last executing test programs: 11.647339947s ago: executing program 2 (id=3): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1c1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) r1 = socket(0x11, 0x3, 0x0) connect$vsock_stream(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0xf0, 0x240, 0xf0, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'vlan1\x00', 'macvlan0\x00', {}, {}, 0x62, 0x2, 0x42}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0\x00', {0x63, 0x518, 0x7fff, 0x586b, 0x2, 0x200, 0xfffffffc, 0x78, 0x80}, {0x8000000000000001}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x10001, 0x6]}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x0, 0x7, 0x2, 0x2, 0x1, 0x3]}, {0x2, [0x4, 0x1, 0x7, 0x1, 0x0, 0x3], 0x2}}}}, {{@ip={@remote, @empty, 0xff000000, 0x0, 'vlan1\x00', 'vcan0\x00', {}, {}, 0x29, 0x2, 0x8}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x5]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'pim6reg1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x50}}, 0x40020) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8}, 0x20000810) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000070605000000ff030000000001000002050001000766fb50be2f4a55e54c645cae79a076a2830e6738bf0a6077b2f3f9badd5c5faf244c11420cbe96a5be0320e964e30422813b25b1e620dcf08dffcd2ea41112dc43b14ee85d9c8f56b844d25a649aaa697c6715505f00b6db091b9e22d5e8dba953049219ee7859f4fa23aa6fc27c4b5c16122397ec287eef93468c88f0555d4aaaeea1b06c2c6baddc6b7d9867aed93c0ef007b1a146f5c44b30223d5c901cc29a6b5451fa0ed81bb9f6c0984697c389313e37d3398aa9ce1595eb59f1d1e0d8b2d25891e6d1ae77a4fdb25811a3cf1717f0754e25b88f6e71687b3ea9f3ed1eebcc160da1af6f"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000640)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x0) 11.369595043s ago: executing program 2 (id=6): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000140)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@stripe={'stripe', 0x3d, 0x3}}, {@bsdgroups}, {@oldalloc}]}, 0x43, 0x460, &(0x7f0000000780)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x541b, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3, 0x1}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xa}, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x4a}, 0x28) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x49, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x58, &(0x7f0000001000)=ANY=[@ANYBLOB="12d5ce3147d0e81e015002a2329f20d112209cafe50102030109024600017805f7be0d6e1f77c741588507052406000105240090000d590f0107000000080028f80206241aff0f0a0524060000052400d6000d240f01ffff00008ca40600a5"], &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x0}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r8, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) 9.953943576s ago: executing program 2 (id=20): r0 = socket$inet(0x2, 0x5, 0x5) pipe2(&(0x7f00000000c0), 0x880) (async) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) splice(r0, 0x0, r1, 0x0, 0x7ffff000, 0x0) 9.326274273s ago: executing program 3 (id=23): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000006c0)={[{@jqfmt_vfsold}, {@noblock_validity}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xff}, 0x0}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0xc}}, {@jqfmt_vfsv1}, {@data_err_abort}, {@lazytime}, {@resuid}, {@dax_always}, {@test_dummy_encryption_v1}, {@auto_da_alloc}, {@nodioread_nolock}, {@data_writeback}, {@noblock_validity}], [], 0x2c}, 0x0, 0x519, &(0x7f0000001300)="$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") mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) pwritev2(r1, &(0x7f0000000600)=[{&(0x7f0000000280)="a1", 0x1}], 0x1, 0x1ff, 0x5, 0x1a) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000080)={0x60, 0x3, &(0x7f0000bf0000/0x1000)=nil, &(0x7f0000eca000/0x2000)=nil, 0x0, &(0x7f0000000040)=[{0x1000, 0x8, 0x8000}], 0x1, 0x2, 0x43, 0x24, 0xb, 0x4}) 8.902936828s ago: executing program 3 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000000080500000000000000000003000005050003000600000006000240910000000900010073797a30000000002400048008000340fffffff80800044000000006080002"], 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000040)=ANY=[], 0xffffff6a) tee(r2, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(r2, 0xffffffffffffffff, 0x60000000000, 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in=@private=0xa010102, 0x4e62, 0x0, 0x0, 0x2, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x100000000c, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@loopback, 0x800, 0x32}, 0x2, @in=@broadcast, 0x3501, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) r5 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000000000005f01"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$poke(0x4210, r8, 0x0, 0x22600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r10}, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x54}}, 0x0) 8.342182271s ago: executing program 2 (id=35): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000030000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x24, r4, 0x11, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000c4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x8068, 0x8000, 0xae24, 0x966, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0x158, 0x19, 0x1, 0x0, 0x2, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x3ffffffff}, 0x400}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e22, @in6=@rand_addr=' \x01\x00'}}, @tmpl={0x84, 0x5, [{{@in6=@private2, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x7}, {{@in=@remote, 0x4d5, 0x33}, 0xa, @in=@multicast1, 0x3504, 0x4, 0x0, 0x7c, 0x433, 0x10001, 0xb0}]}]}, 0x158}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x20000000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 8.294978503s ago: executing program 32 (id=35): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000030000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000002c0)={0x24, r4, 0x11, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000c4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x8068, 0x8000, 0xae24, 0x966, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x66, 0x0, 0x9, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @broadcast}}}}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0x158, 0x19, 0x1, 0x0, 0x2, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x3ffffffff}, 0x400}, [@encap={0x1c, 0x4, {0x3, 0x4e22, 0x4e22, @in6=@rand_addr=' \x01\x00'}}, @tmpl={0x84, 0x5, [{{@in6=@private2, 0x4d4, 0x32}, 0xa, @in6=@mcast2, 0x0, 0x0, 0x1, 0x8, 0x0, 0x1, 0x7}, {{@in=@remote, 0x4d5, 0x33}, 0xa, @in=@multicast1, 0x3504, 0x4, 0x0, 0x7c, 0x433, 0x10001, 0xb0}]}]}, 0x158}}, 0x4c050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x20000000) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 7.959830463s ago: executing program 3 (id=41): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x2d2, 0x3a62e405, 0x3}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) process_vm_writev(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f00000008c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000200)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000000640)=""/196, 0xc4}], 0x3, 0x0) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000280)={0xa, 0x0, [{0xf9, 0x5, 0x200, [0x0, 0x10, 0x0, 0x2, 0x4, 0xffffff2e, 0x3, 0x4]}, {0x7, 0x8, 0x3, [0x1, 0xf, 0x5, 0x0, 0x81, 0xe, 0xfff, 0x6]}, {0x200, 0x0, 0x2, [0x401, 0x0, 0x9, 0x5, 0xa1f, 0x17b, 0x8]}, {0x4, 0x1, 0x466, [0x4, 0x7f, 0xf, 0x1, 0x0, 0x0, 0x8, 0x20]}, {0x1, 0x6, 0xbd1a, [0x0, 0x662e, 0x1, 0x10000, 0x0, 0x9, 0x0, 0x9]}, {0x8, 0x2, 0xfffffffc, [0x4, 0xffffffff, 0x6, 0x2, 0x7, 0x8c, 0x8, 0xc]}, {0x1, 0x8, 0x2, [0x1a9a, 0xfffffff9, 0x1d, 0xeff4, 0x8, 0x67, 0x7, 0x3]}, {0x3, 0x2, 0xfffffff9, [0x7ff, 0x9, 0x0, 0xda, 0x7fff, 0x2, 0x2400000, 0x6]}, {0x9, 0x3, 0x7fff, [0x1, 0x8001, 0x4, 0x9, 0xc1, 0x10000, 0x6, 0x3f1c]}, {0x0, 0x0, 0x2, [0x300000, 0x4, 0x7, 0x2, 0xffffffff, 0x2, 0xf21, 0x66]}]}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x210}, &(0x7f0000ff0000), &(0x7f00000013c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd27, 0x25dfdc00, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x2004c8c0) getsockopt$inet_udp_int(r5, 0x11, 0xa, &(0x7f00000004c0), &(0x7f0000000740)=0x4) 7.947075543s ago: executing program 3 (id=43): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000540)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noinit_itable}, {@nogrpid}, {@noauto_da_alloc}, {@grpid}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r0 = syz_pidfd_open(0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4, 0x200000000, 0x85c, 0x102}) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x802) ioctl$SIOCSIFHWADDR(r1, 0x8919, &(0x7f0000000040)={'ip6tnl0\x00', @random="02001800"}) socket$unix(0x1, 0x0, 0x0) 7.701189548s ago: executing program 3 (id=46): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) r2 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x55eac547, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xffffffffffffff91, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79ae, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000500)=@IORING_OP_SYMLINKAT={0x26, 0x12, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mkdirat(r0, &(0x7f0000002040)='./file0\x00', 0x15) 7.319962481s ago: executing program 3 (id=49): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x12) 2.335989053s ago: executing program 4 (id=100): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000dc0b0b2b0000"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0xed) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000200)='openpromfs\x00', 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000380)="b9aea252ff030703008cb89e08007b2601b1afb118", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003f27d33bf92caf742200a1e7130a3d00000000000000008000000000000800"/43], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.772013606s ago: executing program 0 (id=108): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @remote}, 0xc, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)='bridge_slave_1\x00', 0x8, 0x3, 0x6}) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) capset(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x3, 0x4, 0xf, 0x9, 0xef0e, 0x4}) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.691598561s ago: executing program 0 (id=110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYRESHEX], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e9900", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002140)={0xf, {"a2e3ad214fc752f91b500e0f30f70e06d038e7ff7fc6e5539b3275078b089b3b08385d090890e0878f0e1ac6e7049b3d6d959bff68d178708c523c921b1b5b31300d3b5d0736cd3b78130baa61d8e809fc889b0709b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da0000010000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3603cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607ca05000000000000005f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b906000000783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab370dd4dd891e937c2060010e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51015f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb76b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ff33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f761f13a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729262df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc2704aba78fded9130195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a99cc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000029566e78000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ebbd633500", 0x1000}}, 0x1006) 1.54342094s ago: executing program 0 (id=113): mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0xa94a7000) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xd, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0x1c144, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x5, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setresuid(0xee00, 0xee00, 0x0) (async) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r3, r3, 0x0, 0x4) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) (rerun: 32) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) (async) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000f0ffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = dup(r4) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000200)={r8, 0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000080)={r8, 0x2, 0xd, 0x9, 0x5, 0x6cf}, &(0x7f00000000c0)=0x14) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.471169304s ago: executing program 0 (id=115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f00000000000000ffffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000b60a060000000000c500feff0800000018000000060000000000000009000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3}, 0x94) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffffeff5}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffffeff5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x80001800, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4000080) (async) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000140)={0xa, 0x4e24, 0x80001800, @loopback, 0x4}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)='\x00', 0x1}], 0x1}, 0x4000080) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0xefc, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1}}, 0x41, 0x2b}, 0x90) 1.35546479s ago: executing program 5 (id=117): getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x2c) 1.319641623s ago: executing program 5 (id=118): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x4, 0x5, 0x7, 0x7ffc0001}]}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x8}}, 0x20) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x8, 0x8, 0x8, 0xcfe, 0x3, 0x80000000, 0x8a5, 0x6, 0x10, 0x8, 0xb, 0x2, 0xf6cb, 0x6ab, 0x5, 0x9, 0x8, 0x6, 0x0, 0x4, 0x7fffffff, 0x10000, 0x7, 0x0, 0x0, 0x7, 0x6, 0xfffffffe, 0x372b, 0xfffffffe, 0x1000, 0xfffffffa, 0x8, 0xae6, 0x6, 0xfffffffc, 0x1, 0x0, 0x7e, 0x8, 0x9d, 0x3, 0x240, 0x1, 0x7, 0x7, 0x6, 0x1000, 0x7, 0xb, 0x401, 0x789f, 0x7ff, 0x3, 0x8, 0x800, 0x9, 0x10000, 0x6, 0xff, 0x8, 0x8226, 0x400, 0x401, 0xc709, 0x7, 0x5, 0x3, 0x7, 0x10000, 0x4, 0x40, 0x8, 0xc1, 0x7, 0x3ff, 0x200, 0x1, 0x6, 0x7fffffff, 0xfffffff9, 0x3, 0xa, 0xfffffffc, 0x1, 0x0, 0x9, 0x2, 0x4, 0x2, 0xc, 0x7b, 0xff, 0x800, 0x4, 0x80, 0x5, 0x4, 0x5, 0x1000, 0x5, 0x7, 0x40, 0x8, 0x2, 0x6, 0x8226, 0xe, 0x81, 0x3, 0x5, 0x3800000, 0xf12, 0x0, 0x2, 0x8911, 0x9, 0x7f43, 0x9, 0x2, 0x0, 0x3, 0x8, 0x2, 0x2, 0x2, 0xd098, 0x9, 0x8, 0x3, 0xa, 0xf7, 0x4, 0x3, 0x3, 0x0, 0xfffffffc, 0x0, 0x1, 0x81, 0xffff6660, 0x1, 0x3, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0xd7a, 0xfffffff9, 0x3, 0x8, 0x2, 0xfffffffd, 0x3864, 0x4, 0xb, 0x1, 0x4, 0x4c, 0x82ca, 0x4eeb, 0x6, 0xbdd, 0x5fdf, 0xc, 0x3, 0x10000, 0x9, 0x54, 0x8, 0x8, 0x800, 0x1ff, 0x9, 0xccc, 0x1, 0x7, 0x7ff, 0x4, 0xe, 0xc, 0xb, 0x80000001, 0x8001, 0x4, 0x9, 0xfffffffe, 0xfffffffa, 0x6, 0xb, 0x7ff, 0x1, 0x10, 0x2, 0x1, 0x4a0, 0x3, 0x0, 0x3ff, 0x9, 0x7, 0x1, 0x5, 0x7, 0x1, 0xfffffe01, 0x8001, 0x6, 0x3, 0x3, 0x9, 0x2, 0x4, 0x0, 0x1, 0x100, 0x4, 0x3, 0xffffff00, 0x6, 0x4, 0x3, 0x6, 0x5, 0x5c49, 0x7f, 0x7, 0x8cc7, 0x7, 0x0, 0x1, 0xcc99, 0x3, 0xb, 0x0, 0xffff, 0x0, 0xb64, 0x4, 0xf, 0x9, 0x77dc, 0x8, 0x1, 0x4, 0x7ff, 0x676, 0x10, 0x8, 0xffff, 0xfff, 0x8, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xfff1}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) lseek(r1, 0x100, 0x1) 1.284643445s ago: executing program 0 (id=119): r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0xf258, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r0, 0x33, {0x5, 0xd}, 0x6}, 0x1) 1.217087919s ago: executing program 4 (id=120): syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) r0 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x79af, 0x8000, 0x4001, 0x240024e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x803344, 0x10, 0x3, 0x3d3, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000300)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000180)={0x80, 0x4}, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYRESHEX=r7, @ANYRES32=r0, @ANYRES32=r2, @ANYRES16=r3, @ANYRESDEC=r9, @ANYRES32=r6, @ANYRES16], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$UHID_CREATE2(r4, &(0x7f0000000800)=ANY=[@ANYRES16=r2, @ANYRES16=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456}) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004bf000/0x2000)=nil, &(0x7f00000de000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000054b000/0x1000)=nil, &(0x7f00000cc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000014b000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000380)={r12, 0x84, &(0x7f0000000a00)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x200}, @in6={0xa, 0x4e23, 0x8, @remote, 0x1}, @in6={0xa, 0x4e22, 0x0, @loopback}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e23, @private=0xa010101}]}, &(0x7f00000003c0)=0x10) openat(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e001c00000000200401800000c8f2ac9d8aec00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 1.131669323s ago: executing program 5 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0xd66, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x26}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a300000000009000300020000000000000014000000110001"], 0x7c}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0xd4, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x3a}}, r4, 0x40099d}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a380000001b0a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c0002"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES64=r3, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f00000001c0), 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x0, 0xfa, 0x5, 0x8, 0x7}, &(0x7f0000000200)=0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d8557c10d62c54400", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1.129186184s ago: executing program 5 (id=122): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000dc0b0b2b0000"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0xed) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000200)='openpromfs\x00', 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000380)="b9aea252ff030703008cb89e08007b2601b1afb118", 0x0, 0xfe3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00003f27d33bf92caf742200a1e7130a3d00000000000000008000000000000800"/43], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) unshare(0x22020600) 1.128069144s ago: executing program 4 (id=123): waitid(0x0, 0x0, 0x0, 0x80000000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000a00)={@dev, @dev, 0x0}, &(0x7f0000000d40)=0xfffffffffffffd54) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) pipe(0x0) syz_io_uring_setup(0x5e5b, &(0x7f0000000000)={0x0, 0xd208, 0x10, 0x3, 0x40004331}, 0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r5, &(0x7f0000000000), 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, &(0x7f0000000040)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r7, &(0x7f00000002c0)=""/4096, 0x1000, 0x101, 0x0, 0xe) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}]) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r8, 0x0, 0x0, 0x8000, 0x4000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x20, &(0x7f0000000f80)={&(0x7f0000000f00)=""/104, 0x68, 0x0, &(0x7f00000010c0)=""/146, 0x92}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000012c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000340)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000cc0)='GPL\x00', 0xf2, 0x0, 0x0, 0x41000, 0x21, '\x00', r2, 0x1b, r8, 0x8, &(0x7f0000000e80)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000ec0)={0x1, 0x5, 0xf, 0x9}, 0x10, r9, 0x0, 0x8, &(0x7f00000011c0)=[r1, r0], &(0x7f0000001200)=[{0x1, 0x1, 0x6, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x9, 0x4}, {0x3, 0x5, 0x5, 0x9}, {0x1, 0x5, 0x12, 0xa}, {0x2, 0x1, 0x5, 0x1}, {0x2, 0x4, 0xa, 0x1}, {0x3, 0x3, 0x6, 0xd}], 0x10, 0x9}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@bsdgroups}, {@jqfmt_vfsold}, {@bsdgroups}, {@init_itable}]}, 0xff, 0x55c, &(0x7f0000000440)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xa, 0x32, 0xffffffffffffffff, 0x33ed0000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000300)='dctcp', 0x5) 1.076968107s ago: executing program 1 (id=124): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r0, 0x8000000000000001, &(0x7f0000000040)) syz_clone3(&(0x7f0000000340)={0x2000000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x30}, &(0x7f0000000180)=""/165, 0xa5, &(0x7f0000000240)=""/163, &(0x7f0000000300)=[0x0, r0, r0], 0x3}, 0x58) waitid$P_PIDFD(0x3, r1, &(0x7f00000003c0), 0x1000000, &(0x7f0000000440)) r3 = dup3(r1, r1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000500)) recvmmsg(r3, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)=""/199, 0xc7}, {&(0x7f0000000640)=""/100, 0x64}, {&(0x7f00000006c0)=""/67, 0x43}, {&(0x7f0000000740)=""/35, 0x23}], 0x4}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=""/43, 0x2b}, 0x2}, {{&(0x7f0000000840)=@isdn, 0x80, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/26, 0x1a}, {&(0x7f0000000900)=""/21, 0x15}], 0x2, &(0x7f0000000980)=""/69, 0x45}, 0x7fffffff}, {{&(0x7f0000000a00)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/13, 0xd}, {&(0x7f0000001ac0)=""/157, 0x9d}, {&(0x7f0000001b80)=""/220, 0xdc}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/110, 0x6e}, {&(0x7f0000002d00)=""/26, 0x1a}, {&(0x7f0000002d40)=""/194, 0xc2}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/184, 0xb8}], 0xa, &(0x7f0000003fc0)=""/48, 