6b0e5a792e28660959a8528d5fd9947d3", 0x2e}], 0x5, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [r11, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, 0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r17, r0, r0, r0, r0, r0, r0]}}], 0x120, 0x40080}}], 0x6, 0x40044) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0x8, 0x101}, 0xc58, 0x200, 0x5, 0x1, 0x9, 0x9, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 2m2.140420033s ago: executing program 5 (id=2346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000020000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000"], 0x1a0}}, 0x0) 2m2.032223049s ago: executing program 0 (id=2348): unshare(0x62040200) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60e}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e000000d4670000050000000600000000000100", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000030000000800"/24, @ANYRES32, @ANYRES64], 0x50) close(r3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000580)=r4, 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) 2m2.031403449s ago: executing program 5 (id=2350): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x736f, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m1.999985411s ago: executing program 5 (id=2351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@dioread_lock}, {@nojournal_checksum}, {@acl}, {@usrjquota}, {@acl}, {@delalloc}]}, 0x1, 0x4e4, &(0x7f0000001c40)="$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") chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sched_setscheduler(r1, 0x839c6a0f288b113a, &(0x7f0000000080)=0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, ')'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0x78}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x3e68, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8081, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0x8, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x1ff, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x7e, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x0, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x10000006, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0x2, 0x400081, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x9, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x6, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x18, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x4, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x894}}, 0x0) umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 2m1.761484045s ago: executing program 5 (id=2354): getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r0, 0x1, 0x0, @multicast}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000005c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01", @ANYRES32=r5, @ANYBLOB='\b\x00\t\x00'], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0xd0, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x50) 2m1.480794061s ago: executing program 5 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x19aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0}, 0x94) r4 = accept4(r0, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x294, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x31, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "201d6b5dc8c9925c7ea15608f042110784a0217ccc0568fff3eb23942d8150cc6c1ddfb18844b8bc2ef74d0f1dd971f1742f482ed1156f6815f4aa479c437db83ec49aa30b8144075178d791bed17fe81b70f222dfe76d67a4083ed7054c3f8b275f56c28cf67f0448e5b4b34f6ef3351948e2e3b645842e950cf6b15b7f3956957a7ad86d09a189f6c4bf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "66f493f40724a2e0fa908416e07dad2a77bab9c8f195d54c46d22129"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "f3a7818b76faf41dc453961f6adcc8e79fed2b6934c40c45cd"}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x10000801}, 0x20004000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r1, r6, &(0x7f0000000140)=0xb, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@nogrpid}, {@norecovery}, {@errors_remount}, {@nodioread_nolock}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nouser_xattr}]}, 0x1, 0x590, &(0x7f0000000b00)="$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") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu>00||!') close(r2) mmap(&(0x7f000003b000/0x3000)=nil, 0x3000, 0x1, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xfca85000) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m1.444248063s ago: executing program 53 (id=2357): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x19aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x0}, 0x94) r4 = accept4(r0, &(0x7f00000001c0)=@phonet, &(0x7f0000000240)=0x80, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0x294, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x31, @ipv4={'\x00', '\xff\xff', @remote}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @empty, 0x6}}}}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth1_to_batadv\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_NODE={0x12c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ID={0x8f, 0x3, "201d6b5dc8c9925c7ea15608f042110784a0217ccc0568fff3eb23942d8150cc6c1ddfb18844b8bc2ef74d0f1dd971f1742f482ed1156f6815f4aa479c437db83ec49aa30b8144075178d791bed17fe81b70f222dfe76d67a4083ed7054c3f8b275f56c28cf67f0448e5b4b34f6ef3351948e2e3b645842e950cf6b15b7f3956957a7ad86d09a189f6c4bf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "66f493f40724a2e0fa908416e07dad2a77bab9c8f195d54c46d22129"}}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "f3a7818b76faf41dc453961f6adcc8e79fed2b6934c40c45cd"}}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x10000801}, 0x20004000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r1, r6, &(0x7f0000000140)=0xb, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@nogrpid}, {@norecovery}, {@errors_remount}, {@nodioread_nolock}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@nouser_xattr}]}, 0x1, 0x590, &(0x7f0000000b00)="$eJzs3d9rW2UfAPDvSX9s6/a+62CM9xWRwi6c6NK19ccEwXkpOhzo/QhtLKPpMpp0rHWw7cLdeCNDEHEgXnin4KWXw3/Av2KgwyGj6IU3lZOetNmSrG2WNZn5fOCU5znnJM/zzXmeJ8/pk5AABtZE+icX8f+I+DyJOBwRSXZsOLKDExvnrT24OptuSayvf/hHUjsvzdefq/64g1nmfxHx86cRL+eay62srC4USqXiUpafrC5emqysDMWFxcJ8cb54cXpm5vRrM9NvvvF612J96dxfX31w593Tnx1f+/KHe0duJXEmDmXHGuN4AtcbMxMxkb0mI3HmkROn9nehtD6S9LoCdGQo6+cjkY4Bh2Mo6/XAv9+1iFjv1NsdPxLoC0nn/R94ptXnAfV7+y7dBz8z7r+zcQPUHP/wxv9GYn/t3mhsLXnozii93x3vQvlpGT/9dvtWukX3/g8BsK3rNyLi1PBw8/iXZONf507t4JxHyzD+wd65k85/Xmk1/8ltzn+ixfznYIu+24nt+3/uXheKaSud/73Vcv67uWg1PpTl/lOb840kH18oFdOx7b8RcSJG9qX5qceUcXrt7nq7Y43zv3RLy6/PBbN63BveFw+99nOFauEJw950/0bEcy3nv8nm9U9aXP/09Ti3wzKOFW+/0O7Y9vE/XevfRrzY8vpvrWglW+uTqyeb1ycna+1hst4qmv1589gv7cpvjn809jL+9PqPPT7+8aRxvbay+zK+2f93sd2xh+KP9u2/Udr+R5OPaunRbN+VQrW6NBUxmrzfvH9667H1fHZ+Mnwj4sTxx49/rdr/gRZr2u3cPPr98zuKv7H9/7jz538S6fWf29X1333i7nuffL3r+Del1//VWupEtmcn49929RrruDUDAAAAAABA/8pFxKFIcvnNdC6Xz298vuNojOVK49kXVeei9l3Z8RjJ1Ve6Dzd8HmIq+zxsPT/9SH4mIo5ExBdDB2r5/Gy5NNfr4AEAAAAAAAAAAAAAAAAAAKBPHGzz/f/Ur0O9rh3w1PnJbxhc2/b/bvzSE9CXvP/D4BrtdQWAnvH+D4NL/4fB1dD/9/WyHsDe8/4Pg0v/h8Gl/wMAAAAAAAAAAAAAAAAAAAAAAAAAAEBXnTt7Nt3W1x5cnU3zc5dXlhfKl0/OFSsL+cXl2fxseelSfr5cni8V87Plxe2er1QuX5qajuUrk9VipTpZWVk9v1hevlg9f2GxMF88XxzZk6gAAAAAAAAAAAAAAAAAAADg2VJZWV0olErFJQmJjhLD/VGNjUTapBv2XKsnRntdsRaJ37/ri2q0S/R6ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf8EAAD//1oRL9w=") ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu>00||!') close(r2) mmap(&(0x7f000003b000/0x3000)=nil, 0x3000, 0x1, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xfca85000) syz_clone3(&(0x7f00000008c0)={0x15b42180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m1.132696021s ago: executing program 0 (id=2362): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffffffe, 0x514, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x5, @perf_bp={0x0, 0x2}, 0x8004, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d8, 0x348, 0x218, 0x2b0, 0x180, 0x348, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@ip={@broadcast, @empty, 0xff000000, 0xffffff00, 'ip6gretap0\x00', 'batadv0\x00', {}, {}, 0x89, 0x1, 0x19}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xfffffffffffffe74}, {{@ipv4=@remote, [], @ipv6=@private1, [], @ipv4=@private, [0x0, 0xffffffff], @ipv6=@private1, [0x0, 0x0, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x0, 0x3801}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}, {{@uncond, 0x0, 0x6a, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr=0x4, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x1, 0x81}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2, 0x0, 0x0, 0x4]}, {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x554) socket$can_j1939(0x1d, 0x2, 0x7) syz_clone3(&(0x7f0000000300)={0x1081f8840, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0, {0x29}, &(0x7f0000000140)=""/103, 0x67, &(0x7f00000001c0)=""/167, &(0x7f00000002c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, {r1}}, 0x58) ptrace$peekuser(0x3, r3, 0xfffffffffffffffc) close_range(r1, 0xffffffffffffffff, 0x0) 2m0.9924309s ago: executing program 0 (id=2364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d00)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040894}, 0x4040094) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r4 = io_uring_setup(0x1a36, &(0x7f0000000140)={0x0, 0xda54, 0x80, 0x3, 0x23d}) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r4, 0x19, &(0x7f00000001c0)={0x0, 0x6bd, 0x7}, 0x0) timer_getoverrun(r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}}, 0x24}}, 0x4048000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8f}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x640cf000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m0.151142789s ago: executing program 0 (id=2376): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x203, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) clock_gettime(0x2, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {r2, r3+10000000}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b9ff0307600339ffa0f408f088a8", 0x0, 0xa3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000340)={'batadv0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0x0, 0xffffffffffffffff}}) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$peeksig(0x4209, r9, &(0x7f0000000000)={0x41, 0x1, 0x1}, &(0x7f00000002c0)=[{}]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@numtail}, {@fat=@discard}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") 1m59.843083186s ago: executing program 0 (id=2379): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x441e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x20008, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r4, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [r5, r3]}}], 0x18, 0x240000c0}}], 0x1, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r2, 0x4004550d, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1) 1m59.031304583s ago: executing program 0 (id=2386): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x8, @remote, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="cbc6c8fec9a8bc95c370159df1c0981426a53f86336ea8e369fc5ba969f0ec47446c607a2f3c5ee3c8514a93090ea8f4a403c389edcf14ed9f32ab5afbd57f86adad67e05072b02d3304167dc849b9b2c62eb468bbe6c0f8ba81fec2e1f3bdcd7ce9bc5fa11001402495c73a664968bfc32b9c701dfcf95ea30a88658d384667332d57", 0x83}, {&(0x7f0000000400)="0fe5b29f2a692e155a2eea1aba490e6062abbf00a73c91a6c9406e1af824eb20099a9086c870ddde3c4401e49fdda67a4562c4e0e94a9c8a8603d3f063a1be4c7485cf71c31395ef87e6782dfd999b4182f782fada568937c6c6f8e82c497ebeaad177493fb34ffaecb223db3fb5c8bc3cd5c6c242d14b613e005e962bcef8361e199a0da28f141f403ef93007587f3d1772ca9e33979f337eb6c012762c99c020077fba58f3", 0xa6}, {&(0x7f00000004c0)="186f3a6b17f2dc4f49fadcdbe73ea3286bef1fc97df2e0120ac914bf1e223b2184d5f79d9df937f093c2179ea06fec571b3c5c149f99ee72113b925437525ad5f381058cbae063c04b932062fe660178ef71ac3011538f20cdc426bb0b27d0465bb726ebc214db9739b562e38e3eddd3a77206852ff05ddc0d20a8953aa7459a2b30f629dd76ec3fe1b5f3596ef31d8d05fe00a983477cca2f179e2eafce69bb550f1a0350c3ae079098b44e231e5a92fadf966c1ad14adb166caf", 0xbb}, {&(0x7f0000000100)="3afea11b6bbbf3d07e3d8c430484924b26db4ffbc3f964f8336d30aca176050ac842dedd892daad6ec91fdf860730c5b613488561377dfaf7af847", 0x3b}], 0x4, &(0x7f0000000580)=[@tclass={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x3c, 0xe, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x1, [0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x401}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x4a, "9ef66746b6ccb403d8b58f6108007ec07ce2470d42d2db0d973bbe283fa21a60e27fbcf63e46899dddb36b0c0ff51cf334361ee1687cbfff6f81b6e0a757f3091f073c35c509ca3ecbdf"}, @ra={0x5, 0x2, 0x3}]}}}], 0xa8}, 0x20004800) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) rename(&(0x7f0000000dc0)='./bus\x00', &(0x7f0000000e00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r4) 1m59.028511264s ago: executing program 54 (id=2386): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e21, 0x8, @remote, 0x3}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000200)="cbc6c8fec9a8bc95c370159df1c0981426a53f86336ea8e369fc5ba969f0ec47446c607a2f3c5ee3c8514a93090ea8f4a403c389edcf14ed9f32ab5afbd57f86adad67e05072b02d3304167dc849b9b2c62eb468bbe6c0f8ba81fec2e1f3bdcd7ce9bc5fa11001402495c73a664968bfc32b9c701dfcf95ea30a88658d384667332d57", 0x83}, {&(0x7f0000000400)="0fe5b29f2a692e155a2eea1aba490e6062abbf00a73c91a6c9406e1af824eb20099a9086c870ddde3c4401e49fdda67a4562c4e0e94a9c8a8603d3f063a1be4c7485cf71c31395ef87e6782dfd999b4182f782fada568937c6c6f8e82c497ebeaad177493fb34ffaecb223db3fb5c8bc3cd5c6c242d14b613e005e962bcef8361e199a0da28f141f403ef93007587f3d1772ca9e33979f337eb6c012762c99c020077fba58f3", 0xa6}, {&(0x7f00000004c0)="186f3a6b17f2dc4f49fadcdbe73ea3286bef1fc97df2e0120ac914bf1e223b2184d5f79d9df937f093c2179ea06fec571b3c5c149f99ee72113b925437525ad5f381058cbae063c04b932062fe660178ef71ac3011538f20cdc426bb0b27d0465bb726ebc214db9739b562e38e3eddd3a77206852ff05ddc0d20a8953aa7459a2b30f629dd76ec3fe1b5f3596ef31d8d05fe00a983477cca2f179e2eafce69bb550f1a0350c3ae079098b44e231e5a92fadf966c1ad14adb166caf", 0xbb}, {&(0x7f0000000100)="3afea11b6bbbf3d07e3d8c430484924b26db4ffbc3f964f8336d30aca176050ac842dedd892daad6ec91fdf860730c5b613488561377dfaf7af847", 0x3b}], 0x4, &(0x7f0000000580)=[@tclass={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x3c, 0xe, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x1, [0x4]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x401}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x4a, "9ef66746b6ccb403d8b58f6108007ec07ce2470d42d2db0d973bbe283fa21a60e27fbcf63e46899dddb36b0c0ff51cf334361ee1687cbfff6f81b6e0a757f3091f073c35c509ca3ecbdf"}, @ra={0x5, 0x2, 0x3}]}}}], 0xa8}, 0x20004800) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) rename(&(0x7f0000000dc0)='./bus\x00', &(0x7f0000000e00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r4 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r4) 1m2.271837212s ago: executing program 3 (id=3429): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x318, 0x11, 0x148, 0x0, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {0x0, 0x4000000}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x2, 0x0, 0x3f, 0x20000000, 0x20000000, 0x3, 0x7, 0x80, 0x40}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1, 0x0, [{0x7, 0x5, 0xe, 0xf9e}, {0x3, 0x7, 0x9}, {0x7f, 0x2, 0x0, 0x101}, {0xff, 0xf, 0x4, 0x2}, {0x80, 0x2, 0x3d, 0x5}, {0xe, 0x26, 0x5e, 0x2}, {0x4, 0x4, 0x3, 0xa5}, {0x7, 0x4, 0x2, 0x27f2}, {0xe0, 0x58, 0xc, 0x1}, {0x6, 0x8, 0x5, 0x3}, {0xc9d1, 0x0, 0x8d, 0x2}, {0x2, 0x9, 0x7, 0x7}, {0x4, 0x7, 0x49, 0x9}, {0xd, 0x9, 0x1, 0x3}, {0x9, 0xe0, 0x51, 0x100}, {0x2, 0x0, 0xaf, 0x5}, {0x7fff, 0x3, 0x7, 0x4}, {0xe, 0xff, 0x6, 0x3}, {0x8, 0xff, 0x3}, {0x62, 0x5, 0x4, 0x4}, {0xdbd, 0x0, 0x3, 0xfffffa0b}, {0x2, 0x81, 0x2, 0x4000007}, {0x8, 0x4, 0x2, 0x9}, {0x18d9, 0xfe, 0x6, 0x9}, {0x8000, 0x3, 0x2, 0x400000}, {0x6, 0xe, 0x52, 0x3a1}, {0x7fff, 0x25, 0x6, 0xfffffff9}, {0x0, 0x7f, 0x3d, 0x81}, {0xa, 0x6, 0x5, 0x7}, {0xfff7, 0x8, 0x1, 0x400}, {0x3, 0x5, 0x2, 0xf}, {0x6, 0xc, 0x5, 0x9}, {0x8, 0x80, 0x8, 0x1}, {0x0, 0x72, 0x7, 0x6}, {0xd, 0x51, 0x7, 0x2}, {0x3d9, 0x8, 0x40, 0x9}, {0x1, 0x0, 0x7, 0xffffffff}, {0x4, 0x9, 0xfb, 0x698}, {0x4, 0x7, 0x81, 0xffff}, {0x6, 0xed, 0x1, 0x1}, {0x5, 0x9, 0xb, 0x3}, {0x762d, 0x68, 0x2, 0x4}, {0xb49e, 0x4, 0x4, 0x6}, {0x5, 0xff, 0x1c}, {0xfe00, 0xff, 0x0, 0x89}, {0xfffc, 0x5, 0x4, 0x9}, {0x2, 0x81, 0x10, 0x7fffffff}, {0xfc01, 0x1, 0x5, 0x4}, {0x3, 0x7, 0xc, 0x9}, {0xf974, 0x40, 0x7, 0x8}, {0x8, 0x5, 0xf7, 0x2}, {0x5, 0xa9, 0x6, 0x6}, {0x0, 0x9e, 0x8, 0xa}, {0x0, 0x9, 0x0, 0x10}, {0x4, 0x22, 0x7f, 0x1}, {0x8, 0x5, 0x0, 0x81}, {0x81, 0x81, 0x72, 0x8000}, {0x3, 0x3, 0xa0, 0x232}, {0x3b, 0x3, 0x3, 0xec2}, {0x0, 0x3, 0x8, 0x1}, {0x9, 0x9, 0x0, 0x5}, {0x233d, 0x6, 0xea, 0x8}, {0x5, 0x0, 0x80, 0x9}, {0xb, 0xfb, 0x4, 0x20000003}], {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}, {[0x4e22, 0x9], [0x4e20, 0x4e20], 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x0, 0x2, 0x3, 0x0, 0x5], 0x0, 0x1}, {0x0, [0x6, 0x4, 0x2, 0x2, 0x982848c96d6a0d38], 0x15}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 1m2.153361508s ago: executing program 3 (id=3433): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffe, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) (async) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000200)=' ', 0x1, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r2, 0x0, 0x0, 0xfffffffffffffffc}]) syz_clone(0x410c5000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.568214212s ago: executing program 3 (id=3448): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000011000001"], 0xfdef) 1m1.362907725s ago: executing program 3 (id=3457): socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x8604, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x736f, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$kcm(0x29, 0x5, 0x0) r3 = creat(0x0, 0xd931d3864d39dcdb) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) close(r3) r4 = open(0x0, 