last executing test programs: 6m18.692450362s ago: executing program 32 (id=802): r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x3, 0x40, 0x6, 0x0, 0x0, 0x19206, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0x8, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) 5m56.844502791s ago: executing program 33 (id=1100): r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x37f, 0x148, 0x0, 0x148, 0x190, 0x240, 0x240, 0x190, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr=0x65010102, @multicast2, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x6, 0x0, 0x70}, 0x0, 0x98, 0xe0, 0x0, {0x0, 0xff00000000000000}, [@inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x1, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 5m32.488788805s ago: executing program 2 (id=1219): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000000, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x891, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x6, 0x0, 0x0, 0x0, 0xb, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x7e75, 0x5, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r7, 0x0) close(r7) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4000011, 0xffffffffffffffff, 0x8000000000) 5m30.516005093s ago: executing program 2 (id=1237): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000002b00)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018151f00", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000011000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create1(0x0) epoll_pwait(r3, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000002a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002500)=""/165, 0xa5}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/5, 0x5}, 0x8}], 0x2, 0x45833af92e4b39ff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x30) 5m30.342617812s ago: executing program 2 (id=1240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000700000000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5m30.341933582s ago: executing program 2 (id=1242): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") close_range(0xffffffffffffffff, r0, 0x2) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) semget(0x2, 0xe0515aa7932cd3f6, 0x50b) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, r1}, 0x38) socket$inet(0x2, 0x3, 0x100) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x8000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000010102b00fc020000000000000000000000000001fe8000000000000000000000000000aa670000000000000021"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@nodioread_nolock}, {@errors_continue}, {@nojournal_checksum}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}], [{@uid_gt={'uid>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x0, 0x66, 0x64, 0x65, 0x32, 0x35, 0x66], 0x2d, [0x65, 0x64, 0x37, 0x35], 0x2d, [0x36, 0x30, 0x66, 0x37], 0x2d, [0x30, 0x65, 0x62, 0x39], 0x2d, [0x62, 0x32, 0x36, 0x62, 0x35, 0x31, 0x36, 0x35]}}}, {@permit_directio}]}, 0x1, 0x46e, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey72WYTYzadmP18YDbPMzO78/1m3p55nt0AutZQ9pJE7IiIXyNioFFdvMJQ48/1q+cnb1w9P5nEwsJrfyT5eteunp8sVy3ft72oDKcR6YdJsZHFZs+eOzlRr9fOFPXRuVNvjc6ePffEO6cmTtRO1E6PHzly+NDY00+NP9mRPLO8ru17f2b/3hffuPTy5LFLb/74dRbvjmJ5cx6dMpQl/udCrnXZo53eWMV2NpWT3goDYVV6IiLbXWl+/g9ET9zaeQPxwgeVBgesq+zetKX94vkFYBNLouoIgGqUN/rs+bec7lDTY0O48mzjASjL+3oxNZb05s9Emb6W59tOGoqIY/N/fZ5NsU79EAAAzT6e/Oxof0S8d+Orl7K2x0BElP1B9+Svv+Wvu4oxlMGI+H9E7I6IuyJiT0TcXax7b0Tct8Z4bm//pJfX+JHLytp/zxRjW4vbf2XrLwZ7itrOPP++5Ph0vXaw+J8MR9+WrD62zDa+ff6XT9ota27/ZVO2/bItWMRxubelg25qYm4ib5R2wJWLEft6l8o/uTkSkETE3ojYt7qP3lUWph/7cn+7lVbOfxkdGGda+CJLbz7Lfz5a8i8lzeOT07eNT45ujXrt4Gh5VNzup58/erXd9teUfwdcqTX+Nu3/1lUGk+bx2tnObv9fHv9pf/J6Ps7cX8x7d2Ju7sxYRH9yNK8vmj9+671lvVw/O/6HDyx9/u8u3pPlf39EZAfxAxHxYEQ8VMT+cEQ8EhEHlsnxh+dWzj/Sivb/xYipJa9/N4//lv2/+kLPye+/abf9f7b/D+el4WJOfv1bwVLhZJeL1gDX8r8DAACA/4o0/w58ko7cLKfpyEjjO/x74n9pfWZ27vHjM2+fnmp8V34w+tKyp2ug6A+tT9drY8l88YmN/tHxoq+47C89VPQbf9qzLa+PTM7UpyrOHbrd9jbnf+b3nqqjA9bZtiXnjvff8UCACrSOo6eLqxdeCRcD2Kz8Xhu61wrnf/PvYIBNxv0futdS5/+FlrqxANic3P+hezn/oUul31UdAVAh93/oSmv5Xf86FrZujDCqKWzUnZIXIspCuiHiUVinQtVXJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74OwAA//9CxuaI") 5m29.98474688s ago: executing program 2 (id=1250): r0 = syz_io_uring_setup(0x13fd, &(0x7f0000000040)={0x0, 0x542b, 0x40, 0x3, 0x383}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000001940)={&(0x7f0000001900)={&(0x7f0000001880)="7ede20", 0x3, 0x1, 0x7fffffff, 0x1}, 0x1}, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2012}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000000040)}, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000004c0)={0x0, 0x2, r2, 0x2, 0x80000}) 5m28.648956506s ago: executing program 2 (id=1259): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 5m28.644991337s ago: executing program 34 (id=1259): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 4m0.676938572s ago: executing program 6 (id=2006): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040014c35c66dc1809d3a1e0", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x3, '\x00', 0x0, r0, 0x3, 0x80}, 0x50) 4m0.670000302s ago: executing program 6 (id=2007): r0 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000005200010000000000040000000a003941ef133a9ef9af2fcaf0d30187"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) (async, rerun: 32) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000200)=0x4) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) (async) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) (async, rerun: 64) r8 = gettid() (rerun: 64) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x6600) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffe32, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x80, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}}, 0x80}}, 0x0) 4m0.545244358s ago: executing program 6 (id=2008): r0 = syz_io_uring_setup(0x13fd, &(0x7f0000000040)={0x0, 0x542b, 0x40, 0x3, 0x383}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000001940)={&(0x7f0000001900)={&(0x7f0000001880)="7ede20", 0x3, 0x1, 0x7fffffff, 0x1}, 0x1}, 0x1) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x2012}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}]}, 0x44}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1342, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") unlinkat$binderfs_device(0xffffffffffffff9c, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003c0], 0x0, 0x0, &(0x7f00000003c0)=ANY=[]}, 0x78) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'bridge0\x00', &(0x7f0000002500)=@ethtool_dump={0x19, 0x7, 0x9}}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd7}, 0x10311, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) iopl(0x6) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x8}, {0x0, 0xfffffff6}]}, 0x18, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000004c0)={0x0, 0x2, r2, 0x2, 0x80000}) 3m59.257771683s ago: executing program 6 (id=2012): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580), 0x1, 0x443, &(0x7f00000011c0)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=5,size=1']) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x2) 3m58.590296896s ago: executing program 6 (id=2015): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x440}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 3m58.212624765s ago: executing program 6 (id=2019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) sendmsg$nl_route_sched(r0, 0x0, 0x10) 3m58.189688466s ago: executing program 35 (id=2019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) sendmsg$nl_route_sched(r0, 0x0, 0x10) 1m14.114091015s ago: executing program 5 (id=3250): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x2}, '7&'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x787}}]}]}}]}, 0x54}}, 0x20044085) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m13.188712781s ago: executing program 5 (id=3258): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000000000000040030000000000000000000000000000000000fc02000000000000000000000000000003000600000000000200000007ca6ad10000000000"], 0x80}}, 0x0) 1m12.655425838s ago: executing program 5 (id=3260): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x505, 0x0, 0x0, {0x7, 0x0, 0x28}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0xc0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x6, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m12.501035496s ago: executing program 3 (id=3261): r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x45, [0x0, 0x89ff]}}) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000300)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0xf8}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@tcp={0x0, 0x6, '[}]', 0x14, 0x6, 0x0, @mcast2, @mcast1, {[], {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xe2, 0x3ff, 0x0, 0x7f}}}}}}, 0x4a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801"], 0x0}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEP_LINK_DOWN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf2505000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) 1m12.060873368s ago: executing program 3 (id=3263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000100000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1m11.796750711s ago: executing program 3 (id=3264): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x181602) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x1, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x103840000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x24}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000780)={{r0, &(0x7f0000000400)='/dev/qrtr-tun\x00', 0x0, &(0x7f0000000440)={@align=0xfffffffffffffff9, {0x2, 0x90b4, 0xd, 0x3}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x7}, {[0x10, 0x0, 0xe, 0x10001]}, 0x2, 0x51, &(0x7f0000000500)=""/81}) io_submit(r2, 0x29, &(0x7f0000000840)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x73d, r1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x6, r3, &(0x7f0000000380)="aedf6370a47c9683b18d1477caf3c3efa2a6c0899f74fd47193f923df1498b665ccc4d5e724fec1072951d953e6ab6bd6e0dbd7418529a772215e419f60e96f32f4650aef5a3ab4208309d7ef16ae8886e31ee4591344a06a06be1727fb14abdb4748ebce808469a52e834", 0x0, 0x2, 0x0, 0x1, r3}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022cbd7000fedbdf250100000000000000014100000018001700000010000000077564703a73797a320000000051e87b9f7486f814bbc99f4878042e77e158af780d504de8aa4f47803b0c2c66570b3d5810a9848dcc30d2d17eb35b0dfc0709bd716045902d4533c0a561aa5a8f9272b2161b9b2c5474cd94c3278c229003cee65f184b4b3920e2c50aac51af551ecc98271398db4b4e5627add26c5796aa431bd391d516369ac791b8bffdb81e52f475bb0ec63e57c4803776baa877466b856042c28edf85e5d1cfc0181d000000000000a2da4e4b3bae3b7f705f91ca100f399a19a2bd12e68dadb3699bda4a89"], 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000001000030425bd70000000000000004900", @ANYRES32=r4, @ANYBLOB="4606090000000000240012800b00010067726574617000001400028006000f0000000000060010"], 0x44}, 0x1, 0x0, 0x0, 0x8600}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r10) sendmsg$TIPC_NL_BEARER_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x2c, r11, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r9, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4ec2f1847a7ccdde2f14c652c64f54d42fd68a30f56bebce9c15f9382479abc9a4bffc3bc1fab065cb97ae30f17a320601788389c77707e0728e81b84bed396bd6cff9096cbca61ba27a502c8859c8d734505f6a6cad1d9284bbdf69e909af9a9d1bb7e6356f5c2707d2efed57807e1452f5a2001046656ed5962c4197761d9cc81ca655daf919dec5227e700b732b1013a2a20a5ffaf708b680ba42f91698b5f39b9c03183e2e6d19d30cd298909e31d7c9599a4857b4c0bcfec888d117dd932d6a3ed71400064e3d02321e0f4aefc95b0733b7d2a954551a5a5d30265bc0a56c9b9f192e5a9a8274e7ace3ba605f5548f866c77e9143", @ANYRES16=r11, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x40}, 0x90c20442d5338aee) listen(r8, 0x2) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec08000000006ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 1m11.568507642s ago: executing program 3 (id=3268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="001386dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1m10.504683055s ago: executing program 5 (id=3272): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, 0x0, 0x0) 1m10.328026994s ago: executing program 5 (id=3273): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, @in=@remote, 0x10, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x11}, {@in, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x6, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x2, 0x0, 0xcd}}, 0xf0}}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x3, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x7, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000003, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x8001, 0x10000000, 0x8}, 0x92, 0x6}, [{0x4, 0xe, 0x8, 0xe42, 0x4, 0xec87}, {0x6, 0x40, 0x6, 0x458, 0x400, 0x7}, {0x40, 0xa6, 0x8, 0x0, 0x7, 0xf63}, {0x1, 0x2, 0xfc78, 0x3, 0x4, 0x7fff}, {0x0, 0x3c98, 0x1, 0x7fffffff, 0x9, 0xc}, {0x3, 0x7, 0x3, 0x0, 0x6, 0x4}, {0x1, 0x2, 0x0, 0x51, 0x6, 0x6}, {0xf, 0xfff, 0x9, 0x99, 0x6b2b}, {0x8e73, 0x3f8000, 0x1, 0x4, 0x7, 0x7}, {0x4, 0x3, 0x1, 0x4, 0x0, 0x400}, {0xec25, 0x60, 0xffffff00, 0xb45d, 0x552, 0x39f}, {0x100000, 0xfffff317, 0x2, 0x3, 0x974f, 0x17}, {0x4, 0x7, 0x100, 0x9, 0xfff, 0xffffffff}, {0xfffffff7, 0x101, 0x400, 0x6, 0x40, 0xb}, {0x0, 0x4, 0x5, 0x3, 0x81, 0x2}, {0xb2, 0x4c81440c, 0x8, 0x800, 0x2, 0xd66}, {0x4, 0x2bb, 0x80, 0xa, 0xfffffffa, 0x5}, {0xfffffffe, 0x5b92, 0x7, 0x4, 0x88f5, 0x9}, {0x6, 0xc, 0x200, 0x4, 0xfffffff1, 0x26}, {0x9, 0x56, 0x1, 0xd, 0x5, 0x1}, {0x5, 0x3, 0xc, 0xfffffff7, 0x2}, {0xfffffff7, 0xf9f5, 0x8, 0xfff, 0xe1, 0x2d5e}, {0x6, 0x10001, 0x2, 0xcb, 0x5, 0x4}, {0xe, 0x101, 0x80, 0xd, 0xfffffffc, 0x9}, {0x0, 0xb, 0xfffffff4, 0x9, 0xfff, 0x81}, {0x6, 0x4, 0x9, 0x38f5, 0xe, 0xb4}, {0x2, 0x6, 0x9, 0x3, 0xe5, 0x3800}, {0x9, 0x4, 0x1, 0x101, 0x49a, 0x40}, {0x100, 0xffffffff, 0x80000001, 0x3, 0x12ab, 0xbc}, {0xa4a9, 0x3, 0x9, 0x7, 0x9, 0xb}, {0x7fffffff, 0x4, 0x5, 0x3, 0x7fff, 0xc}, {0x5, 0x9, 0x75, 0xffff8001, 0x9, 0x6}, {0xb0, 0x4, 0xffffffff, 0x6d, 0x81, 0xfffffffa}, {0x100, 0x6, 0xffffffff, 0x0, 0x4, 0x9}, {0x6, 0x9, 0x9, 0x1, 0xffff, 0x2}, {0x800, 0x4, 0xfffffffe, 0x10001, 0x7fffffff, 0x100}, {0xb, 0x2, 0x4, 0xfffffff8, 0x6, 0xfffffff9}, {0x1, 0x9, 0x5, 0x6, 0x84, 0x7}, {0xa, 0x0, 0x909d, 0x1, 0x9}, {0xbe0, 0x3, 0x5, 0x2, 0x3, 0x80000001}, {0x6, 0x0, 0x8001, 0xce8, 0xc7f, 0x10001}, {0xcf4, 0xaad, 0x8, 0x6, 0x1, 0x3}, {0x6, 0x5, 0x5, 0x7, 0x7247, 0x2}, {0x80000000, 0xfe9, 0x32b2, 0x7, 0x5, 0x7ff}, {0x40, 0x9, 0x68, 0x0, 0x2, 0x98a}, {0x7, 0x0, 0x5b02, 0x6, 0x8001, 0x2}, {0x6, 0x4, 0x1ff, 0xd, 0x8, 0xfff}, {0x2, 0x9, 0x800, 0x0, 0xfffffff8, 0x3a}, {0x4, 0x9, 0x9, 0xfff, 0x3, 0xd4f}, {0xb44, 0x8, 0x9, 0x7f, 0x3, 0x3}, {0xc1, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x40, 0x6be, 0x4d1, 0x7, 0x2, 0x7}, {0x1ff, 0xb25, 0x80000003, 0x1, 0xf}, {0x4, 0x6, 0x1, 0x32}, {0xe6e1, 0x5, 0xfffffff9, 0x2, 0x60, 0x1a0}, {0x401, 0x0, 0x8000, 0xffff65ca, 0xffffffc0, 0xf9}, {0xf, 0x2, 0x9, 0xa, 0x3, 0xffffffff}, {0x4, 0x3, 0x9, 0x6, 0x4, 0x7ff}, {0x7ff, 0xfffffffc, 0x15e5a53f, 0x67b, 0x1, 0x4}, {0x4, 0x7, 0x5, 0x10001, 0x8, 0x6}, {0x8f2, 0xfff, 0x6, 0x2, 0xc5, 0xfffffff8}, {0x8000, 0xc1, 0x8, 0x7fff, 0x7fff, 0x400}, {0x2900416, 0x10000, 0xe, 0x9, 0x1000, 0x9}, {0x10, 0xfffffff8, 0x0, 0x4, 0xe, 0x9}, {0x8, 0x8, 0x8000, 0x0, 0xd01, 0x3}, {0x800, 0x3, 0x0, 0x0, 0x4, 0xf87b}, {0x1, 0x1ff, 0x3, 0x3, 0x9, 0x3ff}, {0x7, 0xfffffff6, 0x0, 0xde, 0x3, 0x7}, {0x8, 0xaf00, 0x1, 0x1, 0x8, 0x1}, {0x4, 0x2, 0x9, 0xfd, 0x0, 0x7}, {0x0, 0x6, 0x8, 0xc, 0xf15f10b, 0x6}, {0x4d, 0x6, 0x8, 0x7, 0xe582, 0x6}, {0x4, 0x0, 0x40, 0x8, 0x0, 0xffff8000}, {0x9, 0x4, 0x6, 0x6, 0xa, 0x8}, {0x3, 0x401, 0x6, 0xe, 0x1ff000, 0x1}, {0xfffffb2a, 0x8, 0x5, 0xffff, 0x2, 0xffffff00}, {0x400, 