0x30}, 0x7ff}, {{&(0x7f0000004000)=@xdp, 0x80, &(0x7f0000004480)=[{&(0x7f0000004080)=""/105, 0x69}, {&(0x7f0000004100)=""/212, 0xd4}, {&(0x7f0000004200)=""/160, 0xa0}, {&(0x7f00000042c0)=""/145, 0x91}, {&(0x7f0000004380)=""/3, 0x3}, {&(0x7f00000043c0)=""/162, 0xa2}], 0x6, &(0x7f0000004500)=""/186, 0xba}, 0x6910}, {{&(0x7f00000045c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000004840)=[{&(0x7f0000004640)=""/225, 0xe1}, {&(0x7f0000004740)=""/196, 0xc4}], 0x2, &(0x7f0000004880)=""/240, 0xf0}, 0x401}], 0x6, 0x2, &(0x7f0000004b00)={0x0, 0x3938700}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000004bc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000004cc0)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c00)={0x50, r5, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xab, 0x16}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000004d40)={0x3, &(0x7f0000004d00)=[{0x5, 0x0, 0x6, 0x1000}, {0x200, 0x0, 0x7}, {0x2dfe, 0x4, 0x4, 0x200}]}) r7 = socket$kcm(0x29, 0x7, 0x0) futex(&(0x7f0000004d80)=0x1, 0x2, 0x0, &(0x7f0000004dc0)={0x77359400}, &(0x7f0000004e00)=0x2, 0x1) waitid$P_PIDFD(0x3, r1, &(0x7f0000004e40), 0x20000000, &(0x7f0000004ec0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000004f80)={{0x1, 0x1, 0x18, r3, {0xfffffffd}}, './file0\x00'}) r9 = getegid() fchownat(r8, &(0x7f0000004fc0)='./file0\x00', 0xffffffffffffffff, r9, 0x800) r10 = dup2(r1, r7) ioctl$BLKGETSIZE64(r8, 0x80081272, &(0x7f0000005000)) socket$inet6(0xa, 0x2, 0x3) ptrace$setsig(0x4203, r2, 0x9, &(0x7f0000005040)={0x1, 0x1, 0x100000}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000005100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000050c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r8, &(0x7f0000005140)={0x15, 0x110, 0xfa00, {r11, 0x7ff, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x118) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000052c0), 0xffffffffffffffff) r14 = fsmount(r3, 0x1, 0x1) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f00000053c0)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005380)={&(0x7f0000005300)={0x78, r13, 0x900, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100000001}, @NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$cgroup_int(r14, &(0x7f0000005400)='memory.max\x00', 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 799.750903ms ago: executing program 1 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105842, 0x0) writev(r3, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0, 0x2200}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x5, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, r0, 0x4, 0x2000, r3, @value=r5, @void, @void, @void, r4}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 682.07025ms ago: executing program 1 (id=126): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x4000001, 0x97}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, r12, 0xffffffffffffffff, 0x5, 0x2, 0xc6, "d32984bd14a44c066af5160e961701a177609475b78411e8850bde050900000000000001000012ff000000001900", 0x800000000000003c}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r3, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) unshare(0x22020600) r16 = socket$inet6_sctp(0xa, 0x5, 0x84) r17 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r17, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r16, 0x84, 0x85, &(0x7f0000000000)={r18, @in={{0x2, 0x0, @empty}}, 0x0, 0x8000}, 0x90) r19 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r19, 0x0, 0x0) 454.974553ms ago: executing program 1 (id=127): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f000009df00)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x17d, &(0x7f00000003c0)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r0, 0x0, 0x892, 0x6) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r2 = open(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 369.546869ms ago: executing program 0 (id=128): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x441e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x1, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r2) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f121b5ae730a16b38ec3c25a36f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000048000), 0x0) r4 = syz_pidfd_open(0x0, 0x0) r5 = syz_pidfd_open(0x0, 0x0) r6 = pidfd_getfd(r5, r4, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}}) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="d0000000", @ANYRES32=r4, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005"], 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r9, @ANYRES8=r8, @ANYRES32=r9, @ANYBLOB="0000000043030000"], 0x48}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 368.722148ms ago: executing program 4 (id=129): syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={0x0}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0xf8, 0x12, 0x0, 0x801, 0x0, 0x25dfdbfe, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @generic="1d5ec88b6fd8b42c1cc076106f1603b93a89b827493cdf76de1c82fe1a6b80637a9a029ddb7a66e8be50233d24ae28dcb4143b8842f0a11b592ad0b15c2565862e8fa7a3cebc35984d2c37defa86d0d58291376bd7eba4fa4c311644f4eb7dfdc3439ad740753e7f20285a1481e5904a3f4eacfea06337b3149e3167cb566e0f39df4bcdc6053b5c5c3edcb989f93e69164c736e24be40afad0c982ba8db2e080014361c5996fae34df9566b879bcd3a9da3c22ee46ab63fc65a5cf04078c06c2f08c3bfa62fd86094e3cc9c38113919d952bf044b45d592f6052b39"]}, 0xf8}}, 0x0) 349.90581ms ago: executing program 1 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x581, 0x3, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_TLB_DYNAMIC_LB={0x5, 0x1b, 0xd6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) 253.068345ms ago: executing program 5 (id=131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x2) recvfrom$llc(0xffffffffffffffff, &(0x7f0000000040)=""/197, 0xc5, 0x2062, &(0x7f0000000140)={0x1a, 0x30f, 0x0, 0x1, 0x8, 0x6, @link_local}, 0x10) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000200)=0x200000, 0x4) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) fsetxattr$security_evm(r3, &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x5, 0x1, 0x13, 0xb, 0xa, "1b6f4fd6ea1695066915"}, 0x13, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) bind$xdp(r2, &(0x7f0000000340)={0x2c, 0x2, r4, 0x3c, r2}, 0x10) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=@polexpire={0x238, 0x1b, 0x201, 0x70bd2d, 0x25dfdbff, {{{@in6=@remote, @in=@loopback, 0x4e20, 0x1, 0x4e22, 0x0, 0xa, 0x0, 0x20, 0x33}, {0x7ff, 0xb, 0xfffffffffffffff7, 0x7, 0x100000001, 0x6, 0x101, 0x3}, {0x7, 0x9, 0x2, 0x9}, 0x1, 0x6e6bb2, 0x1, 0x0, 0x3, 0x1}}, [@migrate={0xe8, 0x11, [{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@multicast1, @in=@rand_addr=0x64010102, 0x33, 0x3, 0x0, 0x3507, 0xa, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@local, @in6=@empty, @in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0xff, 0x4, 0x0, 0x0, 0x2, 0x5e3801ed436e280c}]}, @algo_crypt={0x71, 0x2, {{'cbc(cast6)\x00'}, 0x148, "25bbdcfccded0e001c99acb19106bbdfad83a6ada9807f9056f1782db2644be5216141b2f2f2f8825c"}}, @encap={0x1c, 0x4, {0x2, 0x4e21, 0x4e23, @in=@remote}}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008000) (async) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000680)=0x2, 0x4) sendto$packet(0xffffffffffffffff, &(0x7f00000006c0)="2290d502c904148b8cfef7498fb4b813f172e864287bc6ad903bf0a63f6cb100b40673abdf6fa19eec8a08c18c65116c2fa4ee4d4e2838d797bd8b0564c170e5cedea834a87a0d58c6ee7d5e6904d789dd1d446658de942e9c", 0x59, 0x20000821, &(0x7f0000000740)={0x11, 0xd, r4, 0x1, 0x6, 0x6, @local}, 0x14) (async) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000780)=0x700, 0x4) (async) pselect6(0x40, &(0x7f00000007c0)={0xc, 0x2, 0x7fff, 0x80000001, 0x435, 0x9, 0xfb, 0x5}, &(0x7f0000000800)={0x9, 0x1, 0x80, 0x7, 0x7, 0x401, 0xfffffffffffffff9, 0x7}, &(0x7f0000000840)={0xd849, 0xe750, 0x8, 0x8000, 0x3, 0x1, 0x2, 0x7fffffff}, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x12]}, 0x8}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x318, 0xffffffff, 0x0, 0x1b8, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, &(0x7f0000000940), {[{{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x81}}, @common=@icmp={{0x28}, {0x6, "a4ba", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x0, 0x1, 0x7, 0xd, 0x6], 0x9, 0x7}, {0xffffffffffffffff, [0x5, 0x1, 0x6, 0x4], 0x1, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x10, 0x8}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x6c, 0x2, 0x2}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x6c6e7715, 0x84]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x6, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) (async) r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000d00)='memory.pressure\x00', 0x2, 0x0) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000300, r7, 0x0) pipe2(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) (async) set_mempolicy(0x2, &(0x7f0000000e40)=0x4, 0x6) sendmsg$AUDIT_LIST_RULES(r9, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x10, 0x3f5, 0x100, 0x70bd2a, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48050}, 0x10000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001080)={'gretap0\x00', &(0x7f0000000f80)={'gretap0\x00', r4, 0x7800, 0x40, 0x2, 0x5, {{0x30, 0x4, 0x2, 0x7, 0xc0, 0x66, 0x0, 0xe5, 0x4, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x34, 0xfc, 0x3, 0xd, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x3}, {@multicast2, 0x5}, {@private=0xa010100, 0x3ff}, {@multicast2}, {@multicast1, 0x9}, {@rand_addr=0x64010102, 0x8001}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x24, [@dev={0xac, 0x14, 0x14, 0x38}, @loopback, @broadcast, @remote, @multicast1, @local, @multicast1, @empty]}, @ra={0x94, 0x4}, @rr={0x7, 0xb, 0x5b, [@dev={0xac, 0x14, 0x14, 0x1b}, @empty]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x3c, 0x76, 0x3, 0xa, [{@multicast2, 0x1ff}, {@remote, 0x4}, {@empty, 0x3}, {@local}, {@loopback, 0x10001}, {@rand_addr=0x64010102}, {@local, 0x4}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=@base={0x19, 0x6, 0x1f, 0x33, 0x8000, r9, 0x6, '\x00', r10, r8, 0x180, 0x0, 0x5, 0x0, @value=r8}, 0x50) (async) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x4c, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xc}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8013}, 0x0) (async) listen(r1, 0xf) (async) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$int_in(r11, 0x5421, &(0x7f0000001280)=0xfe54) 199.901188ms ago: executing program 4 (id=132): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) (async) listen(r0, 0xfffffffe) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "e6d3a283a7d74cbb", "f5cad03246021219c2d72af14925e973a4d1efc6f577239cc71a774c583e6af8", "d86c76f2", "f82d939dd447fa69"}, 0x38) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000b00)=""/233, 0xe9, 