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4000, @fd=r5, 0x96, 0x0, 0x0, 0x5, 0x0, {0x1, r6}}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m0.722651322s ago: executing program 3 (id=3476): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000240)='ns/cgroup\x00') 1m0.632450847s ago: executing program 3 (id=3479): r0 = syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x200004, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@nobarrier}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xd40, 0xd2) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000500)) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_emit_ethernet(0x46, &(0x7f0000002240)=ANY=[@ANYBLOB="bb622ac1eb870180c200040e86dd6800000000103afffc000000000000000000000000000001fe8000000000000000000000000000aa8600907801010c00090000000c000000"], 0x0) 45.581028571s ago: executing program 55 (id=3479): r0 = syz_mount_image$ext4(&(0x7f0000002580)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x200004, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@nobarrier}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0xd40, 0xd2) close(r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000500)) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) syz_emit_ethernet(0x46, &(0x7f0000002240)=ANY=[@ANYBLOB="bb622ac1eb870180c200040e86dd6800000000103afffc000000000000000000000000000001fe8000000000000000000000000000aa8600907801010c00090000000c000000"], 0x0) 3.836029727s ago: executing program 9 (id=4580): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x98, 0x3a0, 0x138, 0x138, 0x98, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@ip={@rand_addr=0x64010101, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'batadv0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x470}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) 3.423587021s ago: executing program 9 (id=4586): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe8000000000e000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 3.340273646s ago: executing program 9 (id=4589): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000061135c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x284bb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x1, @perf_bp={0x0}, 0x2042, 0x32, 0x5a4d4367, 0x7, 0xcf24, 0xffffffff, 0x2, 0x0, 0xfffffffe, 0x0, 0x1006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) io_setup(0x8, &(0x7f0000000400)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x6ab858183a7ef792) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000)) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000580)="28604d29a724a7742480db067216419b9b8cd290900c3763642511e2938c8801683da718904c4839d905ca4beed76594ebbf04c9270eddb890868807e92a273f44fdde15cd591643aa39682358d19e15938e69b49b3aa86cddef1358d7780f2764b7105cf0a3abb3c6fe09129aba13ebb1a4215753d71a18a071cb5b60d5ceff6383338b06e539cffb654225c3b837c0bcee9d98fd", 0x95, 0x1, 0x0, 0x1, r4}]) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(r2, 0x0, 0x0, 0x20000095, &(0x7f0000000200)={0x11, 0xf6, r6, 0x1, 0xff}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x204000, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0xc8800}, 0x4000) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0xfffc}}}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r11, {0x4, 0xfff1}, {0x0, 0xc}, {0x0, 0xd}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r12, 0x6, 0x23, &(0x7f0000000640)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 3.186037385s ago: executing program 9 (id=4593): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0b41, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x105000, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r0, r0, r1, r1, r1, r0], 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x4, 0x10, 0x40, 0x1, 0x6138, 0x6}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 3.078455972s ago: executing program 9 (id=4597): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{}, {@quota}]}, 0xfe, 0x572, &(0x7f0000000240)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x7, 0x20005, 0xfff8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_config_ext={0x8001, 0xf}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000180001000000000000000f000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 2.979413667s ago: executing program 9 (id=4600): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x4, 0x0, 0x3000000000000000}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x0, 0x32}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{@in=@multicast2, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}}, 0x40800) 2.216805141s ago: executing program 1 (id=4608): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0xee00, 0x0) 2.124431607s ago: executing program 8 (id=4610): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_ifreq(0xffffffffffffffff, 0x8935, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x87, 0x7ffc0001}]}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x1, 0x2, 0x6, 0x8000000000000001, 0xffffffffffffffff}) 1.931964418s ago: executing program 8 (id=4611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003"], 0x68}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) 1.131997434s ago: executing program 4 (id=4612): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x44}, 0x28) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190da) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0, 0x44}, 0x28) (async) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) (async) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x190da) (async) 1.054698469s ago: executing program 8 (id=4613): socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x80000001, 0xa5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0xb0e4}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 985.083423ms ago: executing program 1 (id=4615): getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r0, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000080)={r0, 0x1, 0x0, @multicast}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c0001fe0f000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01", @ANYRES32=r5, @ANYBLOB='\b\x00\t\x00'], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0xd0, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1}, 0x50) 984.737923ms ago: executing program 4 (id=4616): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x9099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xfff, 0xaf7}, 0x110180, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0) 880.399829ms ago: executing program 6 (id=4617): socket(0x10, 0x80003, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 872.91564ms ago: executing program 1 (id=4618): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x0, 0x8400, 0x1}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) (fail_nth: 3) 864.75485ms ago: executing program 6 (id=4619): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x1098a3, &(0x7f0000000480)={[{@auto_da_alloc_val}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, '(*[{'}}, {@fsname={'fsname', 0x3d, 'ip6gre0\x00'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '$&$'}}]}, 0x1, 0x4ce, &(0x7f0000000f00)="$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") ftruncate(r5, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB='-', @ANYRES64=r0, @ANYRES8, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x27) 834.979382ms ago: executing program 4 (id=4620): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000240)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x2, 0x1c, 0x64, 0x0, 0x1, 0x2, 0x0, @private=0xa010101, @local}, {0x11, 0x4e, 0x0, @multicast1}}}}}}, 0x2e) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r2, r7, 0x25, 0x0, @val=@netkit}, 0x1c) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0xd, 0x4) 650.826432ms ago: executing program 1 (id=4621): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$selinux_create(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x10, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 517.06611ms ago: executing program 6 (id=4622): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x2, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000000000000b000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 469.583983ms ago: executing program 6 (id=4623): prctl$PR_MCE_KILL(0x29, 0x0, 0x2) r0 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRES32, @ANYBLOB="6fbf70a73c9289ae69502f5e2fcc665cb2db0ea37841acb76bc42a93ba8bc13b570448bab59f0f1dd1cad16cf0bc16f0af4ae3be026f8b513c828f8549924a9b1af02857d649101f8b567d4d07b9dc19d5a460dab2e0285073cb30e850c02cc7ff6a1f699df82b41c69b01f2b2508f1fabac50d7b8050521fe78ce6ba8b18cdb6a32e9bf8e97540a1a416df58346895241c1b0873cc079161f6c6d99a2c4bc2de8c6ab9b78f557ea57cfdfb8e929aa3bd13f21e0b762d0af21bdb6d82f389ab4019614ce212390b45901b2255a43888f0a"], 0xa4}, 0x1, 0x0, 0x0, 0x40880c4}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 404.445526ms ago: executing program 6 (id=4624): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000280)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@noload}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000300, 0x0, 0xee00, 0x0) 344.1677ms ago: executing program 1 (id=4625): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@dev, 0x400, 0x0, 0xff, 0x1}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x18}, 0x2c) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x18}, 0x2c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r2 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000009c0)=[{&(0x7f00000000c0)="f1", 0x1}], 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x62, 0x0, r5, &(0x7f0000000000)={0x80000006}, r1}) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x200fe, 0x20110, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffff7fffffffffa3, 0x2}, 0x90, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) (async) r6 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) io_uring_enter(r2, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = gettid() rt_sigqueueinfo(r7, 0x12, &(0x7f0000001340)={0x21, 0x0, 0x7}) dup3(r1, r0, 0x0) 313.910682ms ago: executing program 8 (id=4626): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = shmget$private(0x0, 0x13000, 0x2, &(0x7f0000fed000/0x13000)=nil) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000004c0)={@private2}, 0x0) syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000c80)='./file0\x00', 0x1004491, &(0x7f0000000000)=ANY=[], 0xfe, 0x847, &(0x7f00000001c0)="$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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a20000076786c616e00000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 240.282636ms ago: executing program 8 (id=4627): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001200)={0x0, @private, @loopback}, &(0x7f0000001240)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x9, [@func={0xa, 0x0, 0x0, 0xc, 0x1}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x7}, {0x1, 0xbcd7, 0x82c}, {0x4, 0x2, 0x819}], "b4"}, @fwd={0x6}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x26b0, 0xfffff71f}]}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xd}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x89}, {0x3, 0x4}, {0x1, 0x2}]}]}, {0x0, [0x5f, 0x9118d97e75da66d6, 0x30, 0x61, 0x61, 0x61, 0x30]}}, &(0x7f0000001340)=""/10, 0xbd, 0xa, 0x0, 0x4}, 0x28) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x99, 0x99, 0x9, [@func={0xa, 0x0, 0x0, 0xc, 0x1}, @datasec={0xd, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x5, 0x7}, {0x1, 0xbcd7, 0x82c}, {0x4, 0x2, 0x819}], "b4"}, @fwd={0x6}, @enum64={0x4, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x1, 0x26b0, 0xfffff71f}]}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xd}]}, @enum={0x6, 0x3, 0x0, 0x6, 0x4, [{0x5, 0x89}, {0x3, 0x4}, {0x1, 0x2}]}]}, {0x0, [0x5f, 0x9118d97e75da66d6, 0x30, 0x61, 0x61, 0x61, 0x30]}}, &(0x7f0000001340)=""/10, 0xbd, 0xa, 0x0, 0x4}, 0x28) openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={r2, 0x20, &(0x7f0000001480)={&(0x7f0000001400)=""/18, 0x12, 0x0, &(0x7f0000001640)=""/221, 0xdd}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={r2, 0x20, &(0x7f0000001480)={&(0x7f0000001400)=""/18, 0x12, 0x0, &(0x7f0000001640)=""/221, 0xdd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x41100, 0x0, '\x00', r1, @fallback=0x31, r2, 0x8, &(0x7f00000013c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001540)={0x4, 0x10, 0x1, 0x9}, 0x10, r4, r3, 0x4, 0x0, &(0x7f0000001440)=[{0x0, 0x5, 0xe, 0x1}, {0x3, 0x2, 0xc, 0xa}, {0x1, 0x3, 0x8, 0x7}, {0x3, 0x3, 0xe, 0x1}], 0x10, 0xb}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xfffffffd, 0x4, 0x5}]}]}}, 0x0, 0x32, 0x0, 0x9}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x13, 0x0, 0x2, [{0xfffffffd, 0x4, 0x5}]}]}}, 0x0, 0x32, 0x0, 0x9}, 0x28) 221.922907ms ago: executing program 4 (id=4628): socket(0x10, 0x80003, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 178.68493ms ago: executing program 4 (id=4629): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x9099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0xfff, 0xaf7}, 0x110180, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}}, 0x0) 108.425544ms ago: executing program 6 (id=4630): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}, 0x1, 0x0, 0x0, 0x1000000}, 0x884) 46.175958ms ago: executing program 8 (id=4631): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0xf3a, 0x0) tee(r0, r4, 0xf3a, 0x4) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x18c6) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file1\x00', 0x1098a3, &(0x7f0000000480)={[{@auto_da_alloc_val}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, '(*[{'}}, {@fsname={'fsname', 0x3d, 'ip6gre0\x00'}}, {@seclabel}, {@obj_type={'obj_type', 0x3d, '$&$'}}]}, 0x1, 0x4ce, &(0x7f0000000f00)="$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") ftruncate(r5, 0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB='-', @ANYRES64=r0, @ANYRES8, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x27) 40.917828ms ago: executing program 1 (id=4632): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c000000000061135c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000004e350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b904c5a317d3670003000000183fb7d36e173044f4ab34"], &(0x7f0000000100)='GPL\x00'}, 0x48) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x284bb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x1, @perf_bp={0x0}, 0x2042, 0x32, 0x5a4d4367, 0x7, 0xcf24, 0xffffffff, 0x2, 0x0, 0xfffffffe, 0x0, 0x1006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) io_setup(0x8, &(0x7f0000000400)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x6ab858183a7ef792) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000000)) io_submit(r3, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000580)="28604d29a724a7742480db067216419b9b8cd290900c3763642511e2938c8801683da718904c4839d905ca4beed76594ebbf04c9270eddb890868807e92a273f44fdde15cd591643aa39682358d19e15938e69b49b3aa86cddef1358d7780f2764b7105cf0a3abb3c6fe09129aba13ebb1a4215753d71a18a071cb5b60d5ceff6383338b06e539cffb654225c3b837c0bcee9d98fd", 0x95, 0x1, 0x0, 0x1, r4}]) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[], 0x28) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket$packet(0x11, 0xa, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(r2, 0x0, 0x0, 0x20000095, &(0x7f0000000200)={0x11, 0xf6, r6, 0x1, 0xff}, 0x14) 0s ago: executing program 4 (id=4633): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) sched_setscheduler(0x0, 0x2, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) kernel console output (not intermixed with test programs): 33] netlink: 'syz.1.3929': attribute type 6 has an invalid length. [ 267.165796][T19808] lo speed is unknown, defaulting to 1000 [ 267.247966][T19846] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 267.254601][T19846] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 267.298347][T19851] netlink: 'syz.9.3931': attribute type 6 has an invalid length. [ 267.299357][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3930'. [ 267.366733][T19853] hsr_slave_0: left promiscuous mode [ 267.398623][T19853] hsr_slave_1: left promiscuous mode [ 267.438068][T19871] xt_hashlimit: size too large, truncated to 1048576 [ 267.444884][T19871] xt_hashlimit: max too large, truncated to 1048576 [ 267.478933][T19869] xt_NFQUEUE: number of total queues is 0 [ 267.513751][T19875] loop9: detected capacity change from 0 to 512 [ 267.526982][T19875] EXT4-fs: Ignoring removed i_version option [ 267.567655][T19875] EXT4-fs (loop9): 1 truncate cleaned up [ 267.700871][T19878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3937'. [ 267.762072][T19875] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.834338][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.876197][T17027] IPVS: starting estimator thread 0... [ 267.882477][T19883] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 267.908188][ T4928] Bluetooth: hci0: Frame reassembly failed (-84) [ 267.925009][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3939'. [ 267.977999][T19885] IPVS: using max 2160 ests per chain, 108000 per kthread [ 268.006571][T19896] loop4: detected capacity change from 0 to 128 [ 268.009883][T19897] tmpfs: Bad value for 'mpol' [ 268.018669][T19890] macvlan4: entered promiscuous mode [ 268.047100][T19890] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 268.117765][T19899] loop8: detected capacity change from 0 to 128 [ 268.161165][T19899] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 268.180645][T19899] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.200844][T19899] EXT4-fs error (device loop8): ext4_validate_block_bitmap:423: comm syz.8.3945: bg 0: bad block bitmap checksum [ 268.225159][T19899] netlink: 'syz.8.3945': attribute type 1 has an invalid length. [ 268.251303][T19909] netlink: 'syz.6.3949': attribute type 1 has an invalid length. [ 268.276025][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 268.276039][ T29] audit: type=1400 audit(2000000027.059:25816): avc: denied { write } for pid=19898 comm="syz.8.3945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 268.371098][T12918] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.381503][T19916] loop4: detected capacity change from 0 to 512 [ 268.417072][T19916] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 268.442876][T19916] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.463757][T19916] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.3953: Bad quota inum: 5, type: 1 [ 268.486029][T19924] loop9: detected capacity change from 0 to 128 [ 268.525095][T19924] FAT-fs (loop9): bogus number of reserved sectors [ 268.531872][T19924] FAT-fs (loop9): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 268.542787][T19924] FAT-fs (loop9): Can't find a valid FAT filesystem [ 268.552222][T19916] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 268.574344][T19916] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 268.581573][T19916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 268.594933][T19916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.639501][T19916] loop4: detected capacity change from 0 to 256 [ 268.642290][T19930] bond9: entered promiscuous mode [ 268.660378][T19930] macvlan5: entered promiscuous mode [ 268.662208][T19916] FAT-fs (loop4): Directory bread(block 64) failed [ 268.665744][T19930] macvlan5: entered allmulticast mode [ 268.678891][T19930] bond9: (slave macvlan5): Opening slave failed [ 268.682568][T19916] FAT-fs (loop4): Directory bread(block 65) failed [ 268.692949][T19916] FAT-fs (loop4): Directory bread(block 66) failed [ 268.700677][T19916] FAT-fs (loop4): Directory bread(block 67) failed [ 268.707429][T19916] FAT-fs (loop4): Directory bread(block 68) failed [ 268.714279][T19916] FAT-fs (loop4): Directory bread(block 69) failed [ 268.721540][T19916] FAT-fs (loop4): Directory bread(block 70) failed [ 268.728825][T19916] FAT-fs (loop4): Directory bread(block 71) failed [ 268.737794][T19916] FAT-fs (loop4): Directory bread(block 72) failed [ 268.744934][T19916] FAT-fs (loop4): Directory bread(block 73) failed [ 268.765759][T19916] syz.4.3953: attempt to access beyond end of device [ 268.765759][T19916] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 268.783997][T19943] loop9: detected capacity change from 0 to 512 [ 268.823922][T19945] loop6: detected capacity change from 0 to 1024 [ 268.842997][T19943] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.893443][T19943] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.895014][ T29] audit: type=1326 audit(2000000027.679:25817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19952 comm="syz.4.3964" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff747c9aeb9 code=0x0 [ 268.905780][T19943] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 268.931127][T19945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.943451][T19943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 268.961625][ T29] audit: type=1400 audit(2000000027.739:25818): avc: denied { mount } for pid=19952 comm="syz.4.3964" name="/" dev="ramfs" ino=67802 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 268.984980][T19943] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 268.999486][T19959] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 268.999944][T19245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.013848][T19943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.032795][T19959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.033885][T19943] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 269.056098][T19943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.080174][ T29] audit: type=1400 audit(2000000027.869:25819): avc: denied { mounton } for pid=19942 comm="syz.9.3961" path="/455/file0/file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.096816][T19943] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 269.107588][T19959] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 269.134999][T19959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.144326][T19943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.159357][T19959] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 269.173560][ T29] audit: type=1400 audit(2000000027.959:25820): avc: denied { add_name } for pid=19942 comm="syz.9.3961" name="file3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.194014][T19943] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 269.208770][T19959] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.218173][T19943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 269.227855][T19943] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.3961: corrupted xattr block 6: invalid header [ 269.276680][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.405593][T19971] vlan4: entered allmulticast mode [ 269.431822][T19976] loop8: detected capacity change from 0 to 512 [ 269.444531][T19976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.459041][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3969'. [ 269.461893][T19976] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.508278][T19981] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3972'. [ 269.519066][ T29] audit: type=1400 audit(2000000028.299:25821): avc: denied { map } for pid=19975 comm="syz.8.3971" path="/339/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 269.548688][ T29] audit: type=1400 audit(2000000028.329:25822): avc: denied { bind } for pid=19975 comm="syz.8.3971" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 269.574604][ T29] audit: type=1400 audit(2000000028.329:25823): avc: denied { name_bind } for pid=19975 comm="syz.8.3971" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 269.595961][ T29] audit: type=1400 audit(2000000028.329:25824): avc: denied { node_bind } for pid=19975 comm="syz.8.3971" saddr=97.108.108.101 src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 269.621392][T12918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.714925][T19991] netlink: 'syz.9.3976': attribute type 1 has an invalid length. [ 269.739645][T19991] 8021q: adding VLAN 0 to HW filter on device bond10 [ 269.960077][ T3720] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 269.960544][ T6713] Bluetooth: hci0: command 0x1003 tx timeout [ 269.997418][T20004] netlink: 'syz.1.3981': attribute type 1 has an invalid length. [ 270.015885][ T29] audit: type=1400 audit(2000000028.779:25825): avc: denied { mount } for pid=20002 comm="syz.1.3981" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 270.041405][T20004] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 270.119705][T20014] loop1: detected capacity change from 0 to 512 [ 270.175078][T20014] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 270.193452][T20014] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 270.269096][T20014] EXT4-fs (loop1): 1 truncate cleaned up [ 270.306288][T20021] netlink: 'syz.4.3987': attribute type 6 has an invalid length. [ 270.315066][T20014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.377540][T20014] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 270.401409][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3989'. [ 270.410608][T20030] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3989'. [ 270.438366][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.511927][T20016] lo speed is unknown, defaulting to 1000 [ 270.523871][T20035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.524647][T20032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.569097][T20016] lo speed is unknown, defaulting to 1000 [ 270.570101][T20032] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.609576][T20037] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3992: corrupted inode contents [ 270.630445][T20037] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.3992: mark_inode_dirty error [ 270.642585][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.660581][T20037] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3992: corrupted inode contents [ 270.716113][T20037] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3992: mark_inode_dirty error [ 270.776970][T20037] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3992: corrupted inode contents [ 270.817679][T20032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3990'. [ 270.831682][T20037] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 270.858892][T20037] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.3992: corrupted inode contents [ 270.859198][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.890217][T20037] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.3992: mark_inode_dirty error [ 270.938200][T20037] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 270.963201][T20053] macvlan4: entered promiscuous mode [ 270.990555][T20037] EXT4-fs (loop8): 1 truncate cleaned up [ 270.993243][T20053] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 271.000751][T20037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.020196][ T7596] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:16: Failed to release dquot type 1 [ 271.042180][T20037] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.070558][T20037] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.280298][T20068] __nla_validate_parse: 3 callbacks suppressed [ 271.280324][T20068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 271.305700][T20071] lo speed is unknown, defaulting to 1000 [ 271.471112][T20071] lo speed is unknown, defaulting to 1000 [ 271.719166][T20085] IPv6: addrconf: prefix option has invalid lifetime [ 271.728472][T20087] Cannot find del_set index 4 as target [ 271.761541][T20087] lo speed is unknown, defaulting to 1000 [ 271.840598][T20086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.885791][T20095] netlink: 'syz.9.4009': attribute type 4 has an invalid length. [ 271.893725][T20095] netlink: 152 bytes leftover after parsing attributes in process `syz.9.4009'. [ 271.921649][T20095] netlink: 376 bytes leftover after parsing attributes in process `syz.9.4009'. [ 271.936430][T20087] lo speed is unknown, defaulting to 1000 [ 271.945958][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4006'. [ 271.955192][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4006'. [ 272.000742][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4006'. [ 272.009765][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4006'. [ 272.037469][T20104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.054058][T20104] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.075958][T20109] FAULT_INJECTION: forcing a failure. [ 272.075958][T20109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.085927][T20104] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.089310][T20109] CPU: 1 UID: 0 PID: 20109 Comm: syz.9.4015 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 272.089365][T20109] Tainted: [W]=WARN [ 272.089373][T20109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.089386][T20109] Call Trace: [ 272.089394][T20109] [ 272.089404][T20109] __dump_stack+0x1d/0x30 [ 272.089430][T20109] dump_stack_lvl+0x95/0xd0 [ 272.089512][T20109] dump_stack+0x15/0x1b [ 272.089533][T20109] should_fail_ex+0x263/0x280 [ 272.089568][T20109] should_fail+0xb/0x20 [ 272.089651][T20109] should_fail_usercopy+0x1a/0x20 [ 272.089684][T20109] _copy_to_user+0x20/0xa0 [ 272.089707][T20109] simple_read_from_buffer+0xb5/0x130 [ 272.089788][T20109] proc_fail_nth_read+0x10e/0x150 [ 272.089818][T20109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.089846][T20109] vfs_read+0x1ab/0x7f0 [ 272.089868][T20109] ? __rcu_read_unlock+0x4e/0x70 [ 272.089899][T20109] ? __fget_files+0x184/0x1c0 [ 272.089953][T20109] ? mutex_lock+0x57/0x90 [ 272.089977][T20109] ksys_read+0xdc/0x1a0 [ 272.089999][T20109] __x64_sys_read+0x40/0x50 [ 272.090026][T20109] x64_sys_call+0x2889/0x3000 [ 272.090115][T20109] do_syscall_64+0xc0/0x2a0 [ 272.090226][T20109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.090250][T20109] RIP: 0033:0x7f912c5db78e [ 272.090268][T20109] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 272.090287][T20109] RSP: 002b:00007f912b076fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.090309][T20109] RAX: ffffffffffffffda RBX: 00007f912b0776c0 RCX: 00007f912c5db78e [ 272.090358][T20109] RDX: 000000000000000f RSI: 00007f912b0770a0 RDI: 0000000000000005 [ 272.090372][T20109] RBP: 00007f912b077090 R08: 0000000000000000 R09: 0000000000000000 [ 272.090387][T20109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.090473][T20109] R13: 00007f912c896038 R14: 00007f912c895fa0 R15: 00007fff004cffc8 [ 272.090494][T20109] [ 272.152416][T20100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4012: corrupted inode contents [ 272.156486][T20104] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.182028][T20100] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.4012: mark_inode_dirty error [ 272.207251][T20104] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.231089][T12918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.250336][T20115] x_tables: duplicate underflow at hook 2 [ 272.270235][T20104] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.273961][T20100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4012: corrupted inode contents [ 272.286531][T20104] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.291306][T20100] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4012: mark_inode_dirty error [ 272.347683][T20104] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.357277][T20116] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.393857][T20104] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.416496][T20120] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.436762][T20104] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.448115][T20100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4012: corrupted inode contents [ 272.463430][T20104] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.507653][T20100] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 272.516585][T20116] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.526615][T20100] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4012: corrupted inode contents [ 272.548952][T20120] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.583458][T20100] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.4012: mark_inode_dirty error [ 272.627518][T20104] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=12 [ 272.633343][T20100] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 272.637753][T20104] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #12: comm syz.1.4013: corrupted xattr block 6: invalid header [ 272.667691][T20100] EXT4-fs (loop6): 1 truncate cleaned up [ 272.684493][ T1680] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 272.694013][T20100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.709442][T20100] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.721538][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.739095][T20100] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.844057][T20146] set_capacity_and_notify: 8 callbacks suppressed [ 272.844091][T20146] loop4: detected capacity change from 0 to 512 [ 272.869922][T20148] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4028'. [ 272.937143][T20146] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 272.953201][T20162] loop9: detected capacity change from 0 to 512 [ 272.970639][T20146] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 272.972412][T20162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.998138][T20162] ext4 filesystem being mounted at /473/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.024353][T14228] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 273.036950][T20162] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.051493][T20162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.067261][T20162] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.083420][T20169] netlink: 'syz.1.4036': attribute type 10 has an invalid length. [ 273.093700][T20162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.154309][T20178] loop6: detected capacity change from 0 to 2048 [ 273.155438][T20181] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.175282][T20162] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.193345][T20180] loop1: detected capacity change from 0 to 2048 [ 273.211154][T20183] batman_adv: batadv0: Adding interface: dummy0 [ 273.217448][T20183] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.245535][T20162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.245787][T20183] batman_adv: batadv0: Interface activated: dummy0 [ 273.255363][T20170] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.270130][T20162] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.274953][T20183] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4040'. [ 273.288215][T20162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.304177][T20181] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.307442][T20178] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.319815][T20162] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.340122][T20180] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.370016][T20170] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.388722][T20162] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=12 [ 273.402228][T20162] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #12: comm syz.9.4033: corrupted xattr block 6: invalid header [ 273.406513][T17057] IPVS: starting estimator thread 0... [ 273.427824][T20192] loop4: detected capacity change from 0 to 764 [ 273.520082][T20193] IPVS: using max 2160 ests per chain, 108000 per kthread [ 273.563138][T20205] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4044'. [ 273.572592][T20205] IPv6: Can't replace route, no match found [ 273.603036][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 273.603052][ T29] audit: type=1400 audit(2000000032.389:25832): avc: denied { ioctl } for pid=20194 