last executing test programs: 14m2.185272522s ago: executing program 32 (id=676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400"], 0x58}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x14, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r10], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@broadcast, @local, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@delchain={0x3c, 0x65, 0x800, 0x70bd29, 0x25dfd9fb, {0x0, 0x0, 0x0, r12, {0x6, 0x9}, {0xfff1, 0xfff3}, {0xfff1, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x8c}, @TCA_RATE={0x6, 0x5, {0x0, 0xcc}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20014004}, 0x8800) 13m41.925631288s ago: executing program 33 (id=763): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/13, 0xd}, 0x2}], 0x1, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x2, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 13m25.148441397s ago: executing program 34 (id=772): creat(&(0x7f0000019040)='./file3\x00', 0x10d) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0xc, 0x0, 0x7}]}, 0x10) dup(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x20000680) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x40180, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast1, 0x4}, 0x1c) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xa, 0x148, 0x0, 0x10, 0x330, 0x2a8, 0x2a8, 0x330, 0x2a8, 0x3, 0x0, {[{{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @local, 0x0, 0x0, 'ip6erspan0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x2, 0x7, [0x0, 0x10, 0x1b, 0x2b, 0x37, 0x2e, 0x2b, 0x18, 0x2b, 0x34, 0xd, 0x0, 0x3d, 0x1, 0x32, 0x37], 0x1, 0x6, 0x1570000000000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r1, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000190c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 12m55.771797314s ago: executing program 35 (id=995): openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) msgget$private(0x0, 0x483) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r5 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000080)={0xa, 0xe64, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1fd}, 0x1c) bind$inet6(r4, &(0x7f0000000480)={0xa, 0xe64, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) 11m29.115790542s ago: executing program 36 (id=1579): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000500000018010000756c606500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000002d000000850000001100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000280)=""/10, &(0x7f0000000080)=0xfffffffffffffedc) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000160001002cbd7000000000000a0000001800ca8014000b"], 0x2c}}, 0x0) (async) recvmmsg(r6, &(0x7f0000001e40), 0x0, 0x40010021, 0x0) 9m32.961822876s ago: executing program 37 (id=2461): r0 = syz_open_dev$evdev(&(0x7f00000015c0), 0xac, 0xa000) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) close_range(r0, r1, 0x2) shutdown(r2, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000001600)=""/106) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r3, 0x3, 0x0, &(0x7f0000000080)) 9m24.305401677s ago: executing program 8 (id=2518): r0 = socket$netlink(0x10, 0x3, 0x0) syz_read_part_table(0x1056, &(0x7f0000000000)="$eJzsz82JAkEUBODqnd35WS+GoKHMWa+eTMIcjEVBEzMKUZRxxABEhO87dDd0UY8XPqoMV5V0yaXs/59/vyVV8xqvHo/FeVOnZDavt/1P0g5NfTdG17djWXLo65TpX9PeJ+S0GzsmWR3fuRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfItrAAAA//82awlP") socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/schedstat\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x1, &(0x7f00000026c0)=@raw=[@jmp={0x5, 0x0, 0x1, 0xa, 0x4, 0xfffffffffffffff0, 0xfffffffffffffff0}], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001100)=@urb_type_control={0x2, {0xf, 0x1}, 0x7, 0xc0, &(0x7f00000010c0)={0x80, 0x17, 0xc4b, 0x2, 0x3}, 0x8, 0x7, 0x1, 0x0, 0x8, 0x5, &(0x7f0000001180)="f57144955bdb0f8928e5f7bcb3c90bae1402349a7e85a2f019f4d4f399b00f940107071efe3c84c1946366f2aa9897e2bccf05a9c86cde0da8f08b7c5f616bc93563d5b5c32d2791d30675f1a8967467475d02ab110063d412c73f4bd15e99fe13721412e9ff53377a7a85eb23b9b1f4ba1dfa55cf828f052f4ee0d5207bf8c8abbae79edc232c4b0e22d3c1b762b4a433609fcd52f60fc56abdde891518cf768ce6478e5ec7ee45ada3070bb1"}) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x2, 0x7, &(0x7f0000001240)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018220000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000001280)='GPL\x00', 0x11, 0x1000, &(0x7f0000001600)=""/4096, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r3, 0x0, &(0x7f00000013c0)=[r4]}, 0x94) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c000400010000010002800008000500", @ANYRES32=r5, @ANYBLOB="f9df0d6540c6123d0800000023bea66d728836220d74"], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="14010000", @ANYRES16, @ANYBLOB="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"], 0x114}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e20, 0x4e20], [0x4e20, 0x4e22], 0x3, 0x8, 0xc2, 0x7}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0xc2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@ipv6header={{0x28}, {0x4, 0x11, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x80) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r9, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r12, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r12, &(0x7f0000001140), 0x700, 0x2, 0x0) r13 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r6, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x48, r13, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:xconsole_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000}, 0x4) 9m23.748735355s ago: executing program 8 (id=2522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x20004800) 9m23.619723951s ago: executing program 8 (id=2525): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x6400, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) write$UHID_CREATE2(r0, 0x0, 0x119) 9m23.545600145s ago: executing program 8 (id=2526): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x80071c, &(0x7f00000000c0), 0xff, 0x4ea, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$tun(r0, &(0x7f0000000200)={@void, @val={0x2, 0x80, 0x9, 0x9c02, 0x2, 0x7}, @x25={0x3, 0xff, 0x23, "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"}}, 0x107) io_submit(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x1180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) fcntl$lock(r1, 0x5, &(0x7f0000000280)={0x1, 0x1, 0x6000000000000, 0x800}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x40000005, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000800)={[{@usrquota}, {@auto_da_alloc}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@errors_remount}], [{@subj_user={'subj_user', 0x3d, 'GPL\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x35, 0x65, 0x66, 0x34, 0x38, 0x31], 0x2d, [0x34, 0x32, 0x33, 0x66], 0x2d, [0x63, 0x39, 0x64, 0x39], 0x2d, [0x63, 0x65, 0x34, 0x64], 0x2d, [0x37, 0x62, 0x50, 0x39, 0x66, 0x61, 0x0, 0x38]}}}, {@pcr={'pcr', 0x3d, 0x8}}]}, 0x7, 0x60a, &(0x7f0000001240)="$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") r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fremovexattr(r2, &(0x7f0000000040)=@random={'security.', '*!@]\x00'}) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x4, 0x40}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4212, r5, 0x0, 0x200000000001) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") timer_delete(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000400000080000000400000f441"], 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 9m23.315375066s ago: executing program 8 (id=2528): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@local, 0x0, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, {0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x5}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0xffffffff}, 0x40000) 9m23.071657938s ago: executing program 8 (id=2533): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x1, 0x1}, {0x89}, {0x3, 0x0, 0x0, 0x3}, {0x3}, {0xa5a9, 0x0, 0x0, 0x20000000}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$eJzs3U1rG0cfAPD/ylbenycOhNCWUgw9NCWNHNt9SaGH9NyGBtp7KuyNCZajYMkhdgNNDs25hF5KA6X30nOPoV+gh36GQBsIJZj20IvLyivFL5ItJ7KtVL8frJnZXWl2NPsfz2gkFMDAGs3+FCJejoivk4jjEZHkx4YjPzi6et7yk1tT2ZbEysqnfyaN87J887majzuaZ16KiF++ijhT2FxubXFptlyppPN5fqw+d32strh09upceSadSa9NTE6ef2dy4v333u1ZXd+89Pe3nzwYynMn7iVxIY7lubX1eA6312ZGYzR/TYpxYcOJ4z0orJ8kbff+tOfXwc4M5XFejKwPOB5DedQD/31fRsQKMKCSHcf/b8XduRJgbzXHAc25fY/mwS+Mxx+uToA213949b2RONSYGx1ZTtbNjLL57kgPys/K+PmP+/eyLXr3PgTAtm7fiYhzw8Ob+78k7/+e3bkuztlYhv4P9s6DbPzzVrvxT6E1/ok245+jbWL3WWwf/4VHPSimo2z890Hb8W9r0WpkKM/9rzHmKyZXrlbSrG/7f0ScjuLBLL/Ves755YcrnY6tHf9lW1Z+cyyYX8ej4YPrHzNdrpefp85rPb4T8Urb8W/Sav+kTftnr8elLss4ld5/rdOx7eu/u1Z+iHijbfs/XdFKtl6fHGvcD2PNu2Kzv+6e+rVT+ftd/6z9j2xd/5Fk7XptbedlfH/onzRa68nrrat/dH//H0g+a6QP5Ptuluv1+fGIA8nHrf2F5v6Jp49t5pvnZ/U//frW/V+7+/9wRHzeZf3vnvzx1U7H+qH9p9u2f2t2u6H9d554+NEX33Uqv7v+7+1G6nS+p5v+r9sLfJ7XDgAAAAAAAPpNISKORVIotdKFQqm0+vmOk3GkUKnW6meuVBeuTUfju7IjUSw0V7qPr/k8xHi+YtjMT2zIT0bEiYj4ZuhwI1+aqlam97vyAAAAAAAAAAAAAAAAAAAA0CeOdvj+f+b3of2+OmDX+clvGFzbxn8vfukJ6Ev+/8PgEv8wuMQ/DC7xD4NL/MPgEv8wuMQ/DC7xDwAAAAAAAAAAAAAAAAAAAAAAAAAAAD116eLFbFtZfnJrKstP31hcmK3eODud1mZLcwtTpanq/PXSTLU6U0lLU9W57Z6vUq1eH5+IhZtj9bRWH6stLl2eqy5cq1++OleeSS+nxT2pFQAAAAAAAAAAAAAAAAAAALxYaotLs+VKJZ2XkHimxHB/XIZEjxP73TMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP/BgAA//9q6zMB") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000552ed0474601c2fd00000800"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r5) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x81, 0x4, 0x9, 0x2, 0x3, 0x0, 0x4, 0xf5, 0x9}}, 0x43) socketpair$unix(0x1, 0x5, 0x0, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 9m23.071450638s ago: executing program 38 (id=2533): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60, 0x1, 0x1}, {0x89}, {0x3, 0x0, 0x0, 0x3}, {0x3}, {0xa5a9, 0x0, 0x0, 0x20000000}, {}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d0000552ed0474601c2fd00000800"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8924, &(0x7f0000000080)) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r5) write$P9_RSTATFS(r3, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x81, 0x4, 0x9, 0x2, 0x3, 0x0, 0x4, 0xf5, 0x9}}, 0x43) socketpair$unix(0x1, 0x5, 0x0, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 6m41.709223922s ago: executing program 6 (id=3872): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x76) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 6m41.618029977s ago: executing program 6 (id=3874): syz_clone3(&(0x7f0000000a00)={0x80000000, &(0x7f0000000800)=0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)=0x0, {0x3d}, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/163, &(0x7f00000009c0)=[0x0], 0x1}, 0x58) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='memory.current\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c000000090a010400000000000000000300000008000a40fffffffd0900020073797a31000000000900010073797a3000000000080005400001001f080003407a89a37c080004"], 0x74}}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000400)={0x14, 0x14, 0x211, 0x0, 0x25dfdbfc, {0x1, 0x40}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000b00), 0x1, 0x200080) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = accept4(0xffffffffffffffff, &(0x7f0000000b40)=@caif=@util, &(0x7f0000000bc0)=0x80, 0x40800) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c00)=0xffffffffffffffff, 0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000c40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000d80)=0xe8) stat(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000e80)={'\x00', 0xc000, 0x4, 0x4, 0x31d, 0x4, 0xffffffffffffffff}) lstat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000fc0)='./file0\x00', 0x400, 0x2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() syz_open_procfs(r17, &(0x7f0000000100)='net/snmp6\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000001200)=0x58) stat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r20, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001500)="08000001001f009e", 0x8}], 0x1}}], 0x2, 0x4000090) r21 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev}, &(0x7f0000001340)=0x1c, 0x0) r22 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r23 = socket$nl_xfrm(0x10, 0x3, 0x6) r24 = syz_open_dev$loop(&(0x7f0000001400), 0x81, 0x0) r25 = syz_open_dev$tty20(0xc, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001880)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4000004}}, {{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="52f7bfd866489d0ae9f8e04f8d2d04910653d66275643c7231566e20885b927db2d0ab2bfe7b3346cd9c86b6bffd606320f6830355e4200b307c2739f21b723e09648be7443cb5b4b0113ea1885056cb4ba3033fbd7b701d3dd3607ee30f59f44951753f", 0x64}], 0x1, &(0x7f00000002c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x10}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)="2db84698257339944e7f63b162f692b9079218391796b360f70c8fa0bc74f0fc58f6cf814aec27dbc92fc9b0cf9cee8c1746a38a28758c4573289d9c9b6287865b478430aa904b6abc08966860b571f1deb013591a52577d059acdeade7319d0ed34d79c9a34b6b0561f487107bf5b9e9dca81f768940c87d09514aae4ad10de187bd48ffa41d9949abc5eb51c3a2afdc7d1ef", 0x93}], 0x1, &(0x7f0000001440)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r12}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x34, 0x1, 0x1, [r2, 0xffffffffffffffff, r3, r4, r5, r6, r7, r8, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x1c, 0x1, 0x1, [r20, r21, r22]}}, @rights={{0x1c, 0x1, 0x1, [r23, r24, r25]}}], 0x168, 0x4000}}, {{&(0x7f00000015c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001640)="a1a77dc763b98d375c960356522a5039959ab82c8d92d5daf75e1c24b45d66ac76f8f416f9ef5404f770be6061a566122275e3d398045e7909d23dc154f54085e051f0a95a4afbe3edf9a3cf993c44364f9894d935dd9ff988ed361878a691cbc4df63d6340ecb7fad7ecc0d7e4802bf6787ccb93eb160abc3b5cf9e332321f5c9657057e86914eff9aa3b7d9792b96dff63d62b6cc4a51ccb4e069786a0804bd39f339737398f64a6f3186376c9b31be5712c249e64555b10ae643b5a5137a91df038e34fb43230c93947905fa51d75c79102cb1774f7645bd406afe35e01089960ddfb372a972380a9283dffcb0c2691", 0xf1}, {&(0x7f0000001740)="64d5306ea3ba3d8bd770716ff39803b60994f1a7318aa9602273df3deeabf9fa8e3d76c0acb71e00b14f674c3c34371f8b452e2d0a388fd1468e14e8901560d915871d230176f31dc139e385e800fd904322e924f02c95f96d9113ff43e911aa12ff54f5f6ce006695b49106e0991e33a3a75edf3901f8bf589539e18b78f2c33fcd01dfa346138e41294ac8f4867ed8c7e08a5793c9174e12f4d612112eb5210ee775306044f2b08276d2d4381341d6e31a8d8c5970f8409f88232ec8a30cc1826f5b3c4c6d8e9695d31957cdde20ffdb792c949d819de1869f783adc902d5f89f1fc60fff450818e84", 0xea}], 0x2, 0x0, 0x0, 0x40080c0}}], 0x4, 0x40801) socket$inet6(0xa, 0x3, 0x0) 6m41.525297652s ago: executing program 6 (id=3876): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x1c, 0x52, 0x1, 0x70bd27, 0x4, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r2, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c8900198401fec00000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 6m41.421008677s ago: executing program 6 (id=3880): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0xef4, 0x0, 0x4, 0x8, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x200, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffa, 0x80, 0x2, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='scalable', 0x8) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000140)=""/27, 0x1b, 0xc9112042, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') r7 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0xffffffffffffffff, r7) open_by_handle_at(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r5], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000000100)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x6, @loopback={0x0, 0x1000000000000}, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)="8000", 0x2}, {&(0x7f0000000200)="860fb0b945d6", 0x6}], 0x2}}], 0x1, 0x40008) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) 6m39.509851272s ago: executing program 6 (id=3894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000100001000000ffe4000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8001) 6m39.165665009s ago: executing program 6 (id=3904): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 6m39.165461889s ago: executing program 39 (id=3904): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 5m37.908990396s ago: executing program 0 (id=4495): r0 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000780)={0x158200, 0x46, 0x20}, 0x18) openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x413443, 0x30, 0x12}, 0x16) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x1e, 0x5, 0x0) listen(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c000180060006"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 5m37.843323619s ago: executing program 0 (id=4497): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x76) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000240)=ANY=[], 0x0) 5m37.791429622s ago: executing program 0 (id=4498): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004000) ptrace(0x8, r1) wait4(0x0, 0x0, 0x0, 0x0) r5 = gettid() r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x4, 0x4, @tid=r5}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c000000100001042abd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="82490000ca01073366257b63f5b7b400766864680000000018f7018014180100a4a912d09848b9b4f7cc77a0c1aea4f19e4a8ecb6477070000000000d79a6342bb56", @ANYRES32=0x0, @ANYBLOB="000001002481040005002700020000000a00020056da0fd758560000"], 0x5c}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) 5m36.864622757s ago: executing program 0 (id=4511): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf250c00000020000180140002006261746164765f736c6176655f30100008000300030000000800038004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) set_robust_list(&(0x7f0000000140)={0x0, 0x4}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000280)=0xc) socket(0x8, 0x4, 0x0) get_robust_list(r3, &(0x7f0000000300)=&(0x7f00000002c0), &(0x7f0000000340)=0x18) r4 = semget$private(0x0, 0x3, 0x80) semop(r4, &(0x7f0000004000)=[{0x1, 0x1, 0x800}, {0x0, 0xa312, 0x800}], 0x2) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) r7 = syz_io_uring_setup(0x5451, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8004, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0xa, 0xffffffffffffffff, &(0x7f0000000380)=""/207, 0xcf, 0x2}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x30) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x11, &(0x7f00000018c0)=ANY=[@ANYRES16=r5, @ANYRES32=0x1, @ANYBLOB="000000000700000018110000", @ANYRESDEC=r7, @ANYBLOB="0000000000000000b70800008f0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600fbffffff0000000000ab09ca04000b81270cd615d65a13b322b02232a4d38be6e02f812b79022971d629a365cd9d96a17983691019d2b94590b6d02438ecf224d92837e0617da7bce795fff4d8b12ec9ba6d361d9cc19362a808409317d13a4498016060a00dd095d84a"], &(0x7f0000000580)='GPL\x00', 