0x10140, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x237, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) (async) r4 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000040)=0x85) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettaction={0xf4, 0x32, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc92c}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0xf4}}, 0x5000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c0013"], 0x28}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4c000) 165.635901ms ago: executing program 4 (id=133): syz_read_part_table(0x5bf, &(0x7f0000000280)="$eJzs079La3cUAPBz8xpuX9vXhPLoG9pBeBlfW7DDc0igIjFkaURscWjn4mAHSwcHUdShk63/QMVfi4t0LAhdihZEIU7iKP4DiotTismtFXEoqH0qn89wT+73fE/OvZzvDR60XPyR/WqlEZHGs+w2vbxr6spKvn19Gl+tVfvrXQO9g0MRSXwTEdWP32vnkvPLk38rfstiI/uXetrdXNzuO1kr7rzc2yot57L8Rq7TbfRwpdBe+G7+1t+Zx2O9slmYmR2rzY1XRvZrE0efxzudxOul8uTXL8rD2cHa6MTf77p/qdmzuttqHEfxn4+go3XbjbkXrs5/4fn0wfTZl0n8+NmrDw7+nPwlOwOnyZt+UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LFbfxqFmdmx2tx4ZeSHnyK+Xf6k+tHP1e/nXy+VJ9MX5eFcZ99G7tryt27cv7J50X+qNnFUavas7rYax78++zS/1Tzr/ivb9yq5aSfuo2z+cT7//drE0cLzty9yrUszP00iPrxa/O7/9pgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwANS7a93DfQODkUk7fu+XDF/HltpJ59k+/JZbGTr9bS7ubjdd7JW3Hm5t1VaHkijq12Xi5iKiNHDlULEF9e1fNIJ79/pe/Hf/B0AAP//iZh0Hg==") (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="020025bd7000fbdbdf251233787752a67f1b0700000008003ccea3f9ffff08003a000800000008003b000000008008003c000080000005002d0001000000c314459d438b7635169feda5a840b99413e919809be464888fcc978d6ebda59dc8e067f9be4fb83e0cfa1c492529d2c7d8dcb12c8f8eb77a7a7b30a112d5a7d747e5198706d677680d602e76012bbef1689e9923c93e99dd2e36d0f1991100f6542485209510e78abb55744cbe3b83103d80d27f2e0878dc312a924ef918e70aee8db775d41e09f4d0a369116cef6321547fda1dda92f807897f952d301e039504003997579775214381eedcdcb00e83dbb08b0042d4487cb2f56d1652f00125ead24e8739ac759eda182364486678dbdfcd981abcd5c0b9fd3766505ff9c86525e076d2a42e3e12b1e9f283bbedbcd4faff0cd7130e89721bcda68295e1fe257132c73de22877804639910ccef7f3a77fc12c2f85d250945211fd7006ce5a1df09da0819091fb4b7acc8da10c00420d4556958f4a0bbe7c3d916cfc8632cd986dc1a80a"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x24044005) unshare(0x6020400) r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) connect$packet(r1, &(0x7f00000001c0)={0x11, 0x16, 0x0, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) sendmmsg$inet(r1, 0x0, 0x0, 0x4800) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, @phonet={0x23, 0x4, 0x1, 0x7}, @nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x800000}, @can={0x1d, r2}, 0x7, 0x0, 0x0, 0x0, 0xc736, &(0x7f0000000240)='dvmrp1\x00', 0x80000000000, 0x8001, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000011000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000001c0)="e442161df755af491db6069ee7470b1ce11cfb1506c7efbc") (async) write$binfmt_elf32(r3, 0x0, 0x69) 99.396644ms ago: executing program 5 (id=134): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@nodioread_nolock}, {@sysvgroups}, {@abort}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r1 = open(&(0x7f0000000000)='./file1\x00', 0x4a142, 0x36d) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) recvmmsg(r3, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000400)=""/40, 0x28}], 0x2}, 0x5}], 0x1, 0x10022, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, 0x0, 0x0) ftruncate(r1, 0x2007ffb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x7f, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xfb, 0x7fff0000}]}) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000600)="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", 0x1000, 0xfff, 0x0, 0x0, r0}, &(0x7f0000000380)) sysinfo(&(0x7f00000000c0)=""/8) unshare(0x400) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendfile(r1, r1, 0x0, 0x1000000201005) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ftruncate(r1, 0x6) 0s ago: executing program 1 (id=135): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000040)={0x2, r1, 0x8, {0x6, 0xff}, 0x13}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r4}, 0x38) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x3000000) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000040), 0x4, r4}, 0x38) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r0, 0x80, &(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x3, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) ioperm(0x0, 0xd, 0x9) ioperm(0x0, 0x40, 0x0) kernel console output (not intermixed with test programs): [ 17.421719][ T29] audit: type=1400 audit(1770652959.328:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.443666][ T29] audit: type=1400 audit(1770652959.328:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.466206][ T29] audit: type=1400 audit(1770652959.328:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.489153][ T29] audit: type=1400 audit(1770652959.328:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.512173][ T29] audit: type=1400 audit(1770652959.328:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. [ 29.322109][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.322124][ T29] audit: type=1400 audit(1770652971.228:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.351075][ T29] audit: type=1400 audit(1770652971.258:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.351843][ T3303] cgroup: Unknown subsys name 'net' [ 29.378723][ T29] audit: type=1400 audit(1770652971.278:72): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.499918][ T3303] cgroup: Unknown subsys name 'cpuset' [ 29.506000][ T3303] cgroup: Unknown subsys name 'rlimit' [ 29.596542][ T29] audit: type=1400 audit(1770652971.498:73): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.620695][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.633198][ T29] audit: type=1400 audit(1770652971.498:74): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.653705][ T29] audit: type=1400 audit(1770652971.498:75): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.674194][ T29] audit: type=1400 audit(1770652971.498:76): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.692595][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.694737][ T29] audit: type=1400 audit(1770652971.508:77): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.728146][ T29] audit: type=1400 audit(1770652971.508:78): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.751476][ T29] audit: type=1400 audit(1770652971.538:79): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.756901][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.775567][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.845683][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.869671][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.876775][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.883936][ T3316] bridge_slave_0: entered allmulticast mode [ 30.890296][ T3316] bridge_slave_0: entered promiscuous mode [ 30.914910][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.921974][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.929149][ T3315] bridge_slave_0: entered allmulticast mode [ 30.935539][ T3315] bridge_slave_0: entered promiscuous mode [ 30.942121][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.949160][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.956306][ T3316] bridge_slave_1: entered allmulticast mode [ 30.962743][ T3316] bridge_slave_1: entered promiscuous mode [ 30.992055][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.999231][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.006460][ T3315] bridge_slave_1: entered allmulticast mode [ 31.012811][ T3315] bridge_slave_1: entered promiscuous mode [ 31.020759][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.050616][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.067322][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.078829][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.085932][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.093050][ T3322] bridge_slave_0: entered allmulticast mode [ 31.099219][ T3322] bridge_slave_0: entered promiscuous mode [ 31.107939][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.115041][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.122191][ T3322] bridge_slave_1: entered allmulticast mode [ 31.128488][ T3322] bridge_slave_1: entered promiscuous mode [ 31.139839][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.149687][ T3316] team0: Port device team_slave_0 added [ 31.176301][ T3316] team0: Port device team_slave_1 added [ 31.181972][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 31.191811][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.204307][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.224333][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.241647][ T3315] team0: Port device team_slave_0 added [ 31.259124][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.266121][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.292100][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.306135][ T3315] team0: Port device team_slave_1 added [ 31.316898][ T3322] team0: Port device team_slave_0 added [ 31.329972][ T3322] team0: Port device team_slave_1 added [ 31.335706][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.342679][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.368718][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.386593][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.393557][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.419474][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.447459][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.454405][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.480290][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.493226][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.500197][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.526306][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.537528][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.544482][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.570369][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.608458][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.615577][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.622826][ T3326] bridge_slave_0: entered allmulticast mode [ 31.629020][ T3326] bridge_slave_0: entered promiscuous mode [ 31.635970][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.643199][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.650350][ T3326] bridge_slave_1: entered allmulticast mode [ 31.656693][ T3326] bridge_slave_1: entered promiscuous mode [ 31.680690][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.687734][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.694916][ T3314] bridge_slave_0: entered allmulticast mode [ 31.701324][ T3314] bridge_slave_0: entered promiscuous