comm="syz.6.4043" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.732886][T20219] lo speed is unknown, defaulting to 1000 [ 273.825037][T20219] lo speed is unknown, defaulting to 1000 [ 273.912891][T20229] ip6gretap2: entered promiscuous mode [ 273.918574][T20229] ip6gretap2: entered allmulticast mode [ 273.966479][T20232] loop4: detected capacity change from 0 to 764 [ 273.986649][T20234] loop9: detected capacity change from 0 to 1024 [ 274.161753][T20243] loop1: detected capacity change from 0 to 2048 [ 274.192395][T20248] xt_NFQUEUE: number of total queues is 0 [ 274.223852][T20243] ext4 filesystem being mounted at /324/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.758536][T20318] loop9: detected capacity change from 0 to 512 [ 274.794550][T20318] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4061: corrupted inode contents [ 274.807036][T20318] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.4061: mark_inode_dirty error [ 274.819880][T20318] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4061: corrupted inode contents [ 274.832157][T20318] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4061: mark_inode_dirty error [ 274.845130][T20318] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4061: corrupted inode contents [ 274.857461][T20318] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 274.866196][T20318] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4061: corrupted inode contents [ 274.878310][T20318] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.4061: mark_inode_dirty error [ 274.890225][T20318] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 274.899671][T20318] EXT4-fs (loop9): 1 truncate cleaned up [ 274.905733][T20318] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.916450][ T4930] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 274.926368][ T4930] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 276.440593][T20208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.498226][T20327] loop6: detected capacity change from 0 to 512 [ 276.526081][T20327] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 276.565310][T20337] IPv6: addrconf: prefix option has invalid lifetime [ 276.578104][T20327] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.604012][ T29] audit: type=1400 audit(2000000035.389:25833): avc: denied { ioctl } for pid=20338 comm="syz.4.4068" path="socket:[68275]" dev="sockfs" ino=68275 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.670836][T20347] x_tables: duplicate underflow at hook 1 [ 276.720678][T20351] netlink: 'syz.1.4069': attribute type 16 has an invalid length. [ 276.728556][T20351] netlink: 'syz.1.4069': attribute type 17 has an invalid length. [ 276.837515][ T29] audit: type=1400 audit(2000000035.619:25834): avc: denied { read } for pid=20350 comm="syz.9.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.917115][ T29] audit: type=1326 audit(2000000035.699:25835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 276.941020][ T29] audit: type=1326 audit(2000000035.699:25836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 276.964849][ T29] audit: type=1326 audit(2000000035.699:25837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 276.988475][ T29] audit: type=1326 audit(2000000035.699:25838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 277.012812][ T29] audit: type=1326 audit(2000000035.699:25839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 277.037020][ T29] audit: type=1326 audit(2000000035.699:25840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20358 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 277.062171][T20351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.104153][T20366] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4077: corrupted inode contents [ 277.116571][T20366] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.4077: mark_inode_dirty error [ 277.128733][T20366] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4077: corrupted inode contents [ 277.141557][T20366] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4077: mark_inode_dirty error [ 277.156028][T20366] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4077: corrupted inode contents [ 277.170651][T20377] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 277.174142][T20366] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 277.193749][T20366] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.4077: corrupted inode contents [ 277.207890][T20366] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.4077: mark_inode_dirty error [ 277.223369][T20366] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 277.232955][T20366] EXT4-fs (loop4): 1 truncate cleaned up [ 277.239372][T20366] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.252017][T14820] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 1 [ 277.375665][T20391] __nla_validate_parse: 2 callbacks suppressed [ 277.375684][T20391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4087'. [ 277.457060][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4091'. [ 277.469371][T20401] vlan4: entered promiscuous mode [ 277.489535][T20404] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4092'. [ 277.521437][T20409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.534079][T20409] EXT4-fs (loop1): 1 truncate cleaned up [ 277.592547][T20413] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4095'. [ 277.631364][T20413] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20413 comm=syz.1.4095 [ 277.665732][T20417] lo speed is unknown, defaulting to 1000 [ 277.676038][T20407] tmpfs: Bad value for 'mpol' [ 277.699375][T20423] netlink: 'syz.4.4099': attribute type 13 has an invalid length. [ 277.769232][T20430] syz.1.4100: attempt to access beyond end of device [ 277.769232][T20430] loop1: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 277.788801][T20430] syz.1.4100: attempt to access beyond end of device [ 277.788801][T20430] loop1: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 277.804071][T20430] Buffer I/O error on dev loop1, logical block 80, lost async page write [ 277.852879][T20425] syz.1.4100: attempt to access beyond end of device [ 277.852879][T20425] loop1: rw=8912896, sector=154, nr_sectors = 8 limit=128 [ 277.929280][T20425] syz.1.4100: attempt to access beyond end of device [ 277.929280][T20425] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 277.959057][T20425] syz.1.4100: attempt to access beyond end of device [ 277.959057][T20425] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 277.997043][T20430] syz.1.4100: attempt to access beyond end of device [ 277.997043][T20430] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 278.052736][T20430] syz.1.4100: attempt to access beyond end of device [ 278.052736][T20430] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 278.056944][T20423] batman_adv: batadv0: Interface deactivated: dummy0 [ 278.079330][T20430] syz.1.4100: attempt to access beyond end of device [ 278.079330][T20430] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 278.096125][T20435] tmpfs: Bad value for 'mpol' [ 278.102068][T20425] syz.1.4100: attempt to access beyond end of device [ 278.102068][T20425] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 278.118375][T20425] syz.1.4100: attempt to access beyond end of device [ 278.118375][T20425] loop1: rw=8388608, sector=154, nr_sectors = 8 limit=128 [ 278.256336][T20423] bond0: left promiscuous mode [ 278.262649][T20423] gretap1: left promiscuous mode [ 278.276014][T20417] lo speed is unknown, defaulting to 1000 [ 278.340270][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4108'. [ 278.513371][T20468] lo speed is unknown, defaulting to 1000 [ 278.582034][T20489] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=20489 comm=syz.8.4117 [ 278.601471][T20490] set_capacity_and_notify: 5 callbacks suppressed [ 278.601488][T20490] loop9: detected capacity change from 0 to 512 [ 278.608356][T20492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4119'. [ 278.615539][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 278.615556][ T29] audit: type=1400 audit(2000000037.389:26109): avc: denied { nlmsg_read } for pid=20491 comm="syz.6.4119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 278.781750][T20468] lo speed is unknown, defaulting to 1000 [ 278.803317][T20484] loop4: detected capacity change from 0 to 512 [ 278.810267][T20490] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4118: corrupted inode contents [ 278.832277][T20490] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.4118: mark_inode_dirty error [ 278.977398][T20490] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4118: corrupted inode contents [ 279.040181][T20490] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4118: mark_inode_dirty error [ 279.066568][T20518] netlink: 'syz.1.4122': attribute type 27 has an invalid length. [ 279.085465][T20490] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4118: corrupted inode contents [ 279.111570][T20490] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 279.144032][T20490] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4118: corrupted inode contents [ 279.157532][T20522] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 279.157532][T20522] program syz.1.4124 not setting count and/or reply_len properly [ 279.263762][T20490] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.4118: mark_inode_dirty error [ 279.288669][T20526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4125'. [ 279.328321][T20490] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 279.355220][T20490] EXT4-fs (loop9): 1 truncate cleaned up [ 279.370200][ T4930] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 279.380048][ T4930] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 279.402490][T20490] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.438597][T20532] netlink: 'syz.1.4127': attribute type 1 has an invalid length. [ 279.519336][T20532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.540360][ T29] audit: type=1400 audit(2000000038.319:26110): avc: denied { connect } for pid=20537 comm="syz.4.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 279.616428][T20532] bond4: (slave gretap1): making interface the new active one [ 279.653304][T20549] loop4: detected capacity change from 0 to 128 [ 279.663886][T20532] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 279.826901][T20558] netlink: 'syz.9.4135': attribute type 10 has an invalid length. [ 279.834918][T20558] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4135'. [ 279.850935][T20558] team0: Port device geneve1 added [ 279.856785][T14820] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.865534][T14820] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.882500][T14820] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.890987][T14820] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.907821][T20553] Buffer I/O error on dev loop4, logical block 76, lost async page write [ 279.922189][T20553] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 279.940303][T20553] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 279.969887][T20577] usb usb7: usbfs: interface 0 claimed by hub while 'syz.9.4140' sets config #4 [ 279.977153][T20574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.980409][ T29] audit: type=1400 audit(2000000038.749:26111): avc: denied { append } for pid=20575 comm="syz.9.4140" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 280.064845][T20574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.083399][ T29] audit: type=1400 audit(2000000038.859:26112): avc: denied { write } for pid=20573 comm="syz.6.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.103137][ T29] audit: type=1400 audit(2000000038.859:26113): avc: denied { setopt } for pid=20573 comm="syz.6.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 280.122817][ T29] audit: type=1400 audit(2000000038.859:26114): avc: denied { bind } for pid=20573 comm="syz.6.4139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 280.178008][T20587] xt_hashlimit: size too large, truncated to 1048576 [ 280.184802][T20587] xt_hashlimit: max too large, truncated to 1048576 [ 280.353883][T20595] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4148'. [ 280.425443][T20597] lo speed is unknown, defaulting to 1000 [ 280.464024][T20597] lo speed is unknown, defaulting to 1000 [ 280.547339][T20604] batadv_slave_1: entered promiscuous mode [ 280.574189][T20604] vlan4: entered allmulticast mode [ 280.631037][T20609] loop4: detected capacity change from 0 to 512 [ 280.641675][T20603] batadv_slave_1: left promiscuous mode [ 280.654140][T20609] ext4 filesystem being mounted at /392/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.679423][T20609] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 280.726109][T20609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 280.736796][T20609] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 280.755705][T20628] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 280.773847][T20609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 280.790462][T20628] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 280.811022][T20632] loop8: detected capacity change from 0 to 1024 [ 280.817619][T20609] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 280.855902][T20609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 280.866032][T20637] lo speed is unknown, defaulting to 1000 [ 280.866403][T20639] loop1: detected capacity change from 0 to 512 [ 280.878514][T20609] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 280.912895][T20609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 280.942082][T20639] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4162: corrupted inode contents [ 280.955662][T20609] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 280.971966][T20642] loop6: detected capacity change from 0 to 8192 [ 280.981622][T20646] loop8: detected capacity change from 0 to 128 [ 280.983836][T20639] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.4162: mark_inode_dirty error [ 280.997190][T20637] lo speed is unknown, defaulting to 1000 [ 281.005260][T20609] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 281.008446][T20646] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 281.040169][T20646] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 281.044479][T20609] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4155: corrupted xattr block 6: invalid header [ 281.050033][T20646] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 281.073764][T20639] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4162: corrupted inode contents [ 281.081622][T20646] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 281.095616][T20639] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4162: mark_inode_dirty error [ 281.123999][T20639] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4162: corrupted inode contents [ 281.190332][T20639] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 281.199679][T20639] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4162: corrupted inode contents [ 281.212080][T20639] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.4162: mark_inode_dirty error [ 281.228296][T20639] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 281.295389][T20639] EXT4-fs (loop1): 1 truncate cleaned up [ 281.301035][T20661] vlan5: entered allmulticast mode [ 281.311735][T20639] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.324583][T14820] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 281.334393][T14820] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:27: Failed to release dquot type 1 [ 281.356172][T20667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4170'. [ 281.516972][T20687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20687 comm=syz.1.4180 [ 281.540983][T20689] loop4: detected capacity change from 0 to 512 [ 281.547753][T20689] EXT4-fs: Ignoring removed orlov option [ 281.568509][T20689] EXT4-fs: Invalid want_extra_isize 4 [ 281.610789][T20694] sg_write: data in/out 62844/1 bytes for SCSI command 0x1c-- guessing data in; [ 281.610789][T20694] program syz.1.4183 not setting count and/or reply_len properly [ 281.675779][T20698] xt_hashlimit: size too large, truncated to 1048576 [ 281.882868][T20714] IPv6: Can't replace route, no match found [ 281.894700][ T29] audit: type=1400 audit(2000000040.679:26115): avc: denied { write } for pid=20677 comm="syz.9.4175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 282.226397][T20738] netlink: 'syz.4.4202': attribute type 10 has an invalid length. [ 282.235822][T20738] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 282.307606][ T29] audit: type=1400 audit(2000000041.089:26116): avc: denied { bind } for pid=20747 comm="syz.9.4208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 282.355938][T20751] netlink: 'syz.6.4207': attribute type 16 has an invalid length. [ 282.362258][T20745] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.363849][T20751] netlink: 'syz.6.4207': attribute type 17 has an invalid length. [ 282.374354][T20745] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.449420][T20758] loop8: detected capacity change from 0 to 512 [ 282.480721][T20758] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 282.640161][T20751] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.713731][T20777] xt_hashlimit: size too large, truncated to 1048576 [ 282.720552][T20777] xt_hashlimit: max too large, truncated to 1048576 [ 282.798860][T20786] xt_NFQUEUE: number of total queues is 0 [ 282.819025][T20790] __nla_validate_parse: 5 callbacks suppressed [ 282.819043][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4224'. [ 282.842630][T20790] bond_slave_0: entered promiscuous mode [ 282.848369][T20790] bond_slave_1: entered promiscuous mode [ 282.857864][T20790] vlan2: entered promiscuous mode [ 282.863141][T20790] bond0: entered promiscuous mode [ 282.906351][T20796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19826 sclass=netlink_route_socket pid=20796 comm=syz.9.4227 [ 282.954566][T20794] Alternate GPT is invalid, using