0x200, 0x91, &(0x7f00000005c0)=""/145, 0x41000, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000c00)={0x3, 0xd, 0x8, 0x477}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000c40)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000c80)=[{0x4, 0x4, 0x4, 0x5}, {0x5, 0x5, 0x7, 0x1}, {0x2, 0x3, 0x3, 0xb}, {0x4, 0x4, 0xb, 0x2}, {0x2, 0x4, 0x8, 0xa}, {0x1, 0x3, 0x4}, {0x3, 0x5, 0x5, 0x8}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={0x1, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000f80)={r10, r11, 0x25, 0x8, @void}, 0x10) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) timerfd_settime(r6, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000190001002abd7000ffdbdf251d010900500011"], 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000000), 0x6, 0x50d, &(0x7f00000006c0)="$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") 5m36.585751261s ago: executing program 0 (id=4513): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x300, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 5m36.427397849s ago: executing program 0 (id=4516): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05209078e00000e04600000000000000bb4d00000000000000000000830300070300443c000364010184000000000000000000000000ac1414aa00000000ac1414bb000000000086070000000000ac1414000000000000000000000000000000149344913f6da688b1d03dbef5b1ed2b896887c3"], 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xb9, "d98eed715986d8fb1234c48329d2ef4d24d4dccd2e053bd4df3c6865b1b4dede5b8bac865d1bb702c8e9fd66c3c68ed9daa3c730f2999fc6e1325cfb1d7311c40c03edbf7dd156c180c508d09a5ebcd9671f4f82593445a5070c87f80efee487ecdaea340fa796a1f8295d7fbd98c8600953e515ff92a80be8e25b4bb2de3482f0480aca1b575738829363656ae2bf8e9d93bb3fd84c5cf3e5e7345f6d43271f98f9aa383b0047fe60e9448ad1fe7551817deb883bc77ebe16"}, &(0x7f00000001c0)=0xc1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x7d, @mcast2}}, 0x2, 0x5, 0x0, 0x6, 0x28, 0x9}, 0x9c) 5m36.426933529s ago: executing program 40 (id=4516): syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05209078e00000e04600000000000000bb4d00000000000000000000830300070300443c000364010184000000000000000000000000ac1414aa00000000ac1414bb000000000086070000000000ac1414000000000000000000000000000000149344913f6da688b1d03dbef5b1ed2b896887c3"], 0x0) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xb9, "d98eed715986d8fb1234c48329d2ef4d24d4dccd2e053bd4df3c6865b1b4dede5b8bac865d1bb702c8e9fd66c3c68ed9daa3c730f2999fc6e1325cfb1d7311c40c03edbf7dd156c180c508d09a5ebcd9671f4f82593445a5070c87f80efee487ecdaea340fa796a1f8295d7fbd98c8600953e515ff92a80be8e25b4bb2de3482f0480aca1b575738829363656ae2bf8e9d93bb3fd84c5cf3e5e7345f6d43271f98f9aa383b0047fe60e9448ad1fe7551817deb883bc77ebe16"}, &(0x7f00000001c0)=0xc1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x7d, @mcast2}}, 0x2, 0x5, 0x0, 0x6, 0x28, 0x9}, 0x9c) 4m35.69366251s ago: executing program 3 (id=4905): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7a, 0x1, @perf_config_ext={0x100000000, 0xf60e}, 0xb08f, 0x800000, 0x43a1bd76, 0x2, 0x6, 0x6, 0x9, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe4ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x1d, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x6, 0x0, 0x4e16, 0x4, 0x0, 0x9, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8000000, 0x4, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x6, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1ff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x3, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x800, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x8, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x200001, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x5, 0xc}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 4m35.245577432s ago: executing program 3 (id=4910): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@loopback, @multicast1, 0x1, "0d5011f02b3fab96e0aa834d3a9e7cfc12172ec0ab1e6227c2b6ddaa5eda9000", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) 4m35.220589463s ago: executing program 3 (id=4911): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) (async) open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000007e0a1f00000000000a70000000060a010400000000000000000200000038000480340001800c0001007061796c6f61640024000280080004400000000008000140000000080800054000000008080001400000000d0900010073797a30000000000900020073797a32000000000900010073797a3000000000140000001100010000000004000000000000000a"], 0x98}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000980)=@newqdisc={0x24, 0x2a, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m34.353755416s ago: executing program 3 (id=4915): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000880)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=\xb9\xc4\xd7A%S\n\x10i\xcf\x84\x93v\x02\xe4y}\xcbV\xbb\xc1\xd5\x06\v\xdc\xd8\\\xc5\xb3\ag\xa6u\xbe\xf4)\xae\xb6\xfe*\x9d?\xb2C\xf0<\xc9\x820M\x92Tzs\xba\xca\x9d\xad\x17\x1b\x84\xbc\xb3\xd8\xad\f\x17\xbe\x17\xb5}.H\x90\xc7\x0e\xb3y\xd0\xc3\xf0c\x04\xe6\fzZ\x02\xfd_W\x9a\xa7\x81\xfcr\xe9B\x95\x13\x9f\x10\'5\xc0\xf9\xb5\xe1\x15Y\x9b$\xa43\xe7F>\xb7\xa1\xb7zw\xac\xc8\x12\x94\xa7\xe5\xcb\xc0g\x865\\\x9e\xca\x8e\xe2\t\xb7\b\x00\x00\x00\x00\x00\x00\x00i7b\xad\x14oVT\xcb\xea\xd3\xad\xa9\x16\xd5\xb2\xa0 \x13^\xf6>\xd4\x8bZzl\x88\xddn\xab\xd6\x12\x1f\x06', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x113) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)=@newtaction={0x14, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}}, 0x14}, 0x1, 0x0, 0x0, 0xc880}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x2, 0x101c00) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) lstat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={'\x00', 0x9, 0xdded, 0x66, 0x8, 0x8, r5}) 4m33.528432597s ago: executing program 3 (id=4920): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x4) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0xc, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09070000000000000005004f25a15a0000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 4m33.240978352s ago: executing program 3 (id=4925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m33.209447023s ago: executing program 41 (id=4925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x24, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m41.973735371s ago: executing program 7 (id=5217): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @broadcast}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, 0xfdfdffff, {0x2, 0x0, @empty}, 'ip6gre0\x00'}) 3m41.973284261s ago: executing program 7 (id=5218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x8, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001, 0x0, 0x400}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6000000, 0x0, 0x0, 0x3ffffd, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x4004) 3m41.873369346s ago: executing program 7 (id=5222): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000fc0), r0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8b) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "001200", 0x18, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@routing={0x5e, 0x2, 0x2, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0103701b122a34bf6a0e04"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40440d0) 3m41.873104276s ago: executing program 7 (id=5223): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$cont(0x20, r1, 0x80000001, 0x3f6beaeb) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 3m41.409014659s ago: executing program 7 (id=5231): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) r1 = socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400005200020028bd7000ffdbdf250000000000c65d423b90efbce68d609b2e33f424e5dcb9582cc2c77d8a99"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x5, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0x44, 0xbce, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sync() syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00') setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@loopback, @multicast1, 0x1, "0d5011f02b3fab96e0aa834d3a9e7cfc12172ec0ab1e6227c2b6ddaa5eda9000", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) 3m40.77727742s ago: executing program 7 (id=5238): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3m40.756166762s ago: executing program 42 (id=5238): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="6115880000f3ff006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916300000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.243875249s ago: executing program 4 (id=6868): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0xa3, 0xdd5}, 0x400, 0x3ff, 0xfffd, 0x2, 0x2, 0x8000080}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffff6, &(0x7f00000004c0)={[{@i_version}, {@noblock_validity}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x611, &(0x7f0000000c00)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket(0x10, 0x3, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000080)=@udp, 0x1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={0xffffffffffffffff, r4}, 0xc) 3.073648487s ago: executing program 9 (id=6872): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000440)={[{@nodots}, {@nodots}, {@dots}, {@fat=@uid}, {@nodots}, {@fat=@uid={'uid', 0x3d, r3}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x8}}, {@fat=@debug}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@nfs}, {@nodots}, {@fat=@nfs_stale_rw}, {@dots}]}, 0x1, 0x1fc, &(0x7f0000000200)="$eJzs3c1uElEUAOAzSPkxLrozMTEZ40JXjfoENaYmRhKTGha6M9GVrNoNddM+hq/g0/gSPoDpio25hs7AIFBUEhhtv2/DmTn3cu9hwsCGQ4rCt9ufo9PJorEf+zHKYjcaMXEWAMBVMkopvqfCxYms7h0BAJu28Pm/6MeWtwQAbNjrN29fPu31Dg7zvBNxfjbsD/vFY5F//qJ38Ci/sFvNOh8O+zem+cf5/HeHcX4nbpb5J8X8fJpuRUS/FQ/vF/lx7tmrXv7r/Ha833DtAAAAAAAAAAAAAAAAAAAAAABQl7uRTyzt77O3N5/vlvniaKY/0Fz/nmbcaZaHVXugdLqNogAAAAAAAAAAAAAAAAAAAOA/c3zy6eO7weDDURW0I2L2THPJmMuDrHziPxpcf9CI9aZ3yzLXWDQrX6LNFtidXtzsb9eK5r9yddYN8i2s1f26akxK42D5u2DSFuPS6a2IWL36g8N1Nz9KKQ2+3Ds6Pom0cnB1j2hv9Y4EAAAAAAAAAAAAAAAAAADX18yvvhd06tgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANSg+v//cbB4ZmVwGhG34reDJ2vtRKfWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi6fgYAAP//fcMhUw==") write$UHID_INPUT(r1, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x42041, 0x12c) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000001c0)={0x10, 0x7, 0x10000, 0x8}, 0x10) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000400)='+(-][]%[]@[{\x00') setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e21, 0x949, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, 0x7, 0x7, 0x2, 0x4, 0x40, 0x10, 0x6}, 0x9c) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0) 3.0095736s ago: executing program 1 (id=6874): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {0x400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2.652173828s ago: executing program 1 (id=6877): r0 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x3000, 0x3, 0x1, 0x80, r1, 0x0}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setrlimit(0x7, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 2.240725088s ago: executing program 4 (id=6878): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000006e4675888cb791fff6f080bb5"], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket(0x2b, 0x1, 0x9) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x100, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000094}, 0x480) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x2f, 0x1, 0x7, 0x482, 0x40, @loopback, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x8, 0x8, 0x4, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.136667433s ago: executing program 4 (id=6880): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.945605463s ago: executing program 9 (id=6881): syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz8utwjAUBNBJ8l4iNtACpdACSFRAI1AJe7qgLoSMbD6iAmBxjqwr3/FsHL7qLzmPSdalS9JdW9i1OWTZv63/Sd/6D/s6ShkPr2RIclzU2/wezOqZns/lMtTOLsmq7psp29Mn/ggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv+4WAAD//yW0CyU=") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 1.614598559s ago: executing program 1 (id=6883): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) io_uring_setup(0x6771, &(0x7f00000002c0)={0x0, 0xa45b, 0x100, 0x2, 0x3bc}) syz_io_uring_setup(0x837, &(0x7f0000000540)={0x0, 0x2b94, 0x80, 0x7, 0x14b}, &(0x7f0000000140), &(0x7f0000000000)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49c, &(0x7f00000000c0)={0x0, 0x79ae, 0x3100, 0x8000, 0x3, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) iopl(0x3) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f00000000c0)="0002", 0xfffffffffffffc94, 0x24000000, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000004c0)={0x9, 0x3, 0xffffff40}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.517715594s ago: executing program 4 (id=6884): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x70bd2b, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x800000000000000}, 0x0) 1.493265046s ago: executing program 4 (id=6885): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580), 0x1, 0x443, &(0x7f00000011c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0xd, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x30}}, 0x0) r1 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 1.478216436s ago: executing program 9 (id=6886): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xffffb1e0}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x40}}, 0x50) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff001, 0x7f, 0x72c7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x200000000000000}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) 1.365658262s ago: executing program 9 (id=6887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff750000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x17, 0x1c, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0xd, 0x4, 0x7, 0x20, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x38e}, @alu={0x4, 0x1, 0xd, 0x8, 0x3, 0x10, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xae7e20f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xbe}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x7c, &(0x7f00000002c0)=""/124, 0x41000, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x6, 0xfff, 0x2}, 0x10, r6, r2, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1.20267034s ago: executing program 2 (id=6888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x11000000) 1.149702812s ago: executing program 2 (id=6889): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) prlimit64(r0, 0xe, &(0x7f0000000040)={0x8, 0xa78e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000a00), 0x1}, 0x4580, 0x0, 0x800000, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130, 0x0, {0xff030000}}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1.022183369s ago: executing program 9 (id=6890): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_emit_ethernet(0x47, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x11, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x11, 0x0, @opaque="0300000070e185af60"}}}}}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$eJzs3U9qU0EcB/Bf0rSJ3SSgK+nigRs3hqY3CFJBDAiRLOoqwbYgTSikENCF7c67uPIO3sBjeAGzKETSF03SxuK/+jT5fCDMD+Z9YSaLzCxm8tpbvaP945PDvdufolRKohBx9v48IiIfa5F68CFt1yMiFxsx6ywAgP9Ns9mpZz0Gbla/X++M927FKz2td5kMCAAAAAAAAAAAgN/W3ipeOf8fw4jKzPn/3KTNO/8PAEvB+f/l1+/XO5uT/ds85/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7AxHo/Lomk/W4wMA/jzrPwCsHus/AKye4dxanwvrPwAsv2d7z5/UG43dZpKUInpvB61BK23T/vphvIxuHMR2lOM8xvuDibR+9Lixu51cqES7dzrJnw5aa/P5WpSjsjhfS/PJfH49NmfzO1GOO4vzOwvzG3H/XkT+60SrUY6PL+I4urEf4+w0/6aWJA+fNi7lixfPAQAAAAAAAAAAAAAAAAAAwN9QTb5ZeH+/Wv1ef5r/if8HuHS/vhB3C9nOHQAAAAAAAAAAAAAAAAAAAP4VJ69eH3W63YP+wuLz5C7/dc8opsWtH/pWf60oRETmE1SsTJHxDxMAAAAAAAAAAAAAAAAAAKyg6aXfrEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANmZvv//5oqs5wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACshi8BAAD//2dk6nI=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x2, 0x779b, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@allocspi={0x174, 0x16, 0x401, 0xfffffffd, 0xfffffffe, {{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x4, 0x0, 0x4e20, 0x0, 0x0, 0x80, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@private1, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x3, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x2}, {0x10000000, 0x0, 0x3}, 0xfffffffe, 0x0, 0xa, 0x0, 0x0, 0x90}, 0xc, 0xfffffffd}, [@proto={0x5, 0x19, 0x33}, @user_kmaddress={0x2c, 0x13, {@in=@broadcast, @in=@multicast1, 0x0, 0x2}}, @algo_auth={0x48, 0x1, {{'xxhash64-generic\x00'}}}]}, 0x174}}, 0x0) mmap(&(0x7f0000277000/0x4000)=nil, 0x4000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a00010037bd700003dcdf250220200100000000001f1201"], 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4040010) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) 1.021866919s ago: executing program 4 (id=6891): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r3, @ANYRES16=r6, @ANYRES64=r4, @ANYRES16=r5, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32=r2], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000180)={{r2, 0x8, 0x6, 0x7fff, 0x0, 0x1, 0xe38, 0x100000, 0x6b5, 0x640d, 0x7fff, 0x401, 0x3, 0x40, 0x400}}) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x2000c12, &(0x7f0000000ec0)=ANY=[@ANYBLOB="000000000800000000b17bee81b4657a0de22b54e05fdebc17a3d84c3153ceed6eec913edca280a99088794f4acf84467af2530b6be983a61e234be27d4b4fcda83a03f27c827b43b049c8e4", @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$eJzs3c9vHOdfB/D3rO3EcaskbUMpUdtsUpK6rXFshyZEPUBibxIX/0C2IyXi0JTGQVEMhRakNkIilRAHRAUSiAu3ihOnSr3QC+oNbnDigIT6L1Sc8j35q5ldO2t77Y1dx07T18va3fnxmef5zI+dJzvZnSf8tCwfWTO2vFw9djh+/V/3IGOeYpcnvv/q6y/LxxcPciA9ebf4t6Q/ST3pTfJK0jc+MTc73aWge8mtJN8lRZKDab4+llsp/i7PPxr/LsU/l/Vu6sDjlkw3y/ys7ffxBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6NifGJkZLQ4kMmZ6zfqTUl9g/GJudkiy8sb56ws0/Rt1et38e3fPNel3qQoH+nvX+nq+5Vjj2a/nKR+Kq82x16tOiRPf+4/9/LR917qra0sv1k2P8rBTYrtyYYN8+nn9+99uLS0+Mk2q+jfaW5PmauNmcn52cnpS1cb9cn52frF8+dHzl67Ml+/MjnVmL85v9CYro/PNS4tzM7VB8ffqo9evHiu3hi+OXt95urE8FRjZeKF3xgbGTlff3/49xqX5uZnZ86+Pzw/fm1yampy5moVU84uYy6UB+LvTi7UFxqXpuv1O3eXFs+ty2nDbiqDRrutSRk01i1obGRsbHR0bGz0i1bv2asTzr978d0LIyO9I+tkQ8QTOmh5uhzafDc/idM47Eit2f4nU5nMTK7nRuod/8YzkbnMZnqT+S0r7f/ps40t621v/1utfG/b7OPl06m83hrt36T93ySXvfv7NJ/nfu7lwyxlKYv5ZN8z2vhX7pFN5h36sWVfTSMzmcx8ZjOZ6VyqptRbU+q5mPM5n5F8kGs5kfnUcyWTmUoj87mZ+SykUR1R45lLI5eykNnMpZ7BjOet1DOai7mYc6mnkeHczGyuZyZXM5FLVSl3crfa7ue2yHE1aPRxgsa2CNrQmG+7/W9s/DckPzO7fxKHHVputf8HuocOju9FQgAAAMCu+7X/zOFjL/7H/yVFXquuy1+ZnGqM7HdaAAAAwC4qUiSvlk995ehrKXz+BwAAgGdNUf3GrkgykBPNoZVfQrkIAAAAAM+I6nY9r6c48WiCz/8AAADwjFm9x37zSsDqPXZv9KxM7XoX/mJo5fa/9dvN19utiFYRA1cmpxrD47NT743mTHWXgeqXBhtK60mKvurnB2/nZDPq5EAelK8Dj0os6+wvo0aH3xvN2znVWpHBN8qXNwY7RI41I99sRr7ZHtmTNZHnykgAeNad2qI9bt5jv3v7/3aGmhFDx6smv/d4hzZ4RMsKAE+L1T52ftHq0qxD+9+KeH2z9v83t/j8X0a8mDsnml8pGM5H+ThLuZ2htL5xcKJTqSu9ETS/hjDUdjWgsu5qwEDrKwv/faGWoQ3XA/pX17U9djFjGWpdETjUmt+6dlCsxhYrOZxrBvQ8gR0AAPvg1Jbt8OO1/0NdPv8P+EohADxVVnuwf4ID+72OAMBaWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfY91A///OpMsLS0me9BZwOpA/3Yy3Hqglj3K+fP7vXu2fToO9CTZr9p/O9teqtzH+7OhDHQb2OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHuiSHo6Ta8drF5Gkpzd65yepAf7ncBuqe9sseJhHuazHN7tdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfu5a9/+vpfn6XHNSemvJ6SS3kvz+fue4mx7udwL75o+q57b7/9eSviwX6W3u9hR94xNzs9Pl7i8OlvO//+rrL8tH97I39qpQdR9RW9e5RKuGtil9a5d6oVpqYGLx03t/9vGf1CcuVwfm5YUrUxPTV+d+51Hgy8U3zS4Q2rtBWMn3L07/+9+3TT7Qqvybck07W1/vlareiY31/mqnpTep9zHcXVocK2taaNxY+PM/vvtZ26wXczJ5YzAZXFvTH5aPTWo6uX57rlX8UPx1cTj/lFvV/i+3RrFclLvoSLX+h+7cXVoc/ujjpdurOf3lmpyO5kSS20n/4+d0ojqfdFQddbW+staRKqh8OtalvC21lTi6yXZ9oTpkBra1DvXN16HSZbu3MjrXMaN/+NOXcmbbe/pMlxo7Kn4o/re4lv/JX7X1/1Er9//pdHx3diiiimw7UtrnrXl71ZqR1ZqPtc/4YH2Zm74reQL+Nn+Q31rd/7W2839rX+3N+aitxs7vi2T774t/ObKhRXmkapGOrWuRWmefjgv0r+Z5rBm1SZ6/kneS3uPbOqO80+WMsvvv/1Z9Dwbz/3mg/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODpVyQ9nabXktNJjiY5Uo7Xk+X1MQ92UF9toNhJmrtmJzn/9BRtK7p2jYuHeZjPcng/sgIAAAAAAABg912e+P6rr78sH9X/x/fk12utOfWkN8nR4h/7xifmZqe7FNSX3Fr5L/3+7eVwq3x6/tH4d+XYK10W2t+vDwDAT9ovAwAA///ryW3i") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$rxrpc(0x21, 