mode [ 31.708139][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.715216][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.722388][ T3314] bridge_slave_1: entered allmulticast mode [ 31.728706][ T3314] bridge_slave_1: entered promiscuous mode [ 31.737444][ T3316] hsr_slave_0: entered promiscuous mode [ 31.743486][ T3316] hsr_slave_1: entered promiscuous mode [ 31.755850][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.788348][ T3322] hsr_slave_0: entered promiscuous mode [ 31.794311][ T3322] hsr_slave_1: entered promiscuous mode [ 31.800271][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 31.805983][ T3322] Cannot create hsr debugfs directory [ 31.812048][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.853501][ T3315] hsr_slave_0: entered promiscuous mode [ 31.862250][ T3315] hsr_slave_1: entered promiscuous mode [ 31.868139][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 31.873906][ T3315] Cannot create hsr debugfs directory [ 31.880685][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.898088][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.919880][ T3326] team0: Port device team_slave_0 added [ 31.943307][ T3326] team0: Port device team_slave_1 added [ 31.962677][ T3314] team0: Port device team_slave_0 added [ 31.985797][ T3314] team0: Port device team_slave_1 added [ 31.997989][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.004977][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.030891][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.044066][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.051035][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.077026][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.140701][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.147641][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.173623][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.193653][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.200672][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.226634][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.262442][ T3326] hsr_slave_0: entered promiscuous mode [ 32.268367][ T3326] hsr_slave_1: entered promiscuous mode [ 32.274427][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 32.280176][ T3326] Cannot create hsr debugfs directory [ 32.285692][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.296709][ T3314] hsr_slave_0: entered promiscuous mode [ 32.302828][ T3314] hsr_slave_1: entered promiscuous mode [ 32.308680][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 32.314435][ T3314] Cannot create hsr debugfs directory [ 32.320167][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.336250][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.355972][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.400378][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.411503][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.432059][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.440829][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.506039][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.514906][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.529753][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.542982][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.564561][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.578178][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.589111][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.598761][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.607305][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.626452][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.644597][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.660738][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.670267][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.681588][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.691419][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.698462][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.706632][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.715521][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.731676][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.738721][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.755438][ T1650] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.762532][ T1650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.772229][ T1650] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.779389][ T1650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.815022][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.874501][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.883228][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.906079][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.923019][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.945511][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.954436][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.963698][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.970967][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.980658][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.993964][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.001030][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.009928][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.016949][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.025720][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.032772][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.045021][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.052087][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.068546][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.078961][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.099082][ T1894] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.106241][ T1894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.136862][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.218914][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.257547][ T3315] veth0_vlan: entered promiscuous mode [ 33.281684][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.291644][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.301195][ T3315] veth1_vlan: entered promiscuous mode [ 33.352132][ T3315] veth0_macvtap: entered promiscuous mode [ 33.361386][ T3316] veth0_vlan: entered promiscuous mode [ 33.381541][ T3315] veth1_macvtap: entered promiscuous mode [ 33.390561][ T3316] veth1_vlan: entered promiscuous mode [ 33.416085][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.433638][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.450366][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.465612][ T3326] veth0_vlan: entered promiscuous mode [ 33.481437][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.495133][ T3314] veth0_vlan: entered promiscuous mode [ 33.504558][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.514534][ T3314] veth1_vlan: entered promiscuous mode [ 33.526459][ T3316] veth0_macvtap: entered promiscuous mode [ 33.534588][ T3326] veth1_vlan: entered promiscuous mode [ 33.540957][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.550522][ T3316] veth1_macvtap: entered promiscuous mode [ 33.566632][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.592418][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.608399][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.622669][ T3322] veth0_vlan: entered promiscuous mode [ 33.632506][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.654346][ T3322] veth1_vlan: entered promiscuous mode [ 33.661525][ T3314] veth0_macvtap: entered promiscuous mode [ 33.670725][ T1650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.679958][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.688809][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.704756][ T3322] veth0_macvtap: entered promiscuous mode [ 33.715007][ T3314] veth1_macvtap: entered promiscuous mode [ 33.728678][ T3322] veth1_macvtap: entered promiscuous mode [ 33.735929][ T3326] veth0_macvtap: entered promiscuous mode [ 33.751706][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.761474][ T3326] veth1_macvtap: entered promiscuous mode [ 33.783846][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.798399][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.816066][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.832639][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.845454][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.862005][ T1785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.893808][ T1785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.926645][ T1785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.967551][ T1785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.980556][ T1785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.983507][ T3491] loop2: detected capacity change from 0 to 512 [ 33.990069][ T1785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.997024][ T3491] EXT4-fs: Ignoring removed oldalloc option [ 34.017035][ T3494] 9pnet_fd: Insufficient options for proto=fd [ 34.059308][ T3491] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.067832][ T1785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.072451][ T3491] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.085462][ T3500] loop1: detected capacity change from 0 to 512 [ 34.098167][ T1785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.098245][ T1785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.098319][ T1785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.098365][ T1785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.098420][ T1785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.103097][ T3501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.120525][ T3500] journal_path: Lookup failure for './file1' [ 34.120542][ T3500] EXT4-fs: error: could not find journal device path [ 34.142878][ T3491] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #11: comm syz.2.6: corrupted in-inode xattr: invalid ea_ino [ 34.152889][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.187589][ C0] hrtimer: interrupt took 37322 ns [ 34.209873][ T3491] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6: couldn't read orphan inode 11 (err -117) [ 34.215506][ T3506] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 34.236033][ T3506] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 34.236448][ T3500] xt_TPROXY: Can be used only with -p tcp or -p udp [ 34.251977][ T3491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.253895][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 34.351660][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 34.351675][ T29] audit: type=1400 audit(1770652976.258:141): avc: denied { tracepoint } for pid=3507 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.385689][ T3508] loop4: detected capacity change from 0 to 512 [ 34.414480][ T3508] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.7: casefold flag without casefold feature [ 34.437753][ T29] audit: type=1400 audit(1770652976.278:142): avc: denied { read write } for pid=3507 comm="syz.4.7" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.450215][ T3508] EXT4-fs (loop4): get root inode failed [ 34.462329][ T29] audit: type=1400 audit(1770652976.278:143): avc: denied { open } for pid=3507 comm="syz.4.7" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 34.467936][ T3508] EXT4-fs (loop4): mount failed [ 34.492183][ T29] audit: type=1400 audit(1770652976.278:144): avc: denied { map_read map_write } for pid=3507 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.492209][ T29] audit: type=1400 audit(1770652976.288:145): avc: denied { read } for pid=3510 comm="syz.3.8" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.540102][ T29] audit: type=1400 audit(1770652976.288:146): avc: denied { open } for pid=3510 comm="syz.3.8" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.550829][ T3491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.563609][ T29] audit: type=1400 audit(1770652976.288:147): avc: denied { ioctl } for pid=3510 comm="syz.3.8" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.563683][ T29] audit: type=1400 audit(1770652976.298:148): avc: denied { add_name } for pid=3512 comm="syz.2.6" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.563706][ T29] audit: type=1400 audit(1770652976.298:149): avc: denied { create } for pid=3512 comm="syz.2.6" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.563729][ T29] audit: type=1400 audit(1770652976.298:150): avc: denied { write open } for pid=3512 comm="syz.2.6" path="/1/file1/core" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.716195][ T3491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.739836][ T3512] syz.2.6 (3512) used greatest stack depth: 9728 bytes left [ 34.864587][ T3524] loop0: detected capacity change from 0 to 512 [ 34.870571][ T3520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 34.886863][ T3524] ======================================================= [ 34.886863][ T3524] WARNING: The mand mount option has been deprecated and [ 34.886863][ T3524] and is ignored by this kernel. Remove the mand [ 34.886863][ T3524] option from the mount to silence this warning. [ 34.886863][ T3524] ======================================================= [ 34.927746][ T3524] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 34.927770][ T3524] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 34.927788][ T3524] EXT4-fs (loop0): group descriptors corrupted! [ 34.951545][ T3524] loop0: detected capacity change from 0 to 128 [ 34.960475][ T3524] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.960682][ T3524] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.022496][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.278216][ T3548] loop3: detected capacity change from 0 to 1024 [ 35.324332][ T3551] loop4: detected capacity change from 0 to 1024 [ 35.334982][ T3315] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #11: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 35.350010][ T3548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.369771][ T3315] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #11: comm syz-executor: corrupted in-inode xattr: invalid ea_ino [ 35.399549][ T3548] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.490282][ T3551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 35.498385][ T3551] System zones: 0-1, 3-36 [ 35.508011][ T3544] xt_hashlimit: size too large, truncated to 1048576 [ 35.526035][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 35.545114][ T3551] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.14: bad orphan inode 134217728 [ 35.596175][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.633164][ T3556] loop3: detected capacity change from 0 to 512 [ 35.709851][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.736611][ T3556] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.774298][ T3556] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.21: bg 0: block 416: padding at end of block bitmap is not set [ 35.807924][ T3556] EXT4-fs (loop3): Remounting filesystem read-only [ 35.854869][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.979703][ T3563] loop3: detected capacity change from 0 to 512 [ 35.996330][ T3563] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 36.007178][ T3563] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 36.017260][ T3563] EXT4-fs (loop3): group descriptors corrupted! [ 36.120741][ T3563] loop3: detected capacity change from 0 to 128 [ 36.130661][ T3570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 36.142257][ T3563] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.291549][ T3574] netlink: 'syz.1.24': attribute type 1 has an invalid length. [ 36.299220][ T3574] netlink: 'syz.1.24': attribute type 2 has an invalid length. [ 36.307024][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 36.316036][ T3563] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.385691][ T3326] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.425136][ T3578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 36.455492][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 36.569876][ T3585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.31'. [ 36.583878][ T3587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.596437][ T3587] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.641288][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.663559][ T3593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.671199][ T3593] batadv_slave_0: entered allmulticast mode [ 36.737458][ T3587] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.30: Freeing blocks not in datazone - block = 0, count = 16 [ 36.773923][ T3598] process 'syz.4.32' launched '/dev/fd/3' with NULL argv: empty string added [ 36.932923][ T3521] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.975954][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.009097][ T3602] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.043448][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.074946][ T52] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 37.096492][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 37.108919][ T52] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.108919][ T52] [ 37.118816][ T52] EXT4-fs (loop1): Total free blocks count 0 [ 37.124837][ T52] EXT4-fs (loop1): Free/Dirty block details [ 37.130796][ T52] EXT4-fs (loop1): free_blocks=16 [ 37.135826][ T52] EXT4-fs (loop1): dirty_blocks=16 [ 37.141133][ T52] EXT4-fs (loop1): Block reservation details [ 37.147299][ T52] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 37.164554][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.190679][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.210389][ T3615] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 37.218046][ T3615] netlink: 'syz.1.38': attribute type 2 has an invalid length. [ 37.227525][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 37.247670][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.302028][ T3619] binfmt_misc: register: failed to install interpreter file ./file0 [ 37.304748][ T3609] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal [ 37.382902][ T42] bridge_slave_1: left allmulticast mode [ 37.382921][ T42] bridge_slave_1: left promiscuous mode [ 37.383043][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.389092][ T42] bridge_slave_0: left allmulticast mode [ 37.389108][ T42] bridge_slave_0: left promiscuous mode [ 37.389237][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.412014][ T3627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.450027][ T3636] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.45: casefold flag without casefold feature [ 37.510273][ T3636] EXT4-fs (loop4): get root inode failed [ 37.515941][ T3636] EXT4-fs (loop4): mount failed [ 37.523469][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.534727][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.544719][ T42] bond0 (unregistering): Released all slaves [ 37.559671][ T3638] netlink: 'syz.0.42': attribute type 2 has an invalid length. [ 37.589676][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.604720][ T42] hsr_slave_0: left promiscuous mode [ 37.610550][ T42] hsr_slave_1: left promiscuous mode [ 37.616138][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.623822][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.631740][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.639121][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.651091][ T42] veth1_macvtap: left promiscuous mode [ 37.656625][ T42] veth0_macvtap: left promiscuous mode [ 37.662476][ T42] veth1_vlan: left promiscuous mode [ 37.667714][ T42] veth0_vlan: left promiscuous mode [ 37.766028][ T3647] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 37.821437][ T3647] System zones: 0-1, 3-36 [ 37.829587][ T3650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.839578][ T42] team0 (unregistering): Port device team_slave_1 removed [ 37.846186][ T3650] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.867508][ T3647] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.44: bad orphan inode 134217728 [ 37.878627][ T42] team0 (unregistering): Port device team_slave_0 removed [ 37.878917][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.021298][ T3650] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.48: Freeing blocks not in datazone - block = 0, count = 16 [ 38.075185][ T3659] EXT4-fs: inline encryption not supported [ 38.101505][ T3604] chnl_net:caif_netlink_parms(): no params data found [ 38.164920][ T3659] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.195979][ T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 38.238353][ T3659] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.50: Allocating blocks 497-513 which overlap fs metadata [ 38.243679][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.259153][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.266738][ T3604] bridge_slave_0: entered allmulticast mode [ 38.267398][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 38.273266][ T3604] bridge_slave_0: entered promiscuous mode [ 38.285061][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.285061][ T52] [ 38.292003][ T3604] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.300534][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 38.307540][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.313511][ T52] EXT4-fs (loop4): Free/Dirty block details [ 38.326412][ T52] EXT4-fs (loop4): free_blocks=16 [ 38.331511][ T52] EXT4-fs (loop4): dirty_blocks=32 [ 38.336626][ T52] EXT4-fs (loop4): Block reservation