primary GPT. [ 282.961029][T20794] loop8: p2 p3 p7 [ 283.137498][T20820] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 283.167744][T20820] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 283.175767][T20820] FAT-fs (loop9): Filesystem has been set read-only [ 283.431758][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4247'. [ 283.504615][T20860] EXT4-fs mount: 25 callbacks suppressed [ 283.504710][T20860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.517157][T20868] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4253'. [ 283.523334][T20860] ext4 filesystem being mounted at /415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.576755][T20872] veth0_vlan: entered allmulticast mode [ 283.583109][T20860] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.599471][T20860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 283.608866][T20860] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.624500][T20875] set_capacity_and_notify: 6 callbacks suppressed [ 283.624544][T20875] loop8: detected capacity change from 0 to 256 [ 283.638521][T20860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 283.648817][T20860] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.663244][T20860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 283.674925][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 283.674962][ T29] audit: type=1400 audit(2000000042.459:26192): avc: denied { module_load } for pid=20874 comm="syz.8.4256" path="/396/file1/bus" dev="loop8" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 283.691772][T20860] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.707070][T20880] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4258'. [ 283.728120][T20878] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.729750][T20878] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 283.746707][T20860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 283.760654][T20860] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.763224][T20875] Invalid ELF header magic: != ELF [ 283.788853][ T29] audit: type=1326 audit(2000000042.569:26193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.798685][T20883] loop6: detected capacity change from 0 to 2048 [ 283.835863][T20860] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 283.844969][ T29] audit: type=1326 audit(2000000042.569:26194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.853790][T20860] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4249: corrupted xattr block 6: invalid header [ 283.868720][ T29] audit: type=1326 audit(2000000042.569:26195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.906618][ T29] audit: type=1326 audit(2000000042.569:26196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.930523][ T29] audit: type=1326 audit(2000000042.569:26197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.933791][T20885] dns_resolver: Unsupported content type (231) [ 283.954211][ T29] audit: type=1326 audit(2000000042.569:26198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.954246][ T29] audit: type=1326 audit(2000000042.569:26199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 283.974884][T20885] loop1: detected capacity change from 0 to 512 [ 283.985100][ T29] audit: type=1326 audit(2000000042.569:26200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 284.039860][ T29] audit: type=1326 audit(2000000042.569:26201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20882 comm="syz.6.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210db4aeb9 code=0x7ffc0000 [ 284.040185][T20885] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 284.079651][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.093081][T20885] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.4260: casefold flag without casefold feature [ 284.096386][T20883] Alternate GPT is invalid, using primary GPT. [ 284.112402][T20883] loop6: p2 p3 p7 [ 284.136899][T20885] EXT4-fs (loop1): Remounting filesystem read-only [ 284.189278][T20885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.252822][T20900] loop4: detected capacity change from 0 to 512 [ 284.259444][T20900] EXT4-fs: Ignoring removed mblk_io_submit option [ 284.271602][ T5562] udevd[5562]: incorrect ext4 checksum on /dev/loop4 [ 284.313526][T20900] EXT4-fs (loop4): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 284.330690][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 284.330815][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 284.350789][T20904] xt_hashlimit: size too large, truncated to 1048576 [ 284.364088][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 284.504398][T20910] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4267'. [ 284.513709][T20910] IPv6: Can't replace route, no match found [ 284.679756][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.715919][T20918] loop1: detected capacity change from 0 to 512 [ 284.745695][T20918] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4270: corrupted inode contents [ 284.768146][T20918] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.4270: mark_inode_dirty error [ 284.781261][T20925] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4273'. [ 284.790593][T20918] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4270: corrupted inode contents [ 284.826347][T20918] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4270: mark_inode_dirty error [ 284.853629][T20918] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4270: corrupted inode contents [ 284.865907][T20918] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 284.875048][T20918] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4270: corrupted inode contents [ 284.887376][T20918] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.4270: mark_inode_dirty error [ 284.892963][T20930] netlink: 'syz.9.4274': attribute type 16 has an invalid length. [ 284.898859][T20918] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 284.906506][T20930] netlink: 'syz.9.4274': attribute type 17 has an invalid length. [ 284.917007][T20918] EXT4-fs (loop1): 1 truncate cleaned up [ 284.930517][ T41] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:2: Failed to release dquot type 1 [ 284.951047][T20918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.967598][T20918] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.978942][T20930] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.995157][T20929] loop6: detected capacity change from 0 to 2048 [ 285.006639][T20918] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.044204][T20929] Alternate GPT is invalid, using primary GPT. [ 285.050703][T20929] loop6: p2 p3 p7 [ 285.083226][ T3000] Alternate GPT is invalid, using primary GPT. [ 285.089682][ T3000] loop6: p2 p3 p7 [ 285.195294][T20939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4279'. [ 285.207355][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 285.231400][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 285.236388][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 285.282965][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 285.283493][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 285.294252][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 285.407412][T20936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4278'. [ 285.416518][T20936] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4278'. [ 285.425464][T20936] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.476317][T20957] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4285'. [ 285.609139][T20967] lo speed is unknown, defaulting to 1000 [ 285.663246][T20973] vlan5: entered allmulticast mode [ 285.680049][T20967] lo speed is unknown, defaulting to 1000 [ 285.770218][T20974] loop8: detected capacity change from 0 to 8192 [ 285.949001][T21008] netlink: 'syz.8.4306': attribute type 32 has an invalid length. [ 285.957700][T18329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.971425][T20993] wireguard0: entered promiscuous mode [ 285.977050][T20993] wireguard0: entered allmulticast mode [ 285.986290][T21010] loop9: detected capacity change from 0 to 128 [ 286.018771][T21008] bond5: option coupled_control: invalid value (32) [ 286.026513][T21008] bond5 (unregistering): Released all slaves [ 286.174164][ T4926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.184612][ T4926] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.235305][ T4926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.245795][ T4926] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.272952][ T4926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.283636][ T4926] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.284079][T21035] IPv6: addrconf: prefix option has invalid lifetime [ 286.318971][T21039] netlink: 'syz.1.4315': attribute type 10 has an invalid length. [ 286.333961][ T4926] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.344387][ T4926] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.378884][T21044] loop4: detected capacity change from 0 to 512 [ 286.387169][T21044] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 286.398125][T21044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 286.417262][T21044] ext4 filesystem being mounted at /420/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.446309][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 286.521410][ T4926] dummy0: left allmulticast mode [ 286.535375][ T4926] dummy0: left promiscuous mode [ 286.540554][ T4926] bridge0: port 3(dummy0) entered disabled state [ 286.557034][ T4926] bridge_slave_1: left allmulticast mode [ 286.562910][ T4926] bridge_slave_1: left promiscuous mode [ 286.563182][ T4926] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.570149][ T4926] bridge_slave_0: left allmulticast mode [ 286.570169][ T4926] bridge_slave_0: left promiscuous mode [ 286.570299][ T4926] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.582470][T21061] loop1: detected capacity change from 0 to 512 [ 286.584726][T21061] EXT4-fs: dax option not supported [ 286.587286][T21061] cgroup: Need name or subsystem set [ 286.614705][T21063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.614776][T21063] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.728696][T21071] EXT4-fs: Ignoring removed nobh option [ 286.737680][T21073] netlink: 'syz.6.4325': attribute type 1 has an invalid length. [ 286.753424][T21071] EXT4-fs (loop1): orphan cleanup on readonly fs [ 286.776655][T21077] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 286.776783][T21071] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.4323: ea_inode file size=4 entry size=6 [ 286.802292][ T4926] bond1 (unregistering): (slave gretap1): Releasing active interface [ 286.802409][T21071] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 286.824076][T21071] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.4323: corrupted inode contents [ 286.831229][T21077] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 286.855303][T21071] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #15: comm syz.1.4323: mark_inode_dirty error [ 286.876782][T21071] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #15: comm syz.1.4323: corrupted inode contents [ 286.894277][T21071] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.4323: mark_inode_dirty error [ 286.906841][T21071] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.4323: mark inode dirty (error -117) [ 286.923609][T21071] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 286.933268][T21071] EXT4-fs (loop1): 1 orphan inode deleted [ 286.939667][T21071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 286.953887][ T4926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.963335][ T4926] bond_slave_0: left promiscuous mode [ 286.970332][ T4926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.979598][ T4926] bond_slave_1: left promiscuous mode [ 286.985625][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.986449][ T4926] bond0 (unregistering): Released all slaves [ 287.008736][ T4926] bond1 (unregistering): Released all slaves [ 287.026389][ T4926] bond2 (unregistering): Released all slaves [ 287.029697][T21088] xt_hashlimit: size too large, truncated to 1048576 [ 287.073248][T21091] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.080447][T21091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.089195][T21091] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 287.126670][T21073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.148597][T21091] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.4328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 287.185997][T21091] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.4328: couldn't read orphan inode 11 (err -117) [ 287.198852][T21091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.221310][T21085] bond1: (slave gretap1): making interface the new active one [ 287.230362][T14228] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 287.240806][T21085] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 287.277977][T21080] syzkaller0: entered promiscuous mode [ 287.283607][T21080] syzkaller0: entered allmulticast mode [ 287.333050][T21091] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.4328: Invalid block bitmap block 0 in block_group 0 [ 287.361935][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.369350][ T4926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.376180][T21091] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4328: Failed to acquire dquot type 0 [ 287.409942][T21116] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=21116 comm=syz.1.4331 [ 287.425380][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.484769][ T4926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.492896][ T4926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.515941][ T4926] veth1_macvtap: left promiscuous mode [ 287.527886][ T4926] veth0_macvtap: left promiscuous mode [ 287.529268][T21119] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=21119 comm=syz.1.4331 [ 287.544759][ T4926] veth0_vlan: left promiscuous mode [ 287.569415][T21118] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4332: corrupted inode contents [ 287.599055][T21118] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.4332: mark_inode_dirty error [ 287.611570][T21118] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4332: corrupted inode contents [ 287.626555][T21127] netlink: 'syz.6.4335': attribute type 2 has an invalid length. [ 287.627336][T21118] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4332: mark_inode_dirty error [ 287.634358][T21127] netlink: 'syz.6.4335': attribute type 3 has an invalid length. [ 287.647203][T21118] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4332: corrupted inode contents [ 287.678792][T21118] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 287.701698][T21118] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4332: corrupted inode contents [ 287.722749][T21118] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.4332: mark_inode_dirty error [ 287.736290][T21118] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 287.744363][T14815] smc: removing ib device syz1 [ 287.752866][T21118] EXT4-fs (loop9): 1 truncate cleaned up [ 287.758950][ T23] lo speed is unknown, defaulting to 1000 [ 287.764839][ T23] syz1: Port: 1 Link DOWN [ 287.770316][ T4930] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 1 [ 287.806590][T21118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.825808][T21118] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.839103][T21118] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.872354][T21135] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4337: corrupted inode contents [ 287.886259][T21135] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.4337: mark_inode_dirty error [ 287.902837][T12918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.915030][T21135] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4337: corrupted inode contents [ 287.927430][T21135] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4337: mark_inode_dirty error [ 287.939030][T21135] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4337: corrupted inode contents [ 287.981119][T21135] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 288.017842][T21135] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4337: corrupted inode contents [ 288.066126][T21154] netlink: 'syz.4.4342': attribute type 6 has an invalid length. [ 288.080458][T21135] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.4337: mark_inode_dirty error [ 288.080507][T21145] netlink: 'syz.6.4339': attribute type 16 has an invalid length. [ 288.080524][T21145] netlink: 'syz.6.4339': attribute type 17 has an invalid length. [ 288.113190][T21147] batadv_slave_1: entered promiscuous mode [ 288.151214][T21162] __nla_validate_parse: 12 callbacks suppressed [ 288.151230][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4344'. [ 288.168916][T21135] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 288.195852][T21145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.217523][T21147] vlan5: entered allmulticast mode [ 288.235431][T21135] EXT4-fs (loop1): 1 truncate cleaned up [ 288.255700][T21135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.278238][T21135] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.289753][T14815] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 288.304260][T21162] macvlan4: entered promiscuous mode [ 288.310164][T21162] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 288.322548][T21135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.332970][T21171] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4345'. [ 288.355369][T21146] batadv_slave_1: left promiscuous mode [ 288.405282][T21173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4346'. [ 288.470270][T21182] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8854c01c, mo2=0002] [ 288.478456][T21182] EXT4-fs (loop6): orphan cleanup on readonly fs [ 288.498009][T21182] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 