0x2, 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r9 = fcntl$dupfd(r8, 0x406, r8) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) write$binfmt_elf64(r9, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 676.998076ms ago: executing program 1 (id=6892): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x38, 0x55}}], 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbfff7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000002) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x38, 0x55}}], 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffbfff7, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000002) (async) 644.087247ms ago: executing program 5 (id=6893): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 609.452699ms ago: executing program 5 (id=6894): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x3}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000001000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 537.072713ms ago: executing program 5 (id=6895): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x4}, 0x10e228, 0x7, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x40000000015, 0x5, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000001840)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000040)='3', 0x1}]) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x91, 0x0, 0x580}]}, 0x10) sendto$inet6(r1, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c) 505.676225ms ago: executing program 5 (id=6896): syz_read_part_table(0x1052, &(0x7f0000000000)="$eJzsz8utwjAUBNBJ8l4iNtACpdACSFRAI1AJe7qgLoSMbD6iAmBxjqwr3/FsHL7qLzmPSdalS9JdW9i1OWTZv63/Sd/6D/s6ShkPr2RIclzU2/wezOqZns/lMtTOLsmq7psp29Mn/ggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv+4WAAD//yW0CyU=") capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x83) openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0xa2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 504.947775ms ago: executing program 1 (id=6897): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000001400), 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0x17, 0x300, 0x100, &(0x7f0000000440)="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"}) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x1, 0x7ff, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000002a40)=""/4089, &(0x7f0000000080)=0xff9) 459.545967ms ago: executing program 1 (id=6898): openat(0xffffffffffffffff, 0x0, 0x312514d, 0x184) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x20}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 153.769422ms ago: executing program 5 (id=6899): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 153.492542ms ago: executing program 2 (id=6900): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="78000000000000002900ff0037"], 0x78}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[@ANYBLOB="000000001400"], 0x358}}], 0x2, 0x40) 153.268052ms ago: executing program 2 (id=6901): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000004c0)={0x2, 0x4c8, 0x2, 0xfffe, 0x1, "3d52e3ff00"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000010000000000000000000000653c00004500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x7, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t', 0x5) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_pts(r0, 0x1a1000) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x12) 149.088152ms ago: executing program 5 (id=6902): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4048000) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x2000000) 148.788732ms ago: executing program 2 (id=6903): memfd_create(&(0x7f0000000000)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x04\x00\x00\x00\x00\x00\x00\x00\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xb0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\x14\x16\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd75\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\xa2K\xa1\xb3\xce\x1e\x96{%\xa8\xc7\x93\xdb\x80v+o\xb8\xe8\x1b\x06\xfbwb\x11\xb7\x9fu\xf3\xd3\x7f\x04k\xa0B\xa5\xc9\xb1\xec\xb1\xf6\x11\xc1O\xecG\xe6q5\x97u\x0fl\x90\x9b\x9f\xaf\xfb\xdf\x12^\xc9\x92|\x11\"\xd7\xb5\xf0\xdc\\\f\xec\xfd\xa1\xfdVZ*\xeb\xde\x14\xe0\x8b\x1c\x820b\x89\xbd\xd7\x0e\x9b\xf2\xe9A\xfb\x89\xc6\x84\x14b\xd4\x7f\xdf.\x05\x00S\xf5\x19\xb4fE\x87\xd4E\xc8>\x8f\x05Bg\x15\xe1\x8c\x94ERT\xac\xb4\x00\x00\x00\x00\x00\x00\x00\xc4\x0f\xc1\x9e\xf6#f\x03\xb0\xe4\xb6\xf5\x04z+Pa\xbc\x12a7z\xad6\xf7\xeb\xa7\x88\"\xcf\xf6\xcfP\x12\a;h\x95\x90\x83\x06\xdf\xbd}.\xa6$2D\xf1T\xc9\x8aG\x12\xe51', 0x3) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a30010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES64=r0], 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x0) 53.727477ms ago: executing program 2 (id=6904): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) 0s ago: executing program 9 (id=6905): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x4d40, 0x0) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x11) r2 = mq_open(&(0x7f00000003c0)='GPL\x00', 0x80, 0xc016386135315ed2, &(0x7f0000000440)={0x1, 0x1ff, 0x2, 0x7fffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000480)=[r1, r2], 0x2) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101042, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000400)={0x300094, 0x78, 0x20000, {r4}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000580), &(0x7f00000005c0)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x2, 0x6, 0x8201, 0x6, 0x1b63, 0x4, 0xfffffffd, 0x4fc7, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={r7, 0x5}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001d000000000000000000000300000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) sendto(r3, &(0x7f0000000000)="b0951c", 0x3, 0x4, 0x0, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x8, 'veth1_to_bond\x00'}) kernel console output (not intermixed with test programs): 852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6205'. [ 892.224295][T28852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6205'. [ 892.360178][T28866] set_capacity_and_notify: 4 callbacks suppressed [ 892.360200][T28866] loop9: detected capacity change from 0 to 1024 [ 892.373226][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6214'. [ 892.398663][T28873] loop2: detected capacity change from 0 to 512 [ 892.425923][T28870] team0: Port device team_slave_0 removed [ 892.432670][T28866] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.514177][T28866] SET target dimension over the limit! [ 892.563853][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.603878][T28888] loop4: detected capacity change from 0 to 512 [ 892.630543][T28890] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28890 comm=syz.9.6221 [ 892.658608][T28888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.680531][T28888] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.757287][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.779827][ T28] audit: type=1326 audit(2000000059.865:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28898 comm="syz.1.6225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7516dc799 code=0x0 [ 892.820593][T28904] loop4: detected capacity change from 0 to 128 [ 892.827784][T28904] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 892.841250][T28904] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 892.960258][T28911] FAULT_INJECTION: forcing a failure. [ 892.960258][T28911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.973564][T28911] CPU: 0 UID: 0 PID: 28911 Comm: syz.4.6229 Tainted: G W syzkaller #0 PREEMPT(full) [ 892.973667][T28911] Tainted: [W]=WARN [ 892.973672][T28911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 892.973680][T28911] Call Trace: [ 892.973686][T28911] [ 892.973692][T28911] __dump_stack+0x1d/0x30 [ 892.973718][T28911] dump_stack_lvl+0x95/0xd0 [ 892.973778][T28911] dump_stack+0x15/0x1b [ 892.973860][T28911] should_fail_ex+0x263/0x280 [ 892.973891][T28911] should_fail+0xb/0x20 [ 892.973905][T28911] should_fail_usercopy+0x1a/0x20 [ 892.973922][T28911] _copy_from_user+0x1c/0xb0 [ 892.973940][T28911] __sys_bpf+0x183/0x7e0 [ 892.974030][T28911] __x64_sys_bpf+0x41/0x50 [ 892.974049][T28911] x64_sys_call+0x10cb/0x3020 [ 892.974064][T28911] do_syscall_64+0x12c/0x370 [ 892.974153][T28911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.974167][T28911] RIP: 0033:0x7f37c6d6c799 [ 892.974179][T28911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.974213][T28911] RSP: 002b:00007f37c57c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 892.974228][T28911] RAX: ffffffffffffffda RBX: 00007f37c6fe5fa0 RCX: 00007f37c6d6c799 [ 892.974238][T28911] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 892.974299][T28911] RBP: 00007f37c57c7090 R08: 0000000000000000 R09: 0000000000000000 [ 892.974309][T28911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.974322][T28911] R13: 00007f37c6fe6038 R14: 00007f37c6fe5fa0 R15: 00007ffe0e586268 [ 892.974342][T28911] [ 893.346334][T28920] loop5: detected capacity change from 0 to 1024 [ 893.358818][T28920] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 893.503234][T28933] loop2: detected capacity change from 0 to 512 [ 893.510404][T28933] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 893.521646][T28933] EXT4-fs (loop2): orphan cleanup on readonly fs [ 893.528791][T28933] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.6237: Bad quota inum: 2, type: 2 [ 893.539992][T28933] loop2: lost filesystem error report for type 5 error -117 [ 893.540155][T28933] EXT4-fs (loop2): Remounting filesystem read-only [ 893.547666][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 893.547689][ C1] EXT4-fs (loop2): last error at time 2000000060: ext4_quota_enable:7188 [ 893.569380][T28933] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 893.584586][T28933] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 893.591792][T28933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 893.630028][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.739543][T28949] loop2: detected capacity change from 0 to 512 [ 893.754946][T28949] EXT4-fs: Ignoring removed bh option [ 893.770967][T28949] EXT4-fs: inline encryption not supported [ 893.784148][T28949] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 893.802326][T28953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6245'. [ 893.813711][ T28] audit: type=1400 audit(2000000060.838:4617): avc: denied { accept } for pid=28952 comm="syz.1.6245" lport=3618 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 893.837838][T28949] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 893.853607][T28949] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6240: bg 0: block 248: padding at end of block bitmap is not set [ 893.871067][T28949] loop2: lost filesystem error report for type 5 error -117 [ 893.871287][T28949] Quota error (device loop2): write_blk: dquota write failed [ 893.878899][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 893.878921][ C1] EXT4-fs (loop2): last error at time 2000000060: ext4_validate_block_bitmap:441 [ 893.903406][T28949] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 893.913928][T28949] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.6240: Failed to acquire dquot type 1 [ 893.925831][T28949] loop2: lost filesystem error report for type 5 error -117 [ 893.927894][T28949] EXT4-fs (loop2): 1 truncate cleaned up [ 893.941745][T28949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 894.035951][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 894.056076][T28965] loop9: detected capacity change from 0 to 512 [ 894.060306][T28967] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 894.062421][T10976] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 894.079635][T10976] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 1 [ 894.092212][T10976] loop2: lost filesystem error report for type 5 error -117 [ 894.099276][T28965] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 894.139031][T28965] EXT4-fs (loop9): orphan cleanup on readonly fs [ 894.154145][T28965] EXT4-fs error (device loop9): ext4_quota_enable:7188: comm syz.9.6251: Bad quota inum: 2, type: 2 [ 894.165414][T28965] loop9: lost filesystem error report for type 5 error -117 [ 894.165621][T28965] EXT4-fs (loop9): Remounting filesystem read-only [ 894.173045][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 894.173069][ C1] EXT4-fs (loop9): last error at time 2000000061: ext4_quota_enable:7188 [ 894.195095][T28965] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 894.210223][T28965] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 894.217663][T28965] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 894.293135][T28984] loop5: detected capacity change from 0 to 128 [ 894.375645][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.375709][T28988] loop2: detected capacity change from 0 to 1024 [ 894.397863][ T28] audit: type=1400 audit(2000000061.380:4618): avc: denied { execute_no_trans } for pid=28989 comm="syz.1.6260" path="/225/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 894.532274][T29009] EXT4-fs: Ignoring removed orlov option [ 894.553005][T28988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 894.563994][T29012] SET target dimension over the limit! [ 894.575636][T28988] System zones: 0-1, 3-36 [ 894.586412][T29009] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal [ 894.596433][T28988] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6262: bad orphan inode 134217728 [ 894.629571][T28988] loop2: lost filesystem error report for type 5 error -117 [ 894.630782][T28988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.669314][T29014] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 894.715081][T29022] EXT4-fs: inline encryption not supported [ 894.721449][T29014] EXT4-fs (loop9): orphan cleanup on readonly fs [ 894.750150][ T28] audit: type=1400 audit(2000000061.708:4619): avc: denied { read } for pid=29018 comm="syz.5.6270" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 894.758306][T29014] EXT4-fs error (device loop9): ext4_quota_enable:7188: comm syz.9.6268: Bad quota inum: 2, type: 2 [ 894.786120][T29014] loop9: lost filesystem error report for type 5 error -117 [ 894.786227][ T28] audit: type=1400 audit(2000000061.708:4620): avc: denied { ioctl } for pid=29018 comm="syz.5.6270" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 894.787221][T29014] EXT4-fs (loop9): Remounting filesystem read-only [ 894.793795][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 894.793818][ C1] EXT4-fs (loop9): last error at time 2000000061: ext4_quota_enable:7188 [ 894.861554][T29014] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 894.882627][T29014] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 894.890141][T29028] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 894.895053][T29014] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 894.913228][T29022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.960190][T29022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6271'. [ 894.976161][T29028] EXT4-fs (loop1): 2 truncates cleaned up [ 894.984443][T29028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.007735][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.018605][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.068505][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.094380][T29039] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.6272: path /227/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 895.131943][T29039] EXT4-fs (loop1): Remounting filesystem read-only [ 895.180772][T29048] veth1_to_bridge: entered promiscuous mode [ 895.190521][T29048] veth1_to_bridge: left promiscuous mode [ 895.209035][T29036] msdos: Unknown parameter 'nodotc' [ 895.266628][T29052] FAULT_INJECTION: forcing a failure. [ 895.266628][T29052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.280960][T29052] CPU: 0 UID: 0 PID: 29052 Comm: syz.4.6281 Tainted: G W syzkaller #0 PREEMPT(full) [ 895.281042][T29052] Tainted: [W]=WARN [ 895.281049][T29052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 895.281061][T29052] Call Trace: [ 895.281154][T29052] [ 895.281163][T29052] __dump_stack+0x1d/0x30 [ 895.281250][T29052] dump_stack_lvl+0x95/0xd0 [ 895.281277][T29052] dump_stack+0x15/0x1b [ 895.281302][T29052] should_fail_ex+0x263/0x280 [ 895.281403][T29052] should_fail+0xb/0x20 [ 895.281449][T29052] should_fail_usercopy+0x1a/0x20 [ 895.281511][T29052] _copy_from_user+0x1c/0xb0 [ 895.281541][T29052] ___sys_sendmsg+0xc1/0x1e0 [ 895.281582][T29052] __x64_sys_sendmsg+0xd4/0x160 [ 895.281680][T29052] x64_sys_call+0x194c/0x3020 [ 895.281718][T29052] do_syscall_64+0x12c/0x370 [ 895.281746][T29052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.281771][T29052] RIP: 0033:0x7f37c6d6c799 [ 895.281794][T29052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.281887][T29052] RSP: 002b:00007f37c57c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.281909][T29052] RAX: ffffffffffffffda RBX: 00007f37c6fe5fa0 RCX: 00007f37c6d6c799 [ 895.281999][T29052] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 895.282012][T29052] RBP: 00007f37c57c7090 R08: 0000000000000000 R09: 0000000000000000 [ 895.282023][T29052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.282035][T29052] R13: 00007f37c6fe6038 R14: 00007f37c6fe5fa0 R15: 00007ffe0e586268 [ 895.282052][T29052] [ 895.466532][T29054] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 895.484647][T29056] EXT4-fs: inline encryption not supported [ 895.502409][T29054] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 895.514672][T29056] EXT4-fs: Ignoring removed bh option [ 895.521629][T29054] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 895.521653][T29058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 895.541876][T29058] EXT4-fs (loop2): orphan cleanup on readonly fs [ 895.550519][T29056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 895.556654][T29058] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.6284: Bad quota inum: 2, type: 2 [ 895.574181][T29054] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 895.591110][T29054] System zones: 0-2, 18-18, 34-35 [ 895.598042][T29054] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.614269][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.623469][T29058] loop2: lost filesystem error report for type 5 error -117 [ 895.626053][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 895.639431][T29058] EXT4-fs (loop2): Remounting filesystem read-only [ 895.640001][ C1] EXT4-fs (loop2): last error at time 2000000062: ext4_quota_enable:7188 [ 895.646541][T29058] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 895.672764][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.694020][T29067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6286'. [ 895.706705][T29058] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 895.725361][T29058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 895.754670][T29071] netlink: 'syz.4.6288': attribute type 12 has an invalid length. [ 895.763025][T29071] netlink: 'syz.4.6288': attribute type 29 has an invalid length. [ 895.790329][T24711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.800820][T29073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.867141][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.013662][T29084] __nla_validate_parse: 2 callbacks suppressed [ 896.013697][T29084] netlink: 48 bytes leftover after parsing attributes in process `syz.9.6294'. [ 896.075454][T29087] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6296'. [ 896.190533][T29094] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6300'. [ 896.472258][ T28] audit: type=1400 audit(2000000063.317:4621): avc: denied { bind } for pid=29120 comm="syz.9.6309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 896.496904][T29121] team0 (unregistering): Failed to send options change via netlink (err -105) [ 896.507018][T29121] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 896.519132][T29121] team0 (unregistering): Port device team_slave_0 removed [ 896.527991][T29121] team0 (unregistering): Failed to send options change via netlink (err -105) [ 896.560716][T29123] Cannot find add_set index 0 as target [ 896.569499][T29123] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6307'. [ 896.606479][T29121] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 896.631688][T29121] team0 (unregistering): Port device team_slave_1 removed [ 896.641628][T29123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6307'. [ 896.852439][T29129] EXT4-fs: Ignoring removed oldalloc option [ 896.913986][T29129] EXT4-fs (loop9): 1 truncate cleaned up [ 896.962991][T29129] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.992655][T29129] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.6311: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 897.018100][T29129] EXT4-fs (loop9): Remounting filesystem read-only [ 897.043921][T29133] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 897.055951][T29133] EXT4-fs (loop1): 2 truncates cleaned up [ 897.064374][T29133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 897.079107][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.142735][T29138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6312'. [ 897.341556][T29147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6318'. [ 897.709094][T29167] syzkaller0: entered promiscuous mode [ 897.721465][T29167] syzkaller0: entered allmulticast mode [ 897.965061][T29179] set_capacity_and_notify: 11 callbacks suppressed [ 897.965079][T29179] loop4: detected capacity change from 0 to 1024 [ 898.226328][T29185] loop5: detected capacity change from 0 to 256 [ 898.233622][T29185] vfat: Unknown parameter 'shoPtname' [ 898.254486][T29184] lo speed is unknown, defaulting to 1000 [ 898.291406][T29184] lo speed is unknown, defaulting to 1000 [ 898.367041][T29184] lo speed is unknown, defaulting to 1000 [ 898.442194][T24711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 898.544112][T29184] infiniband syU×: set active [ 898.544191][T28604] lo speed is unknown, defaulting to 1000 [ 898.574472][T29184] infiniband syU×: added lo [ 898.882089][T29184] RDS/IB: syU×: added [ 898.922831][T29184] smc: adding ib device syU× with port count 1 [ 899.021383][T29184] smc: ib device syU× port 1 has no pnetid [ 899.096814][T28604] lo speed is unknown, defaulting to 1000 [ 899.127960][T29184] lo speed is unknown, defaulting to 1000 [ 899.163127][T29193] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6333'. [ 899.370394][T29184] lo speed is unknown, defaulting to 1000 [ 899.668664][T29184] lo speed is unknown, defaulting to 1000 [ 899.857984][T29184] lo speed is unknown, defaulting to 1000 [ 899.959989][T29204] loop1: detected capacity change from 0 to 512 [ 899.993811][T29199] loop4: detected capacity change from 0 to 512 [ 900.028406][T29204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 900.045295][T29204] EXT4-fs (loop1): orphan cleanup on readonly fs [ 900.059696][T29204] EXT4-fs error (device loop1): ext4_quota_enable:7188: comm syz.1.6338: Bad quota inum: 2, type: 2 [ 900.075278][T29204] loop1: lost filesystem error report for type 5 error -117 [ 900.075494][T29204] EXT4-fs (loop1): Remounting filesystem read-only [ 900.089804][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 900.089828][ C0] EXT4-fs (loop1): last error at time 2000000066: ext4_quota_enable:7188 [ 900.123553][T29184] lo speed is unknown, defaulting to 1000 [ 900.160869][T29199] EXT4-fs (loop4): 1 orphan inode deleted [ 900.165415][T29204] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 900.189966][T29199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.205512][T29204] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 900.205947][T29204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 900.250409][T29184] lo speed is unknown, defaulting to 1000 [ 900.290998][T24711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.341012][T29216] FAULT_INJECTION: forcing a failure. [ 900.341012][T29216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.368844][T29216] CPU: 0 UID: 0 PID: 29216 Comm: syz.1.6343 Tainted: G W syzkaller #0 PREEMPT(full) [ 900.368884][T29216] Tainted: [W]=WARN [ 900.368893][T29216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 900.368978][T29216] Call Trace: [ 900.368985][T29216] [ 900.368992][T29216] __dump_stack+0x1d/0x30 [ 900.369019][T29216] dump_stack_lvl+0x95/0xd0 [ 900.369046][T29216] dump_stack+0x15/0x1b [ 900.369117][T29216] should_fail_ex+0x263/0x280 [ 900.369143][T29216] should_fail+0xb/0x20 [ 900.369166][T29216] should_fail_usercopy+0x1a/0x20 [ 900.369190][T29216] _copy_from_user+0x1c/0xb0 [ 900.369286][T29216] ___sys_sendmsg+0xc1/0x1e0 [ 900.369370][T29216] __x64_sys_sendmsg+0xd4/0x160 [ 900.369409][T29216] x64_sys_call+0x194c/0x3020 [ 900.369438][T29216] do_syscall_64+0x12c/0x370 [ 900.369461][T29216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.369533][T29216] RIP: 0033:0x7fd7516dc799 [ 900.369553][T29216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.369581][T29216] RSP: 002b:00007fd75012f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.369605][T29216] RAX: ffffffffffffffda RBX: 00007fd751955fa0 RCX: 00007fd7516dc799 [ 900.369666][T29216] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 900.369747][T29216] RBP: 00007fd75012f090 R08: 0000000000000000 R09: 0000000000000000 [ 900.369759][T29216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.369846][T29216] R13: 00007fd751956038 R14: 00007fd751955fa0 R15: 00007ffc40fe9398 [ 900.369873][T29216] [ 900.572790][T29215] loop5: detected capacity change from 0 to 1024 [ 901.730454][T29238] lo speed is unknown, defaulting to 1000 [ 901.736445][T29238] lo speed is unknown, defaulting to 1000 [ 901.742414][T29238] lo speed is unknown, defaulting to 1000 [ 901.749205][T29238] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 901.771216][T29228] lo speed is unknown, defaulting to 1000 [ 901.814272][T29228] lo speed is unknown, defaulting to 1000 [ 901.838652][ T28] audit: type=1400 audit(2000000068.349:4622): avc: denied { getopt } for pid=29222 comm="syz.5.6347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 901.880383][T29238] lo speed is unknown, defaulting to 1000 [ 901.890711][T29238] lo speed is unknown, defaulting to 1000 [ 901.900327][T29238] lo speed is unknown, defaulting to 1000 [ 901.908719][T29238] lo speed is unknown, defaulting to 1000 [ 901.915257][T29238] lo speed is unknown, defaulting to 1000 [ 901.921525][T29238] lo speed is unknown, defaulting to 1000 [ 902.425381][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.646606][T29244] loop2: detected capacity change from 0 to 512 [ 902.667559][ T28] audit: type=1400 audit(2000000069.116:4623): avc: denied { setattr } for pid=29247 comm="syz.1.6354" name="/" dev="configfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 902.746510][T29244] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 902.758225][T29244] EXT4-fs (loop2): orphan cleanup on readonly fs [ 902.758994][T29251] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29251 comm=syz.9.6352 [ 902.782869][T29244] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.6353: Bad quota inum: 2, type: 2 [ 902.799509][T29244] loop2: lost filesystem error report for type 5 error -117 [ 902.805033][T29244] EXT4-fs (loop2): Remounting filesystem read-only [ 902.812595][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 902.812617][ C0] EXT4-fs (loop2): last error at time 2000000069: ext4_quota_enable:7188 [ 902.861251][T29244] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix. [ 902.868913][T29257] ipip0: entered promiscuous mode [ 902.876419][T29244] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 902.896204][T29244] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 902.936557][T29270] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29270 comm=syz.9.6359 [ 902.951279][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.960652][T29270] FAULT_INJECTION: forcing a failure. [ 902.960652][T29270] name failslab, interval 1, probability 0, space 0, times 0 [ 903.009078][T29270] CPU: 0 UID: 0 PID: 29270 Comm: syz.9.6359 Tainted: G W syzkaller #0 PREEMPT(full) [ 903.009116][T29270] Tainted: [W]=WARN [ 903.009124][T29270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.009138][T29270] Call Trace: [ 903.009145][T29270] [ 903.009153][T29270] __dump_stack+0x1d/0x30 [ 903.009184][T29270] dump_stack_lvl+0x95/0xd0 [ 903.009205][T29270] dump_stack+0x15/0x1b [ 903.009228][T29270] should_fail_ex+0x263/0x280 [ 903.009293][T29270] should_failslab+0x8c/0xb0 [ 903.009317][T29270] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 903.009345][T29270] ? __alloc_skb+0x2d6/0x690 [ 903.009373][T29270] __alloc_skb+0x2d6/0x690 [ 903.009396][T29270] ? __alloc_skb+0x200/0x690 [ 903.009487][T29270] netlink_ack+0xfd/0x500 [ 903.009522][T29270] audit_receive+0x1090/0x2270 [ 903.009544][T29270] ? avc_has_perm+0x101/0x190 [ 903.009572][T29270] ? __netlink_lookup+0x276/0x2b0 [ 903.009671][T29270] netlink_unicast+0x5c0/0x690 [ 903.009701][T29270] netlink_sendmsg+0x5c8/0x6f0 [ 903.009811][T29270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 903.009839][T29270] ____sys_sendmsg+0x563/0x5b0 [ 903.009881][T29270] ___sys_sendmsg+0x195/0x1e0 [ 903.009977][T29270] __x64_sys_sendmsg+0xd4/0x160 [ 903.010042][T29270] x64_sys_call+0x194c/0x3020 [ 903.010065][T29270] do_syscall_64+0x12c/0x370 [ 903.010141][T29270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.010183][T29270] RIP: 0033:0x7f0c671dc799 [ 903.010200][T29270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.010282][T29270] RSP: 002b:00007f0c65c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.010304][T29270] RAX: ffffffffffffffda RBX: 00007f0c67455fa0 RCX: 00007f0c671dc799 [ 903.010317][T29270] RDX: 0000000020008054 RSI: 00002000000001c0 RDI: 0000000000000003 [ 903.010331][T29270] RBP: 00007f0c65c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 903.010345][T29270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.010358][T29270] R13: 00007f0c67456038 R14: 00007f0c67455fa0 R15: 00007ffe47722368 [ 903.010424][T29270] [ 903.260098][T29275] loop2: detected capacity change from 0 to 1764 [ 903.279689][T29275] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 903.777510][T29299] loop9: detected capacity change from 0 to 512 [ 903.820170][T29300] loop1: detected capacity change from 0 to 2048 [ 903.848969][T29299] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.6370: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 903.872127][T29300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 903.897295][T29299] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 903.897425][T29299] EXT4-fs (loop9): Remounting filesystem read-only [ 903.906585][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 903.906609][ C1] EXT4-fs (loop9): initial error at time 2000000070: ext4_ext_check_inode:521: inode 4 [ 903.906656][ C1] EXT4-fs (loop9): last error at time 2000000070: ext4_ext_check_inode:521: inode 4 [ 903.940265][T29299] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 903.955494][T29299] EXT4-fs (loop9): mount failed [ 903.955685][T24711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.080380][T29316] SET target dimension over the limit! [ 904.156858][T29320] netlink: 'syz.1.6378': attribute type 21 has an invalid length. [ 904.171887][T29320] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6378'. [ 904.197108][T29320] netlink: 'syz.1.6378': attribute type 5 has an invalid length. [ 904.221855][T29320] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6378'. [ 904.248830][T29322] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6379'. [ 904.320047][T29330] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6383'. [ 904.361034][T29330] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6383'. [ 904.377531][T29332] veth1_to_bridge: entered promiscuous mode [ 904.403192][T29332] veth1_to_bridge: left promiscuous mode [ 904.441057][T29330] bond1: Unable to set up delay as MII monitoring is disabled [ 904.479737][T29330] bond1 (unregistering): Released all slaves [ 904.596774][T29339] loop1: detected capacity change from 0 to 256 [ 904.679365][T29339] FAT-fs (loop1): Directory bread(block 64) failed [ 904.703193][T29339] FAT-fs (loop1): Directory bread(block 65) failed [ 904.713756][T29339] FAT-fs (loop1): Directory bread(block 66) failed [ 904.720572][T29339] FAT-fs (loop1): Directory bread(block 67) failed [ 904.737060][T29327] loop2: detected capacity change from 0 to 512 [ 904.764382][T29327] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 904.770931][T29339] FAT-fs (loop1): Directory bread(block 68) failed [ 904.788164][T29339] FAT-fs (loop1): Directory bread(block 69) failed [ 904.796309][T29339] FAT-fs (loop1): Directory bread(block 70) failed [ 904.836818][T29339] FAT-fs (loop1): Directory bread(block 71) failed [ 904.853472][T29339] FAT-fs (loop1): Directory bread(block 72) failed [ 904.853863][T29346] FAULT_INJECTION: forcing a failure. [ 904.853863][T29346] name failslab, interval 1, probability 0, space 0, times 0 [ 904.871059][T29339] FAT-fs (loop1): Directory bread(block 73) failed [ 904.932080][T29346] CPU: 1 UID: 0 PID: 29346 Comm: syz.9.6389 Tainted: G W syzkaller #0 PREEMPT(full) [ 904.932115][T29346] Tainted: [W]=WARN [ 904.932149][T29346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.932162][T29346] Call Trace: [ 904.932169][T29346] [ 904.932177][T29346] __dump_stack+0x1d/0x30 [ 904.932208][T29346] dump_stack_lvl+0x95/0xd0 [ 904.932283][T29346] dump_stack+0x15/0x1b [ 904.932379][T29346] should_fail_ex+0x263/0x280 [ 904.932407][T29346] should_failslab+0x8c/0xb0 [ 904.932430][T29346] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 904.932453][T29346] ? __alloc_skb+0x2d6/0x690 [ 904.932480][T29346] __alloc_skb+0x2d6/0x690 [ 904.932535][T29346] ? __alloc_skb+0x200/0x690 [ 904.932657][T29346] netlink_alloc_large_skb+0xbf/0xf0 [ 904.932687][T29346] netlink_sendmsg+0x40c/0x6f0 [ 904.932720][T29346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.932781][T29346] ____sys_sendmsg+0x563/0x5b0 [ 904.932903][T29346] ___sys_sendmsg+0x195/0x1e0 [ 904.932976][T29346] __x64_sys_sendmsg+0xd4/0x160 [ 904.933006][T29346] x64_sys_call+0x194c/0x3020 [ 904.933030][T29346] do_syscall_64+0x12c/0x370 [ 904.933063][T29346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.933084][T29346] RIP: 0033:0x7f0c671dc799 [ 904.933101][T29346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.933150][T29346] RSP: 002b:00007f0c65c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.933193][T29346] RAX: ffffffffffffffda RBX: 00007f0c67455fa0 RCX: 00007f0c671dc799 [ 904.933208][T29346] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 904.933222][T29346] RBP: 00007f0c65c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 904.933235][T29346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.933249][T29346] R13: 00007f0c67456038 R14: 00007f0c67455fa0 R15: 00007ffe47722368 [ 904.933327][T29346] [ 905.195874][T29351] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6391'. [ 905.212711][ T28] audit: type=1400 audit(2000000071.501:4624): avc: denied { ioctl } for pid=29352 comm="syz.2.6392" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=87791 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 905.269957][T29358] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6391'. [ 905.293846][T29361] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 905.353031][T29363] loop2: detected capacity change from 0 to 1024 [ 905.365462][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6391'. [ 905.376098][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6391'. [ 905.398365][T29363] EXT4-fs: test_dummy_encryption option not supported [ 905.461981][T29366] loop1: detected capacity change from 0 to 256 [ 905.671286][T29368] loop2: detected capacity change from 0 to 512 [ 905.933940][T29368] EXT4-fs (loop2): 1 orphan inode deleted [ 905.940780][T29368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.958519][T29368] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 905.973187][T29368] IPVS: dh: FWM 3 0x00000003 - no destination available [ 905.982210][T10976] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 906.102010][T10976] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 1 [ 907.276046][T29379] loop9: detected capacity change from 0 to 164 [ 907.305549][T29379] rock: directory entry would overflow storage [ 907.312665][T29379] rock: sig=0x66, size=4, remaining=3 [ 907.345608][T29379] rock: directory entry would overflow storage [ 907.352282][T29379] rock: sig=0x66, size=4, remaining=3 [ 907.366560][T29379] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 907.377984][T29379] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 907.424400][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 908.546414][T29393] netlink: 876 bytes leftover after parsing attributes in process `syz.4.6406'. [ 908.599793][T29397] loop5: detected capacity change from 0 to 512 [ 908.623890][T29397] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.6407: corrupted in-inode xattr: invalid ea_ino [ 908.641877][T29397] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 908.642603][T29397] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.6407: couldn't read orphan inode 15 (err -117) [ 908.651909][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 908.651931][ C1] EXT4-fs (loop5): initial error at time 2000000074: ext4_iget_extra_inode:5025: inode 15 [ 908.651965][ C1] EXT4-fs (loop5): last error at time 2000000074: ext4_iget_extra_inode:5025: inode 15 [ 908.691389][T29397] loop5: lost filesystem error report for type 5 error -117 [ 908.714753][T29397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 908.964422][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.265324][T29414] loop1: detected capacity change from 0 to 164 [ 909.958737][T29414] rock: directory entry would overflow storage [ 909.965677][T29414] rock: sig=0x66, size=4, remaining=3 [ 910.002419][T29414] rock: directory entry would overflow storage [ 910.009694][T29414] rock: sig=0x66, size=4, remaining=3 [ 910.022461][T29414] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 910.032779][T29414] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 911.532436][T29422] __nla_validate_parse: 2 callbacks suppressed [ 911.532521][T29422] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6413'. [ 911.572813][T29422] bond0: entered promiscuous mode [ 911.578805][T29422] bond_slave_0: entered promiscuous mode [ 911.628823][T29422] bond_slave_1: entered promiscuous mode [ 911.635013][T29422] bridge_slave_1: entered promiscuous mode [ 911.657465][T29422] bond0: left promiscuous mode [ 911.675566][T29422] bond_slave_0: left promiscuous mode [ 911.683108][T29422] bond_slave_1: left promiscuous mode [ 911.689112][T29422] bridge_slave_1: left promiscuous mode [ 911.771928][T29433] loop2: detected capacity change from 0 to 512 [ 911.792953][T29433] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 911.823237][T29435] xt_hashlimit: size too large, truncated to 1048576 [ 911.844058][T29433] EXT4-fs (loop2): 2 truncates cleaned up [ 911.850279][T29433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 911.906906][ T28] audit: type=1400 audit(2000000077.759:4625): avc: denied { connect } for pid=29428 comm="syz.1.