0x6, 0x3, 0x9a, 0x1, 0x2000}, {0x5, 0x2, 0x81, 0xf, 0x5, 0x8}, {0x1, 0x4241, 0xfffffff8, 0x9, 0x400, 0xebed}, {0x5, 0x1ed, 0x2, 0x8, 0x707, 0xfc1a}, {0x1d, 0x33, 0xfffffff8, 0x2, 0x6, 0x9}, {0x9b, 0x6, 0x3a438d3b, 0x8000, 0x4}, {0x9, 0x81, 0x7fff, 0x800, 0x9}, {0x10, 0x4, 0x1, 0x622e, 0xd8, 0x9}, {0x33, 0x7, 0x9, 0x6, 0x1e, 0xd}, {0xd2, 0x7, 0x6, 0x2, 0x7, 0x1000}, {0x3, 0x0, 0x7, 0xab7, 0x5, 0x5}, {0xb, 0x7, 0xc, 0x1, 0x6, 0x80000000}, {0x3, 0x1, 0x2, 0x8, 0x2c, 0x10}, {0x50a49641, 0x2, 0x4, 0xef1, 0x8, 0x9a90}, {0x5e300141, 0x0, 0x7, 0x93, 0xa, 0x6e}, {0x36, 0x5, 0x6de, 0x80000001, 0x4}, {0x8, 0x2, 0x5, 0x4, 0x0, 0x57d}, {0x3, 0x6, 0x7fc, 0x6, 0x7, 0x8}, {0x5000, 0x7, 0x0, 0x4, 0x6, 0x4}, {0x4, 0x7fffffff, 0x7fff, 0xfffffffe, 0x100000, 0x5}, {0x7d, 0x343, 0x6, 0x1, 0xa19a, 0x5}, {0x1, 0x4, 0x962, 0xd, 0x1, 0x8}, {0x1a4, 0x2, 0xffff, 0xa, 0x0, 0x1}, {0x800, 0x81, 0x6, 0x3, 0xfffffff9, 0x8001}, {0x8000, 0x3, 0x0, 0x1, 0x2, 0x8}, {0x101, 0x4, 0x7f, 0x3b24, 0xc16, 0x1ff}, {0x80, 0x8, 0x3, 0x2, 0x34c, 0x2}, {0x9, 0x6, 0x2, 0x88, 0x4, 0x3ff}, {0x6, 0x4, 0xf, 0x5, 0xfffff157, 0x7}, {0x400000, 0xbefa, 0x9, 0x6, 0x4, 0xffffffff}, {0x2fd, 0x4, 0x8, 0x3, 0x6, 0x1}, {0xa1, 0x1, 0xd, 0x7, 0x4, 0xe1}, {0x6, 0x101, 0x7, 0x3, 0x0, 0x3}, {0x3, 0x6, 0x7, 0x9}, {0x2, 0xc, 0x23c, 0x8, 0x12, 0x80}, {0x0, 0x292, 0x2, 0x8, 0xffff, 0x2}, {0x9, 0x0, 0x3, 0x4, 0x40, 0xffffffff}, {0x80000000, 0x6f95, 0x23, 0xf9, 0x8, 0x7fff}, {0x5, 0x19de554e, 0xfffff4b2, 0xb97, 0x1, 0x7}, {0x9, 0x0, 0x521, 0x5, 0x3}, {0xffff, 0x4, 0xfb1, 0x3, 0x0, 0xfffffff8}, {0x6, 0x19c1, 0x7ff, 0xa, 0xda8b, 0x9b}, {0x3, 0x8, 0x7fff, 0x6, 0x7, 0x8}, {0x80, 0x5, 0x48, 0xce6, 0x3, 0x4}, {0x9, 0x3ae2, 0x1, 0x7, 0x7, 0xfff}, {0xb5, 0x7f, 0xffffacad, 0x0, 0x4}, {0x3, 0x0, 0x7455, 0xe, 0x8000, 0x4}, {0x8, 0x8, 0x10, 0x0, 0x0, 0x3}, {0x2, 0x8, 0x0, 0x5, 0x1ff, 0x6}, {0xd, 0x4, 0x73f57df3, 0x8, 0xffffff61, 0x8}, {0x7, 0x8, 0x5, 0x5, 0xb, 0x40}, {0x6f, 0x0, 0xffff, 0x81, 0xc, 0x10000}], [{0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {}, {}, {}, {0x5}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x5}, {}, {0x2}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x5}, {0x5}, {0x7, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x5}, {0x5}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {}, {0x2}, {0x1}, {0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "74016aff130000fd"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x4}]}, 0x70}, 0x1, 0x7}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x18182) ioctl$BLKRAGET(r4, 0x1263, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') (async) link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') ioctl$int_in(r5, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m10.327229754s ago: executing program 3 (id=3274): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYBLOB="5d7cbdcab7292760e27eade3dbe314b6bf9150cd10ce7fbc46717c3c41d61b734734a7d0716a80bd39d82b5933bc41ea33f972a8668c7d5622d9bebfa5800a58319e25274b46461bc41ed571b7b476060081a73b886587ad3b81454c09344675a595dbe765426676f7f4a8e6b1d53653092ae5186e36332fb9b0e21602adb04ff1e69fb842d6c0e86808aa68fbbe8987a1e5e63b41af616315535307f96516fb426a45686078", @ANYRES8=0x0], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4838, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x20) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000000)=r4, 0x4) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) fstat(r1, &(0x7f0000000800)) fstat(r0, &(0x7f0000000700)) fstat(r0, &(0x7f0000000580)) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) socket$tipc(0x1e, 0x5, 0x0) r7 = io_uring_setup(0x1c21, &(0x7f0000000180)={0x0, 0x6447, 0x8000, 0x0, 0xd4, 0x0, r6}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x20c4052, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r4, @ANYBLOB="2c7766646e6f172f9bde49abbdb34ecf752a0118c49b1a43800233064353be164f39f6c41d850cd9b8ae0c502b", @ANYRESHEX=r7, @ANYBLOB=',\x00']) fstat(r0, &(0x7f0000000600)) fstat(0xffffffffffffffff, &(0x7f0000000680)) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x48, &(0x7f0000000240)=ANY=[]) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x4, 0x0, 0x0, 0xff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x117b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x3, 0xc2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180), 0x200000000000000, 0x1, 0x1}}, 0x40) 1m9.528067694s ago: executing program 3 (id=3277): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000200000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 1m9.352595923s ago: executing program 5 (id=3281): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mount$9p_unix(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) (async, rerun: 64) unshare(0x26020480) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x10, 0x1, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r0, r1, 0x1f, 0x0, r1, @void, @value=r0, @void, @void, r2}, 0x20) unshare(0x2040600) (async) r3 = syz_io_uring_setup(0x10ca, &(0x7f00000000c0)={0x0, 0xba82, 0x80, 0x2, 0x3c9}, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x1454, &(0x7f00000001c0)={0x0, 0x183e, 0x20, 0x3, 0x30e, 0x0, r3}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r5 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000500)=0x1) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x64, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x14a, 0x0, 0x1, [@nested={0x45, 0xe5, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0xae}, @generic="e758c0ddafe1d1957ec75e3d0bee1867823a4e8413a7548234a07fe92527a057306e6f2f871fd8ea95f0ccc5681dfce3712096a99a6e7757d2"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 53.949594861s ago: executing program 36 (id=3281): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) mount$9p_unix(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x301200a, 0x0) (async, rerun: 64) unshare(0x26020480) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x10, 0x1, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r0, r1, 0x1f, 0x0, r1, @void, @value=r0, @void, @void, r2}, 0x20) unshare(0x2040600) (async) r3 = syz_io_uring_setup(0x10ca, &(0x7f00000000c0)={0x0, 0xba82, 0x80, 0x2, 0x3c9}, 0x0, &(0x7f0000000140)) syz_io_uring_setup(0x1454, &(0x7f00000001c0)={0x0, 0x183e, 0x20, 0x3, 0x30e, 0x0, r3}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r5 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000500)=0x1) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)={0x64, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x14a, 0x0, 0x1, [@nested={0x45, 0xe5, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0xae}, @generic="e758c0ddafe1d1957ec75e3d0bee1867823a4e8413a7548234a07fe92527a057306e6f2f871fd8ea95f0ccc5681dfce3712096a99a6e7757d2"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1, 0x4}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) (async) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 53.617094667s ago: executing program 37 (id=3277): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000200000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 48.803285887s ago: executing program 4 (id=3445): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newsa={0x118, 0x1a, 0x7, 0x8, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0xf0ffffffffffffff, 0x0, 0x1}, {0x0, 0x200000, 0x9}, {0x1a7761c0, 0x0, 0x7f}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x71}, [@coaddr={0x14, 0xe, @in=@dev={0xac, 0x14, 0x14, 0xd}}, @mark={0xc, 0x15, {0x350759, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffffb}]}, 0x118}}, 0x4000040) 48.74717815s ago: executing program 4 (id=3447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[], 0xffdd) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffff7ffffd, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x4}) 48.650438815s ago: executing program 4 (id=3449): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x8003, &(0x7f0000000040)=0x1, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x20000) r2 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0xba2b, 0x8, 0x0, 0x87}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x200012, &(0x7f0000000600), 0x1, 0x5a4, &(0x7f0000000640)="$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") ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x10, 0x4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x0, 0x21}, 0x20) 48.517463872s ago: executing program 4 (id=3451): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400003f000000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 48.404412197s ago: executing program 4 (id=3452): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xcf}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 48.256432254s ago: executing program 4 (id=3455): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000002240)="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", 0xfffffdef, 0x4004085, 0x0, 0x49) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc0049364, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000100)=0x730) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 32.861467082s ago: executing program 38 (id=3455): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000002240)="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", 0xfffffdef, 0x4004085, 0x0, 0x49) setsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) r9 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc0049364, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000000100)=0x730) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) close_range(r11, 0xffffffffffffffff, 0x0) 4.785594052s ago: executing program 9 (id=3793): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000030024000000240000000800000004000000000000070000000003000000000000080100000000000000000000030200000000002e2e"], 0x0, 0x44}, 0x28) 4.784894752s ago: executing program 9 (id=3794): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@grpjquota}, {@errors_continue}, {@noblock_validity}]}, 0x1, 0x4ac, &(0x7f0000000680)="$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") 4.684524177s ago: executing program 9 (id=3796): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.647549768s ago: executing program 9 (id=3797): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000c0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 4.62845261s ago: executing program 0 (id=3799): unshare(0x6a040000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r2 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200), &(0x7f0000001500)=@tcp=r2}, 0x20) close(r2) mlockall(0x2) mmap(&(0x7f0000361000/0x2000)=nil, 0x2000, 0x300000a, 0x769f00b363895638, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="856b1200ff00bbbbbbbbbbbb86dd60381f3400442ffc000000000100000000000000000000ff020000000000000000000000000001042088a80000000000000800000086dd080088be00000000100000000100000000000000080022ebfffffffd20000000020000000000000000000000080065580000000000"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x8a9eb000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000080)='pimreg1\x00'}) 3.792300151s ago: executing program 0 (id=3807): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.726365355s ago: executing program 0 (id=3809): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f00000003c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x12bc, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x10, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x33, 0x204, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x5, 0x1000, "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"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x43, 0x668c, [0x1, 0x0]}}]}, @dstopts={0x2f, 0x24, '\x00', [@pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0xa58b}}, @generic={0xd, 0x78, "17f2ccd12eaa0b21643bacdeeb38571447f4c22bb46df902e341bcaad12863fc152e47e6a256784799020396a59e0cc968ca387392e5688470cd49f31609cc9d4314b9b84bbf1feb25955ee1ffa106b9de67e052c11f640785837a083885cc88c0474c8867ecf69fa481526bd0b037527d88c83b766454d7"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x2, [0x3, 0x9, 0xc, 0x7f]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xfc, 0x7, [0x2, 0x6c2, 0x3, 0xfffffffffffffffe, 0x8, 0x3, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1}, @generic={0xe, 0x13, "10534761dee7d9e903ffbe1e9e868776ff9b47"}]}, @dstopts={0x4b, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @calipso={0x7, 0x18, {0x1, 0x4, 0x2, 0x1ff, [0x9, 0x60]}}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @hopopts={0x3b, 0x12, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0x8b, "135eb83749820032e6fc93ab6dbf7ac4451ba2e49e38a2fc9b6be830fb959830bf0a12f9f5606c3e3d932f94f8c8cfbc45ac533a7b0dfeddc2d90ef1e5c3079162e23624116c06bd573b5c8e9982a65a1ac163b32e7a7add54a22709abe91df32837c3f5c2b42af4aab83b8bf2d50d3c8dd7cb0b1c5a81f85097a5c8ee55af8abec9c245eec4716c325192"}]}, @fragment={0x29, 0x0, 0x5, 0x0, 0x0, 0xd, 0x67}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x12e4) 3.725686745s ago: executing program 9 (id=3810): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffc, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8005, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x3000000, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x87c, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x6, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x7}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x8, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x1ff, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8081, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x0, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x26, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) 3.625100649s ago: executing program 9 (id=3811): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000000, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r5, 0x6, 0x24, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x891, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x32, 0x6, 0x0, 0x0, 0x0, 0xb, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_config_ext={0xffffffffffffffff, 0x5}, 0x7e75, 0x5, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r8, 0x0) close(r8) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x4000011, 0xffffffffffffffff, 0x8000000000) 3.624169009s ago: executing program 0 (id=3812): r0 = socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcd\v\x00\x00\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000500), 0x3) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000980)={r5, 0x6, 0xff, 0x8, 0x9, 0x8001, 0x3ff, 0x3245857d, {0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x10000, 0xffffff62, 0x2, 0x5, 0x1}}, &(0x7f0000000300)=0xb0) getpriority(0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r5, 0xb7, "f53e79780e731ba0ddf54eff5062e4e965b01dcb55baeaf9b3fd5d49d51ae618ede34a0f85eee45d7704db2ec66037f540c2886feb793b4ed79a52bda2245cde73d7ee233f5572b10590a81f7462c563e2ca77086c773f2c10cb1f34776e35aa115e1d1b9d09627c1c53e72250ec9a072852db7b0f1cb35d6a312e4f9db3399769d2cd96204a4124e91c0e71f4e769c16feae891f1f9cb5dc3495b066c4484b2fd99bd9f2b99b947a2c995617f9b92f16750e13e7a5fa7"}, &(0x7f0000000340)=0xbf) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000440)={r5, 0xb7, "f53e79780e731ba0ddf54eff5062e4e965b01dcb55baeaf9b3fd5d49d51ae618ede34a0f85eee45d7704db2ec66037f540c2886feb793b4ed79a52bda2245cde73d7ee233f5572b10590a81f7462c563e2ca77086c773f2c10cb1f34776e35aa115e1d1b9d09627c1c53e72250ec9a072852db7b0f1cb35d6a312e4f9db3399769d2cd96204a4124e91c0e71f4e769c16feae891f1f9cb5dc3495b066c4484b2fd99bd9f2b99b947a2c995617f9b92f16750e13e7a5fa7"}, &(0x7f0000000340)=0xbf) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r7, 0x8917, 0x0) mq_notify(r2, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000140)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000080)="ce", 