288.513070][T21182] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 288.519857][T21182] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #13: comm syz.6.4349: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 288.549009][T21183] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.556442][T21182] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4349: couldn't read orphan inode 13 (err -117) [ 288.610398][T21183] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 288.634332][T21198] set_capacity_and_notify: 8 callbacks suppressed [ 288.634349][T21198] loop1: detected capacity change from 0 to 512 [ 288.639217][T21182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.660954][T21183] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.673123][T21198] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 288.700081][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 288.700098][ T29] audit: type=1400 audit(2000000047.479:26371): avc: denied { append } for pid=21177 comm="syz.6.4349" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 288.752489][T21183] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.4350'. [ 288.763319][T21183] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.4350: lblock 0 mapped to illegal pblock 0 (length 6) [ 288.782638][T21183] EXT4-fs error (device loop9): ext4_ext_remove_space:2955: inode #15: comm syz.9.4350: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 288.782910][T21198] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 288.821234][T21198] EXT4-fs (loop1): 1 truncate cleaned up [ 288.828598][T21198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.829911][T21183] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.4350: lblock 0 mapped to illegal pblock 0 (length 1) [ 288.855261][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4358'. [ 288.864645][T21211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4358'. [ 288.875741][T19245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.886989][T21214] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4357'. [ 288.923108][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.944941][T21214] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 288.963861][T21220] loop4: detected capacity change from 0 to 512 [ 288.980389][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 288.995412][T21225] netlink: 376 bytes leftover after parsing attributes in process `syz.8.4357'. [ 289.022423][T21229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4363'. [ 289.031600][T21229] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4363'. [ 289.114001][T21220] EXT4-fs (loop4): 1 truncate cleaned up [ 289.117938][T21229] vlan3: entered allmulticast mode [ 289.125110][T21229] vlan0: entered allmulticast mode [ 289.132087][T21220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.154677][T21241] IPv6: addrconf: prefix option has invalid lifetime [ 289.274408][T21258] loop8: detected capacity change from 0 to 128 [ 289.308875][T21258] FAT-fs (loop8): bogus number of reserved sectors [ 289.315508][T21258] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 289.324885][T21258] FAT-fs (loop8): Can't find a valid FAT filesystem [ 289.441769][ T29] audit: type=1400 audit(2000000048.229:26372): avc: denied { sqpoll } for pid=21256 comm="syz.8.4371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 289.477499][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.592612][T21291] xt_hashlimit: size too large, truncated to 1048576 [ 289.599397][T21291] xt_hashlimit: max too large, truncated to 1048576 [ 289.655521][ T29] audit: type=1400 audit(2000000048.439:26373): avc: denied { firmware_load } for pid=21299 comm="syz.1.4384" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 289.708369][T21306] xt_hashlimit: size too large, truncated to 1048576 [ 289.880654][T21320] xt_NFQUEUE: number of total queues is 0 [ 289.945418][T21328] loop9: detected capacity change from 0 to 2048 [ 289.975572][T21328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.007966][T21328] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.059186][ T29] audit: type=1400 audit(2000000048.839:26374): avc: denied { getopt } for pid=21337 comm="syz.4.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 290.102794][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.154491][T21345] validate_nla: 1 callbacks suppressed [ 290.154508][T21345] netlink: 'syz.6.4401': attribute type 10 has an invalid length. [ 290.158124][ T29] audit: type=1400 audit(2000000048.869:26375): avc: denied { bind } for pid=21337 comm="syz.4.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 290.210997][T21345] team0: Port device geneve1 added [ 290.259479][ T29] audit: type=1400 audit(2000000049.039:26376): avc: denied { ioctl } for pid=21349 comm="syz.4.4402" path="socket:[72232]" dev="sockfs" ino=72232 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 290.319046][T21360] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 290.336566][T21351] syzkaller1: entered promiscuous mode [ 290.342177][T21351] syzkaller1: entered allmulticast mode [ 290.360987][T21363] loop6: detected capacity change from 0 to 512 [ 290.377263][ T29] audit: type=1400 audit(2000000049.159:26377): avc: denied { create } for pid=21359 comm="syz.9.4404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 290.462880][T21363] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4405: corrupted inode contents [ 290.481213][T21363] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.4405: mark_inode_dirty error [ 290.493058][T21363] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4405: corrupted inode contents [ 290.506774][T21363] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.4405: mark_inode_dirty error [ 290.518364][T21363] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4405: corrupted inode contents [ 290.530878][T21363] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 290.539702][T21363] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.4405: corrupted inode contents [ 290.552442][T21363] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.4405: mark_inode_dirty error [ 290.564318][T21363] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 290.575153][T21363] EXT4-fs (loop6): 1 truncate cleaned up [ 290.581406][T21363] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.581983][T21377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21377 comm=syz.9.4408 [ 290.594343][T21363] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.607310][T14822] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 290.627037][T14822] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 1 [ 290.658959][T21379] loop8: detected capacity change from 0 to 512 [ 290.668769][T21377] loop9: detected capacity change from 0 to 512 [ 290.696093][T21363] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.709237][T21379] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.740187][T21377] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4408: corrupted inode contents [ 290.770072][T21379] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.785479][T21377] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #16: comm syz.9.4408: mark_inode_dirty error [ 290.812974][T21389] loop6: detected capacity change from 0 to 512 [ 290.819457][T21379] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.4410: corrupted xattr block 6: invalid header [ 290.833397][T21377] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4408: corrupted inode contents [ 290.836001][T21388] loop4: detected capacity change from 0 to 512 [ 290.853781][T21377] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.4408: mark_inode_dirty error [ 290.867040][T21389] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.4412: inode has both inline data and extents flags [ 290.880731][T21379] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 290.880823][T21377] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4408: corrupted inode contents [ 290.889875][T21379] EXT4-fs error (device loop8): ext4_xattr_block_get:597: inode #12: comm syz.8.4410: corrupted xattr block 6: invalid header [ 290.902621][T21389] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4412: couldn't read orphan inode 15 (err -117) [ 290.920632][T21377] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 290.936521][T21389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.954672][T21388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 290.986517][T21379] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=12 [ 290.999271][T21377] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #16: comm syz.9.4408: corrupted inode contents [ 291.030431][T21377] EXT4-fs error (device loop9): ext4_truncate:4635: inode #16: comm syz.9.4408: mark_inode_dirty error [ 291.043801][T21388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.056587][T21377] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 291.066038][T21377] EXT4-fs (loop9): 1 truncate cleaned up [ 291.070189][T21388] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.073568][T21377] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.099636][T14815] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 291.109538][T14815] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 291.121886][T21377] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.132929][T12918] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.170020][ T29] audit: type=1400 audit(2000000049.939:26378): avc: denied { setattr } for pid=21387 comm="syz.6.4412" name="file0" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 291.209672][T19245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.218421][T21377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.246175][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.352489][T21412] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 291.462203][T21424] macvlan5: entered promiscuous mode [ 291.488621][T21424] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 291.604975][T21446] loop9: detected capacity change from 0 to 512 [ 291.660187][T21446] EXT4-fs: Ignoring removed bh option [ 291.759241][T21446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.824734][T21446] ext4 filesystem being mounted at /567/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 291.884785][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.950587][T21486] EXT4-fs: Ignoring removed orlov option [ 291.957544][T21486] EXT4-fs: Ignoring removed oldalloc option [ 291.991201][T21486] EXT4-fs (loop9): invalid first ino: 0 [ 292.059509][T21494] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 292.078276][T21494] ext4 filesystem being mounted at /569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 292.192905][T21500] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 292.979488][T21521] xt_hashlimit: size too large, truncated to 1048576 [ 292.986239][T21521] xt_hashlimit: max too large, truncated to 1048576 [ 293.506515][T21551] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 293.526467][T21552] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 293.563313][T21552] __nla_validate_parse: 17 callbacks suppressed [ 293.563332][T21552] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4459'. [ 294.277508][T21557] set_capacity_and_notify: 2 callbacks suppressed [ 294.277593][T21557] loop1: detected capacity change from 0 to 1024 [ 294.292631][T21557] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.305946][T21557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 294.316079][T21557] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.328692][T21557] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4461: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 294.348306][T21557] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4461: couldn't read orphan inode 11 (err -117) [ 294.363487][T21557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.391304][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.431056][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 294.431145][ T29] audit: type=1400 audit(2000000053.219:26417): avc: denied { audit_write } for pid=21559 comm="syz.1.4462" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 294.459235][ T29] audit: type=1107 audit(2000000053.219:26418): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='•' [ 294.515508][T21564] loop1: detected capacity change from 0 to 764 [ 294.523280][T21564] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4463'. [ 294.592993][T21568] FAULT_INJECTION: forcing a failure. [ 294.592993][T21568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.597720][T21467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.606166][T21568] CPU: 0 UID: 0 PID: 21568 Comm: syz.1.4465 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.606198][T21568] Tainted: [W]=WARN [ 294.606206][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.606290][T21568] Call Trace: [ 294.606299][T21568] [ 294.606309][T21568] __dump_stack+0x1d/0x30 [ 294.606332][T21568] dump_stack_lvl+0x95/0xd0 [ 294.606416][T21568] dump_stack+0x15/0x1b [ 294.606438][T21568] should_fail_ex+0x263/0x280 [ 294.606470][T21568] should_fail+0xb/0x20 [ 294.606498][T21568] should_fail_usercopy+0x1a/0x20 [ 294.606582][T21568] strncpy_from_user+0x27/0x250 [ 294.606611][T21568] __se_sys_memfd_create+0x20f/0x3b0 [ 294.606647][T21568] __x64_sys_memfd_create+0x31/0x40 [ 294.606722][T21568] x64_sys_call+0x28cb/0x3000 [ 294.606748][T21568] do_syscall_64+0xc0/0x2a0 [ 294.606780][T21568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.606835][T21568] RIP: 0033:0x7f40b7a2aeb9 [ 294.606852][T21568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.606933][T21568] RSP: 002b:00007f40b6486e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 294.606954][T21568] RAX: ffffffffffffffda RBX: 000000000000051b RCX: 00007f40b7a2aeb9 [ 294.606970][T21568] RDX: 00007f40b6486ee0 RSI: 0000000000000000 RDI: 00007f40b7a97333 [ 294.606984][T21568] RBP: 0000200000001200 R08: 00000000ffffffff R09: 0000000000000000 [ 294.607021][T21568] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000640 [ 294.607035][T21568] R13: 00007f40b6486ee0 R14: 00007f40b6486ea0 R15: 0000200000000000 [ 294.607116][T21568] [ 294.811736][T11989] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.857620][T21571] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4467'. [ 294.862403][T21573] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4468'. [ 294.897260][T21575] netlink: 'syz.9.4466': attribute type 1 has an invalid length. [ 294.935875][T21579] loop4: detected capacity change from 0 to 512 [ 294.937956][T21575] bond11: entered promiscuous mode [ 294.947841][T21575] 8021q: adding VLAN 0 to HW filter on device bond11 [ 294.971153][T21575] netlink: 'syz.9.4466': attribute type 1 has an invalid length. [ 295.026119][T21588] loop9: detected capacity change from 0 to 1024 [ 295.033093][T21588] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.033971][T21579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.040293][T21588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.055777][T21579] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.085421][T21588] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 295.097053][T21588] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.4472: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 295.116824][T21588] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4472: couldn't read orphan inode 11 (err -117) [ 295.121341][T21579] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4469: corrupted xattr block 6: invalid header [ 295.129617][T21588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.176643][T21579] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 295.177091][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.185737][T21579] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.4469: corrupted xattr block 6: invalid header [ 295.210719][T21579] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 295.247266][T21594] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4471'. [ 295.281155][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.320512][ T29] audit: type=1400 audit(2000000054.099:26419): avc: denied { ioctl } for pid=21597 comm="syz.4.4475" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=72611 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 295.368300][T21602] lo speed is unknown, defaulting to 1000 [ 295.427434][T21607] xt_NFQUEUE: number of total queues is 0 [ 295.537652][T21613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4480'. [ 295.652966][ T29] audit: type=1400 audit(2000000054.439:26420): avc: denied { bind } for pid=21601 comm="syz.9.4473" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.730799][T21621] loop1: detected capacity change from 0 to 1024 [ 295.748553][ T29] audit: type=1400 audit(2000000054.459:26421): avc: denied { getopt } for pid=21601 comm="syz.9.