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 911.942072][T29433] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.6419: path /243/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 911.983373][ T28] audit: type=1400 audit(2000000077.759:4626): avc: denied { read } for pid=29428 comm="syz.1.6416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 912.003222][T29447] xt_hashlimit: size too large, truncated to 1048576 [ 912.021303][T29433] EXT4-fs (loop2): Remounting filesystem read-only [ 912.072054][ T28] audit: type=1400 audit(2000000077.900:4627): avc: denied { getopt } for pid=29451 comm="syz.5.6424" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 912.100917][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 912.288761][T29471] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6430'. [ 912.531941][T29482] loop1: detected capacity change from 0 to 1024 [ 912.563149][ T28] audit: type=1326 audit(2000000078.377:4628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29484 comm="syz.9.6433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c671dc799 code=0x0 [ 912.606297][T29482] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.6432: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 912.682805][T29482] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 912.695926][T29482] EXT4-fs (loop1): Remounting filesystem read-only [ 912.705607][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 912.705626][ C1] EXT4-fs (loop1): initial error at time 2000000078: ext4_ext_check_inode:521: inode 2 [ 912.705652][ C1] EXT4-fs (loop1): last error at time 2000000078: ext4_ext_check_inode:521: inode 2 [ 912.743279][T29482] EXT4-fs (loop1): get root inode failed [ 912.749338][T29482] EXT4-fs (loop1): mount failed [ 912.896286][T29494] loop5: detected capacity change from 0 to 1764 [ 912.918562][T29494] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 912.997363][T29498] loop5: detected capacity change from 0 to 512 [ 913.006723][T29498] EXT4-fs: Ignoring removed nobh option [ 913.042169][T29498] EXT4-fs (loop5): Invalid default hash set in the superblock [ 913.126019][T29502] xt_time: unknown flags 0xc [ 913.419073][T29509] netlink: 'syz.2.6443': attribute type 10 has an invalid length. [ 913.557834][T29509] bond0: (slave dummy0): Releasing backup interface [ 913.605197][T29509] team0: Port device dummy0 added [ 913.648018][T29513] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29513 comm=syz.9.6444 [ 913.935356][T29522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6448'. [ 913.953228][T29520] loop2: detected capacity change from 0 to 1764 [ 913.960982][T29522] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6448'. [ 913.981731][T29520] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 914.048925][T29524] xt_hashlimit: size too large, truncated to 1048576 [ 914.208260][T29530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=29530 comm=syz.5.6451 [ 914.306968][T29540] loop5: detected capacity change from 0 to 512 [ 914.324865][T29540] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 914.459411][T29540] EXT4-fs (loop5): 1 truncate cleaned up [ 914.486473][T29540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.574277][T29551] loop4: detected capacity change from 0 to 1024 [ 914.581670][T29551] EXT4-fs: Ignoring removed i_version option [ 914.588047][T29551] EXT4-fs: Ignoring removed bh option [ 914.593841][T29551] EXT4-fs: inline encryption not supported [ 914.620406][ T28] audit: type=1400 audit(2000000080.304:4629): avc: denied { setattr } for pid=29539 comm="syz.5.6454" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 914.714063][T29551] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 914.735857][T29551] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 914.748105][T29551] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 914.763521][T29551] EXT4-fs (loop4): mount failed [ 914.806385][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.940216][T29558] loop2: detected capacity change from 0 to 1764 [ 915.012581][T29558] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 915.494957][T29566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29566 comm=syz.2.6462 [ 915.757661][T29568] loop5: detected capacity change from 0 to 1024 [ 915.769656][T29566] netlink: 'syz.2.6462': attribute type 1 has an invalid length. [ 915.841592][T29568] EXT4-fs: Ignoring removed i_version option [ 915.872627][T29569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29569 comm=syz.2.6462 [ 915.911533][T29568] EXT4-fs: Ignoring removed bh option [ 915.968333][T29568] EXT4-fs: inline encryption not supported [ 916.016004][T29568] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 916.030614][T29566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 916.079310][T29568] EXT4-fs (loop5): orphan cleanup on readonly fs [ 916.197340][T29568] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #3: comm syz.5.6459: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 916.309527][T29568] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 916.310942][T29568] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.6459: Bad quota inode: 3, type: 0 [ 916.320426][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 916.320447][ C1] EXT4-fs (loop5): initial error at time 2000000081: ext4_ext_check_inode:521: inode 3 [ 916.320484][ C1] EXT4-fs (loop5): last error at time 2000000081: ext4_ext_check_inode:521: inode 3 [ 916.394219][T29568] loop5: lost filesystem error report for type 5 error -117 [ 916.442953][T29568] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 916.454830][T29575] xt_hashlimit: size too large, truncated to 1048576 [ 916.494711][T29568] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 916.501944][T29568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 916.566648][T29582] veth1_to_bridge: entered promiscuous mode [ 916.569660][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.591903][T29582] veth1_to_bridge: left promiscuous mode [ 916.619817][ T28] audit: type=1400 audit(2000000082.165:4630): avc: denied { watch watch_reads } for pid=29585 comm="syz.5.6468" path="/proc/551" dev="proc" ino=88541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 916.705847][T29584] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29584 comm=syz.4.6467 [ 916.811580][T29596] lo speed is unknown, defaulting to 1000 [ 916.896655][T29601] loop1: detected capacity change from 0 to 1764 [ 916.909449][T29596] lo speed is unknown, defaulting to 1000 [ 916.909558][T29594] lo speed is unknown, defaulting to 1000 [ 916.929508][T29601] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 917.052282][T29594] lo speed is unknown, defaulting to 1000 [ 917.220594][T29612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29612 comm=syz.4.6474 [ 917.801200][T29624] loop4: detected capacity change from 0 to 1024 [ 917.810476][T29626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6478'. [ 917.819457][T29624] EXT4-fs: Ignoring removed bh option [ 917.867130][T29624] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 918.108667][T29637] loop4: detected capacity change from 0 to 1764 [ 918.136894][T29642] FAULT_INJECTION: forcing a failure. [ 918.136894][T29642] name failslab, interval 1, probability 0, space 0, times 0 [ 918.158027][T29637] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 918.165893][T29639] loop1: detected capacity change from 0 to 1764 [ 918.175610][T29642] CPU: 1 UID: 0 PID: 29642 Comm: syz.5.6484 Tainted: G W syzkaller #0 PREEMPT(full) [ 918.175646][T29642] Tainted: [W]=WARN [ 918.175655][T29642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 918.175674][T29642] Call Trace: [ 918.175682][T29642] [ 918.175691][T29642] __dump_stack+0x1d/0x30 [ 918.175722][T29642] dump_stack_lvl+0x95/0xd0 [ 918.175742][T29642] dump_stack+0x15/0x1b [ 918.175767][T29642] should_fail_ex+0x263/0x280 [ 918.175798][T29642] should_failslab+0x8c/0xb0 [ 918.175884][T29642] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 918.175912][T29642] ? __alloc_skb+0x2d6/0x690 [ 918.175983][T29642] __alloc_skb+0x2d6/0x690 [ 918.176012][T29642] ? __alloc_skb+0x200/0x690 [ 918.176116][T29642] netlink_alloc_large_skb+0xbf/0xf0 [ 918.176146][T29642] netlink_sendmsg+0x40c/0x6f0 [ 918.176185][T29642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.176212][T29642] ____sys_sendmsg+0x563/0x5b0 [ 918.176248][T29642] ___sys_sendmsg+0x195/0x1e0 [ 918.176309][T29642] __x64_sys_sendmsg+0xd4/0x160 [ 918.176341][T29642] x64_sys_call+0x194c/0x3020 [ 918.176368][T29642] do_syscall_64+0x12c/0x370 [ 918.176446][T29642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.176536][T29642] RIP: 0033:0x7f1b89acc799 [ 918.176551][T29642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.176569][T29642] RSP: 002b:00007f1b8851f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.176589][T29642] RAX: ffffffffffffffda RBX: 00007f1b89d45fa0 RCX: 00007f1b89acc799 [ 918.176604][T29642] RDX: 0000000000004800 RSI: 0000200000000d80 RDI: 0000000000000003 [ 918.176621][T29642] RBP: 00007f1b8851f090 R08: 0000000000000000 R09: 0000000000000000 [ 918.176683][T29642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.176745][T29642] R13: 00007f1b89d46038 R14: 00007f1b89d45fa0 R15: 00007ffe45e33718 [ 918.176779][T29642] [ 918.411494][T29639] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 918.424961][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6485'. [ 918.435741][T29639] isofs_fill_super: get root inode failed [ 918.451962][T29646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6486'. [ 918.475124][T29640] xt_hashlimit: size too large, truncated to 1048576 [ 918.495912][T29639] loop1: detected capacity change from 0 to 512 [ 918.528693][T29647] xt_hashlimit: size too large, truncated to 1048576 [ 918.536320][T29639] EXT4-fs: test_dummy_encryption option not supported [ 918.592116][ T28] audit: type=1326 audit(2000000084.017:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.592758][T29654] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6489'. [ 918.633763][T29649] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 918.646441][ T28] audit: type=1326 audit(2000000084.017:4632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.674668][ T28] audit: type=1326 audit(2000000084.017:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.745228][ T28] audit: type=1326 audit(2000000084.017:4634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.769452][ T28] audit: type=1326 audit(2000000084.017:4635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.811610][T29664] loop9: detected capacity change from 0 to 1024 [ 918.823299][T29664] EXT4-fs: Ignoring removed bh option [ 918.833176][ T28] audit: type=1326 audit(2000000084.017:4636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.857013][T29664] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 918.869434][ T28] audit: type=1326 audit(2000000084.055:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.896728][ T28] audit: type=1326 audit(2000000084.055:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.925994][T29668] loop5: detected capacity change from 0 to 512 [ 918.934994][ T28] audit: type=1326 audit(2000000084.092:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 918.942147][T29668] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 918.977337][ T28] audit: type=1326 audit(2000000084.092:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29653 comm="syz.2.6489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x7ffc0000 [ 919.011586][T29668] EXT4-fs (loop5): group descriptors corrupted! [ 919.070369][T29674] netlink: 'syz.4.6496': attribute type 12 has an invalid length. [ 919.097612][T29674] netlink: 'syz.4.6496': attribute type 29 has an invalid length. [ 919.105884][T29674] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6496'. [ 919.127496][T29674] netlink: 'syz.4.6496': attribute type 2 has an invalid length. [ 919.135548][T29674] netlink: 23 bytes leftover after parsing attributes in process `syz.4.6496'. [ 919.147505][T29677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.157565][T29677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.557959][T29697] loop9: detected capacity change from 0 to 164 [ 919.621846][T29697] rock: directory entry would overflow storage [ 919.630241][T29697] rock: sig=0x66, size=4, remaining=3 [ 919.655471][T29697] rock: directory entry would overflow storage [ 919.662271][T29697] rock: sig=0x66, size=4, remaining=3 [ 919.695448][T29697] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 919.707572][T29697] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 921.546672][T29694] loop4: detected capacity change from 0 to 164 [ 921.560739][T29706] loop2: detected capacity change from 0 to 1024 [ 921.583778][T29694] rock: directory entry would overflow storage [ 921.598621][T29706] EXT4-fs: Ignoring removed bh option [ 921.608389][T29694] rock: sig=0x66, size=4, remaining=3 [ 921.627561][T29706] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 921.642243][T29694] rock: directory entry would overflow storage [ 921.667062][T29708] loop1: detected capacity change from 0 to 128 [ 921.674282][T29694] rock: sig=0x66, size=4, remaining=3 [ 921.687823][T29694] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 921.704033][T29708] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 921.720589][T29694] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 922.229662][T29717] loop2: detected capacity change from 0 to 1764 [ 922.246552][T29718] loop9: detected capacity change from 0 to 128 [ 922.266236][T29717] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 922.417029][T29733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29733 comm=syz.2.6513 [ 922.453055][T29734] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:0 [ 922.578543][T29748] loop5: detected capacity change from 0 to 7 [ 922.597592][T29749] loop2: detected capacity change from 0 to 764 [ 922.784139][T29753] loop4: detected capacity change from 0 to 1764 [ 922.817007][T29753] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 923.482113][T29781] loop5: detected capacity change from 0 to 512 [ 923.489199][T29781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 923.503219][T29781] EXT4-fs (loop5): 2 truncates cleaned up [ 923.517105][T29781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.556630][T29781] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 7: comm syz.5.6530: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 923.559063][T29787] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6532'. [ 923.598731][T29781] EXT4-fs (loop5): Remounting filesystem read-only [ 923.618594][T29787] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6532'. [ 923.636762][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.705212][T29794] loop9: detected capacity change from 0 to 512 [ 923.712537][T29794] EXT4-fs: Ignoring removed mblk_io_submit option [ 923.719692][T29796] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 923.719932][T29794] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 923.751752][T29794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 923.760137][T29794] EXT4-fs (loop9): orphan cleanup on readonly fs [ 923.767130][T29794] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6535: bg 0: block 361: padding at end of block bitmap is not set [ 923.767475][T29796] EXT4-fs (loop5): 2 truncates cleaned up [ 923.781581][T29794] loop9: lost filesystem error report for type 5 error -117 [ 923.794774][T29794] EXT4-fs (loop9): Remounting filesystem read-only [ 923.795216][T29796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.802275][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 923.802297][ C0] EXT4-fs (loop9): initial error at time 2000000088: ext4_validate_block_bitmap:441 [ 923.802332][ C0] EXT4-fs (loop9): last error at time 2000000088: ext4_validate_block_bitmap:441 [ 923.841916][T29794] EXT4-fs (loop9): 1 truncate cleaned up [ 923.855914][T29794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 924.192446][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 924.192473][ T28] audit: type=1400 audit(2000000089.190:4647): avc: denied { read } for pid=29793 comm="syz.9.