0xff00) (async) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000140)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000080)="ce", 0xff00) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x8000, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r6, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x9}, &(0x7f0000000600)=0x90) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r10, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="433939f1eca1"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x480d0) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r10, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="433939f1eca1"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x480d0) 2.758326093s ago: executing program 7 (id=3816): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x38f9, 0x0) fcntl$setstatus(r3, 0x4, 0x42c00) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8094) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local, @random="000000113aed", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x40, 0x3a, 0xff, @private1, @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x60, '\x00', {0x7, 0x6, "cadaf7", 0x0, 0x2f, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0xb3, 0x0, 0x4, 0x0, 0x4, 0x10, 0x8}], "95f2ea5eb6118fc0"}}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) fcntl$setstatus(r3, 0x4, 0x2400) write(r1, &(0x7f0000000040), 0xffffff4a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) 2.258051558s ago: executing program 8 (id=3819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.219695979s ago: executing program 8 (id=3820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, 0x0, &(0x7f0000000040)) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f00000000c0)={0x4, 0x3, 0x4}) 2.050590518s ago: executing program 8 (id=3821): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000c0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) perf_event_open(&(0x7f00000012c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x5}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7fffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) 1.825606739s ago: executing program 0 (id=3823): socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1ff}, &(0x7f0000000140)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") setresuid(0x0, 0xee00, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r6 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) 1.80561638s ago: executing program 7 (id=3824): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x40003, 0x310}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) (async) io_uring_enter(r0, 0xdb4, 0xd44a, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0xfffffffffffffffe, r0, 0x33, {0x5, 0x10001}, 0x6}, 0x1) (async) r3 = socket(0x840000000002, 0x801, 0x100) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r4, &(0x7f0000000480)=""/61, 0x3d, 0x5) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000040)=0x100, 0x2) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) (async) close(0x3) 1.705584155s ago: executing program 7 (id=3825): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x230002, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r8, r7, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x80044940, &(0x7f00000010c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r13, @ANYRES64=r11, @ANYRES16=r10, @ANYRES16=r13, @ANYRES64=r11, @ANYRES16=r12, @ANYRES16, @ANYBLOB="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", @ANYRES32, @ANYRES32=r9], 0x5, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000440)={{r2}, r11, 0x8, @unused=[0xffffffffffffff70, 0x2, 0x7fffffffffffffff, 0xd4c], @subvolid=0x8}) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) rename(&(0x7f0000000380)='./cgroup\x00', &(0x7f0000000400)='./file1/file4/file5\x00') 1.332846314s ago: executing program 1 (id=3826): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000010b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.332531093s ago: executing program 7 (id=3827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000070000000000000000711236000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.265789007s ago: executing program 1 (id=3828): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f00000003c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x11e4, 0x6, 0x0, @empty, @mcast1, {[@srh={0x87, 0x6, 0x4, 0x3, 0x2, 0x10, 0x2, [@mcast2, @private1, @empty]}, @dstopts={0x33, 0x204, '\x00', [@ra={0x5, 0x2, 0x8}, @generic={0x5, 0x1000, "86e9ab00efea4e2a4d749271b195e711cf866999488a79b4052f8e7bb1570d86b18c94cfa40d037cf7929615f9093575755b246f7eb40021f7ae1d12cb44668deee9e6617f78cec5b9e486ef5dc79cc2fd88536515b38268ad7df88a3663397bc63bf355ff40ff804423e04a81a4ec3c82e6be78287a2fb1de93808eed07967f87d0badba44ca1230cccb6fe68eee0e454c71b02deb6c1aa24a6f3b4df4e631986709f21b832dc9511957cd6a9f200ec2d705d8acbd17c9e106aa9035a7e4e9a7b550f387a327205aff3369e0166660275fbcc5271209f2471072c08062cd515e0631fefff4c61f310a47a260fea4ed1bd2ae456403c94919703f728c9646f472d36532da8e7e3823ac38f6b1ca7a14ac9eb3b162d4b078f73acea1ec308e6e77c7c33157c165c23422613d88acef7f7691d4059bb885cabae7e78c1057735b4cc9e4b14a7897349ec0678e587f0737e4602bc50f4ceacf892d39ec2bb847ce65fbae2d8dcbcada07409248e66151154f28d50ae12058326b0a3f8e2e6e11aa604ff05236fc68dc8fb6ce4188b7c551f173d2745cc0f66602de5345cb901432e531813b9b9083ac92f5717a504363e3b40f3d41fd83a65bcf217da7d24c0ba26f9813a0edfb55e949336bd20031907d27c7b5dca2379db642998d9106e85ce1276bdeceae76a294b614cc4fe92eb6ac4dc55fa51c25a61227aee160af4daca64be04975bcfdec578eda21d511326ec47b6ccd1c5a4e5500818f38b044c1f325cfd51b9d5cb03f5b28debf6a179cb340d9d5f1c8fdfe05fdb47bb5561e6f83f297e79875c2d87e94f333499be403a941007fad52e649efd1852e79febd9f255f968f103ac3a43f8fa6c25454f58a2964b6dc9542a625571b3cf0285d6e5749cc3e0875cf5bb15827bb846b8f1eb1c569001286f84d870e78577187faf5cf10a4408fd9ea6be9bd52045b4d4912456c340b7a77d296d3c70e84727e14e083eb105773448d45fd7bba9e0d3615c2110fc3c0db7fa62890e673d2813c4ab289a998fa336570217c49de730df9641fe4e6a22da92bfcba0a8154ef15400a34cf605f1357b77b2839ef072b8f6c4c0fcf5c7f8d41b8e632d4b7cd6e297a578cf61c1689cc6054bf816eb00fb4f918c6bb222a758c9a42af56a2866b9baf4fdcd4ee01571bd4f1bdc40d46f80c1e1644b34cafc5362cfc898c21980532a5c6223b082c2475b277d16472137dbe152bb937b3d1ee5a30830f842d36ba6564308573f8912c8a0ded041bf79b3dae3db0fa4dd6b05e021e1187d18c030f93108be6921d0232e4d3d170e4bbad48bf0fd06a0d0705046c54d93746b9367f3e3778f15a03d23fb998059e51adce5f16cb647631a93a492c8e35ad9e3fd6b4dd8b6483d3cb7013b13db6a2817d762aa0c2b50277ebab0ccca7c24127d25cbcd643c5042427dbe3aed4b78d3db7244a509fa05d98a3246e40a9a4fede85be3899374e980b61cc07a0e296d188be00f0ca0b8a991d7343de3fa9028c5d47b1498d45f001239c5996445b38b951fb58ab27db887e83713bd6b6c0e11763d634e5e96cbd63f16998800eabe9ea65e3b0723717b6f890ff7398e1821cb6366503a2a67e69edbc5d83a709e79d334edf461579df7bdd38c4d2772e430beb1a09ac06e2f44c108e306e97e677e0f9f6667f36592f048f9fd32d81d047ca1b50b630cbb2adbd7f9f5cad842497188d76d65ff8c3833cf32acecaaed4fc4e3af56ceace877429cbcffdd742ceebe9f705b5eb6b206c9a26594ccb92aab97b3da109c4e7a29bc884132c2c3ae6b713abfe79e6b80a1f661a606823565b816b8b544c3ba6c865803448b90aa7b2ddefa26a9923bb6ebef95fa7df329787471b27c80c90923d14be1442a66d8743bfda7ed63bcabf42e165e4e7c5c9f2b24105434aa6da7deb321047eee294938e21f92b066b01c452356c8cb070e6da38f4debea22341e9ec9e94bd14a7794ff94641ae24e664b89bcf35151fd6c310414c96e3d5d54ae1b4b9ac50cb4a1bee4c1ff0dfe85101a81509490f5d3df5a4c4e2f17d1b8e6bb1dc1f513f97cbf7934448192e9d7433fee0ee66e523714af7c4a7a6acbabd90c56d0408b0fbcbfb44bcc2005a2280aa88fc386e6792704be960d073bb7308c57e7bac533c335b8fb0667c2a5ff94e5273f78305d59b2830988fbffe6a5524f914ff7310c02e4297ecee611fcd3912ab52622cebb1dd72f22735e88b8dd2414e0136d332dd1b17e2f3c53df9ac954e373154f21735fffda33a3f05f0f25132e8910317f58a0cc3a978d779de430a6ef12b1d9b9fb8fb1340d53d3310c7b0c4939afb90cd67fe7c7897ccdfc6677cb3141be56737a2205885b8f8fbc2aee5d63ff1fe8bc068b1797d076b79f5f8df3e7062bd4d383fd1f710c2af2d3754a62d46eb14d26d4a68f5be0450bedd5760cbf0a2c99317f23f0b54e925610e5f939116ea7d5adc1332b71844ef51dae57c00c30a94d8d14175ce331997b8ad2a63ce978d8d4848fca80118325141ca6a21f24f2ead803bf30f60ed5ff830878b163a1a1521a4f2a52238ac553fa84d6530b51dbca82c763b8ee8e16cd92c9c153a23d122c68be8abbfb4b5b1131fef8143cdac6e7dd0f98c29d6ba8dad407b9aa66a35e9dd2d762a522c2889f142a1ef7c47eae2b0792265e2301a04fa4305228f3605b9909dcfd861f5baf3a31ce58b50d4700259f4f0654721140feed8079e740d554120a37b7a489defc968c37aa8dab09572e36470b83e8b6c3f4870cd309fa9bc6ba4dd951712668aaee498584dbfb7e19910715f2dbb5fdff6f93f6d8f7aa2a5ed315e402c99a85b4e2f670f23360849a2a9b27febfa05c759818635b0cab6e287c441399c9b81ac7f398888958b6576bc96d657a63a9db5dd1552bed5f89da42b4e0ecfc3bef6f431a8115f14ff4a28faf3888a26167d20610cd6450812c17a7ac0b0ed61f78a3d9e2ee986be95d4acdd6b34f38b1c0b9e169186db629a194c280ad10d3ce7a99720f9d79064d908ee2d6cd2f3114282b4b849efbcf714656cea55c13950a88a1d08661a004e352a9877d68c5f9d5b642cf0ec2eaac7ccaee5b6e58cd21b8d2a14e93dd884acdcab4eaa3337e97b77fbd81ecf69c5dbdbb341a89ad8ee7d8be7f443a916b3c7af80d4c9f73486902a533bc7e2056009125352dd29ede94daa33e79cc6cfa6ea329ece9b4468f070851f614449e215f50965fa483e7a1b3165670d32d3877f14ff3b29afc4fc710b93bc444bac70ed3eb2c2409b8ef410b09be8a2068be2ba1f91f9307dbe55f0fecf03e01992a660f2a606249655cfabccdd3ec21fb2e7cbc108e5dc1f53920253203a93c556dc03ea8d3d623a15a4319b9c343dff685bf10d54d937f9b836c40c9dd5098f518152b69ef31e0fc26f882549fee7e4509744edac22220516cc0cc83999f6f624f22f4a62165d6f03cf280f4201253000cbbfee85791d6387df18fbe237a7b229b9632b0712851bd7b9623b979085c95161493223c6a5f211cd3ed0ad95ecfe86be49430db54a7567b71cf885e556eee4c780b0dd8265acd22a53207ece33c674ce6e1ae797efef3ecfe3490e64d8ca07c49ae0a59ee8ddacaf3249bcc19655b390b81eceaba6de7d6a1383621e6b38e3f4ce9ce6a46b610cee21cc106bdfab35f97234c247d661cc0e829aa72a520f80a1d996faffb8de48d5bb95c2a4985395f8988687eb6da0509d2eadd4dcb9dd5def619f4ff3e9f9006d5a6c39420153422731e99b08f475f8780a73039206a190b09641f0c7fe11985c859e927a5fe4caa59f67bf26ace2c5f43e0442773825efbba0c51f1ee3b8a3f75a441ae027b6c6ec3e49f7c1a12834851c00a57968a199ca2e4c33e53ff1fecacab4ce4c48cfa90e685da780a0fbc35b1de76aca9e530896fc7e7d962d10f1b754686cb2d6331d8f8f5d6fc3494b39a435e05a83a771aef96b4ac636321327183b5b44d673a833dda066a3f74773a69b1cbe21b1154f7c7768579f93759e0303fa3de6ade64d3e43fdd0f04981955ef63bcc000808966adcd3b4c390d32adacc7f07ba086e9bf196a6d2fce537e7486407110cdfe76bdb050d97c1a19b329cc198b25a2918665e3b2e2451908f68fd212df654db589d460c36d3d2db76b2dbf966c986e3bba947f1a34c58256e43d1341962dd648a12cc8676984d9b460084c8475e4ee64c8ef1e3a63df28158f96cd582f67858df9012b7e983233fbb596ef891b9d5af08ba22ec80bd3f41f5025176e014a3a620a966fdfc148fc995b7c7d013577151b0c35537d15e84cb0520e029c6967981e2e70ecd7e14d67d26c12a52902817f245d12b0224625d5b4209dc8953d2fbcaafd5097d0fc42d49f95940e57bca441eafabfdb5ca660cea18dd55200c80234d9ccb04cf04db6355e653bfa226aa9a33de7d64d8f7cb4ca37011fabe058d7c92d276608c875c71e5b2d4867abdb3e29335ab0c9313dc436870089cb0550ad0b5620c6b1cd814c8ccf19c572efd4e6224868e96b831091bb94d42b15e940df3d8f33c5b11989e3c00f3b7199cd9dc1765b8101b651cfe83ab3b969da3662c2af8c39a7e6382e631dc8a6966c741bc3889ac21b74491849c17a5b3d1696b954bec40996ab93e71853d539d5ee715828f039aeb5ef655ab4b3cbc5babf5d465cea987908ef5fcf07d7883a9184a6dd176a148b9c33d1775e677a55b56365335a170a3dfab495e58578d4d30d4a73e221f449a48e371dab744de45bca46eccd684e261b832ea34380c3a0b0a84a9986932f980aa4a941c64aeac911ff7e582713e41a57d76c013bdf17ec6973a26094a53f03b064400f32b43b969697fa328ef6507d2a21264fab36fb906831c86ee3bb8b6f2a04068fdd85e4a52509282fafd466acae16b6a6cf499fee4180f30664e165274e4d2f1f4958373e83c1b20bdd6bbfec1931528fcee901eddc8683665c055435f11d5ac87e486c145778a84bd96979126f22dfe18745012da71bd3832f2890795989b1e058696e37134d17849e2e709265771c59e9336814d3123f354134c1b3889842533ef81c661e08eab30e62a56315b61bcc03aa5a1d10453e7f038e4aa3ac6bc2c069d9a4c8faea7b4bbe1d84fedf146df966a80ea861d9cc7b64e3845b5b6e01448c903015aeb344b4001fb25d08f77c8a8e2e1d57dbb62980daa737412c07f9b3261194388a3208df9051503c5448353d510753d02aa5eeb7d7cfe14a3d067dccaf79d88865bb3190711794582076f4544612e449e11f2b93d852114e83fca6335a9a81a00dec614cdd2e0e8c8d5716a4e667b46587ea6d8d4a079e199de2638f5304710277a78bd414675b74fca3ebdb140a1885d9c9687c31fcb1e2fbdba5ef7343d9d658bc0414626cb7c33e0ba23ac41879aaa9ad1ab445148af1941bc8ec4124e7227eae49a1f8f1c0fb5b6ed071b65cc0c2fd8a7c067697fd677e8a003316c524b55a27dcf8d4c253543a58ffaad8bcafde9de85bd373ae5632b4cf79c8ad1a73d363213612d84f7bfd634bcdd14b63196ba7325922cb6a333dfa3cc9f3e9f6a8730c3f1c5ddaf2b1753ce19ddf399ee66745d4a6ea01849af4ca8b65e0b19febaf9b7092bb2026f6fcce6caac14c72198831b054b723a0af9ffccab7bb9e30dcf549607852a6bc6d6825f0fde2127287eb13b04df6f21d31bef1ce66495921fd4afc821dfb849a85c93bc3320fc64f95da343f166f8fa0d786790233c861f8b03d8e02f8175197a960f8"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x43, 0x668c, [0x1, 0x0]}}]}, @dstopts={0x2f, 0x24, '\x00', [@pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0xa58b}}, @generic={0xd, 0x78, "17f2ccd12eaa0b21643bacdeeb38571447f4c22bb46df902e341bcaad12863fc152e47e6a256784799020396a59e0cc968ca387392e5688470cd49f31609cc9d4314b9b84bbf1feb25955ee1ffa106b9de67e052c11f640785837a083885cc88c0474c8867ecf69fa481526bd0b037527d88c83b766454d7"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x2, [0x3, 0x9, 0xc, 0x7f]}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xfc, 0x7, [0x2, 0x6c2, 0x3, 0xfffffffffffffffe, 0x8, 0x3, 0x7fffffffffffffff]}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @mcast1}, @generic={0xe, 0x13, "10534761dee7d9e903ffbe1e9e868776ff9b47"}]}, @srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @fragment={0x29, 0x0, 0x5, 0x0, 0x0, 0xd, 0x67}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x120c) 1.19629029s ago: executing program 7 (id=3829): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000009c0), 0x11, 0x56b, &(0x7f0000000440)="$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") socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc8}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) mkdir(&(0x7f0000000140)='./control\x00', 0x8) acct(&(0x7f0000000000)='./control\x00') rmdir(&(0x7f0000000280)='./control\x00') mknodat$loop(r0, 0x0, 0x6004, 0x0) 1.045405328s ago: executing program 1 (id=3830): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x2, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0d6bb4ee2dbd89da573425576ea", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 772.939492ms ago: executing program 1 (id=3831): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0x3e, {{0xa, 0x4e22, 0x2, @empty, 0x800}}, 0x1}, 0x90) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x7ff, @empty, 0x9}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 1) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 491.173256ms ago: executing program 8 (id=3832): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = inotify_init() fgetxattr(r1, &(0x7f0000000040)=@random={'btrfs.', '$\x00'}, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket(0x2, 0x3, 0xff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcefffff0000000004"], 0x0}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001", @ANYRES16=r0, @ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="c84b5555095fdaa243562267914cf465c4b973ba24c4a12b529e35eb65197b6535e62c0121c83ea8fcd8ff45b99dbe5d1e2b491656ba58d932db24a739bb8af1d9aff39753c498cb0bd129f6267d3e0bac6200"/92, @ANYRES32=0x0, @ANYRES64=0x0, @ANYRES8=r4, @ANYBLOB="6571ca44037bfdc7ec022f6a24f3a6a25296b037aa97f215cf7fa349e20efed9a01a1456e73c2e7187297d4ead4dc06de76320cc999135879a1508f9bcacfae85b714b4c2185b9d9924839ca4e19fb92d4ed780390cf979f4ae6573f25c279e28ac08bb16d42948b669d2820e9ab3499df70f2ae995390bf8c2421e27f6c211c3e8b35c723b7b6031fe9cc64f4cb4c1cc75d55", @ANYRESDEC=r0], 0x0, 0x66, 0x0, 0x1, 0x800}, 0xfffffffffffffff4) (async) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x20, 0x8, 0xc1}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r4}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) close(r6) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000000000000000000070000000500130005000000140008"], 