details [ 38.336815][ T3659] EXT4-fs (loop0): Remounting filesystem read-only [ 38.343075][ T52] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 38.349471][ T3604] bridge_slave_1: entered allmulticast mode [ 38.363408][ T3604] bridge_slave_1: entered promiscuous mode [ 38.430653][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.453663][ T3604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.478273][ T3604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.519784][ T42] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1664 with max blocks 4 with error 28 [ 38.544981][ T3604] team0: Port device team_slave_0 added [ 38.563930][ T3604] team0: Port device team_slave_1 added [ 38.579952][ T3693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.609519][ T3696] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.633600][ T3698] netlink: 'syz.4.51': attribute type 10 has an invalid length. [ 38.645880][ T3693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.661567][ T3696] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.689630][ T3696] EXT4-fs (loop0): 1 truncate cleaned up [ 38.695825][ T3696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.734944][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.742247][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.768181][ T3604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.784849][ T3696] Zero length message leads to an empty skb [ 38.796139][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.806537][ T3698] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 38.840846][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.860093][ T3698] team0: Failed to send options change via netlink (err -105) [ 38.867582][ T3698] team0: Port device netdevsim1 added [ 38.893680][ T3604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.901659][ T3604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.928071][ T3604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.960162][ T3693] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 38.982630][ T3693] team0: Failed to send options change via netlink (err -105) [ 39.009355][ T3693] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 39.039466][ T3693] team0: Port device netdevsim1 removed [ 39.046228][ T3693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.112722][ T3693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.126958][ T3604] hsr_slave_0: entered promiscuous mode [ 39.133193][ T3604] hsr_slave_1: entered promiscuous mode [ 39.139807][ T3604] debugfs: 'hsr0' already exists in 'hsr' [ 39.145639][ T3604] Cannot create hsr debugfs directory [ 39.271667][ T1675] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.304249][ T1675] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.329271][ T3709] __nla_validate_parse: 1 callbacks suppressed [ 39.335539][ T3709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.55'. [ 39.361517][ T1675] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.383615][ T1675] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.467713][ T3734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 39.496063][ T3604] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.496855][ T3741] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 39.510395][ T3741] netlink: 'syz.0.58': attribute type 2 has an invalid length. [ 39.540848][ T3604] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.551705][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 39.562704][ T3604] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.623897][ T3604] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.642837][ T3747] set_capacity_and_notify: 8 callbacks suppressed [ 39.642851][ T3747] loop4: detected capacity change from 0 to 1024 [ 39.661289][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 39.661304][ T29] audit: type=1400 audit(1770652981.568:327): avc: denied { create } for pid=3745 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 39.702187][ T3604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.714479][ T3747] ext4: Unknown parameter 'nojournal' [ 39.731083][ T3604] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.751494][ T3757] loop1: detected capacity change from 0 to 512 [ 39.764554][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.771124][ T29] audit: type=1400 audit(1770652981.598:328): avc: denied { write } for pid=3745 comm="syz.0.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 39.771652][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.792052][ T29] audit: type=1400 audit(1770652981.598:329): avc: denied { mounton } for pid=3745 comm="syz.0.60" path="/18/file0" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.875364][ T29] audit: type=1400 audit(1770652981.738:330): avc: denied { ioctl } for pid=3760 comm="syz.0.62" path="socket:[5877]" dev="sockfs" ino=5877 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 39.912328][ T3604] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.922724][ T3604] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.965768][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.972955][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.991571][ T29] audit: type=1400 audit(1770652981.898:331): avc: denied { audit_write } for pid=3760 comm="syz.0.62" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 40.030980][ T3779] loop4: detected capacity change from 0 to 512 [ 40.077420][ T3779] EXT4-fs error (device loop4): __ext4_fill_super:5553: inode #2: comm syz.4.65: casefold flag without casefold feature [ 40.097583][ T3779] EXT4-fs (loop4): get root inode failed [ 40.103317][ T3779] EXT4-fs (loop4): mount failed [ 40.132002][ T3604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.277937][ T3805] netlink: 'syz.4.66': attribute type 1 has an invalid length. [ 40.285564][ T3805] netlink: 'syz.4.66': attribute type 2 has an invalid length. [ 40.319364][ T3805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 40.343879][ T3604] veth0_vlan: entered promiscuous mode [ 40.358711][ T3810] loop0: detected capacity change from 0 to 1024 [ 40.371142][ T3604] veth1_vlan: entered promiscuous mode [ 40.403651][ T3604] veth0_macvtap: entered promiscuous mode [ 40.409853][ T29] audit: type=1400 audit(1770652982.308:332): avc: denied { create } for pid=3813 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.429032][ T29] audit: type=1400 audit(1770652982.308:333): avc: denied { write } for pid=3813 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 40.460371][ T3604] veth1_macvtap: entered promiscuous mode [ 40.472137][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.491515][ T3604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.502598][ T42] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.520002][ T3810] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 40.524377][ T29] audit: type=1400 audit(1770652982.428:334): avc: denied { mounton } for pid=3604 comm="syz-executor" path="/root/syzkaller.tZY5cI/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.528728][ T42] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.581488][ T3810] System zones: 0-1, 3-36 [ 40.609540][ T42] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.611282][ T3810] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.64: bad orphan inode 134217728 [ 40.628657][ T42] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.637561][ T29] audit: type=1400 audit(1770652982.458:335): avc: denied { mount } for pid=3604 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.659716][ T29] audit: type=1400 audit(1770652982.458:336): avc: denied { mount } for pid=3604 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.661367][ T3827] loop5: detected capacity change from 0 to 128 [ 40.702954][ T3810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.791014][ T3827] bpf: Bad value for 'mode' [ 40.962969][ T3848] loop5: detected capacity change from 0 to 128 [ 41.042172][ T3852] loop1: detected capacity change from 0 to 2048 [ 41.064781][ T3852] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 41.067936][ T3855] loop5: detected capacity change from 0 to 512 [ 41.117860][ T3855] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 41.127744][ T3855] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 41.146822][ T3859] loop4: detected capacity change from 0 to 1024 [ 41.190214][ T3859] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.244319][ T3859] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.265168][ T3863] loop1: detected capacity change from 0 to 1024 [ 41.341275][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.361851][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.390143][ T3863] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.419976][ T3863] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.78: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.455898][ T3863] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.468230][ T3863] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.468230][ T3863] [ 41.495156][ T3867] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.77: Freeing blocks not in datazone - block = 0, count = 16 [ 41.580886][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.650275][ T52] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 112: padding at end of block bitmap is not set [ 41.659246][ T3878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.676011][ T3878] EXT4-fs (loop0): 1 truncate cleaned up [ 41.683455][ T3878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.725776][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.738149][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.738149][ T52] [ 41.747861][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 41.753920][ T52] EXT4-fs (loop4): Free/Dirty block details [ 41.759873][ T52] EXT4-fs (loop4): free_blocks=16 [ 41.765014][ T52] EXT4-fs (loop4): dirty_blocks=32 [ 41.770168][ T52] EXT4-fs (loop4): Block reservation details [ 41.776133][ T52] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 41.830788][ T3878] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 41.842608][ T10] IPVS: starting estimator thread 0... [ 41.851659][ T1675] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1792 with max blocks 4 with error 28 [ 41.867921][ T3884] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.82: ea_inode with extended attributes [ 41.922342][ T3884] EXT4-fs (loop1): Remounting filesystem read-only [ 41.937067][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.956749][ T3884] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 41.965953][ T3888] IPVS: using max 2304 ests per chain, 115200 per kthread [ 41.989361][ T3884] EXT4-fs (loop1): 1 orphan inode deleted [ 41.998422][ T3884] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.033987][ T3314] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 42.053538][ T3895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.85'. [ 42.067654][ T3896] netlink: 32 bytes leftover after parsing attributes in process `syz.0.85'. [ 42.118542][ T3902] netlink: 'syz.0.85': attribute type 3 has an invalid length. [ 42.201157][ T3908] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 42.209742][ T3908] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.220591][ T3908] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.90: corrupted inode contents [ 42.241596][ T3908] EXT4-fs (loop1): Remounting filesystem read-only [ 42.251670][ T3908] EXT4-fs (loop1): 1 truncate cleaned up [ 42.257481][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.268065][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 42.309033][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 42.326669][ T3912] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 42.344622][ T3912] System zones: 0-2, 18-18, 34-34 [ 42.354217][ T3908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.377490][ T3912] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.400360][ T3908] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.413292][ T3912] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.452655][ T3912] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 42.459495][ T3912] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.91: bad orphan inode 4095 [ 42.472228][ T3912] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.491107][ T3908] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.531754][ T3316] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 42.544894][ T3908] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.583335][ T3908] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.597407][ T3923] tmpfs: Bad value for 'huge' [ 42.639038][ T1675] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.667930][ T1675] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.687239][ T1675] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.699986][ T1675] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.720137][ T3930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 42.753851][ T3930] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.783680][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930389][ T3930] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.93: Freeing blocks not in datazone - block = 0, count = 16 [ 42.999347][ T3956] netlink: 'syz.1.101': attribute type 1 has an invalid length. [ 43.104361][ T3959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.120691][ T1894] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 43.180930][ T1894] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 43.193258][ T1894] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.193258][ T1894] [ 43.202993][ T1894] EXT4-fs (loop0): Total free blocks count 0 [ 43.209036][ T1894] EXT4-fs (loop0): Free/Dirty block details [ 43.214952][ T1894] EXT4-fs (loop0): free_blocks=16 [ 43.220018][ T1894] EXT4-fs (loop0): dirty_blocks=16 [ 43.225371][ T1894] EXT4-fs (loop0): Block reservation details [ 43.231406][ T1894] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 43.266760][ T3959] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.102: Allocating blocks 497-513 which overlap fs metadata [ 43.297218][ T3959] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.102: Allocating blocks 497-513 which overlap fs metadata [ 43.313887][ T3968] netlink: 774 bytes leftover after parsing attributes in process `syz.5.105'. [ 43.315462][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.322927][ T3968] netlink: 52 bytes leftover after parsing attributes in process `syz.5.105'. [ 43.342225][ T3958] EXT4-fs (loop1): pa ffff888107eab2a0: logic 48, phys. 177, len 21 [ 43.350260][ T3958] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 43.400691][ T3981] EXT4-fs: Ignoring removed i_version option [ 43.406823][ T3981] EXT4-fs: Ignoring removed bh option [ 43.453472][ T3981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.467279][ T3952] xt_hashlimit: size too large, truncated to 1048576 [ 43.479830][ T3981] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.491523][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.502538][ T3985] capability: warning: `syz.0.108' uses deprecated v2 capabilities in a way that may be insecure [ 43.515999][ T3981] netlink: 20 bytes leftover after parsing attributes in process `syz.5.106'. [ 43.605101][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.713814][ T3997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.112'. [ 43.727386][ T1675] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.747665][ T1675] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.759066][ T1675] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.769739][ T1675] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.894897][ T4002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.929484][ T4002] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.074843][ T4002] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.114: Freeing blocks not in datazone - block = 0, count = 16 [ 44.211411][ T1675] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 44.251028][ T1675] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.263567][ T1675] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.263567][ T1675] [ 44.300096][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.498254][ T4030] xt_hashlimit: size too large, truncated to 1048576 [ 44.624050][ T4033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 44.690575][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 44.690590][ T29] audit: type=1400 audit(1770652986.598:453): avc: denied { setopt } for pid=4048 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 44.738604][ T29] audit: type=1400 audit(1770652986.618:454): avc: denied { read write } for pid=4048 comm="syz.1.126" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.762209][ T29] audit: type=1400 audit(1770652986.618:455): avc: denied { open } for pid=4048 comm="syz.1.126" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.785533][ T29] audit: type=1400 audit(1770652986.638:456): avc: denied { ioctl } for pid=4048 comm="syz.1.126" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.810036][ T29] audit: type=1400 audit(1770652986.638:457): avc: denied { name_connect } for pid=4048 comm="syz.1.126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 44.839045][ T4059] set_capacity_and_notify: 9 callbacks suppressed [ 44.839060][ T4059] loop1: detected capacity change from 0 to 128 [ 44.919180][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 44.952251][ T29] audit: type=1400 audit(1770652986.858:458): avc: denied { setopt } for pid=4062 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.972442][ T29] audit: type=1400 audit(1770652986.858:459): avc: denied { getopt } for pid=4062 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.992560][ T29] audit: type=1400 audit(1770652986.858:460): avc: denied { write } for pid=4062 comm="syz.4.129" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.015908][ T4065] __nla_validate_parse: 1 callbacks suppressed [ 45.015922][ T4065] netlink: 216 bytes leftover after parsing attributes in process `syz.4.129'. [ 45.047164][ T4066] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 45.068881][ T29] audit: type=1400 audit(1770652986.958:461): avc: denied { ioctl } for pid=4068 comm="syz.5.131" path="socket:[6933]" dev="sockfs" ino=6933 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.096260][ T4066] bond1 (unregistering): Released all slaves [ 45.130663][ T4061] Illegal XDP return value 4294967274 on prog (id 38) dev N/A, expect packet loss! [ 45.131708][ T29] audit: type=1400 audit(1770652986.998:462): avc: denied { create } for pid=4070 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.157972][ T4076] loop4: detected capacity change from 0 to 2048 [ 45.168504][ T4069] x_tables: duplicate underflow at hook 2 [ 45.194793][ T4083] 9p: Bad value for 'wfdno' [ 45.201651][ T4083] loop0: detected capacity change from 0 to 256 [ 45.208339][ T4083] vfat: Unknown parameter 'NLBL_CIPSOv4' [ 45.214500][ T4083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.128'. [ 45.226651][ T4085] loop5: detected capacity change from 0 to 1024 [ 45.259119][ T4076] loop4: p1 p3 p4 [ 45.271749][ T4085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.284531][ T4085] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.296465][ T4076] loop4: p4 size 589824 extends beyond EOD, truncated [ 45.310503][ T3307] ================================================================== [ 45.318591][ T3307] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 45.325699][ T3307] [ 45.328010][ T3307] write to 0xffff88811b7689a8 of 4 bytes by task 3299 on cpu 1: [ 45.335625][ T3307] touch_atime+0x1e8/0x340 [ 45.340037][ T3307] shmem_file_read_iter+0x477/0x540 [ 45.345232][ T3307] vfs_read+0x6c0/0x7f0 [ 45.349370][ T3307] ksys_read+0xdc/0x1a0 [ 45.353507][ T3307] __x64_sys_read+0x40/0x50 [ 45.357993][ T3307] x64_sys_call+0x2889/0x3000 [ 45.362668][ T3307] do_syscall_64+0xc0/0x2a0 [ 45.367164][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.373042][ T3307] [ 45.375350][ T3307] read to 0xffff88811b7689a8 of 4 bytes by task 3307 on cpu 0: [ 45.382883][ T3307] generic_fillattr+0x172/0x340 [ 45.387733][ T3307] shmem_getattr+0x181/0x200 [ 45.392316][ T3307] vfs_getattr_nosec+0x146/0x1e0 [ 45.397243][ T3307] __se_sys_newfstat+0x96/0x460 [ 45.402086][ T3307] __x64_sys_newfstat+0x31/0x40 [ 45.406933][ T3307] x64_sys_call+0x2c51/0x3000 [ 45.411599][ T3307] do_syscall_64+0xc0/0x2a0 [ 45.416094][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.421981][ T3307] [ 45.424301][ T3307] value changed: 0x0d23190b -> 0x0d554ab5 [ 45.430002][ T3307] [ 45.432311][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 45.438479][ T3307] CPU: 0 UID: 0 PID: 3307 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.447750][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 45.457788][ T3307] ================================================================== [ 45.609779][ T4085] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.134: Freeing blocks not in datazone - block = 0, count = 16 [ 45.780510][ T1894] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 45.796943][ T1894] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.809764][ T1894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 45.809764][ T1894] [ 45.819433][ T1894] EXT4-fs (loop5): Total free blocks count 0 [ 45.825405][ T1894] EXT4-fs (loop5): Free/Dirty block details [ 45.831299][ T1894] EXT4-fs (loop5): free_blocks=16 [ 45.836306][ T1894] EXT4-fs (loop5): dirty_blocks=16 [ 45.841457][ T1894] EXT4-fs (loop5): Block reservation details [ 45.847416][ T1894] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 45.854647][ T3604] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.