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 924.252285][ T28] audit: type=1400 audit(2000000089.190:4648): avc: denied { connect } for pid=29793 comm="syz.9.6535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 924.275232][ T28] audit: type=1400 audit(2000000089.311:4649): avc: denied { recv } for pid=29795 comm="syz.5.6536" saddr=10.128.0.163 src=34190 daddr=10.128.1.97 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 924.708512][T29808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 924.733900][T29808] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 924.778783][T29808] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 924.798038][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 924.819282][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.182251][ T7028] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.194067][ T7028] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.202635][ T7028] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 925.211478][ T7028] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.108898][T29764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 926.200764][ T28] audit: type=1400 audit(2000000091.126:4650): avc: denied { setopt } for pid=29824 comm="syz.2.6542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 926.264281][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 926.276889][T26592] loop9: p1 p2 p3 p4 [ 926.282121][T26592] loop9: p1 size 196608 extends beyond EOD, truncated [ 926.289722][T26592] loop9: p2 size 150994944 extends beyond EOD, truncated [ 926.297639][T26592] loop9: p3 size 66846464 extends beyond EOD, truncated [ 926.305385][T26592] loop9: p4 size 479744 extends beyond EOD, truncated [ 926.403387][T29837] FAULT_INJECTION: forcing a failure. [ 926.403387][T29837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.422695][T29822] loop9: p1 p2 p3 p4 [ 926.423154][T29837] CPU: 1 UID: 0 PID: 29837 Comm: syz.4.6548 Tainted: G W syzkaller #0 PREEMPT(full) [ 926.423202][T29837] Tainted: [W]=WARN [ 926.423239][T29837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 926.423252][T29837] Call Trace: [ 926.423288][T29837] [ 926.423297][T29837] __dump_stack+0x1d/0x30 [ 926.423323][T29837] dump_stack_lvl+0x95/0xd0 [ 926.423347][T29837] dump_stack+0x15/0x1b [ 926.423368][T29837] should_fail_ex+0x263/0x280 [ 926.423468][T29837] should_fail+0xb/0x20 [ 926.423531][T29837] should_fail_usercopy+0x1a/0x20 [ 926.423557][T29837] _copy_from_user+0x1c/0xb0 [ 926.423586][T29837] ___sys_sendmsg+0xc1/0x1e0 [ 926.423679][T29837] __x64_sys_sendmsg+0xd4/0x160 [ 926.423731][T29837] x64_sys_call+0x194c/0x3020 [ 926.423757][T29837] do_syscall_64+0x12c/0x370 [ 926.423799][T29837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.423886][T29837] RIP: 0033:0x7f37c6d6c799 [ 926.423982][T29837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.424000][T29837] RSP: 002b:00007f37c57c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.424021][T29837] RAX: ffffffffffffffda RBX: 00007f37c6fe5fa0 RCX: 00007f37c6d6c799 [ 926.424036][T29837] RDX: 0000000000004800 RSI: 0000200000000d80 RDI: 0000000000000003 [ 926.424050][T29837] RBP: 00007f37c57c7090 R08: 0000000000000000 R09: 0000000000000000 [ 926.424075][T29837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.424088][T29837] R13: 00007f37c6fe6038 R14: 00007f37c6fe5fa0 R15: 00007ffe0e586268 [ 926.424107][T29837] [ 926.596782][T29822] loop9: p1 size 196608 extends beyond EOD, truncated [ 926.608831][T29822] loop9: p2 size 150994944 extends beyond EOD, truncated [ 926.618400][T29822] loop9: p3 size 66846464 extends beyond EOD, truncated [ 926.682753][T29822] loop9: p4 size 479744 extends beyond EOD, truncated [ 926.727439][T29861] netlink: 'syz.4.6553': attribute type 10 has an invalid length. [ 926.729895][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6552'. [ 926.745236][T29861] team0: Device dummy0 is up. Set it down before adding it as a team port [ 926.748905][T29864] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6554'. [ 926.763882][T29862] batadv0: entered promiscuous mode [ 926.769498][T29862] vlan4: entered promiscuous mode [ 926.775827][T29864] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6554'. [ 926.821412][T29864] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6554'. [ 926.982914][T29869] netlink: 'syz.9.6556': attribute type 10 has an invalid length. [ 927.011636][ T28] audit: type=1400 audit(2000000091.856:4651): avc: denied { mount } for pid=29868 comm="syz.9.6556" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 927.094177][T26595] udevd[26595]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 927.109656][T26592] udevd[26592]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 927.143661][T26552] udevd[26552]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 927.167936][T26590] udevd[26590]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 927.185512][T29874] netlink: 'syz.4.6558': attribute type 3 has an invalid length. [ 927.193423][T29874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6558'. [ 927.202734][T29874] ------------[ cut here ]------------ [ 927.208538][T29874] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 927.220747][T29874] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.4.6558/29874 [ 927.230681][T29874] Modules linked in: [ 927.234621][T29874] CPU: 0 UID: 0 PID: 29874 Comm: syz.4.6558 Tainted: G W syzkaller #0 PREEMPT(full) [ 927.245677][T29874] Tainted: [W]=WARN [ 927.249609][T29874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 927.260130][T29874] RIP: 0010:u32_change+0x1463/0x14d0 [ 927.265783][T29874] Code: 31 ed e9 96 fe ff ff e8 1b 05 c2 fc 48 8d 3d 24 3a 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 30 61 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 927.285863][T29874] RSP: 0018:ffffc90002a735e0 EFLAGS: 00010283 [ 927.292045][T29874] RAX: ffffffff84975a05 RBX: ffffc90002a737f0 RCX: 0000000000000010 [ 927.300446][T29874] RDX: ffffffff867e6130 RSI: 0000000000000020 RDI: ffffffff87209430 [ 927.308520][T29874] RBP: ffffc90002a736e8 R08: 000188811f6de287 R09: 0000000000000000 [ 927.316528][T29874] R10: ffff88811f6de200 R11: 0000000000000002 R12: ffff888104998c00 [ 927.324666][T29874] R13: 0000000000000001 R14: 0000000000000020 R15: ffff888104998cc0 [ 927.332681][T29874] FS: 00007f37c57c76c0(0000) GS:ffff8882ae8db000(0000) knlGS:0000000000000000 [ 927.341643][T29874] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.348341][T29874] CR2: 0000200000001a00 CR3: 00000001ae0f8000 CR4: 00000000003506f0 [ 927.356348][T29874] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 927.364615][T29874] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 927.372616][T29874] Call Trace: [ 927.375910][T29874] [ 927.378890][T29874] tc_new_tfilter+0xfc0/0x1200 [ 927.384019][T29874] ? ns_capable+0x7c/0xb0 [ 927.388468][T29874] ? __pfx_tc_new_tfilter+0x10/0x10 [ 927.393777][T29874] rtnetlink_rcv_msg+0x64b/0x720 [ 927.398931][T29874] netlink_rcv_skb+0x123/0x220 [ 927.403848][T29874] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 927.409403][T29874] rtnetlink_rcv+0x1c/0x30 [ 927.414047][T29874] netlink_unicast+0x5c0/0x690 [ 927.419013][T29874] netlink_sendmsg+0x5c8/0x6f0 [ 927.423865][T29874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.429551][T29874] ____sys_sendmsg+0x563/0x5b0 [ 927.434479][T29874] ___sys_sendmsg+0x195/0x1e0 [ 927.439324][T29874] __sys_sendmmsg+0x185/0x320 [ 927.444213][T29874] __x64_sys_sendmmsg+0x57/0x70 [ 927.449178][T29874] x64_sys_call+0x27aa/0x3020 [ 927.453996][T29874] do_syscall_64+0x12c/0x370 [ 927.458967][T29874] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 927.466310][T29874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.472308][T29874] RIP: 0033:0x7f37c6d6c799 [ 927.476855][T29874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.496662][T29874] RSP: 002b:00007f37c57c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 927.505205][T29874] RAX: ffffffffffffffda RBX: 00007f37c6fe5fa0 RCX: 00007f37c6d6c799 [ 927.513463][T29874] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 927.521675][T29874] RBP: 00007f37c6e02c99 R08: 0000000000000000 R09: 0000000000000000 [ 927.530043][T29874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.538218][T29874] R13: 00007f37c6fe6038 R14: 00007f37c6fe5fa0 R15: 00007ffe0e586268 [ 927.546289][T29874] [ 927.549368][T29874] ---[ end trace 0000000000000000 ]--- [ 927.555021][T29874] netlink: 2 bytes leftover after parsing attributes in process `syz.4.6558'. [ 927.752658][T29878] set_capacity_and_notify: 3 callbacks suppressed [ 927.752677][T29878] loop9: detected capacity change from 0 to 1764 [ 927.887072][T29884] loop4: detected capacity change from 0 to 164 [ 927.898711][T29884] rock: directory entry would overflow storage [ 927.904957][T29884] rock: sig=0x66, size=4, remaining=3 [ 928.154278][T26595] udevd[26595]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 928.154298][T26552] udevd[26552]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 928.167080][T26592] udevd[26592]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 928.176041][T26590] udevd[26590]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 928.673172][T29886] loop5: detected capacity change from 0 to 128 [ 929.118356][ T28] audit: type=1400 audit(2000000093.839:4652): avc: denied { watch watch_reads } for pid=29891 comm="syz.1.6563" path="/284/file1" dev="tmpfs" ino=1547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 930.515519][T29925] loop5: detected capacity change from 0 to 1764 [ 930.599691][T29929] lo speed is unknown, defaulting to 1000 [ 930.616643][T29934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.658395][T29934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.776259][T29929] lo speed is unknown, defaulting to 1000 [ 930.845384][T29948] lo speed is unknown, defaulting to 1000 [ 930.948256][T29948] lo speed is unknown, defaulting to 1000 [ 931.033098][T29953] syzkaller0: entered promiscuous mode [ 931.039942][T29953] syzkaller0: entered allmulticast mode [ 931.195772][T29972] loop5: detected capacity change from 0 to 512 [ 931.204495][T29972] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 931.223887][T29972] EXT4-fs (loop5): 2 truncates cleaned up [ 931.230538][T29972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 931.258221][T29972] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.5.6587: path /229/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 931.284758][T29972] EXT4-fs (loop5): Remounting filesystem read-only [ 931.309678][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 931.389545][T29978] loop9: detected capacity change from 0 to 512 [ 931.400916][T29978] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42994!=33349) [ 931.445640][T29978] EXT4-fs (loop9): group descriptors corrupted! [ 931.562396][T29980] netlink: 'syz.9.6591': attribute type 12 has an invalid length. [ 931.571107][T29980] netlink: 'syz.9.6591': attribute type 29 has an invalid length. [ 931.583707][T29980] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6591'. [ 931.602511][T29984] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6590'. [ 931.603932][T29980] netlink: 'syz.9.6591': attribute type 2 has an invalid length. [ 931.634874][ T28] audit: type=1400 audit(2000000096.205:4653): avc: denied { read } for pid=29985 comm="syz.2.6593" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 931.659719][T29980] netlink: 23 bytes leftover after parsing attributes in process `syz.9.6591'. [ 931.674001][T29988] loop5: detected capacity change from 0 to 512 [ 931.986963][T30006] loop5: detected capacity change from 0 to 256 [ 931.994619][T30006] vfat: Unknown parameter 'shoPtname' [ 932.240113][ T28] audit: type=1400 audit(2000000096.776:4654): avc: denied { ioctl } for pid=30008 comm="syz.2.6600" path="socket:[90558]" dev="sockfs" ino=90558 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 932.974222][T30018] loop9: detected capacity change from 0 to 512 [ 932.995140][T30018] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 933.131365][T30018] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #13: comm syz.9.6604: iget: bad i_size value: 12154757448730 [ 933.208359][T30025] loop2: detected capacity change from 0 to 512 [ 933.254885][T30018] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 933.257045][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 933.273295][ C1] EXT4-fs (loop9): initial error at time 2000000097: ext4_orphan_get:1391: inode 13 [ 933.282986][ C1] EXT4-fs (loop9): last error at time 2000000097: ext4_orphan_get:1391: inode 13 [ 933.298435][T30018] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6604: couldn't read orphan inode 13 (err -117) [ 933.348573][T30018] loop9: lost filesystem error report for type 5 error -117 [ 933.351475][T30025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.376384][T30018] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.402152][T30018] netlink: 'syz.9.6604': attribute type 4 has an invalid length. [ 933.412939][T30025] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 933.470524][ T28] audit: type=1400 audit(2000000097.927:4655): avc: denied { map } for pid=30017 comm="syz.9.6604" path="pipe:[68699]" dev="pipefs" ino=68699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 933.626393][T29970] loop4: detected capacity change from 0 to 4096 [ 933.654924][T29970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 933.681162][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.817444][T29970] EXT4-fs (loop4): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 933.894193][T29970] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842e018, mo2=0002] [ 933.920267][T30032] loop5: detected capacity change from 0 to 1024 [ 933.945013][T29970] System zones: 0-5 [ 934.004810][T30032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.086783][T29970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.209644][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.278892][T30041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 934.298073][T30044] loop2: detected capacity change from 0 to 1024 [ 934.315088][ T28] audit: type=1400 audit(2000000098.722:4656): avc: denied { read } for pid=30028 comm="syz.5.6609" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 934.341058][T30044] EXT4-fs: test_dummy_encryption option not supported [ 934.372777][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.597407][T30048] loop2: detected capacity change from 0 to 512 [ 934.917328][T30048] EXT4-fs (loop2): 1 orphan inode deleted [ 934.923838][T30048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.941620][T30048] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.224095][ T28] audit: type=1400 audit(2000000099.507:4657): avc: denied { bind } for pid=30059 comm="syz.9.6616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 935.323389][ T28] audit: type=1400 audit(2000000099.507:4658): avc: denied { name_bind } for pid=30059 comm="syz.9.6616" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 935.428416][T30062] loop4: detected capacity change from 0 to 4096 [ 935.446993][T30062] EXT4-fs: Ignoring removed bh option [ 935.462206][ T28] audit: type=1400 audit(2000000099.507:4659): avc: denied { node_bind } for pid=30059 comm="syz.9.6616" saddr=::ffff:100.1.1.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 935.519377][T30062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.532351][T10982] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 935.571753][ T28] audit: type=1400 audit(2000000099.882:4660): avc: denied { ioctl } for pid=30064 comm="syz.1.6617" path="socket:[90671]" dev="sockfs" ino=90671 ioctlcmd=0x1501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 935.574431][T10982] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:26: Failed to release dquot type 1 [ 935.650267][T30062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.731546][T29974] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 935.797016][T29974] EXT4-fs (loop5): Remounting filesystem read-only [ 936.185094][T25863] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.258839][ T28] audit: type=1326 audit(2000000100.536:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30077 comm="syz.2.6621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40942fc799 code=0x0 [ 936.373230][T30082] loop9: detected capacity change from 0 to 4096 [ 936.388364][T30082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.441148][T30076] SELinux: policydb version 813183037 does not match my version range 15-35 [ 936.451317][T30076] SELinux: failed to load policy [ 936.573432][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.634653][T30098] loop9: detected capacity change from 0 to 512 [ 936.674071][T30098] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.686841][T30098] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.733357][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.785205][T30104] loop1: detected capacity change from 0 to 1764 [ 936.917626][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.593949][T30131] loop9: detected capacity change from 0 to 512 [ 937.604120][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 937.604136][ T28] audit: type=1326 audit(2000000101.799:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.652196][ T28] audit: type=1326 audit(2000000101.799:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.677007][ T28] audit: type=1326 audit(2000000101.836:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.701715][ T28] audit: type=1326 audit(2000000101.799:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.728969][T30122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6635'. [ 937.731927][ T28] audit: type=1326 audit(2000000101.836:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.749450][T30122] netlink: zone id is out of range [ 937.763277][ T28] audit: type=1326 audit(2000000101.836:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.797084][T30131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 937.813078][ T28] audit: type=1326 audit(2000000101.836:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.837847][ T28] audit: type=1326 audit(2000000101.836:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.854007][T30131] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 937.861892][ T28] audit: type=1326 audit(2000000101.836:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.897584][ T28] audit: type=1326 audit(2000000101.836:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30116 comm="syz.1.6635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 937.931308][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.068648][T30154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 938.093049][T30154] EXT4-fs (loop9): 2 truncates cleaned up [ 938.099484][T30154] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.123149][T30154] netlink: 14 bytes leftover after parsing attributes in process `syz.9.6646'. [ 938.166171][T30154] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.6646: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0 [ 938.207775][T30154] EXT4-fs (loop9): Remounting filesystem read-only [ 938.285684][T30176] netlink: 'syz.1.6656': attribute type 5 has an invalid length. [ 938.324757][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 