0x30}}, 0x2) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) (async) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r14, 0x25, 0x2}, 0x14) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x5c}}, 0x0) 433.795549ms ago: executing program 1 (id=3833): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="900000001000370400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8b04040000000000700012800b00010067656e65766500006000028005000400010000001400079ffe"], 0x90}}, 0x0) 372.701021ms ago: executing program 8 (id=3834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_socket_connect_nvme_tcp() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x60, {0x2, 0x4e20, @rand_addr=0x64010101}, 'batadv0\x00'}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @local, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2c10", 0x2}, {&(0x7f0000000240)="466f7e6133690b92ced63423e65920a733aa2d1d00d1700bc5140a149285e6f85dd6f21ace58b2b64e332c83bd3e8e359218684aeafc21656df230a02f0b44621efbc64bec7d1bcb76ef0e610accabedc37fd00e85d571e68022d2cb26fcec3cb22dfae812a6ace66faecd4c3f0f39b05de57847ba8334ab7e7f962635aaa5b23e376fec0bc72b4fcc8aa87cba7b", 0x8e}], 0x2, 0x0, 0x0, 0x2c}, 0x44804) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/23], 0x50) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff10010000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9800000000000056080000000018008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfefffffffffff, 0xffffffffffffffff, 0x1) kexec_load(0x100, 0x1, &(0x7f0000000800)=[{0x0, 0x0, 0x5, 0x869b}], 0x1) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) 104.865405ms ago: executing program 8 (id=3835): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x126, 0xfffffffa, {{0xd, 0x4, 0x1, 0x20, 0x34, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0x1, [0x8]}, @noop, @timestamp={0x44, 0x10, 0x6f, 0x0, 0x0, [0x3, 0x7, 0xffff4108]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a000000000000730186000000000095000000000000005bebedb9a421e03cb24d676e29f5fe34499ec729fc9396"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 78.532527ms ago: executing program 7 (id=3836): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x16, &(0x7f00000002c0)={@random="5186498dc7a3", @local, @val={@val={0x88a8, 0x0, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@generic={0x8864}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000300000000000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x20, r2, 0xb31, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 47.263878ms ago: executing program 1 (id=3837): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x15, 0x2000000000000216, &(0x7f0000001500)=ANY=[@ANYRES16, @ANYRES8=r0, @ANYRES8=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x18, 0x110, 0x1, '\x00'}], 0x28}, 0xfc40) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46800c060001000000010000000200060001000000dd000000380000004503000008000000010020000005"], 0x58) close(r4) execve(&(0x7f0000001400)='./file2\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0x9329, 0x8001, 0x100008}}}}}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x1204, 0x0, 0x43a1bd76, 0x7, 0x200000009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3ffffffffd, 0xffffffffffffffff, 0xa) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000140)={0x490102, 0x104, 0x13}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rename(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='./file1\x00') uname(&(0x7f0000000040)=""/114) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r8, r8, 0x0, 0x200) sendfile(r5, r5, 0x0, 0xe3aa6ea) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x0) ioctl$SIOCX25SDTEFACILITIES(r9, 0x89eb, &(0x7f0000000000)={0x6, 0x1, 0xff7, 0xb, 0x8, 0x17, 0x10, "ff03cae9ffed0000040500", "39e80000460062ff010000ec00"}) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7GtwjAUBdD79RMrER3KDjS01AyB6JkEsQJrULEgAjlGsAFKcU7haz+9WzgswrXF5p5dztP6M/9/5+P7KvuuXoc8k6zSt4UuY42/9PM8GepxmJLT3CzbJJcxdb+0Ssnx9qv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCSvQIAAP//q50IVw==") 0s ago: executing program 0 (id=3838): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfef4, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x0, 0xe0, 0x1b0, 0x378, 0x2a8, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x12, 0x1}, {0xffffffffffffffff, 0x5, 0xc}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'wg0\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x5}, {0x2, 0x4, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x48000000, {0x9002000000000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0xff, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x1b}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, [0xff, 0xffffffff, 0x7f7fff00, 0xffffffff], [0xff000000, 0xcf16d9bfdc28978c, 0x0, 0xffffffff], 'veth0\x00', 'dvmrp1\x00', {0xff}, {}, 0x2c, 0x0, 0x6, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0xfd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@nouid32}, {@user_xattr}, {@jqfmt_vfsold}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x40}}]}, 0x1, 0xb8b, &(0x7f0000002080)="$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") r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0xd, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @loopback}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x20000851}, 0x4040080) socket$caif_stream(0x25, 0x1, 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0xb}, 0x106200, 0x10004, 0x8, 0x5, 0xa, 0xa, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r5, 0x0, 0xa, 0x0, &(0x7f00000001c0)="452600008c2125ad3400", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_io_uring_setup(0x498, &(0x7f00000004c0)={0x0, 0x4887, 0x8000, 0x2, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, 0x0, 0x1) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r8, 0x6, 0xc, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9}, 0x11) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) kernel console output (not intermixed with test programs): T4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3184: Corrupt directory, running e2fsck is recommended [ 413.323257][T14661] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.3184: Unrecognised inode hash code 4 [ 413.334795][T14661] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.3184: Corrupt directory, running e2fsck is recommended [ 413.359380][ T6089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.993226][T14670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3188'. [ 414.021723][T14675] netlink: 'syz.3.3189': attribute type 10 has an invalid length. [ 414.104917][T14675] team0: Port device wg1 added [ 414.123489][T14678] hub 8-0:1.0: USB hub found [ 414.128506][T14678] hub 8-0:1.0: 8 ports detected [ 414.146841][T14678] netlink: 'syz.4.3187': attribute type 36 has an invalid length. [ 414.194672][T14678] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 414.204772][T14678] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 414.224795][T14678] netlink: 'syz.4.3187': attribute type 10 has an invalid length. [ 414.237158][T14678] macvlan1: entered allmulticast mode [ 414.245375][T14678] veth1_vlan: entered allmulticast mode [ 414.256783][T14678] team0: Port device macvlan1 added [ 414.334715][T14677] loop8: detected capacity change from 0 to 1024 [ 414.394355][T14677] EXT4-fs: Ignoring removed bh option [ 414.455283][T14677] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.611799][ T28] audit: type=1400 audit(1774559198.624:2681): avc: denied { write } for pid=14676 comm="syz.8.3190" lport=39259 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 414.650543][T14677] EXT4-fs error (device loop8): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 414.665581][T14677] EXT4-fs (loop8): Remounting filesystem read-only [ 414.677580][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3190'. [ 414.699476][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.742863][T14688] netlink: 260 bytes leftover after parsing attributes in process `syz.8.3193'. [ 414.875940][T14699] netlink: 'syz.8.3198': attribute type 2 has an invalid length. [ 414.987464][T14707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17680 sclass=netlink_route_socket pid=14707 comm=syz.8.3202 [ 415.071548][T14714] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3204'. [ 415.114626][T14719] netlink: 'syz.7.3206': attribute type 21 has an invalid length. [ 415.137571][T14719] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3206'. [ 415.169353][T14719] netlink: 'syz.7.3206': attribute type 4 has an invalid length. [ 415.179271][T14719] netlink: 'syz.7.3206': attribute type 5 has an invalid length. [ 415.192071][T14719] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3206'. [ 415.271457][T14741] loop8: detected capacity change from 0 to 1024 [ 415.292742][T14741] EXT4-fs: dax option not supported [ 415.315376][T14741] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0101 with DS=0x85 [ 415.426184][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3213'. [ 415.455414][T14747] Invalid logical block size (6) [ 415.608245][ T28] audit: type=1400 audit(1774559199.614:2682): avc: denied { read } for pid=14760 comm="syz.8.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 415.640393][T14761] netlink: 'syz.8.3218': attribute type 27 has an invalid length. [ 415.651416][T14763] loop3: detected capacity change from 0 to 1024 [ 415.760708][T14761] gre0: left promiscuous mode [ 415.765963][T14763] EXT4-fs: inline encryption not supported [ 415.771940][T14761] gre0: left allmulticast mode [ 415.778235][T14763] EXT4-fs: Ignoring removed nobh option [ 415.811533][T14761] veth1_vlan: left allmulticast mode [ 415.818066][T14761] macvlan1: left allmulticast mode [ 415.823501][T14763] EXT4-fs: Ignoring removed bh option [ 415.831071][T14761] macsec0: left promiscuous mode [ 415.905033][T14766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.926424][T14766] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.967188][T14766] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.998513][T14765] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3218'. [ 416.047577][ T176] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.098858][ T176] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.138120][ T176] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.175897][ T176] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.219551][T14771] macsec0: entered promiscuous mode [ 416.240036][T14763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.266752][T14775] loop4: detected capacity change from 0 to 512 [ 416.297355][T14777] loop8: detected capacity change from 0 to 1764 [ 416.995344][T14794] loop5: detected capacity change from 0 to 512 [ 417.025354][T14794] EXT4-fs (loop5): 1 orphan inode deleted [ 417.031705][T14794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 417.408999][T14800] loop7: detected capacity change from 0 to 32768 [ 417.479355][ T3826] loop7: p1 p3 < > [ 417.757528][T14169] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.768473][T14800] loop7: p1 p3 < > [ 417.784947][ T6089] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.797834][T14812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3233'. [ 417.855133][T14816] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3234'. [ 417.884330][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 417.897748][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 417.957187][T14818] hub 8-0:1.0: USB hub found [ 417.961954][T14818] hub 8-0:1.0: 8 ports detected [ 417.975201][T14818] netlink: 'syz.4.3235': attribute type 36 has an invalid length. [ 417.989653][T14818] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 417.999590][T14818] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 418.012965][T14818] netlink: 'syz.4.3235': attribute type 10 has an invalid length. [ 418.021414][T14818] veth1_vlan: left allmulticast mode [ 418.054685][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 418.068097][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 418.229090][ T28] audit: type=1400 audit(1774559202.234:2683): avc: denied { mounton } for pid=14823 comm="syz.3.3236" path="/file0" dev="ramfs" ino=46626 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 418.298077][T14824] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 418.304621][T14824] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 418.436479][T14824] vhci_hcd vhci_hcd.0: Device attached [ 418.447871][T14825] vhci_hcd: connection closed [ 418.451171][ T7325] vhci_hcd vhci_hcd.3: stop threads [ 418.468863][ T7325] vhci_hcd vhci_hcd.3: release socket [ 418.474497][ T7325] vhci_hcd vhci_hcd.3: disconnect device [ 418.548674][T14833] cgroup: fork rejected by pids controller in /syz7 [ 418.608537][T14996] vlan0: entered promiscuous mode [ 418.755785][T15340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 418.844382][T15340] block device autoloading is deprecated and will be removed. [ 418.857609][T15340] loop4: detected capacity change from 0 to 1024 [ 418.871112][T15340] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 418.886414][T15340] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 418.899788][T15340] EXT4-fs (loop4): orphan cleanup on readonly fs [ 418.906844][T15340] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 418.916949][T15340] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 418.928025][T15340] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3243: Failed to acquire dquot type 0 [ 418.940684][T15340] loop4: lost filesystem error report for type 5 error -117 [ 418.942031][T15340] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 418.949486][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 418.949502][ C1] EXT4-fs (loop4): initial error at time 1774559202: ext4_acquire_dquot:7001 [ 418.949528][ C1] EXT4-fs (loop4): last error at time 1774559202: ext4_acquire_dquot:7001 [ 419.069603][T15340] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 419.079989][T15340] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3243: Failed to acquire dquot type 0 [ 419.098074][T15340] loop4: lost filesystem error report for type 5 error -117 [ 419.101669][T15340] EXT4-fs error (device loop4): ext4_free_blocks:6724: comm syz.4.3243: Freeing blocks not in datazone - block = 0, count = 4096 [ 419.122474][T15340] loop4: lost filesystem error report for type 5 error -117 [ 419.122728][T15340] Quota error (device loop4): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 419.141435][T15340] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 419.151941][T15340] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3243: Failed to acquire dquot type 0 [ 419.165489][T15340] loop4: lost filesystem error report for type 5 error -117 [ 419.165814][T15340] EXT4-fs (loop4): 1 orphan inode deleted [ 419.810578][T15340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 420.009999][T16270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16270 comm=syz.3.3248 [ 420.068076][T16272] tmpfs: Unknown parameter 'þàY¡mpol' [ 420.070741][T16270] ip6gre1: entered promiscuous mode [ 420.078814][T16270] ip6gre1: entered allmulticast mode [ 420.098428][T16270] __nla_validate_parse: 5 callbacks suppressed [ 420.098441][T16270] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3248'. [ 420.266847][T16290] loop8: detected capacity change from 0 to 512 [ 420.471219][T16296] loop3: detected capacity change from 0 to 256 [ 420.496766][T16296] vfat: Unknown parameter 'no»pܯ!Dù0' [ 420.559867][T16297] loop8: detected capacity change from 0 to 512 [ 421.687033][T15183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.087975][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.101013][T16305] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 