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 295.768738][T21621] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.798381][T21621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.813178][T21621] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 295.834547][T21621] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4483: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 295.867508][T21621] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4483: couldn't read orphan inode 11 (err -117) [ 295.887604][T21621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.965129][T12851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.979783][T21632] netlink: 'syz.8.4488': attribute type 12 has an invalid length. [ 296.043284][T21636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4490'. [ 296.054625][T21636] vlan5: entered allmulticast mode [ 296.059914][T21636] dummy0: entered allmulticast mode [ 296.138306][T21640] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4491'. [ 296.189893][T21642] loop4: detected capacity change from 0 to 512 [ 296.199965][T21644] netlink: 'syz.1.4494': attribute type 4 has an invalid length. [ 296.230294][T21642] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 296.257218][T21642] EXT4-fs (loop4): orphan cleanup on readonly fs [ 296.264455][T21642] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.4493: Bad quota inum: 5, type: 1 [ 296.275629][T21642] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 296.295257][T21642] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 296.302689][T21642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.315670][T21642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.362173][T21642] loop4: detected capacity change from 0 to 256 [ 296.399307][T21649] loop1: detected capacity change from 0 to 512 [ 296.441555][T21642] FAT-fs (loop4): Directory bread(block 64) failed [ 296.454840][T21642] FAT-fs (loop4): Directory bread(block 65) failed [ 296.463898][T21649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4494: corrupted inode contents [ 296.480172][T21642] FAT-fs (loop4): Directory bread(block 66) failed [ 296.490265][T21642] FAT-fs (loop4): Directory bread(block 67) failed [ 296.507222][T21649] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.4494: mark_inode_dirty error [ 296.518828][T21642] FAT-fs (loop4): Directory bread(block 68) failed [ 296.525592][T21642] FAT-fs (loop4): Directory bread(block 69) failed [ 296.540977][T21642] FAT-fs (loop4): Directory bread(block 70) failed [ 296.551760][T21649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4494: corrupted inode contents [ 296.570338][T21642] FAT-fs (loop4): Directory bread(block 71) failed [ 296.587059][T21642] FAT-fs (loop4): Directory bread(block 72) failed [ 296.594058][T21649] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.4494: mark_inode_dirty error [ 296.605416][T21642] FAT-fs (loop4): Directory bread(block 73) failed [ 296.624861][T21649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4494: corrupted inode contents [ 296.642033][T21642] bio_check_eod: 66 callbacks suppressed [ 296.642049][T21642] syz.4.4493: attempt to access beyond end of device [ 296.642049][T21642] loop4: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 296.651289][T21649] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 296.700380][T21649] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.4494: corrupted inode contents [ 296.730241][T21649] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.4494: mark_inode_dirty error [ 296.761377][T21649] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 296.771308][T21649] EXT4-fs (loop1): 1 truncate cleaned up [ 296.802260][T14822] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 296.812230][T14822] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 1 [ 296.830442][T21649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.846059][T21649] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.849368][T21663] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4499'. [ 296.866262][T21663] IPv6: Can't replace route, no match found [ 296.866996][T21649] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.882736][T21668] FAULT_INJECTION: forcing a failure. [ 296.882736][T21668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.895897][T21668] CPU: 0 UID: 0 PID: 21668 Comm: syz.8.4500 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 296.896063][T21668] Tainted: [W]=WARN [ 296.896071][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.896085][T21668] Call Trace: [ 296.896094][T21668] [ 296.896104][T21668] __dump_stack+0x1d/0x30 [ 296.896128][T21668] dump_stack_lvl+0x95/0xd0 [ 296.896243][T21668] dump_stack+0x15/0x1b [ 296.896262][T21668] should_fail_ex+0x263/0x280 [ 296.896293][T21668] should_fail+0xb/0x20 [ 296.896390][T21668] should_fail_usercopy+0x1a/0x20 [ 296.896485][T21668] _copy_from_user+0x1c/0xb0 [ 296.896509][T21668] do_arpt_set_ctl+0x3b6/0xad0 [ 296.896536][T21668] ? _raw_spin_unlock_bh+0x18/0x20 [ 296.896634][T21668] ? _raw_spin_lock_bh+0x56/0xb0 [ 296.896663][T21668] ? _raw_spin_unlock_bh+0x18/0x20 [ 296.896696][T21668] nf_setsockopt+0x199/0x1b0 [ 296.896793][T21668] ip_setsockopt+0x102/0x110 [ 296.896825][T21668] udp_setsockopt+0x99/0xb0 [ 296.896849][T21668] sock_common_setsockopt+0x69/0x80 [ 296.896884][T21668] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 296.896908][T21668] __sys_setsockopt+0x184/0x200 [ 296.896955][T21668] __x64_sys_setsockopt+0x64/0x80 [ 296.896997][T21668] x64_sys_call+0x21d5/0x3000 [ 296.897105][T21668] do_syscall_64+0xc0/0x2a0 [ 296.897139][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.897159][T21668] RIP: 0033:0x7f7b0d77aeb9 [ 296.897192][T21668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.897211][T21668] RSP: 002b:00007f7b0c1d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 296.897234][T21668] RAX: ffffffffffffffda RBX: 00007f7b0d9f5fa0 RCX: 00007f7b0d77aeb9 [ 296.897251][T21668] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 296.897289][T21668] RBP: 00007f7b0c1d7090 R08: 0000000000000538 R09: 0000000000000000 [ 296.897301][T21668] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 296.897314][T21668] R13: 00007f7b0d9f6038 R14: 00007f7b0d9f5fa0 R15: 00007fff13891f88 [ 296.897333][T21668] [ 297.128261][T21670] loop4: detected capacity change from 0 to 1024 [ 297.137829][T21670] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.155423][T21670] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.164755][T21670] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 297.180633][T21670] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.4501: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 297.203853][T21670] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4501: couldn't read orphan inode 11 (err -117) [ 297.218764][T21670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.347303][T14228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.410902][T21684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4504'. [ 297.554448][T21698] bridge0: entered promiscuous mode [ 297.577683][T21698] bridge0: port 3(macvtap1) entered blocking state [ 297.584460][T21698] bridge0: port 3(macvtap1) entered disabled state [ 297.623298][T21694] SELinux: ebitmap start bit (29548) is not a multiple of the map unit size (64) [ 297.651241][T21698] macvtap1: entered allmulticast mode [ 297.656765][T21698] bridge0: entered allmulticast mode [ 297.680592][T21694] SELinux: failed to load policy [ 297.690428][T21698] macvtap1: left allmulticast mode [ 297.692323][ T29] audit: type=1400 audit(2000000056.479:26422): avc: denied { read } for pid=21693 comm="syz.9.4509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 297.695612][T21698] bridge0: left allmulticast mode [ 297.770533][T21698] bridge0: left promiscuous mode [ 297.856301][T21709] loop9: detected capacity change from 0 to 1024 [ 297.865078][T21709] EXT4-fs: Ignoring removed mblk_io_submit option [ 297.899376][T21709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 297.913688][T21711] FAULT_INJECTION: forcing a failure. [ 297.913688][T21711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.917469][T21709] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 297.926816][T21711] CPU: 0 UID: 0 PID: 21711 Comm: syz.8.4516 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 297.926924][T21711] Tainted: [W]=WARN [ 297.926932][T21711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 297.926945][T21711] Call Trace: [ 297.926953][T21711] [ 297.926962][T21711] __dump_stack+0x1d/0x30 [ 297.926990][T21711] dump_stack_lvl+0x95/0xd0 [ 297.927070][T21711] dump_stack+0x15/0x1b [ 297.927090][T21711] should_fail_ex+0x263/0x280 [ 297.927122][T21711] should_fail+0xb/0x20 [ 297.927151][T21711] should_fail_usercopy+0x1a/0x20 [ 297.927218][T21711] _copy_from_user+0x1c/0xb0 [ 297.927241][T21711] ___sys_sendmsg+0xc1/0x1e0 [ 297.927290][T21711] __x64_sys_sendmsg+0xd4/0x160 [ 297.927315][T21711] x64_sys_call+0x17ba/0x3000 [ 297.927341][T21711] do_syscall_64+0xc0/0x2a0 [ 297.927373][T21711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.927455][T21711] RIP: 0033:0x7f7b0d77aeb9 [ 297.927474][T21711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.927493][T21711] RSP: 002b:00007f7b0c1d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.927573][T21711] RAX: ffffffffffffffda RBX: 00007f7b0d9f5fa0 RCX: 00007f7b0d77aeb9 [ 297.927588][T21711] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 297.927602][T21711] RBP: 00007f7b0c1d7090 R08: 0000000000000000 R09: 0000000000000000 [ 297.927617][T21711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.927655][T21711] R13: 00007f7b0d9f6038 R14: 00007f7b0d9f5fa0 R15: 00007fff13891f88 [ 297.927677][T21711] [ 298.067008][T21716] netlink: 'syz.1.4519': attribute type 1 has an invalid length. [ 298.144877][T21709] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #11: comm syz.9.4515: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 298.171597][T21716] 8021q: adding VLAN 0 to HW filter on device bond5 [ 298.188072][T21721] xt_NFQUEUE: number of total queues is 0 [ 298.196472][T21709] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.4515: couldn't read orphan inode 11 (err -117) [ 298.263006][T21709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.386487][T11989] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.516924][T21756] netlink: 'syz.4.4532': attribute type 10 has an invalid length. [ 298.525797][T21756] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 298.609236][ T29] audit: type=1326 audit(2000000313.388:26423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.1.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b7a2aeb9 code=0x7ffc0000 [ 298.646321][ T29] audit: type=1326 audit(2000000313.418:26424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.1.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b7a2aeb9 code=0x7ffc0000 [ 298.650576][T21769] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.670009][ T29] audit: type=1326 audit(2000000313.418:26425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21764 comm="syz.1.4535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b7a2aeb9 code=0x7ffc0000 [ 298.701494][T21769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.715016][T21769] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.751591][T21769] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.4537: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 298.766030][T21773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.791623][T21769] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4537: couldn't read orphan inode 11 (err -117) [ 298.805205][T21773] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.829481][T21769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.830309][T19245] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.043774][T21796] SELinux: ebitmap start bit (29548) is not a multiple of the map unit size (64) [ 299.054879][T21796] SELinux: failed to load policy [ 299.136293][T21808] vlan5: entered allmulticast mode [ 299.181754][T21808] __nla_validate_parse: 4 callbacks suppressed [ 299.181770][T21808] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4549'. [ 299.213966][T21790] netlink: 'syz.4.4544': attribute type 7 has an invalid length. [ 299.222327][T21790] netlink: 'syz.4.4544': attribute type 7 has an invalid length. [ 299.237229][T21790] tmpfs: Turning off swap in unprivileged tmpfs mounts unsupported [ 299.271374][T21813] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 299.289884][T21813] EXT4-fs (loop8): orphan cleanup on readonly fs [ 299.297340][T21813] EXT4-fs error (device loop8): ext4_quota_enable:7173: comm syz.8.4550: Bad quota inum: 5, type: 1 [ 299.313450][T21813] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=5). Please run e2fsck to fix. [ 299.348705][T21813] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 299.361293][T21820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4551'. [ 299.370928][T21820] IPv6: Can't replace route, no match found [ 299.399810][T21813] set_capacity_and_notify: 4 callbacks suppressed [ 299.399829][T21813] loop8: detected capacity change from 0 to 256 [ 299.444377][T21813] FAT-fs (loop8): Directory bread(block 64) failed [ 299.460197][T21813] FAT-fs (loop8): Directory bread(block 65) failed [ 299.475693][T21813] FAT-fs (loop8): Directory bread(block 66) failed [ 299.490145][T21813] FAT-fs (loop8): Directory bread(block 67) failed [ 299.502260][T21813] FAT-fs (loop8): Directory bread(block 68) failed [ 299.515054][T21813] FAT-fs (loop8): Directory bread(block 69) failed [ 299.533283][T21813] FAT-fs (loop8): Directory bread(block 70) failed [ 299.542123][T21834] loop4: detected capacity change from 0 to 1024 [ 299.550124][T21834] EXT4-fs: Ignoring removed mblk_io_submit option [ 299.556906][T21813] FAT-fs (loop8): Directory bread(block 71) failed [ 299.571587][T21834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 299.580260][T21813] FAT-fs (loop8): Directory bread(block 72) failed [ 299.586902][T21813] FAT-fs (loop8): Directory bread(block 73) failed [ 299.594136][T21834] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 299.614103][T21813] syz.8.4550: attempt to access beyond end of device [ 299.614103][T21813] loop8: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 299.630730][T21834] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.4554: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 299.666003][T21834] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4554: couldn't read orphan inode 11 (err -117) [ 299.794677][T21862] netlink: 'syz.4.4558': attribute type 16 has an invalid length. [ 299.802818][T21862] netlink: 'syz.4.4558': attribute type 17 has an invalid length. [ 299.888055][T21862] 8021q: adding VLAN 0 to HW filter on device .` [ 299.897554][T21862] batman_adv: batadv0: Interface activated: dummy0 [ 299.916782][T21862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.976524][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 299.976540][ T29] audit: type=1400 audit(2000000314.758:26432): avc: denied { node_bind } for pid=21873 comm="syz.8.4562" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 300.005676][T21874] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 300.021210][T21871] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4561'. [ 300.092094][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 300.129563][T21884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4566'. [ 300.194313][T21882] loop8: detected capacity change from 0 to 512 [ 300.285891][T21898] loop1: detected capacity change from 0 to 1024 [ 300.317278][T21898] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.356815][T21898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 300.370079][T21898] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.390201][ T29] audit: type=1400 audit(2000000315.168:26433): avc: denied { setopt } for pid=21911 comm="syz.8.4574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 300.429841][T21898] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4570: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 300.468462][T21898] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4570: couldn't read orphan inode 11 (err -117) [ 300.571869][T21926] FAULT_INJECTION: forcing a failure. [ 300.571869][T21926] name failslab, interval 1, probability 0, space 0, times 0 [ 300.584627][T21926] CPU: 1 UID: 0 PID: 21926 Comm: syz.4.4577 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 300.584659][T21926] Tainted: [W]=WARN [ 300.584666][T21926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.584747][T21926] Call Trace: [ 300.584755][T21926] [ 300.584764][T21926] __dump_stack+0x1d/0x30 [ 300.584801][T21926] dump_stack_lvl+0x95/0xd0 [ 300.584906][T21926] dump_stack+0x15/0x1b [ 300.584927][T21926] should_fail_ex+0x263/0x280 [ 300.584961][T21926] should_failslab+0x8c/0xb0 [ 300.584987][T21926] kmem_cache_alloc_noprof+0x68/0x490 [ 300.585045][T21926] ? security_inode_alloc+0x37/0x100 [ 300.585082][T21926] security_inode_alloc+0x37/0x100 [ 300.585116][T21926] inode_init_always_gfp+0x4b7/0x500 [ 300.585170][T21926] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 300.585202][T21926] alloc_inode+0x58/0x170 [ 300.585266][T21926] new_inode+0x1d/0xe0 [ 300.585289][T21926] shmem_get_inode+0x246/0x750 [ 300.585333][T21926] __shmem_file_setup+0x112/0x210 [ 300.585369][T21926] shmem_file_setup+0x3b/0x50 [ 300.585396][T21926] memfd_alloc_file+0x4e/0x300 [ 300.585433][T21926] __se_sys_memfd_create+0x2e1/0x3b0 [ 300.585539][T21926] __x64_sys_memfd_create+0x31/0x40 [ 300.585664][T21926] x64_sys_call+0x28cb/0x3000 [ 300.585690][T21926] do_syscall_64+0xc0/0x2a0 [ 300.585723][T21926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.585745][T21926] RIP: 0033:0x7ff747c9aeb9 [ 300.585813][T21926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.585878][T21926] RSP: 002b:00007ff7466f6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 300.585974][T21926] RAX: ffffffffffffffda RBX: 000000000000051b RCX: 00007ff747c9aeb9 [ 300.585987][T21926] RDX: 00007ff7466f6ee0 RSI: 0000000000000000 RDI: 00007ff747d07333 [ 300.586002][T21926] RBP: 0000200000001200 R08: 00000000ffffffff R09: 0000000000000000 [ 300.586018][T21926] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000640 [ 300.586033][T21926] R13: 00007ff7466f6ee0 R14: 00007ff7466f6ea0 R15: 0000200000000000 [ 300.586153][T21926] [ 300.895884][T21932] SELinux: ebitmap start bit (29548) is not a multiple of the map unit size (64) [ 300.930646][T21932] SELinux: failed to load policy [ 300.990458][ T29] audit: type=1400 audit(2000000315.778:26434): avc: denied { getopt } for pid=21954 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.048170][T21967] loop1: detected capacity change from 0 to 1024 [ 301.066009][ T29] audit: type=1400 audit(2000000315.818:26435): avc: denied { accept } for pid=21954 comm="syz.8.