938.345841][T30176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6656'. [ 938.448214][T30190] FAULT_INJECTION: forcing a failure. [ 938.448214][T30190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.502333][T30190] CPU: 0 UID: 0 PID: 30190 Comm: syz.9.6661 Tainted: G W syzkaller #0 PREEMPT(full) [ 938.502373][T30190] Tainted: [W]=WARN [ 938.502381][T30190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 938.502434][T30190] Call Trace: [ 938.502442][T30190] [ 938.502451][T30190] __dump_stack+0x1d/0x30 [ 938.502526][T30190] dump_stack_lvl+0x95/0xd0 [ 938.502551][T30190] dump_stack+0x15/0x1b [ 938.502575][T30190] should_fail_ex+0x263/0x280 [ 938.502602][T30190] should_fail+0xb/0x20 [ 938.502655][T30190] should_fail_usercopy+0x1a/0x20 [ 938.502681][T30190] _copy_from_iter+0xcf/0xea0 [ 938.502712][T30190] ? __alloc_skb+0x4f6/0x690 [ 938.502792][T30190] ? __alloc_skb+0x200/0x690 [ 938.502869][T30190] netlink_sendmsg+0x4ae/0x6f0 [ 938.502907][T30190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.502981][T30190] ____sys_sendmsg+0x563/0x5b0 [ 938.503015][T30190] ___sys_sendmsg+0x195/0x1e0 [ 938.503126][T30190] __x64_sys_sendmsg+0xd4/0x160 [ 938.503243][T30190] x64_sys_call+0x194c/0x3020 [ 938.503269][T30190] do_syscall_64+0x12c/0x370 [ 938.503316][T30190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.503341][T30190] RIP: 0033:0x7f0c671dc799 [ 938.503360][T30190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.503427][T30190] RSP: 002b:00007f0c65c2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.503473][T30190] RAX: ffffffffffffffda RBX: 00007f0c67455fa0 RCX: 00007f0c671dc799 [ 938.503489][T30190] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 938.503503][T30190] RBP: 00007f0c65c2f090 R08: 0000000000000000 R09: 0000000000000000 [ 938.503517][T30190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.503604][T30190] R13: 00007f0c67456038 R14: 00007f0c67455fa0 R15: 00007ffe47722368 [ 938.503686][T30190] [ 938.530622][T30194] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 938.590560][T30196] vti0: entered allmulticast mode [ 938.658035][T30194] EXT4-fs (loop1): 2 truncates cleaned up [ 938.720647][T30194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 938.807377][T30203] netlink: 'syz.1.6664': attribute type 4 has an invalid length. [ 938.835141][T30204] set_capacity_and_notify: 3 callbacks suppressed [ 938.835159][T30204] loop4: detected capacity change from 0 to 1764 [ 938.837055][T30203] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6664'. [ 938.913408][T30209] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.6664: path /299/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 938.972131][T30209] EXT4-fs (loop1): Remounting filesystem read-only [ 938.993286][T30203] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 939.017983][T30217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6671'. [ 939.031528][T30209] bridge_slave_0: left allmulticast mode [ 939.039379][T30209] bridge_slave_0: left promiscuous mode [ 939.098252][T30209] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.274792][T30209] bridge_slave_1: left allmulticast mode [ 939.431418][T30209] bridge_slave_1: left promiscuous mode [ 939.452570][T30209] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.463132][T30209] bond0: (slave bond_slave_0): Releasing backup interface [ 939.482551][T30209] bond0: (slave bond_slave_1): Releasing backup interface [ 939.515437][T30209] team0: Port device team_slave_1 removed [ 939.531503][T30209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.539406][T30209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.554656][T30209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.562170][T30209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.572608][T30209] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 939.579328][T30228] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6675'. [ 939.606967][T30218] lo speed is unknown, defaulting to 1000 [ 939.613886][T24711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 939.630286][T30229] netlink: 'syz.2.6672': attribute type 8 has an invalid length. [ 939.649359][T30218] lo speed is unknown, defaulting to 1000 [ 939.859760][T30247] loop5: detected capacity change from 0 to 1024 [ 939.868090][T30247] EXT4-fs: test_dummy_encryption option not supported [ 940.100939][T30251] loop5: detected capacity change from 0 to 512 [ 940.199170][T30251] EXT4-fs (loop5): 1 orphan inode deleted [ 940.205816][T30251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.221252][T10986] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:30: Failed to release dquot type 1 [ 940.236409][T30251] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 940.807580][T30266] loop1: detected capacity change from 0 to 1764 [ 940.838042][T30268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6690'. [ 941.828726][T30278] loop1: detected capacity change from 0 to 164 [ 941.866186][T30278] rock: directory entry would overflow storage [ 941.872854][T30278] rock: sig=0x66, size=4, remaining=3 [ 941.926381][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.283852][T30284] loop9: detected capacity change from 0 to 164 [ 943.395239][T30284] rock: directory entry would overflow storage [ 943.401974][T30284] rock: sig=0x66, size=4, remaining=3 [ 943.432097][T30284] rock: directory entry would overflow storage [ 943.439023][T30284] rock: sig=0x66, size=4, remaining=3 [ 943.448629][T30284] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 943.459520][T30284] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 943.888802][T30293] loop1: detected capacity change from 0 to 1764 [ 943.907562][T30274] unsupported nla_type 54482 [ 943.926345][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 943.926362][ T28] audit: type=1400 audit(2000000107.701:4772): avc: denied { map } for pid=30273 comm="syz.2.6693" path="/304" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 944.099259][T30295] loop5: detected capacity change from 0 to 164 [ 944.110185][T30295] iso9660: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 944.316628][T30306] xt_time: unknown flags 0xc [ 944.321474][ T28] audit: type=1400 audit(2000000107.701:4773): avc: denied { execute } for pid=30273 comm="syz.2.6693" path="/304" dev="tmpfs" ino=1620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 944.367060][T30309] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6706'. [ 944.764470][T30318] loop1: detected capacity change from 0 to 164 [ 944.795541][T30318] rock: directory entry would overflow storage [ 944.802162][T30318] rock: sig=0x66, size=4, remaining=3 [ 946.641750][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6709'. [ 948.552925][T30339] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6718'. [ 948.569356][T30339] vlan2: entered promiscuous mode [ 948.585433][T30339] batadv0: entered promiscuous mode [ 948.595068][T30344] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6720'. [ 948.660453][T30347] lo speed is unknown, defaulting to 1000 [ 948.676865][T30353] loop4: detected capacity change from 0 to 256 [ 948.696487][T30353] /dev/loop4: Can't open blockdev [ 948.724506][T30353] netlink: 'syz.4.6721': attribute type 39 has an invalid length. [ 949.045416][T30347] lo speed is unknown, defaulting to 1000 [ 949.122219][ T28] audit: type=1400 audit(2000000112.566:4774): avc: denied { create } for pid=30358 comm="syz.9.6725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 949.181722][T30363] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 949.337123][T30363] bond1 (unregistering): Released all slaves [ 951.045015][T30386] loop5: detected capacity change from 0 to 512 [ 951.053536][T30386] ext3: Unknown parameter 'fsname' [ 953.715567][T30422] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30422 comm=syz.1.6741 [ 954.519136][T30429] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6743'. [ 954.696947][T30442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'. [ 954.722077][ T28] audit: type=1326 audit(2000000117.813:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 954.751602][ T28] audit: type=1326 audit(2000000117.841:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 954.785078][ T28] audit: type=1326 audit(2000000117.841:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 954.815409][T30446] ------------[ cut here ]------------ [ 954.820963][T30446] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 954.846199][T30446] WARNING: kernel/bpf/verifier.c:2823 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.1.6751/30446 [ 954.857240][T30446] Modules linked in: [ 954.861185][T30446] CPU: 1 UID: 0 PID: 30446 Comm: syz.1.6751 Tainted: G W syzkaller #0 PREEMPT(full) [ 954.872383][T30446] Tainted: [W]=WARN [ 954.876832][T30446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 954.886946][T30446] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 954.893382][T30446] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 954.913855][T30446] RSP: 0018:ffffc900015ef370 EFLAGS: 00010246 [ 954.920222][T30446] RAX: ffff888103ec2c48 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 954.928353][T30446] RDX: ffffffff86819242 RSI: ffffffff866da6c4 RDI: ffffffff871d2340 [ 954.936661][T30446] RBP: ffff888139745a70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 954.945364][T30446] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff888139745a30 [ 954.953386][T30446] R13: 00000000ffffdfcc R14: ffff888139745a7c R15: ffff888139745a68 [ 954.961493][T30446] FS: 00007fd75010e6c0(0000) GS:ffff8882ae9db000(0000) knlGS:0000000000000000 [ 954.971100][T30446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 954.977705][T30446] CR2: 0000200000001000 CR3: 000000010b18c000 CR4: 00000000003506f0 [ 954.985752][T30446] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 954.993760][T30446] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 955.002553][T30446] Call Trace: [ 955.005891][T30446] [ 955.008866][T30446] reg_set_min_max+0x1c8/0x260 [ 955.013699][T30446] check_cond_jmp_op+0x13b2/0x1a80 [ 955.018909][T30446] do_check+0x4a9b/0x9840 [ 955.023301][T30446] do_check_common+0xd0b/0x1630 [ 955.028329][T30446] bpf_check+0x2f78/0xcc30 [ 955.032890][T30446] ? __vmap_pages_range_noflush+0x173/0xcc0 [ 955.039395][T30446] ? __tsan_read8+0x12/0x190 [ 955.044092][T30446] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 955.050212][T30446] ? pcpu_block_update+0x24e/0x3b0 [ 955.055377][T30446] ? _find_next_zero_bit+0x29/0xa0 [ 955.060519][T30446] ? pcpu_block_update+0x24e/0x3b0 [ 955.066678][T30446] ? pcpu_block_refresh_hint+0x157/0x170 [ 955.072488][T30446] ? _find_next_zero_bit+0x64/0xa0 [ 955.077947][T30446] ? pcpu_block_refresh_hint+0x157/0x170 [ 955.083816][T30446] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 955.090178][T30446] ? css_rstat_updated+0xbb/0x280 [ 955.095281][T30446] ? mod_memcg_state+0x182/0x270 [ 955.101029][T30446] ? __rcu_read_unlock+0x4e/0x70 [ 955.106072][T30446] ? avc_has_perm_noaudit+0xab/0x130 [ 955.111410][T30446] ? avc_has_perm+0x101/0x190 [ 955.116148][T30446] ? selinux_bpf_prog_load+0x197/0x1c0 [ 955.121660][T30446] ? security_bpf_prog_load+0x9e/0x140 [ 955.127281][T30446] bpf_prog_load+0xf76/0x1140 [ 955.132771][T30446] ? security_bpf+0x2b/0x90 [ 955.137386][T30446] __sys_bpf+0x505/0x7e0 [ 955.141756][T30446] __x64_sys_bpf+0x41/0x50 [ 955.146246][T30446] x64_sys_call+0x10cb/0x3020 [ 955.151028][T30446] do_syscall_64+0x12c/0x370 [ 955.155726][T30446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.161660][T30446] RIP: 0033:0x7fd7516dc799 [ 955.166759][T30446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.186635][T30446] RSP: 002b:00007fd75010e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 955.195830][T30446] RAX: ffffffffffffffda RBX: 00007fd751956090 RCX: 00007fd7516dc799 [ 955.203912][T30446] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 955.212021][T30446] RBP: 00007fd751772c99 R08: 0000000000000000 R09: 0000000000000000 [ 955.220198][T30446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 955.228790][T30446] R13: 00007fd751956128 R14: 00007fd751956090 R15: 00007ffc40fe9398 [ 955.237131][T30446] [ 955.240163][T30446] ---[ end trace 0000000000000000 ]--- [ 955.327273][T30445] loop4: detected capacity change from 0 to 164 [ 955.364554][T30448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6750'. [ 955.416942][ T28] audit: type=1326 audit(2000000117.841:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 955.491775][ T28] audit: type=1326 audit(2000000117.841:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 955.528205][ T28] audit: type=1326 audit(2000000117.841:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 955.646161][T30445] rock: directory entry would overflow storage [ 955.652941][T30445] rock: sig=0x66, size=4, remaining=3 [ 955.690679][T30445] rock: directory entry would overflow storage [ 955.697635][T30445] rock: sig=0x66, size=4, remaining=3 [ 955.714318][ T28] audit: type=1326 audit(2000000117.841:4781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 955.742750][T30445] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 955.753124][T30445] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 955.777218][ T28] audit: type=1326 audit(2000000117.841:4782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 955.799684][T30446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30446 comm=syz.1.6751 [ 955.813798][ T28] audit: type=1326 audit(2000000117.841:4783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 955.842909][ T28] audit: type=1326 audit(2000000117.841:4784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30443 comm="syz.1.6751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7516dc799 code=0x7ffc0000 [ 956.133812][T30464] lo speed is unknown, defaulting to 1000 [ 956.506893][T30464] lo speed is unknown, defaulting to 1000 [ 956.693845][T30481] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6759'. [ 956.758599][T30484] netlink: 'syz.9.6760': attribute type 12 has an invalid length. [ 956.813773][T30486] netlink: 'syz.4.6761': attribute type 1 has an invalid length. [ 956.832084][T30486] netlink: 'syz.4.6761': attribute type 2 has an invalid length. [ 956.847023][T30484] netlink: 'syz.9.6760': attribute type 29 has an invalid length. [ 956.862899][T30487] netlink: 'syz.4.6761': attribute type 1 has an invalid length. [ 956.870668][T30487] netlink: 'syz.4.6761': attribute type 2 has an invalid length. [ 956.883204][T30484] netlink: 148 bytes leftover after parsing attributes in process `syz.9.6760'. [ 956.919881][T30484] netlink: 'syz.9.6760': attribute type 2 has an invalid length. [ 956.951468][T30484] netlink: 23 bytes leftover after parsing attributes in process `syz.9.6760'. [ 957.007080][T30493] loop9: detected capacity change from 0 to 512 [ 957.031939][T30493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 957.051405][T30493] EXT4-fs (loop9): 2 truncates cleaned up [ 957.134839][T30493] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.416376][T30502] loop5: detected capacity change from 0 to 512 [ 957.424354][T30502] EXT4-fs: Ignoring removed i_version option [ 957.436913][T30502] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 957.583826][T30495] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 958.145227][T30495] EXT4-fs (loop9): Remounting filesystem read-only [ 958.162413][T30507] netlink: 'syz.2.6766': attribute type 2 has an invalid length. [ 958.192063][T30508] netlink: 'syz.2.6766': attribute type 2 has an invalid length. [ 958.208980][T30507] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6766'. [ 958.262416][T30508] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6766'. [ 958.282684][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.027694][T25417] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.431764][T30527] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6771'. [ 959.669069][T30531] netlink: 'syz.4.6772': attribute type 1 has an invalid length. [ 959.842821][T30531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 960.329290][T30536] vlan2: entered promiscuous mode [ 960.354156][T30536] bond1: entered promiscuous mode [ 960.561237][T30539] loop5: detected capacity change from 0 to 256 [ 960.568451][T30539] vfat: Unknown parameter 'shoPtname' [ 961.412214][T30531] bond1: (slave geneve2): making interface the new active one [ 961.471940][T30531] geneve2: entered promiscuous mode [ 961.518723][T30531] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 962.266976][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 962.266995][ T28] audit: type=1400 audit(2000000124.866:4797): avc: denied { map } for pid=30546 comm="syz.1.6777" path="socket:[92340]" dev="sockfs" ino=92340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 962.389758][T30564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6784'. [ 962.406966][T30566] loop5: detected capacity change from 0 to 1764 [ 962.630621][ T28] audit: type=1400 audit(2000000125.175:4798): avc: denied { create } for pid=30562 comm="syz.9.