422.447167][T16315] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3262'. [ 422.472880][T16315] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3262'. [ 422.488414][ T28] audit: type=1400 audit(1774559206.504:2684): avc: denied { append } for pid=16313 comm="syz.3.3264" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 422.544466][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3265'. [ 422.559005][T16318] team0: Port device macvlan1 removed [ 422.727643][T16332] syzkaller1: entered promiscuous mode [ 422.736989][T16332] syzkaller1: entered allmulticast mode [ 424.078240][ T28] audit: type=1400 audit(1774559208.084:2685): avc: denied { mounton } for pid=16345 comm="syz.3.3274" path="/41/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 424.107062][ T28] audit: type=1400 audit(1774559208.114:2686): avc: denied { remount } for pid=16345 comm="syz.3.3274" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 424.675649][ T28] audit: type=1400 audit(1774559208.684:2687): avc: denied { unmount } for pid=14169 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 424.714206][T16361] loop8: detected capacity change from 0 to 1024 [ 424.743840][T16364] loop4: detected capacity change from 0 to 512 [ 424.850823][T16364] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 424.859767][T16364] System zones: 1-12 [ 424.864064][T16364] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3280: corrupted in-inode xattr: e_value size too large [ 424.864374][T16361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.879252][T16364] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 424.898664][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 424.898690][T16364] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3280: couldn't read orphan inode 15 (err -117) [ 424.907788][ C0] EXT4-fs (loop4): initial error at time 1774559208: ext4_iget_extra_inode:5025: inode 15 [ 424.907821][ C0] EXT4-fs (loop4): last error at time 1774559208: ext4_iget_extra_inode:5025: inode 15 [ 424.924556][T16361] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.926052][ C0] [ 424.946328][T16364] loop4: lost filesystem error report for type 5 error -117 [ 424.979109][T16364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.024154][T16372] loop7: detected capacity change from 0 to 128 [ 425.030932][T16372] msdos: Bad value for 'gid' [ 425.035516][T16372] msdos: Bad value for 'gid' [ 425.060816][T16364] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.3280: Unrecognised inode hash code 4 [ 425.088742][T16364] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3280: Corrupt directory, running e2fsck is recommended [ 425.138748][T16364] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.3280: Unrecognised inode hash code 4 [ 425.150106][T16364] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3280: Corrupt directory, running e2fsck is recommended [ 425.181942][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.237492][T16374] loop4: detected capacity change from 0 to 512 [ 425.258962][T16374] EXT4-fs: Ignoring removed bh option [ 425.264366][T16374] EXT4-fs: inline encryption not supported [ 425.284836][T16374] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 425.324120][T16374] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 425.359020][T16374] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3282: bg 0: block 248: padding at end of block bitmap is not set [ 425.390113][T16374] loop4: lost filesystem error report for type 5 error -117 [ 425.398988][T16374] Quota error (device loop4): write_blk: dquota write failed [ 425.413662][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 425.413690][ C0] EXT4-fs (loop4): last error at time 1774559209: ext4_validate_block_bitmap:441 [ 425.448673][T16374] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 425.458600][T16374] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3282: Failed to acquire dquot type 1 [ 425.494672][T16374] loop4: lost filesystem error report for type 5 error -117 [ 425.495277][T16374] EXT4-fs (loop4): 1 truncate cleaned up [ 425.521404][T16374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 425.541200][T16374] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3282: deleted inode referenced: 12 [ 425.569437][T16374] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000. [ 425.631837][T16378] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3282: deleted inode referenced: 12 [ 425.644006][T16378] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3282: deleted inode referenced: 12 [ 425.706227][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 425.760437][T16385] loop4: detected capacity change from 0 to 1024 [ 425.774413][T16381] wireguard0: entered promiscuous mode [ 425.780524][T16381] wireguard0: entered allmulticast mode [ 425.821186][T16385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.901818][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.092712][T16392] loop7: detected capacity change from 0 to 1024 [ 426.123936][T16392] EXT4-fs: Ignoring removed orlov option [ 426.146706][T16392] ext4: Unknown parameter 'obj_role' [ 426.290353][ T28] audit: type=1326 audit(1774559210.304:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.7.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d5dc799 code=0x7ffc0000 [ 426.343756][ T28] audit: type=1326 audit(1774559210.304:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.7.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d5dc799 code=0x7ffc0000 [ 426.393871][ T28] audit: type=1326 audit(1774559210.304:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.7.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f267d5dc799 code=0x7ffc0000 [ 426.441159][ T28] audit: type=1326 audit(1774559210.304:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16400 comm="syz.7.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d5dc799 code=0x7ffc0000 [ 426.485800][T16401] loop7: detected capacity change from 0 to 512 [ 426.528796][T16401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.998677][ T3491] Bluetooth: hci0: command 0x1003 tx timeout [ 427.004724][ T43] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 427.159330][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 427.796052][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.890849][T16417] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3297'. [ 428.058310][T16424] loop4: detected capacity change from 0 to 128 [ 428.233232][T16433] netlink: 'syz.8.3302': attribute type 3 has an invalid length. [ 428.241115][T16433] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3302'. [ 428.320124][T16424] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 428.348684][T16424] FAT-fs (loop4): Filesystem has been set read-only [ 428.472292][T16438] loop4: detected capacity change from 0 to 512 [ 428.513207][T16438] EXT4-fs: Ignoring removed bh option [ 428.520256][T16438] EXT4-fs: inline encryption not supported [ 428.526433][T16438] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 428.562485][T16438] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 428.587581][T16438] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3305: bg 0: block 248: padding at end of block bitmap is not set [ 428.602258][T16438] loop4: lost filesystem error report for type 5 error -117 [ 428.602417][T16438] __quota_error: 52 callbacks suppressed [ 428.602433][T16438] Quota error (device loop4): write_blk: dquota write failed [ 428.609780][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 428.609805][ C0] EXT4-fs (loop4): last error at time 1774559212: ext4_validate_block_bitmap:441 [ 428.638671][T16438] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 428.654377][T16438] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3305: Failed to acquire dquot type 1 [ 428.676343][T16438] loop4: lost filesystem error report for type 5 error -117 [ 428.677650][T16438] EXT4-fs (loop4): 1 truncate cleaned up [ 428.710224][T16438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 428.733190][T16438] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3305: deleted inode referenced: 12 [ 428.747439][T16438] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3305: deleted inode referenced: 12 [ 428.766479][T16438] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000. [ 428.782719][T16438] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3305: deleted inode referenced: 12 [ 428.807384][T16438] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3305: deleted inode referenced: 12 [ 428.835221][T16438] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.3305: deleted inode referenced: 12 [ 428.880434][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 428.915991][T16444] loop4: detected capacity change from 0 to 512 [ 428.965801][T16444] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 428.980719][T16444] System zones: 1-12 [ 428.989064][T16444] EXT4-fs error (device loop4): ext4_iget_extra_inode:5025: inode #15: comm syz.4.3306: corrupted in-inode xattr: e_value size too large [ 429.032373][T16444] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 429.033287][T16444] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3306: couldn't read orphan inode 15 (err -117) [ 429.042457][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 429.042475][ C1] EXT4-fs (loop4): initial error at time 1774559213: ext4_iget_extra_inode:5025: inode 15 [ 429.042530][ C1] EXT4-fs (loop4): last error at time 1774559213: ext4_iget_extra_inode:5025: inode 15 [ 429.082450][T16447] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3307'. [ 429.118670][T16444] loop4: lost filesystem error report for type 5 error -117 [ 429.149022][T16444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.217337][T16444] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.3306: Unrecognised inode hash code 4 [ 429.242504][T16444] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3306: Corrupt directory, running e2fsck is recommended [ 429.276474][T16444] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.3306: Unrecognised inode hash code 4 [ 429.288704][T16444] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.3306: Corrupt directory, running e2fsck is recommended [ 429.393247][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.496473][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3312'. [ 429.541242][ T28] audit: type=1400 audit(1774559213.554:2744): avc: denied { listen } for pid=16460 comm="syz.7.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 429.689461][T16468] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3315'. [ 429.761528][T16475] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 429.761528][T16475] program syz.4.3317 not setting count and/or reply_len properly [ 429.838511][T16470] netlink: 'syz.7.3316': attribute type 1 has an invalid length. [ 429.988780][ T28] audit: type=1400 audit(1774559213.994:2745): avc: denied { listen } for pid=16487 comm="syz.8.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 430.123019][T16470] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.353185][T16499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3323'. [ 430.464816][T16500] loop7: detected capacity change from 0 to 512 [ 430.509241][T16500] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 430.625891][T16500] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3324'. [ 430.850422][T16504] bond4: (slave bond0): Releasing active interface [ 430.884815][T16504] batman_adv: batadv0: Interface deactivated: dummy0 [ 430.901274][T16504] batman_adv: batadv0: Removing interface: dummy0 [ 430.944025][T16504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.356712][ T28] audit: type=1326 audit(1774559215.364:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16516 comm="syz.7.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f267d599491 code=0x7ffc0000 [ 431.458178][T16517] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.544654][ T28] audit: type=1326 audit(1774559215.364:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16516 comm="syz.7.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d5dc799 code=0x7ffc0000 [ 431.575909][ T28] audit: type=1326 audit(1774559215.364:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16516 comm="syz.7.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f267d5dd589 code=0x7ffc0000 [ 431.622546][ T28] audit: type=1326 audit(1774559215.364:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16516 comm="syz.7.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f267d5dc799 code=0x7ffc0000 [ 431.681111][ T28] audit: type=1326 audit(1774559215.394:2750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16516 comm="syz.7.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f267d5994fb code=0x7ffc0000 [ 431.772711][T16517] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.840356][ T28] audit: type=1326 audit(1774559215.394:2752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16516 comm="syz.7.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f267d598bec code=0x7ffc0000 [ 432.206482][T16517] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.220383][T16524] loop8: detected capacity change from 0 to 4096 [ 432.234657][T16524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.319961][T16517] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.453041][T16535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.497787][ T176] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.514003][ T176] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.540135][ T176] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.564967][ T176] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.595817][T16540] 9p: Bad value for 'rfdno' [ 432.762619][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.037163][T16557] loop7: detected capacity change from 0 to 2048 [ 433.088011][T16557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.109691][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.078177][T16574] loop4: detected capacity change from 0 to 1024 [ 434.131066][T16574] EXT4-fs: Ignoring removed orlov option [ 434.145530][T16574] EXT4-fs: Ignoring removed nobh option [ 434.247569][T16574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.410844][T16586] loop7: detected capacity change from 0 to 512 [ 434.489895][T16586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.552926][T16586] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.606079][T16591] loop8: detected capacity change from 0 to 512 [ 435.128608][T16583] EXT4-fs warning (device loop7): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 435.263907][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.266276][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.311730][T16598] sg_write: data in/out 441326/4794 bytes for SCSI command 0x0-- guessing data in; [ 435.311730][T16598] program syz.7.3355 not setting count and/or reply_len properly [ 435.409368][T16604] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3358'. [ 435.540165][T16610] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3361'. [ 435.576674][T16612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=16612 comm=syz.7.3362 [ 436.149156][T16617] vti0: entered promiscuous mode [ 436.310585][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 436.310663][ T28] audit: type=1400 audit(1774559220.324:2822): avc: denied { watch watch_reads } for pid=16622 comm="syz.7.3366" path="/418/file1" dev="tmpfs" ino=2255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 436.397113][T16625] FAULT_INJECTION: forcing a failure. [ 436.397113][T16625] name failslab, interval 1, probability 0, space 0, times 0 [ 436.410548][T16625] CPU: 0 UID: 0 PID: 16625 Comm: syz.8.3367 Tainted: G W syzkaller #0 PREEMPT(full) [ 436.410585][T16625] Tainted: [W]=WARN [ 436.410593][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.410680][T16625] Call Trace: [ 436.410818][T16625] [ 