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.085445][T21967] EXT4-fs: Ignoring removed mblk_io_submit option [ 301.112830][T21967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 301.144693][T21967] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.161666][T21967] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4588: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 301.237907][T21967] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4588: couldn't read orphan inode 11 (err -117) [ 301.320955][T21994] loop9: detected capacity change from 0 to 1024 [ 301.694062][T22013] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4601'. [ 301.834102][T22016] loop8: detected capacity change from 0 to 512 [ 301.929027][T22016] msdos: Unknown parameter '  ' [ 301.965730][ T29] audit: type=1400 audit(2000000316.658:26436): avc: denied { setcheckreqprot } for pid=22012 comm="syz.1.4601" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 302.187127][T11989] team0: Port device syz_tun removed [ 302.199647][T22038] loop1: detected capacity change from 0 to 1024 [ 302.216131][T22038] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.239357][T22018] lo speed is unknown, defaulting to 1000 [ 302.245326][ T29] audit: type=1326 audit(2000000317.018:26437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.8.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d77aeb9 code=0x7ffc0000 [ 302.340141][ T29] audit: type=1326 audit(2000000317.018:26438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.8.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d77aeb9 code=0x7ffc0000 [ 302.363945][ T29] audit: type=1326 audit(2000000317.118:26439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.8.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d77aeb9 code=0x7ffc0000 [ 302.387608][ T29] audit: type=1326 audit(2000000317.118:26440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.8.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d77aeb9 code=0x7ffc0000 [ 302.411233][ T29] audit: type=1326 audit(2000000317.118:26441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.8.4610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0d77aeb9 code=0x7ffc0000 [ 303.192873][T22038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 303.264432][T22038] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.288678][T22018] chnl_net:caif_netlink_parms(): no params data found [ 303.332604][T22048] SELinux: failed to load policy [ 303.347669][T22038] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #11: comm syz.1.4608: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 303.375568][T22038] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4608: couldn't read orphan inode 11 (err -117) [ 303.392308][T22018] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.399444][T22018] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.407896][T22018] bridge_slave_0: entered allmulticast mode [ 303.437576][T22018] bridge_slave_0: entered promiscuous mode [ 303.453036][T22018] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.460302][T22018] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.473918][T22018] bridge_slave_1: entered allmulticast mode [ 303.481100][T22018] bridge_slave_1: entered promiscuous mode [ 303.499291][T22064] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4615'. [ 303.509842][T22018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.526719][T22018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.546457][T22071] FAULT_INJECTION: forcing a failure. [ 303.546457][T22071] name failslab, interval 1, probability 0, space 0, times 0 [ 303.559288][T22071] CPU: 1 UID: 0 PID: 22071 Comm: syz.1.4618 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.559324][T22071] Tainted: [W]=WARN [ 303.559332][T22071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.559425][T22071] Call Trace: [ 303.559434][T22071] [ 303.559442][T22071] __dump_stack+0x1d/0x30 [ 303.559467][T22071] dump_stack_lvl+0x95/0xd0 [ 303.559521][T22071] dump_stack+0x15/0x1b [ 303.559544][T22071] should_fail_ex+0x263/0x280 [ 303.559655][T22071] should_failslab+0x8c/0xb0 [ 303.559678][T22071] __kmalloc_noprof+0xb8/0x580 [ 303.559702][T22071] ? sock_kmalloc+0x85/0xc0 [ 303.559721][T22071] sock_kmalloc+0x85/0xc0 [ 303.559814][T22071] ____sys_sendmsg+0xf9/0x600 [ 303.559839][T22071] __sys_sendmsg_sock+0x28/0x40 [ 303.559928][T22071] io_sendmsg_zc+0x290/0x5b0 [ 303.559953][T22071] __io_issue_sqe+0xfd/0x2d0 [ 303.560018][T22071] io_issue_sqe+0x20b/0xc20 [ 303.560044][T22071] ? io_send_zc_prep+0x3e2/0x4d0 [ 303.560063][T22071] io_submit_sqes+0x78a/0x11b0 [ 303.560100][T22071] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 303.560127][T22071] ? __rcu_read_unlock+0x4e/0x70 [ 303.560158][T22071] ? get_pid_task+0x96/0xd0 [ 303.560273][T22071] ? proc_fail_nth_write+0x13b/0x160 [ 303.560364][T22071] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 303.560393][T22071] ? vfs_write+0x86e/0x9f0 [ 303.560411][T22071] ? __rcu_read_unlock+0x4e/0x70 [ 303.560438][T22071] ? __fget_files+0x184/0x1c0 [ 303.560520][T22071] ? mutex_lock+0x57/0x90 [ 303.560540][T22071] ? mutex_unlock+0x4e/0x90 [ 303.560622][T22071] ? fput+0x8f/0xc0 [ 303.560651][T22071] __x64_sys_io_uring_enter+0x78/0x90 [ 303.560678][T22071] x64_sys_call+0x27e4/0x3000 [ 303.560865][T22071] do_syscall_64+0xc0/0x2a0 [ 303.560894][T22071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.560914][T22071] RIP: 0033:0x7f40b7a2aeb9 [ 303.560930][T22071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.560983][T22071] RSP: 002b:00007f40b6487028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 303.561069][T22071] RAX: ffffffffffffffda RBX: 00007f40b7ca5fa0 RCX: 00007f40b7a2aeb9 [ 303.561085][T22071] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000005 [ 303.561101][T22071] RBP: 00007f40b6487090 R08: 0000000000000000 R09: 0000000000000000 [ 303.561116][T22071] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 303.561210][T22071] R13: 00007f40b7ca6038 R14: 00007f40b7ca5fa0 R15: 00007ffc38632818 [ 303.561308][T22071] [ 303.573500][T22018] team0: Port device team_slave_0 added [ 303.620099][T22074] netlink: 'syz.4.4620': attribute type 1 has an invalid length. [ 303.621847][T22018] team0: Port device team_slave_1 added [ 303.698069][T22072] loop6: detected capacity change from 0 to 512 [ 303.723450][T22018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.849403][T22018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.875458][T22018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.893870][T22079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4621'. [ 303.911438][T22074] bond4: entered promiscuous mode [ 303.916852][T22074] bond4: entered allmulticast mode [ 303.927005][T22074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 303.939316][T22018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.946805][T22018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.972801][T22018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.979106][T22091] loop6: detected capacity change from 0 to 1024 [ 304.001898][T22018] hsr_slave_0: entered promiscuous mode [ 304.007976][T22018] hsr_slave_1: entered promiscuous mode [ 304.020417][T22091] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.039255][T22091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.056901][T22095] SELinux: Context ñ is not valid (left unmapped). [ 304.066757][T22091] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.087326][T22097] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4626'. [ 304.114943][T22091] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.4624: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 304.134784][T22018] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.135987][T22091] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.4624: couldn't read orphan inode 11 (err -117) [ 304.238437][T22018] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.341070][T22109] bond2: entered promiscuous mode [ 304.359457][T22018] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.381217][T22109] macvlan3: entered promiscuous mode [ 304.386689][T22109] macvlan3: entered allmulticast mode [ 304.393493][T22109] bond2: (slave macvlan3): Opening slave failed [ 304.407487][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4633'. [ 304.407492][T22117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4633'. [ 304.407570][T22118] ================================================================== [ 304.407600][T22118] BUG: KCSAN: data-race in data_push_tail / vsnprintf SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 304.407617][T22118] [ 304.407622][T22118] write to 0xffffffff89144414 of 53 bytes by task 22117 on cpu 1: [ 304.407634][T22118] vsnprintf+0x2ce/0x860 [ 304.407645][T22118] vscnprintf+0x41/0x90 [ 304.407656][T22118] printk_sprint+0x30/0x2c0 [ 304.407671][T22118] vprintk_store+0x57b/0x910 [ 304.407686][T22118] vprintk_emit+0x1a4/0x600 [ 304.407701][T22118] vprintk_default+0x26/0x30 [ 304.407718][T22118] vprintk+0x1d/0x30 [ 304.407728][T22118] _printk+0x79/0xa0 [ 304.407738][T22118] __nla_validate_parse+0x1735/0x1cf0 [ 304.407759][T22118] __nla_parse+0x40/0x60 [ 304.407769][T22118] nfnetlink_rcv_msg+0x38a/0x5d0 [ 304.407787][T22118] netlink_rcv_skb+0x123/0x220 [ 304.407806][T22118] nfnetlink_rcv+0x167/0x1720 [ 304.407822][T22118] netlink_unicast+0x5c0/0x690 [ 304.407839][T22118] netlink_sendmsg+0x5c8/0x6f0 [ 304.407850][T22118] ____sys_sendmsg+0x5af/0x600 [ 304.407861][T22118] ___sys_sendmsg+0x195/0x1e0 [ 304.407872][T22118] __x64_sys_sendmsg+0xd4/0x160 [ 304.407883][T22118] x64_sys_call+0x17ba/0x3000 [ 304.407899][T22118] do_syscall_64+0xc0/0x2a0 [ 304.407916][T22118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.407929][T22118] [ 304.407933][T22118] read to 0xffffffff89144418 of 8 bytes by task 22118 on cpu 0: [ 304.407944][T22118] data_push_tail+0x100/0x470 [ 304.407959][T22118] data_alloc+0x11b/0x390 [ 304.407972][T22118] prb_reserve+0x8d7/0xae0 [ 304.407988][T22118] vprintk_store+0x54a/0x910 [ 304.408003][T22118] vprintk_emit+0x1a4/0x600 [ 304.408019][T22118] vprintk_default+0x26/0x30 [ 304.408035][T22118] vprintk+0x1d/0x30 [ 304.408045][T22118] _printk+0x79/0xa0 [ 304.408054][T22118] __nla_validate_parse+0x1735/0x1cf0 [ 304.408074][T22118] __nla_parse+0x40/0x60 [ 304.408084][T22118] nfnetlink_rcv_msg+0x38a/0x5d0 [ 304.408101][T22118] netlink_rcv_skb+0x123/0x220 [ 304.408119][T22118] nfnetlink_rcv+0x167/0x1720 [ 304.408135][T22118] netlink_unicast+0x5c0/0x690 [ 304.408152][T22118] netlink_sendmsg+0x5c8/0x6f0 [ 304.408162][T22118] ____sys_sendmsg+0x5af/0x600 [ 304.408173][T22118] ___sys_sendmsg+0x195/0x1e0 [ 304.408183][T22118] __x64_sys_sendmsg+0xd4/0x160 [ 304.408194][T22118] x64_sys_call+0x17ba/0x3000 [ 304.408209][T22118] do_syscall_64+0xc0/0x2a0 [ 304.408226][T22118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.408245][T22118] [ 304.408249][T22118] value changed: 0x0000000100000603 -> 0x65766f7466656c20 [ 304.408258][T22118] [ 304.408261][T22118] Reported by Kernel Concurrency Sanitizer on: [ 304.408272][T22118] CPU: 0 UID: 0 PID: 22118 Comm: syz.4.4633 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.408291][T22118] Tainted: [W]=WARN [ 304.408297][T22118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.408306][T22118] ================================================================== [ 304.492886][T22119] set_capacity_and_notify: 1 callbacks suppressed [ 304.492902][T22119] loop8: detected capacity change from 0 to 512 [ 304.728521][T22018] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.880260][T11068] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 304.941528][T14822] bond7 (unregistering): (slave gretap1): Releasing active interface [ 304.957310][T14822] team0: Port device geneve1 removed [ 304.962724][T11068] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 305.041913][T14822] bond1 (unregistering): Released all slaves [ 305.057845][T14822] bond0 (unregistering): Released all slaves [ 305.065947][T14822] bond2 (unregistering): Released all slaves [ 305.074337][T14822] bond3 (unregistering): Released all slaves [ 305.082328][T14822] bond4 (unregistering): Released all slaves [ 305.090436][T14822] bond5 (unregistering): Released all slaves [ 305.098637][T14822] bond6 (unregistering): Released all slaves [ 305.108189][T14822] bond7 (unregistering): Released all slaves [ 305.116522][T14822] bond8 (unregistering): Released all slaves [ 305.124933][T14822] bond9 (unregistering): Released all slaves [ 305.134556][T14822] bond10 (unregistering): Released all slaves [ 305.143787][T14822] bond11 (unregistering): Released all slaves [ 305.182834][T14822] pim6reg9 (unregistering): left allmulticast mode [ 305.252261][T11068] lo speed is unknown, defaulting to 1000 [ 305.258050][T11068] infiniband syz2: ib_query_port failed (-19) [ 305.663108][T14822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.733204][T14822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.793437][T14822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.859169][T14822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.122252][T14822] bridge_slave_1: left allmulticast mode [ 306.127938][T14822] bridge_slave_1: left promiscuous mode [ 306.133694][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.141576][T14822] bridge_slave_0: left allmulticast mode [ 306.147592][T14822] bridge_slave_0: left promiscuous mode [ 306.153638][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.163415][T14822] bridge_slave_1: left allmulticast mode [ 306.169149][T14822] bridge_slave_1: left promiscuous mode [ 306.175026][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.183466][T14822] bridge_slave_0: left allmulticast mode [ 306.189191][T14822] bridge_slave_0: left promiscuous mode [ 306.195110][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.204827][T14822] bridge_slave_1: left allmulticast mode [ 306.210562][T14822] bridge_slave_1: left promiscuous mode [ 306.216924][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.225787][T14822] bridge_slave_0: left allmulticast mode [ 306.231466][T14822] bridge_slave_0: left promiscuous mode [ 306.237195][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.246369][T14822] bridge_slave_1: left allmulticast mode [ 306.252316][T14822] bridge_slave_1: left promiscuous mode [ 306.258619][T14822] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.266826][T14822] bridge_slave_0: left allmulticast mode [ 306.272809][T14822] bridge_slave_0: left promiscuous mode [ 306.278473][T14822] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.329517][T14822] bond0 (unregistering): (slave gretap1): Releasing active interface [ 306.462551][T14822] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.471110][T14822] bond_slave_0: left promiscuous mode [ 306.477171][T14822] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.486418][T14822] bond_slave_1: left promiscuous mode [ 306.492021][T14822] .` (unregistering): Released all slaves [ 306.503954][T14822] bond0 (unregistering): Released all slaves [ 306.512138][T14822] bond1 (unregistering): Released all slaves [ 306.521621][T14822] bond2 (unregistering): Released all slaves [ 306.529559][T14822] bond3 (unregistering): Released all slaves [ 306.537711][T14822] bond4 (unregistering): Released all slaves [ 306.593244][T14822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.602730][T14822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.612261][T14822] bond0 (unregistering): Released all slaves [ 306.630346][T14822] bond1 (unregistering): (slave gretap1): Releasing active interface [ 306.643370][T14822] team0: Port device geneve1 removed [ 306.731939][T14822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.740680][T14822] bond_slave_0: left promiscuous mode [ 306.747268][T14822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.756565][T14822] bond_slave_1: left promiscuous mode [ 306.762803][T14822] bond0 (unregistering): Released all slaves [ 306.772718][T14822] bond1 (unregistering): Released all slaves [ 306.780852][T14822] bond2 (unregistering): Released all slaves [ 306.797470][T14822] bond1 (unregistering): (slave gretap1): Releasing active interface [ 306.924721][T14822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.933600][T14822] bond_slave_0: left promiscuous mode [ 306.939774][T14822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.948895][T14822] bond_slave_1: left promiscuous mode [ 306.954805][T14822] bond0 (unregistering): Released all slaves [ 306.964155][T14822] bond1 (unregistering): Released all slaves [ 306.971908][T14822] bond2 (unregistering): Released all slaves [ 306.981352][T14822] bond3 (unregistering): Released all slaves [ 306.989367][T14822] bond4 (unregistering): Released all slaves [ 307.040353][T14822] tipc: Left network mode [ 307.053756][T14822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.061618][T14822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.069179][T14822] batman_adv: batadv0: Interface deactivated: dummy0 [ 307.076155][T14822] batman_adv: batadv0: Removing interface: dummy0 [ 307.087844][T14822] hsr_slave_0: left promiscuous mode [ 307.094040][T14822] hsr_slave_1: left promiscuous mode [ 307.099734][T14822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.107485][T14822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.118232][T14822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.125695][T14822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.133714][T14822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.141308][T14822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.151986][T14822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.159503][T14822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.170823][T14822] veth1_macvtap: left promiscuous mode [ 307.176290][T14822] veth0_macvtap: left promiscuous mode [ 307.181851][T14822] veth1_vlan: left promiscuous mode [ 307.187053][T14822] veth0_vlan: left promiscuous mode [ 307.289272][T14822] team0 (unregistering): Port device team_slave_1 removed [ 307.298765][T14822] team0 (unregistering): Port device team_slave_0 removed [ 307.352109][T14822] team0 (unregistering): Port device team_slave_1 removed [ 307.363193][T14822] team0 (unregistering): Port device team_slave_0 removed [ 308.128034][T14822] IPVS: stop unused estimator thread 0...