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 962.730332][ T28] audit: type=1400 audit(2000000125.175:4799): avc: denied { ioctl } for pid=30562 comm="syz.9.6782" path="socket:[93465]" dev="sockfs" ino=93465 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 962.756234][ T28] audit: type=1400 audit(2000000125.175:4800): avc: denied { bind } for pid=30562 comm="syz.9.6782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 962.800657][T30585] loop5: detected capacity change from 0 to 7 [ 963.118671][ T28] audit: type=1400 audit(2000000125.670:4801): avc: denied { rename } for pid=30591 comm="syz.1.6793" name="file0" dev="tmpfs" ino=1795 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 963.255685][ T28] audit: type=1400 audit(2000000125.801:4802): avc: denied { getopt } for pid=30599 comm="syz.2.6795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 963.443223][T30607] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6797'. [ 963.546030][T30615] loop9: detected capacity change from 0 to 128 [ 963.574882][T30615] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 963.640122][T30609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30609 comm=syz.1.6799 [ 963.660107][T30615] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 963.761685][T30619] netlink: 56 bytes leftover after parsing attributes in process `syz.9.6803'. [ 963.922619][ T28] audit: type=1400 audit(2000000126.419:4803): avc: denied { ioctl } for pid=30608 comm="syz.1.6799" path="socket:[93533]" dev="sockfs" ino=93533 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 963.980464][T30621] loop9: detected capacity change from 0 to 2048 [ 964.112833][T30621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.348181][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 965.178915][T30633] loop4: detected capacity change from 0 to 1024 [ 965.213053][T30633] ext4: Unknown parameter 'uid' [ 965.633392][T30638] x_tables: duplicate underflow at hook 1 [ 965.790103][T30638] loop9: detected capacity change from 0 to 512 [ 965.827515][T30645] loop5: detected capacity change from 0 to 164 [ 965.840319][T30645] rock: directory entry would overflow storage [ 965.846659][T30645] rock: sig=0x66, size=4, remaining=3 [ 965.854990][T30645] rock: directory entry would overflow storage [ 965.861170][T30645] rock: sig=0x66, size=4, remaining=3 [ 965.871346][T30645] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 965.879212][T30645] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 965.978087][T30638] EXT4-fs (loop9): couldn't mount as ext3 due to feature incompatibilities [ 966.018509][T30647] Dead loop on virtual device ip6_vti0, fix it urgently! [ 966.573752][T30659] batadv_slave_0: entered promiscuous mode [ 966.609421][T30659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6813'. [ 966.654823][T30659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 966.714240][T30659] batadv_slave_0 (unregistering): left promiscuous mode [ 966.747040][T30659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.211122][T30665] 9p: Bad value for 'rfdno' [ 967.551366][T30677] loop4: detected capacity change from 0 to 1024 [ 967.621958][T30687] loop5: detected capacity change from 0 to 7 [ 967.638340][T30677] EXT4-fs: Ignoring removed orlov option [ 967.655940][T30677] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 967.693224][ T28] audit: type=1400 audit(2000000129.936:4804): avc: denied { write } for pid=30670 comm="syz.5.6818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 967.737911][T30677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 967.767862][T30693] loop9: detected capacity change from 0 to 1024 [ 967.798747][T30693] EXT4-fs: test_dummy_encryption option not supported [ 967.923640][T30698] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 968.102708][T30703] loop9: detected capacity change from 0 to 512 [ 968.147927][T30706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6827'. [ 968.164268][T30703] EXT4-fs (loop9): 1 orphan inode deleted [ 968.171647][T30703] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.192387][T30703] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.218683][T10976] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 968.245199][T10976] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:20: Failed to release dquot type 1 [ 968.306461][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.439432][T30711] vlan4: entered allmulticast mode [ 968.613065][T30715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6831'. [ 968.831091][ T28] audit: type=1400 audit(2000000131.012:4805): avc: denied { setopt } for pid=30714 comm="syz.2.6831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 968.853405][T30715] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6831'. [ 969.864342][T30733] loop4: detected capacity change from 0 to 164 [ 969.907366][T30733] rock: directory entry would overflow storage [ 969.914589][T30733] rock: sig=0x66, size=4, remaining=3 [ 969.941976][T30733] rock: directory entry would overflow storage [ 969.949530][T30733] rock: sig=0x66, size=4, remaining=3 [ 969.966236][T30733] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 969.978287][T30733] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 970.021367][T24196] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 970.206368][T30735] veth1_to_bridge: entered promiscuous mode [ 970.224298][T30735] veth1_to_bridge: left promiscuous mode [ 970.354495][ T28] audit: type=1400 audit(2000000132.433:4806): avc: denied { connect } for pid=30736 comm="syz.1.6838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 971.305167][T30749] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6841'. [ 971.314251][T30749] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6841'. [ 971.634686][T30753] loop4: detected capacity change from 0 to 512 [ 971.652397][T30753] EXT4-fs: Ignoring removed nobh option [ 971.693226][T30753] EXT4-fs: old and new quota format mixing [ 971.794158][T30760] hsr0: entered allmulticast mode [ 971.832716][T30758] loop5: detected capacity change from 0 to 1024 [ 971.835270][T30763] loop4: detected capacity change from 0 to 1024 [ 971.850385][T30760] hsr_slave_0: entered allmulticast mode [ 971.856065][T30760] hsr_slave_1: entered allmulticast mode [ 971.867815][T30758] EXT4-fs: Ignoring removed orlov option [ 971.873811][T30760] loop1: detected capacity change from 0 to 128 [ 971.881071][T30763] EXT4-fs: Ignoring removed i_version option [ 971.897710][T30759] hsr0: left allmulticast mode [ 971.909134][T30759] hsr_slave_0: left allmulticast mode [ 971.915284][T30763] EXT4-fs: Ignoring removed bh option [ 971.938094][T30759] hsr_slave_1: left allmulticast mode [ 971.948651][T30763] EXT4-fs: inline encryption not supported [ 971.957707][T30758] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.6845: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 971.979448][T30763] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 972.001195][T30770] netlink: 'syz.1.6850': attribute type 10 has an invalid length. [ 972.015720][T30771] netlink: 'syz.9.6851': attribute type 1 has an invalid length. [ 972.024681][T30763] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (56422!=35945) [ 972.034826][T30758] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 972.035012][T30758] EXT4-fs error (device loop5): ext4_quota_enable:7195: comm syz.5.6845: Bad quota inode: 4, type: 1 [ 972.044243][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 972.044267][ C1] EXT4-fs (loop5): initial error at time 2000000134: ext4_ext_check_inode:521: inode 4 [ 972.044317][ C1] EXT4-fs (loop5): last error at time 2000000134: ext4_ext_check_inode:521: inode 4 [ 972.053314][T30770] team0: Device dummy0 is up. Set it down before adding it as a team port [ 972.063974][T30763] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 972.138802][T30758] loop5: lost filesystem error report for type 5 error -117 [ 972.138923][T30758] EXT4-fs warning (device loop5): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 972.161693][T30763] EXT4-fs (loop4): orphan cleanup on readonly fs [ 972.179196][T30763] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (268441600 > 6144). [ 972.195912][T30758] EXT4-fs (loop5): mount failed [ 972.221706][T30758] netlink: 140 bytes leftover after parsing attributes in process `syz.5.6845'. [ 972.230733][T30776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6851'. [ 972.246018][T30763] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 972.261122][T30763] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 972.324068][T30781] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 972.451513][T30763] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.6847: bad orphan inode 11 [ 972.468483][T30771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.647931][T30787] loop5: detected capacity change from 0 to 164 [ 973.276928][T30787] rock: directory entry would overflow storage [ 973.282698][T30763] loop4: lost filesystem error report for type 5 error -117 [ 973.283688][T30763] ext4_test_bit(bit=10, block=1) = 0 [ 973.284036][T30787] rock: sig=0x66, size=4, remaining=3 [ 973.293334][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 973.309282][ C0] EXT4-fs (loop4): initial error at time 2000000135: ext4_orphan_get:1417 [ 973.313879][T30787] rock: directory entry would overflow storage [ 973.318014][ C0] EXT4-fs (loop4): last error at time 2000000135: ext4_orphan_get:1417 [ 973.334430][T30787] rock: sig=0x66, size=4, remaining=3 [ 973.426948][T30787] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 973.445160][T30787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 973.475721][T30763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 973.488448][T30776] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6851'. [ 973.578654][T30785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 973.677002][T28604] lo speed is unknown, defaulting to 1000 [ 973.971235][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.327586][T30800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6854'. [ 974.339552][T30802] loop4: detected capacity change from 0 to 1024 [ 974.365673][T30802] EXT4-fs: test_dummy_encryption option not supported [ 974.375446][T30804] loop9: detected capacity change from 0 to 128 [ 974.527778][T30802] loop4: detected capacity change from 0 to 512 [ 974.577904][T30802] EXT4-fs (loop4): 1 orphan inode deleted [ 974.584393][T30802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 974.621288][T30802] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 974.637848][T10980] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 974.718211][T10980] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:24: Failed to release dquot type 1 [ 974.797027][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 974.876237][T30823] FAULT_INJECTION: forcing a failure. [ 974.876237][T30823] name failslab, interval 1, probability 0, space 0, times 0 [ 974.931160][T30823] CPU: 1 UID: 0 PID: 30823 Comm: syz.5.6867 Tainted: G W syzkaller #0 PREEMPT(full) [ 974.931266][T30823] Tainted: [W]=WARN [ 974.931273][T30823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 974.931284][T30823] Call Trace: [ 974.931290][T30823] [ 974.931299][T30823] __dump_stack+0x1d/0x30 [ 974.931329][T30823] dump_stack_lvl+0x95/0xd0 [ 974.931420][T30823] dump_stack+0x15/0x1b [ 974.931520][T30823] should_fail_ex+0x263/0x280 [ 974.931548][T30823] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 974.931583][T30823] should_failslab+0x8c/0xb0 [ 974.931606][T30823] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 974.931780][T30823] ? debugfs_alloc_inode+0x34/0x40 [ 974.931806][T30823] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 974.931831][T30823] debugfs_alloc_inode+0x34/0x40 [ 974.931876][T30823] alloc_inode+0x40/0x170 [ 974.931895][T30823] new_inode+0x1d/0xe0 [ 974.931915][T30823] __debugfs_create_file+0x97/0x2b0 [ 974.931990][T30823] debugfs_create_file_full+0x3f/0x60 [ 974.932014][T30823] ? __pfx_hsr_dev_setup+0x10/0x10 [ 974.932032][T30823] ref_tracker_dir_debugfs+0x10e/0x220 [ 974.932187][T30823] alloc_netdev_mqs+0x1a7/0xa40 [ 974.932215][T30823] rtnl_create_link+0x239/0x720 [ 974.932240][T30823] rtnl_newlink_create+0x174/0x650 [ 974.932269][T30823] ? security_capable+0x7b/0x90 [ 974.932368][T30823] ? netlink_ns_capable+0x86/0xa0 [ 974.932391][T30823] rtnl_newlink+0x10a0/0x1330 [ 974.932415][T30823] ? __rcu_read_unlock+0x4e/0x70 [ 974.932475][T30823] ? xa_load+0xb1/0xe0 [ 974.932495][T30823] ? __rcu_read_unlock+0x4e/0x70 [ 974.932512][T30823] ? avc_has_perm_noaudit+0xab/0x130 [ 974.932619][T30823] ? cred_has_capability+0x224/0x2a0 [ 974.932649][T30823] ? selinux_capable+0x31/0x40 [ 974.932742][T30823] ? security_capable+0x7b/0x90 [ 974.932764][T30823] ? ns_capable+0x7c/0xb0 [ 974.932831][T30823] ? __pfx_rtnl_newlink+0x10/0x10 [ 974.932848][T30823] rtnetlink_rcv_msg+0x64b/0x720 [ 974.932866][T30823] ? avc_has_perm_noaudit+0xab/0x130 [ 974.932905][T30823] netlink_rcv_skb+0x123/0x220 [ 974.932930][T30823] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 974.932951][T30823] rtnetlink_rcv+0x1c/0x30 [ 974.933005][T30823] netlink_unicast+0x5c0/0x690 [ 974.933077][T30823] netlink_sendmsg+0x5c8/0x6f0 [ 974.933104][T30823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.933182][T30823] ____sys_sendmsg+0x563/0x5b0 [ 974.933210][T30823] ___sys_sendmsg+0x195/0x1e0 [ 974.933279][T30823] __x64_sys_sendmsg+0xd4/0x160 [ 974.933395][T30823] x64_sys_call+0x194c/0x3020 [ 974.933417][T30823] do_syscall_64+0x12c/0x370 [ 974.933438][T30823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.933457][T30823] RIP: 0033:0x7f1b89acc799 [ 974.933534][T30823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.933550][T30823] RSP: 002b:00007f1b8851f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.933581][T30823] RAX: ffffffffffffffda RBX: 00007f1b89d45fa0 RCX: 00007f1b89acc799 [ 974.933594][T30823] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 974.933605][T30823] RBP: 00007f1b8851f090 R08: 0000000000000000 R09: 0000000000000000 [ 974.933616][T30823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.933627][T30823] R13: 00007f1b89d46038 R14: 00007f1b89d45fa0 R15: 00007ffe45e33718 [ 974.933643][T30823] [ 974.933654][T30823] debugfs: out of free dentries, can not create file 'netdev@ffff88811a702560' [ 975.288630][T30823] veth1_to_bridge: entered promiscuous mode [ 975.295903][T30823] veth1_to_bridge: left promiscuous mode [ 975.582795][T30835] loop4: detected capacity change from 0 to 1024 [ 975.802950][T30838] netlink: 'syz.5.6869': attribute type 1 has an invalid length. [ 976.196184][T30840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6870'. [ 976.656958][T30848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 977.343592][T30844] loop9: detected capacity change from 0 to 256 [ 977.369209][T30844] msdos: Invalid uid '0x00000000ffffffff' [ 977.702886][T30868] loop9: detected capacity change from 0 to 8192 [ 977.772989][T26592] loop9: p1 p2 p3 p4 [ 977.780922][T26592] loop9: p1 size 196608 extends beyond EOD, truncated [ 977.838313][T26592] loop9: p2 size 150994944 extends beyond EOD, truncated [ 977.847248][T26592] loop9: p3 size 66846464 extends beyond EOD, truncated [ 977.856353][T26592] loop9: p4 size 479744 extends beyond EOD, truncated [ 977.883574][T30868] loop9: p1 p2 p3 p4 [ 977.887695][T30868] loop9: p1 size 196608 extends beyond EOD, truncated [ 977.899770][T30868] loop9: p2 size 150994944 extends beyond EOD, truncated [ 977.946613][T30868] loop9: p3 size 66846464 extends beyond EOD, truncated [ 977.957867][T30868] loop9: p4 size 479744 extends beyond EOD, truncated [ 978.087153][T30866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6879'. [ 978.107670][T30885] loop4: detected capacity change from 0 to 512 [ 978.120923][T30885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 978.196779][T26569] udevd[26569]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 978.208420][T26552] udevd[26552]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 978.210530][T26590] udevd[26590]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 978.229534][T26592] udevd[26592]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 978.242028][T30880] loop1: detected capacity change from 0 to 256 [ 978.269332][T30885] EXT4-fs (loop4): 1 truncate cleaned up [ 978.276742][T30885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.291574][T26595] udevd[26595]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 978.302536][T26552] udevd[26552]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 978.305156][T26592] udevd[26592]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 978.323976][T26590] udevd[26590]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 978.365779][T30885] EXT4-fs error (device loop4): mb_free_blocks:2047: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 978.421787][T30885] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.6885: invalid indirect mapped block 4194304 (level 1) [ 978.575093][T27793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.637111][T30901] loop4: detected capacity change from 0 to 1764 [ 978.763197][T30897] loop9: detected capacity change from 0 to 512 [ 978.807702][T30897] FAT-fs (loop9): Directory bread(block 199916) failed [ 978.818043][T30897] FAT-fs (loop9): Directory bread(block 199917) failed [ 978.827109][T30897] FAT-fs (loop9): Directory bread(block 199918) failed [ 978.835417][T30897] FAT-fs (loop9): Directory bread(block 199919) failed [ 978.847656][T30897] FAT-fs (loop9): Directory bread(block 199920) failed [ 978.856331][T30897] FAT-fs (loop9): Directory bread(block 199921) failed [ 978.865229][T30897] FAT-fs (loop9): Directory bread(block 199922) failed [ 978.873424][T30897] FAT-fs (loop9): Directory bread(block 199923) failed [ 978.892524][T30904] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6892'. [ 978.905560][T30904] veth0_to_bond: entered promiscuous mode [ 979.005589][T30912] vlan3: entered promiscuous mode [ 979.016828][T30912] macvtap0: entered promiscuous mode [ 979.154216][T26592] loop5: p1 p2 p3 p4 [ 979.158512][T26592] loop5: p1 size 196608 extends beyond EOD, truncated [ 979.166595][T26592] loop5: p2 size 150994944 extends beyond EOD, truncated [ 979.182181][T26592] loop5: p3 size 66846464 extends beyond EOD, truncated [ 979.190118][T26592] loop5: p4 size 479744 extends beyond EOD, truncated [ 979.201222][T30919] loop5: p1 p2 p3 p4 [ 979.205738][T30919] loop5: p1 size 196608 extends beyond EOD, truncated [ 979.213690][T30919] loop5: p2 size 150994944 extends beyond EOD, truncated [ 979.245219][T30919] loop5: p3 size 66846464 extends beyond EOD, truncated [ 979.265585][T30919] loop5: p4 size 479744 extends beyond EOD, truncated [ 979.432479][T26552] udevd[26552]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 979.444249][T26595] udevd[26595]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 979.520090][T26592] ================================================================== [ 979.528242][T26592] BUG: KCSAN: data-race in __d_drop / fast_dput [ 979.534505][T26592] [ 979.536871][T26592] write to 0xffff88812f5593d0 of 8 bytes by task 3000 on cpu 1: [ 979.544507][T26592] __d_drop+0x14d/0x240 [ 979.548687][T26592] __dentry_kill+0x122/0x460 [ 979.553479][T26592] finish_dput+0x2b/0x200 [ 979.557812][T26592] dput+0x52/0x60 [ 979.561470][T26592] lookup_one_qstr_excl+0x15a/0x250 [ 979.566722][T26592] filename_unlinkat+0x149/0x410 [ 979.571775][T26592] __se_sys_unlink+0x2b/0xe0 [ 979.576553][T26592] __x64_sys_unlink+0x1f/0x30 [ 979.581235][T26592] x64_sys_call+0x2eb6/0x3020 [ 979.585921][T26592] do_syscall_64+0x12c/0x370 [ 979.590688][T26592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.596779][T26592] [ 979.599118][T26592] read to 0xffff88812f5593d0 of 8 bytes by task 26592 on cpu 0: [ 979.606798][T26592] fast_dput+0x5f/0x2c0 [ 979.610991][T26592] dput+0x24/0x60 [ 979.614633][T26592] filename_unlinkat+0x217/0x410 [ 979.619659][T26592] __se_sys_unlink+0x2b/0xe0 [ 979.624251][T26592] __x64_sys_unlink+0x1f/0x30 [ 979.629198][T26592] x64_sys_call+0x2eb6/0x3020 [ 979.633883][T26592] do_syscall_64+0x12c/0x370 [ 979.638497][T26592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.644441][T26592] [ 979.646766][T26592] value changed: 0xffff88823772cb60 -> 0x0000000000000000 [ 979.653869][T26592] [ 979.656198][T26592] Reported by Kernel Concurrency Sanitizer on: [ 979.662370][T26592] CPU: 0 UID: 0 PID: 26592 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 979.672880][T26592] Tainted: [W]=WARN [ 979.676682][T26592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 979.686742][T26592] ================================================================== [ 980.491167][ T28] audit: type=1400 audit(2000000141.918:4807): avc: denied { append } for pid=30939 comm="syz.9.6905" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 980.528636][T30940] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.581456][ T28] audit: type=1400 audit(2000000141.946:4808): avc: denied { write } for pid=30939 comm="syz.9.6905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1