436.410825][T16625] __dump_stack+0x1d/0x30 [ 436.410851][T16625] dump_stack_lvl+0x95/0xd0 [ 436.410873][T16625] dump_stack+0x15/0x1b [ 436.410903][T16625] should_fail_ex+0x263/0x280 [ 436.410936][T16625] should_failslab+0x8c/0xb0 [ 436.410992][T16625] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 436.411015][T16625] ? __alloc_skb+0x2d6/0x690 [ 436.411043][T16625] __alloc_skb+0x2d6/0x690 [ 436.411086][T16625] ? __alloc_skb+0x200/0x690 [ 436.411116][T16625] netlink_dump+0x10d/0x8a0 [ 436.411145][T16625] ? __kmalloc_cache_noprof+0x2f9/0x410 [ 436.411173][T16625] __netlink_dump_start+0x43e/0x520 [ 436.411274][T16625] inet_diag_rcv_msg_compat+0x10b/0x200 [ 436.411374][T16625] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 436.411400][T16625] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 436.411499][T16625] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 436.411527][T16625] sock_diag_rcv_msg+0x189/0x2c0 [ 436.411586][T16625] netlink_rcv_skb+0x123/0x220 [ 436.411617][T16625] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 436.411650][T16625] sock_diag_rcv+0x1c/0x30 [ 436.411750][T16625] netlink_unicast+0x5c0/0x690 [ 436.411778][T16625] netlink_sendmsg+0x5c8/0x6f0 [ 436.411815][T16625] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.411928][T16625] ____sys_sendmsg+0x563/0x5b0 [ 436.412013][T16625] ___sys_sendmsg+0x195/0x1e0 [ 436.412064][T16625] __x64_sys_sendmsg+0xd4/0x160 [ 436.412103][T16625] x64_sys_call+0x194c/0x3020 [ 436.412133][T16625] do_syscall_64+0x12c/0x370 [ 436.412216][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.412297][T16625] RIP: 0033:0x7f34f312c799 [ 436.412315][T16625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.412336][T16625] RSP: 002b:00007f34f1b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.412355][T16625] RAX: ffffffffffffffda RBX: 00007f34f33a5fa0 RCX: 00007f34f312c799 [ 436.412372][T16625] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 436.412387][T16625] RBP: 00007f34f1b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 436.412541][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.412553][T16625] R13: 00007f34f33a6038 R14: 00007f34f33a5fa0 R15: 00007fff89330058 [ 436.412572][T16625] [ 436.819744][T16635] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3370'. [ 437.939620][T16657] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=16657 comm=syz.7.3378 [ 438.171272][T16662] syzkaller1: entered promiscuous mode [ 438.203816][T16662] syzkaller1: entered allmulticast mode [ 438.415291][T16665] loop7: detected capacity change from 0 to 512 [ 438.471353][T16665] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3381: inode has both inline data and extents flags [ 438.575243][T16665] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 438.575858][T16665] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3381: couldn't read orphan inode 15 (err -117) [ 438.585066][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 438.585082][ C1] EXT4-fs (loop7): initial error at time 1774559222: ext4_orphan_get:1391: inode 15 [ 438.585117][ C1] EXT4-fs (loop7): last error at time 1774559222: ext4_orphan_get:1391: inode 15 [ 438.626748][T16665] loop7: lost filesystem error report for type 5 error -117 [ 438.627314][T16665] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.698951][T16669] loop8: detected capacity change from 0 to 512 [ 438.705478][T16669] EXT4-fs: dax option not supported [ 438.761893][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.806690][T16674] loop4: detected capacity change from 0 to 512 [ 438.830526][T16678] loop7: detected capacity change from 0 to 1024 [ 438.839763][T16674] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.3385: bg 0: block 5: invalid block bitmap [ 438.843673][T16677] bond0: entered promiscuous mode [ 438.868876][T16674] loop4: lost filesystem error report for type 5 error -117 [ 438.869316][T16674] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 438.873670][T16677] bond_slave_0: entered promiscuous mode [ 438.878635][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 438.888206][T16677] bond_slave_1: entered promiscuous mode [ 438.890925][ C0] EXT4-fs (loop4): initial error at time 1774559222: ext4_validate_block_bitmap:432 [ 438.899394][T16677] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 438.902939][ C0] [ 438.912481][T16677] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 438.922249][ C0] EXT4-fs (loop4): last error at time 1774559222: ext4_validate_block_bitmap:432 [ 438.928981][T16674] loop4: lost filesystem error report for type 5 error -117 [ 438.931079][ C0] [ 438.949839][T16677] bond0: left promiscuous mode [ 438.957159][T16674] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3385: invalid indirect mapped block 3 (level 2) [ 438.972274][T16678] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.978581][T16677] bond_slave_0: left promiscuous mode [ 438.992797][T16677] bond_slave_1: left promiscuous mode [ 438.998219][T16674] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 439.005123][T16674] EXT4-fs (loop4): 1 orphan inode deleted [ 439.020292][T16674] EXT4-fs (loop4): 1 truncate cleaned up [ 439.026327][T16674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.046036][T16684] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3388'. [ 439.061032][ T28] audit: type=1326 audit(1774559223.074:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 439.086653][ T28] audit: type=1326 audit(1774559223.074:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 439.112058][T13141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.161373][ T28] audit: type=1326 audit(1774559223.074:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 439.201573][ T28] audit: type=1326 audit(1774559223.074:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 439.225260][ T28] audit: type=1326 audit(1774559223.074:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 439.308648][ T28] audit: type=1326 audit(1774559223.074:2828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 439.399043][T16703] loop8: detected capacity change from 0 to 512 [ 440.294700][ T28] audit: type=1326 audit(1774559223.074:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 440.318441][ T28] audit: type=1326 audit(1774559223.074:2830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc6b25bcfce code=0x7ffc0000 [ 440.341946][ T28] audit: type=1326 audit(1774559223.074:2831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16673 comm="syz.4.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6b25fc799 code=0x7ffc0000 [ 440.413552][T16702] loop7: detected capacity change from 0 to 128 [ 440.420792][T16702] msdos: Bad value for 'gid' [ 440.425385][T16702] msdos: Bad value for 'gid' [ 441.199118][T16725] netlink: 'syz.7.3399': attribute type 10 has an invalid length. [ 441.280087][T16725] team0: Port device wg1 added [ 441.330986][T16714] lo speed is unknown, defaulting to 1000 [ 441.430826][T16728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.457784][T16728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 441.488755][ T3413] lo speed is unknown, defaulting to 1000 [ 441.511563][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.530592][ T3413] syz2: Port: 1 Link ACTIVE [ 441.596956][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.641217][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3405'. [ 441.652322][T16746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3405'. [ 441.683607][T16755] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3407'. [ 441.687967][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 441.687983][ T28] audit: type=1400 audit(1774559225.684:2836): avc: denied { read } for pid=16747 comm="syz.8.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 441.729983][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.784934][T16758] wireguard0: entered promiscuous mode [ 441.792523][T16758] wireguard0: entered allmulticast mode [ 441.814716][T16729] lo speed is unknown, defaulting to 1000 [ 441.823765][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.884974][T16714] chnl_net:caif_netlink_parms(): no params data found [ 441.937649][T16767] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 441.954332][T16767] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 441.984115][T16767] veth0_to_bridge: entered allmulticast mode [ 442.003199][T16767] veth0_to_bridge: entered promiscuous mode [ 442.038495][T16772] Ÿë: port 2(veth0_to_team) entered blocking state [ 442.070605][T16772] Ÿë: port 2(veth0_to_team) entered disabled state [ 442.077519][T16772] veth0_to_team: entered allmulticast mode [ 442.084230][T16780] loop7: detected capacity change from 0 to 1024 [ 442.100811][T16780] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 442.112731][T16772] veth0_to_team: entered promiscuous mode [ 442.136881][T16780] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3413: bg 0: block 10: padding at end of block bitmap is not set [ 442.161884][T16729] chnl_net:caif_netlink_parms(): no params data found [ 442.221489][T16780] loop7: lost filesystem error report for type 5 error -117 [ 442.221849][T16780] Quota error (device loop7): write_blk: dquota write failed [ 442.229219][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 442.229235][ C0] EXT4-fs (loop7): initial error at time 1774559226: ext4_validate_block_bitmap:441 [ 442.229263][ C0] EXT4-fs (loop7): last error at time 1774559226: ext4_validate_block_bitmap:441 [ 442.331059][T16780] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2 [ 442.358159][T16780] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 442.368391][T16780] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3413: Failed to acquire dquot type 0 [ 442.379816][T16780] loop7: lost filesystem error report for type 5 error -28 [ 442.380067][T16780] Quota error (device loop7): write_blk: dquota write failed [ 442.395045][T16780] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2 [ 442.404879][T16780] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 442.416369][T16780] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3413: Failed to acquire dquot type 0 [ 442.429147][T16780] loop7: lost filesystem error report for type 5 error -28 [ 442.429348][T16780] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.3413: Freeing blocks not in datazone - block = 0, count = 4096 [ 442.430753][ T56] bond0 (unregistering): Released all slaves [ 442.436663][T16780] loop7: lost filesystem error report for type 5 error -117 [ 442.458186][T16780] Quota error (device loop7): write_blk: dquota write failed [ 442.475063][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.475167][T16780] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2 [ 442.482250][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.491696][T16780] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 442.508580][T16780] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3413: Failed to acquire dquot type 0 [ 442.512887][T16714] bridge_slave_0: entered allmulticast mode [ 442.521561][T16780] loop7: lost filesystem error report for type 5 error -28 [ 442.528711][T16780] EXT4-fs (loop7): 1 orphan inode deleted [ 442.529859][T16714] bridge_slave_0: entered promiscuous mode [ 442.541999][T16780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.566487][ T56] hsr_slave_0: left promiscuous mode [ 442.572265][ T56] hsr_slave_1: left promiscuous mode [ 442.581421][ T56] veth1_macvtap: left promiscuous mode [ 442.587111][ T56] veth0_macvtap: left promiscuous mode [ 442.593591][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.603757][ T56] veth1_vlan: left promiscuous mode [ 442.626778][ T56] veth0_vlan: left promiscuous mode [ 442.845762][T16802] loop7: detected capacity change from 0 to 1024 [ 442.864756][T16802] EXT4-fs: Ignoring removed orlov option [ 442.899172][T16802] ext4: Unknown parameter 'obj_role' [ 442.938343][ T56] team0 (unregistering): Port device wg1 removed [ 442.968800][T16759] syz.8.3408 (16759) used greatest stack depth: 5376 bytes left [ 442.985098][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.993194][T16807] loop8: detected capacity change from 0 to 128 [ 443.000204][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.009383][T16714] bridge_slave_1: entered allmulticast mode [ 443.034655][T16714] bridge_slave_1: entered promiscuous mode [ 443.121346][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.132385][T16729] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.143713][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.159394][T16729] bridge_slave_0: entered allmulticast mode [ 443.169922][T16729] bridge_slave_0: entered promiscuous mode [ 443.177788][T16815] loop7: detected capacity change from 0 to 164 [ 443.184784][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.203212][T16729] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.217623][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.232160][T16729] bridge_slave_1: entered allmulticast mode [ 443.239555][T16729] bridge_slave_1: entered promiscuous mode [ 443.249185][T16815] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82 [ 443.270040][T16714] team0: Port device team_slave_0 added [ 443.290508][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3419'. [ 443.464178][T16815] veth1_vlan (unregistering): left allmulticast mode [ 443.497339][T16839] sg_write: data in/out 441326/4794 bytes for SCSI command 0x0-- guessing data in; [ 443.497339][T16839] program syz.8.3422 not setting count and/or reply_len properly [ 443.590539][T16843] xt_hashlimit: max too large, truncated to 1048576 [ 443.639202][T16714] team0: Port device team_slave_1 added [ 443.646589][T16729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.715470][T16846] loop8: detected capacity change from 0 to 1764 [ 443.729831][T16846] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 443.748066][T16846] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 443.759496][T16848] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3425'. [ 443.760124][T16846] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3423'. [ 443.784845][T16729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.794075][T16845] tipc: Started in network mode [ 443.799299][T16845] tipc: Node identity 67f, cluster identity 4711 [ 443.805682][T16845] tipc: Node number set to 1663 [ 443.810640][T16845] tipc: Cannot configure node identity twice [ 443.836187][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.843219][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.872916][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.896718][T16852] 9p: Bad value for 'rfdno' [ 443.913635][T16852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16852 comm=syz.8.3426 [ 443.926835][T16850] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3427'. [ 443.973286][T16729] team0: Port device team_slave_0 added [ 443.985615][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.008673][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.043424][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.057158][T16867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3432'. [ 444.120036][T16714] hsr_slave_0: entered promiscuous mode [ 444.126419][T16714] hsr_slave_1: entered promiscuous mode [ 444.344684][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 444.355656][T16714] Cannot create hsr debugfs directory [ 444.366070][T16729] team0: Port device team_slave_1 added [ 444.924132][T16889] lo speed is unknown, defaulting to 1000 [ 444.929385][T16729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.940267][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.966639][T16729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.983654][T16894] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3436'. [ 445.005584][T16729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.020977][T16729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.048717][T16729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.179944][T16729] hsr_slave_0: entered promiscuous mode [ 445.186156][T16729] hsr_slave_1: entered promiscuous mode [ 445.209044][T16729] debugfs: 'hsr0' already exists in 'hsr' [ 445.216905][T16729] Cannot create hsr debugfs directory [ 445.382578][T16930] loop8: detected capacity change from 0 to 1764 [ 445.471871][T16935] loop7: detected capacity change from 0 to 2048 [ 445.495872][T16935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.512972][T16947] tmpfs: Unknown parameter 'þàY¡mpol' [ 445.540796][T16935] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3446'. [ 445.614405][T16959] loop8: detected capacity change from 0 to 512 [ 445.659793][T16959] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 445.672961][T16963] vlan2: entered promiscuous mode [ 445.678154][T16963] batadv0: entered promiscuous mode [ 445.702101][T16714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.710228][T16959] EXT4-fs (loop8): 1 orphan inode deleted [ 445.715996][T16959] EXT4-fs (loop8): 1 truncate cleaned up [ 445.724022][T16714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.731567][T16959] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.750702][T16714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.802682][T16714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.816884][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.867729][T16729] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 445.888855][T16729] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 445.896715][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.919893][T16729] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 445.953885][T16729] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 445.977534][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.005152][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.037861][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.045063][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.079431][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.086504][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.246441][T16729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.271407][T16729] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.296617][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.303688][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.371726][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.382881][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.389974][ T7325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.467452][T17030] loop8: detected capacity change from 0 to 1024 [ 446.507893][T16729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.539116][T17030] EXT4-fs: inline encryption not supported [ 446.544996][T17030] EXT4-fs: Ignoring removed nobh option [ 446.595241][T17030] EXT4-fs: Ignoring removed bh option [ 446.627633][T16714] veth0_vlan: entered promiscuous mode [ 446.644442][T17030] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.668585][T16714] veth1_vlan: entered promiscuous mode [ 446.720657][T16714] veth0_macvtap: entered promiscuous mode [ 446.728038][T16714] veth1_macvtap: entered promiscuous mode [ 446.834013][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.843065][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.876679][ T2115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.906644][ T2115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.888816][ T7299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.951736][ T7299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.291628][T17107] __nla_validate_parse: 4 callbacks suppressed [ 448.291649][T17107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3461'. [ 448.466082][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.535208][T17126] loop7: detected capacity change from 0 to 512 [ 448.559523][T16729] veth0_vlan: entered promiscuous mode [ 448.565534][T17126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 448.581570][T16729] veth1_vlan: entered promiscuous mode [ 448.583411][T17126] System zones: 1-12 [ 448.598756][T17126] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.3465: corrupted in-inode xattr: e_value size too large [ 448.612953][T17126] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 448.613555][T17126] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3465: couldn't read orphan inode 15 (err -117) [ 448.622713][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 448.622748][ C1] EXT4-fs (loop7): initial error at time 1774559232: ext4_iget_extra_inode:5025: inode 15 [ 448.622775][ C1] EXT4-fs (loop7): last error at time 1774559232: ext4_iget_extra_inode:5025: inode 15 [ 448.661260][T16729] veth0_macvtap: entered promiscuous mode [ 448.668526][T16729] veth1_macvtap: entered promiscuous mode [ 448.668962][T17126] loop7: lost filesystem error report for type 5 error -117 [ 448.678284][T17126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.703237][T16729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.722855][T16729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.743191][ T7325] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.777096][ T7325] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.786778][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.797019][ T7325] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.808282][ T7325] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.837326][T17157] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3467'. [ 448.985119][T17173] netlink: 'syz.9.3469': attribute type 1 has an invalid length. [ 449.004473][T17177] loop7: detected capacity change from 0 to 512 [ 449.022449][T17177] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 449.066926][T17177] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3470'. [ 449.209687][T17186] team0: Port device wg1 removed [ 449.226531][T17186] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 449.731448][T17209] netlink: 'syz.7.3475': attribute type 4 has an invalid length. [ 449.806884][T17219] sg_write: data in/out 406510/4658 bytes for SCSI command 0x0-- guessing data in; [ 449.806884][T17219] program syz.7.3477 not setting count and/or reply_len properly [ 449.845363][T17224] FAULT_INJECTION: forcing a failure. [ 449.845363][T17224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.875209][T17224] CPU: 1 UID: 0 PID: 17224 Comm: syz.8.3479 Tainted: G W syzkaller #0 PREEMPT(full) [ 449.875245][T17224] Tainted: [W]=WARN [ 449.875253][T17224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.875340][T17224] Call Trace: [ 449.875347][T17224] [ 449.875356][T17224] __dump_stack+0x1d/0x30 [ 449.875381][T17224] dump_stack_lvl+0x95/0xd0 [ 449.875403][T17224] dump_stack+0x15/0x1b [ 449.875428][T17224] should_fail_ex+0x263/0x280 [ 449.875520][T17224] should_fail+0xb/0x20 [ 449.875548][T17224] should_fail_usercopy+0x1a/0x20 [ 449.875578][T17224] _copy_from_iter+0xcf/0xea0 [ 449.875614][T17224] ? __alloc_skb+0x4f6/0x690 [ 449.875639][T17224] ? __alloc_skb+0x200/0x690 [ 449.875715][T17224] netlink_sendmsg+0x4ae/0x6f0 [ 449.875751][T17224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.875780][T17224] ____sys_sendmsg+0x563/0x5b0 [ 449.875824][T17224] ___sys_sendmsg+0x195/0x1e0 [ 449.875944][T17224] __x64_sys_sendmsg+0xd4/0x160 [ 449.875979][T17224] x64_sys_call+0x194c/0x3020 [ 449.876022][T17224] do_syscall_64+0x12c/0x370 [ 449.876051][T17224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.876151][T17224] RIP: 0033:0x7f34f312c799 [ 449.876169][T17224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.876190][T17224] RSP: 002b:00007f34f1b7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.876255][T17224] RAX: ffffffffffffffda RBX: 00007f34f33a5fa0 RCX: 00007f34f312c799 [ 449.876270][T17224] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 449.876285][T17224] RBP: 00007f34f1b7f090 R08: 0000000000000000 R09: 0000000000000000 [ 449.876297][T17224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.876309][T17224] R13: 00007f34f33a6038 R14: 00007f34f33a5fa0 R15: 00007fff89330058 [ 449.876327][T17224] [ 450.218323][T17247] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 450.225197][T17247] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 450.232374][T17247] veth0_to_bridge: entered allmulticast mode [ 450.246261][T17247] veth0_to_bridge: entered promiscuous mode [ 450.263795][T17247] Ÿë: port 2(veth0_to_team) entered blocking state [ 450.339610][T17247] Ÿë: port 2(veth0_to_team) entered disabled state [ 450.346597][T17247] veth0_to_team: entered allmulticast mode [ 450.353323][T17247] veth0_to_team: entered promiscuous mode [ 450.362484][T17258] loop8: detected capacity change from 0 to 512 [ 450.607942][T17233] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3484'. [ 450.626057][T17258] EXT4-fs: Ignoring removed bh option [ 450.671663][T17258] EXT4-fs: inline encryption not supported [ 450.736358][T17258] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 450.845825][T17258] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 450.862632][T17258] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3489: bg 0: block 248: padding at end of block bitmap is not set [ 450.877153][T17258] loop8: lost filesystem error report for type 5 error -117 [ 450.877356][T17258] __quota_error: 8 callbacks suppressed [ 450.877370][T17258] Quota error (device loop8): write_blk: dquota write failed [ 450.884710][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 450.884737][ C1] EXT4-fs (loop8): last error at time 1774559234: ext4_validate_block_bitmap:441 [ 450.913519][T17258] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 450.923743][T17258] EXT4-fs error (device loop8): ext4_acquire_dquot:7001: comm syz.8.3489: Failed to acquire dquot type 1 [ 450.935049][T17258] loop8: lost filesystem error report for type 5 error -117 [ 450.935671][T17258] EXT4-fs (loop8): 1 truncate cleaned up [ 450.961155][T17258] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 450.989661][T17258] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.3489: deleted inode referenced: 12 [ 451.002395][T17258] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.3489: deleted inode referenced: 12 [ 451.122298][T17278] Cannot find add_set index 0 as target [ 451.173287][T17258] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0008-000000000000. [ 451.299368][T17286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25104 sclass=netlink_route_socket pid=17286 comm=syz.0.3496 [ 451.320634][T17258] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.3489: deleted inode referenced: 12 [ 451.411194][T17290] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.3489: deleted inode referenced: 12 [ 451.523109][T17295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3499'. [ 451.532886][T17258] EXT4-fs error (device loop8): ext4_lookup:1789: inode #2: comm syz.8.3489: deleted inode referenced: 12 [ 451.568755][T17299] sg_write: data in/out 437230/4778 bytes for SCSI command 0x0-- guessing data in; [ 451.568755][T17299] program syz.0.3501 not setting count and/or reply_len properly [ 451.598871][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 451.636096][T17301] lo speed is unknown, defaulting to 1000 [ 451.789060][T17310] loop9: detected capacity change from 0 to 256 [ 451.799948][T17311] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 451.806760][T17311] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 451.818832][T17311] veth0_to_bridge: entered allmulticast mode [ 451.839707][T17311] veth0_to_bridge: entered promiscuous mode [ 451.852566][T17310] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 451.883303][T17311] Ÿë: port 2(veth0_to_team) entered blocking state [ 451.890124][T17311] Ÿë: port 2(veth0_to_team) entered disabled state [ 451.897161][T17311] veth0_to_team: entered allmulticast mode [ 451.900570][T17306] loop7: detected capacity change from 0 to 128 [ 451.916395][T17311] veth0_to_team: entered promiscuous mode [ 451.943125][T17306] msdos: Bad value for 'gid' [ 451.947834][T17306] msdos: Bad value for 'gid' [ 452.026158][T17301] program syz.7.3502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.064297][ T28] audit: type=1400 audit(1774559236.074:2845): avc: denied { setopt } for pid=17314 comm="syz.9.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 452.098921][T17315] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3506'. [ 452.115036][T17315] wg2: entered promiscuous mode [ 452.128915][T17315] wg2: entered allmulticast mode [ 452.576816][T17323] loop9: detected capacity change from 0 to 128 [ 452.584277][T17323] msdos: Bad value for 'gid' [ 452.588973][T17323] msdos: Bad value for 'gid' [ 453.158239][T17344] veth1_macvtap: left promiscuous mode [ 453.183820][T17344] macsec0: entered promiscuous mode [ 453.199721][T17348] sg_write: data in/out 439278/4786 bytes for SCSI command 0x0-- guessing data in; [ 453.199721][T17348] program syz.7.3516 not setting count and/or reply_len properly [ 453.231294][ T28] audit: type=1400 audit(1774559237.244:2846): avc: denied { getopt } for pid=17335 comm="syz.8.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 453.280790][T17352] loop9: detected capacity change from 0 to 512 [ 453.310359][T17352] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 453.330543][T17356] loop7: detected capacity change from 0 to 512 [ 453.331664][T17352] System zones: 1-12 [ 453.363651][T17356] EXT4-fs: Ignoring removed bh option [ 453.369195][T17356] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.376155][T17352] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.3517: corrupted in-inode xattr: e_value size too large [ 453.390437][T17352] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 453.398706][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 453.414312][ C1] EXT4-fs (loop9): initial error at time 1774559237: ext4_iget_extra_inode:5025: inode 15 [ 453.418687][T17352] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3517: couldn't read orphan inode 15 (err -117) [ 453.424243][ C1] EXT4-fs (loop9): last error at time 1774559237: ext4_iget_extra_inode:5025: inode 15 [ 453.448857][T17356] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 453.478786][T17352] loop9: lost filesystem error report for type 5 error -117 [ 453.480096][T17352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.501151][T17356] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 453.510295][T17356] EXT4-fs (loop7): orphan cleanup on readonly fs [ 453.535229][T17356] EXT4-fs warning (device loop7): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 453.585734][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.614163][T17356] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 453.647633][T17356] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3519: Invalid block bitmap block 0 in block_group 0 [ 453.678706][T17356] loop7: lost filesystem error report for type 5 error -117 [ 453.678935][T17356] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 453.694919][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 453.694942][ C0] EXT4-fs (loop7): last error at time 1774559237: ext4_read_block_bitmap_nowait:483 [ 453.811427][T17356] loop7: lost filesystem error report for type 5 error -117 [ 453.821134][T17365] hub 8-0:1.0: USB hub found [ 453.833210][T17365] hub 8-0:1.0: 8 ports detected [ 453.852244][T17365] netlink: 'syz.9.3521': attribute type 36 has an invalid length. [ 453.866640][T17365] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 453.876635][T17365] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 453.896288][T17365] netlink: 'syz.9.3521': attribute type 10 has an invalid length. [ 453.913971][T17356] EXT4-fs (loop7): 1 orphan inode deleted [ 453.922777][T17356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 453.948494][T17365] macvlan1: entered allmulticast mode [ 453.957670][T17365] veth1_vlan: entered allmulticast mode [ 453.969055][T17365] team0: Port device macvlan1 added [ 454.149539][T17356] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3519'. [ 454.195574][T17356] netlink: 31 bytes leftover after parsing attributes in process `syz.7.3519'. [ 454.234605][T17356] netlink: 31 bytes leftover after parsing attributes in process `syz.7.3519'. [ 454.318068][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.918538][T17401] loop9: detected capacity change from 0 to 512 [ 455.307292][T17402] loop7: detected capacity change from 0 to 512 [ 455.348955][T17401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 455.357946][T17401] System zones: 1-12 [ 455.378980][T17401] EXT4-fs error (device loop9): ext4_iget_extra_inode:5025: inode #15: comm syz.9.3531: corrupted in-inode xattr: e_value size too large [ 455.425212][T17401] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 455.425429][T17401] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3531: couldn't read orphan inode 15 (err -117) [ 455.434581][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 455.434598][ C1] EXT4-fs (loop9): initial error at time 1774559239: ext4_iget_extra_inode:5025: inode 15 [ 455.434626][ C1] EXT4-fs (loop9): last error at time 1774559239: ext4_iget_extra_inode:5025: inode 15 [ 455.598340][T17401] loop9: lost filesystem error report for type 5 error -117 [ 455.606139][T17401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.729741][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.807425][T17411] xt_hashlimit: size too large, truncated to 1048576 [ 456.254366][T17417] loop9: detected capacity change from 0 to 512 [ 456.281161][T17417] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 456.298896][T17417] EXT4-fs (loop9): 1 orphan inode deleted [ 456.304879][T17417] EXT4-fs (loop9): 1 truncate cleaned up [ 456.369111][T17417] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 456.484711][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.561495][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3534'. [ 456.588720][T17421] bridge_slave_1: left allmulticast mode [ 456.594473][T17421] bridge_slave_1: left promiscuous mode [ 456.608790][T17421] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.629225][T17421] bridge_slave_0: left allmulticast mode [ 456.634881][T17421] bridge_slave_0: left promiscuous mode [ 456.648849][T17421] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.941216][T17433] sg_write: data in/out 433134/4762 bytes for SCSI command 0x0-- guessing data in; [ 456.941216][T17433] program syz.9.3537 not setting count and/or reply_len properly [ 457.173491][T17437] loop9: detected capacity change from 0 to 1024 [ 457.246001][T17437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.309804][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.356175][T17446] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3541'. [ 457.388717][T17446] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3541'. [ 457.488564][T17448] sg_write: data in/out 402414/4642 bytes for SCSI command 0x0-- guessing data in; [ 457.488564][T17448] program syz.9.3542 not setting count and/or reply_len properly [ 457.586943][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3543'. [ 457.639977][T17450] geneve0: entered promiscuous mode [ 457.645286][T17450] macsec1: entered promiscuous mode [ 457.678696][T17450] macsec1: entered allmulticast mode [ 457.688769][T17450] geneve0: entered allmulticast mode [ 457.700371][T17450] geneve0: left allmulticast mode [ 457.705510][T17450] geneve0: left promiscuous mode [ 457.777538][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3544'. [ 457.786662][T17453] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3544'. [ 457.812375][T17453] vlan2: entered promiscuous mode [ 457.823402][T17453] batadv0: entered promiscuous mode [ 458.000190][T17455] loop9: detected capacity change from 0 to 512 [ 458.157386][T17455] EXT4-fs (loop9): 1 orphan inode deleted [ 458.180312][T17464] lo speed is unknown, defaulting to 1000 [ 458.202876][T17455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.393920][T17481] FAULT_INJECTION: forcing a failure. [ 458.393920][T17481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.419930][T17481] CPU: 1 UID: 0 PID: 17481 Comm: syz.7.3550 Tainted: G W syzkaller #0 PREEMPT(full) [ 458.419966][T17481] Tainted: [W]=WARN [ 458.419974][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.419987][T17481] Call Trace: [ 458.419993][T17481] [ 458.420000][T17481] __dump_stack+0x1d/0x30 [ 458.420106][T17481] dump_stack_lvl+0x95/0xd0 [ 458.420133][T17481] dump_stack+0x15/0x1b [ 458.420208][T17481] should_fail_ex+0x263/0x280 [ 458.420260][T17481] should_fail+0xb/0x20 [ 458.420287][T17481] should_fail_usercopy+0x1a/0x20 [ 458.420340][T17481] _copy_to_user+0x20/0xa0 [ 458.420372][T17481] simple_read_from_buffer+0xb5/0x130 [ 458.420395][T17481] proc_fail_nth_read+0x10e/0x150 [ 458.420430][T17481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.420507][T17481] vfs_read+0x1ab/0x7f0 [ 458.420544][T17481] ? __rcu_read_unlock+0x4e/0x70 [ 458.420570][T17481] ? __fget_files+0x184/0x1c0 [ 458.420661][T17481] ? mutex_lock+0x57/0x90 [ 458.420720][T17481] ksys_read+0xdc/0x1a0 [ 458.420738][T17481] __x64_sys_read+0x40/0x50 [ 458.420805][T17481] x64_sys_call+0x2886/0x3020 [ 458.420907][T17481] do_syscall_64+0x12c/0x370 [ 458.420935][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.420962][T17481] RIP: 0033:0x7f267d59cfce [ 458.420981][T17481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 458.421028][T17481] RSP: 002b:00007f267c02efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.421048][T17481] RAX: ffffffffffffffda RBX: 00007f267c02f6c0 RCX: 00007f267d59cfce [ 458.421066][T17481] RDX: 000000000000000f RSI: 00007f267c02f0a0 RDI: 0000000000000005 [ 458.421081][T17481] RBP: 00007f267c02f090 R08: 0000000000000000 R09: 0000000000000000 [ 458.421097][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.421191][T17481] R13: 00007f267d856038 R14: 00007f267d855fa0 R15: 00007fffdd6f7668 [ 458.421214][T17481] [ 458.749213][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.979644][T17500] sg_write: data in/out 426990/4738 bytes for SCSI command 0x0-- guessing data in; [ 458.979644][T17500] program syz.9.3557 not setting count and/or reply_len properly [ 459.179648][T17505] loop8: detected capacity change from 0 to 128 [ 459.186560][T17505] msdos: Bad value for 'gid' [ 459.191229][T17505] msdos: Bad value for 'gid' [ 460.033318][T17519] loop7: detected capacity change from 0 to 128 [ 460.049307][T17519] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 460.147976][T17527] loop7: detected capacity change from 0 to 512 [ 460.221067][T17527] EXT4-fs: Ignoring removed bh option [ 460.227173][T17529] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3566'. [ 460.265626][T17527] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 460.298558][T17527] EXT4-fs (loop7): 1 truncate cleaned up [ 460.310341][T17527] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.550391][T17527] netlink: 220 bytes leftover after parsing attributes in process `syz.7.3565'. [ 460.571555][T17527] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3565'. [ 460.643842][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.848814][T17568] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3575'. [ 460.883023][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3575'. [ 460.920155][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3572'. [ 460.993447][T17529] lo speed is unknown, defaulting to 1000 [ 461.347517][T17578] loop9: detected capacity change from 0 to 1024 [ 461.384933][T17578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.468042][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.519592][ T2115] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.537906][T17595] sg_write: data in/out 455661/4594 bytes for SCSI command 0x0-- guessing data in; [ 461.537906][T17595] program syz.0.3580 not setting count and/or reply_len properly [ 461.604952][T17580] lo speed is unknown, defaulting to 1000 [ 461.639941][ T2115] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.760462][ T2115] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.781384][T17616] lo speed is unknown, defaulting to 1000 [ 461.837318][ T2115] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.886793][ T28] audit: type=1400 audit(1774559245.894:2847): avc: denied { setopt } for pid=17632 comm="syz.7.3588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 461.906528][ T28] audit: type=1400 audit(1774559245.894:2848): avc: denied { setattr } for pid=17632 comm="syz.7.3588" name="RXRPC" dev="sockfs" ino=51561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 461.958220][T17580] chnl_net:caif_netlink_parms(): no params data found [ 461.976552][ T2115] veth0_to_team: left allmulticast mode [ 461.982425][ T2115] veth0_to_team: left promiscuous mode [ 461.988069][ T2115] Ÿë: port 2(veth0_to_team) entered disabled state [ 462.006474][ T2115] veth0_to_bridge: left allmulticast mode [ 462.012408][ T2115] veth0_to_bridge: left promiscuous mode [ 462.018189][ T2115] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 462.162046][T17657] loop9: detected capacity change from 0 to 2048 [ 462.224956][ T3826] loop9: p3 p4 < > [ 462.227218][T17661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3591'. [ 462.229280][ T3826] loop9: p3 start 11362048 is beyond EOD, truncated [ 462.288363][T17664] sg_write: data in/out 455661/4594 bytes for SCSI command 0x0-- guessing data in; [ 462.288363][T17664] program syz.8.3592 not setting count and/or reply_len properly [ 462.324505][T17657] loop9: p3 p4 < > [ 462.328422][T17657] loop9: p3 start 11362048 is beyond EOD, truncated [ 462.335325][T17665] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3591'. [ 462.458760][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3598'. [ 462.462334][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 462.485782][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 462.680262][ T2115] bond0 (unregistering): Released all slaves [ 462.687512][ T2115] bond1 (unregistering): Released all slaves [ 462.712284][T17676] tipc: Started in network mode [ 462.717173][T17676] tipc: Node identity ac14140f, cluster identity 4711 [ 462.724237][T17676] tipc: New replicast peer: 255.255.255.255 [ 462.730574][T17676] tipc: Enabled bearer , priority 10 [ 462.756555][T17689] loop7: detected capacity change from 0 to 1024 [ 462.764218][T17689] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 462.774915][ T2115] hsr_slave_0: left promiscuous mode [ 462.783493][T17689] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3600: bg 0: block 10: padding at end of block bitmap is not set [ 462.800960][ T2115] hsr_slave_1: left promiscuous mode [ 462.812325][T17696] netlink: 84 bytes leftover after parsing attributes in process `syz.8.3602'. [ 462.818490][T17689] loop7: lost filesystem error report for type 5 error -117 [ 462.832270][T17689] Quota error (device loop7): write_blk: dquota write failed [ 462.838820][ T2115] veth1_vlan: left promiscuous mode [ 462.839639][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 462.847153][ T2115] veth0_vlan: left promiscuous mode [ 462.852186][ C0] EXT4-fs (loop7): initial error at time 1774559246: ext4_validate_block_bitmap:441 [ 462.873209][ C0] EXT4-fs (loop7): last error at time 1774559246: ext4_validate_block_bitmap:441 [ 462.882557][T17689] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2 [ 462.891918][T17689] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 462.901850][T17689] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3600: Failed to acquire dquot type 0 [ 462.913126][T17689] loop7: lost filesystem error report for type 5 error -28 [ 462.915413][T17689] Quota error (device loop7): write_blk: dquota write failed [ 462.930186][T17689] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2 [ 462.939294][T17689] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 462.949290][T17689] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3600: Failed to acquire dquot type 0 [ 462.960636][T17689] loop7: lost filesystem error report for type 5 error -28 [ 462.960771][ T2115] team0 (unregistering): Port device macvlan1 removed [ 462.975715][T17689] EXT4-fs error (device loop7): ext4_free_blocks:6724: comm syz.7.3600: Freeing blocks not in datazone - block = 0, count = 4096 [ 462.989155][T17689] loop7: lost filesystem error report for type 5 error -117 [ 462.989485][T17689] Quota error (device loop7): write_blk: dquota write failed [ 463.006268][T17689] Quota error (device loop7): find_free_dqentry: Can't write quota data block 2 [ 463.016377][T17689] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3600: Failed to acquire dquot type 0 [ 463.028125][T17689] loop7: lost filesystem error report for type 5 error -28 [ 463.028296][T17689] EXT4-fs (loop7): 1 orphan inode deleted [ 463.053822][T17689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.085207][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.097610][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.110425][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.122183][T17580] bridge_slave_0: entered allmulticast mode [ 463.141655][T17580] bridge_slave_0: entered promiscuous mode [ 463.148339][ T56] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.266219][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.273935][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.281255][T17580] bridge_slave_1: entered allmulticast mode [ 463.287750][T17580] bridge_slave_1: entered promiscuous mode [ 463.295179][ T56] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.359988][ T56] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.388524][ T56] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.401859][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.429878][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.593594][T17580] team0: Port device team_slave_0 added [ 463.695442][T17580] team0: Port device team_slave_1 added [ 463.882549][T17722] wireguard0: entered promiscuous mode [ 463.925462][T17722] wireguard0: entered allmulticast mode [ 464.062319][T17730] loop9: detected capacity change from 0 to 512 [ 464.089691][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.106337][T17730] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3610: inode has both inline data and extents flags [ 464.146129][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.210370][T17730] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 464.217471][T17730] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3610: couldn't read orphan inode 15 (err -117) [ 464.226654][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 464.226676][ C0] EXT4-fs (loop9): initial error at time 1774559248: ext4_orphan_get:1391: inode 15 [ 464.226709][ C0] EXT4-fs (loop9): last error at time 1774559248: ext4_orphan_get:1391: inode 15 [ 464.295132][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.317793][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.325648][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.352949][T17730] loop9: lost filesystem error report for type 5 error -117 [ 464.353491][T17730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.392473][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.440966][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.474638][T17580] hsr_slave_0: entered promiscuous mode [ 464.482360][T17580] hsr_slave_1: entered promiscuous mode [ 464.488201][T17580] debugfs: 'hsr0' already exists in 'hsr' [ 464.494328][T17580] Cannot create hsr debugfs directory [ 464.769921][T17580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.779065][T17580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.788758][ T3500] tipc: Node number set to 2886997007 [ 464.794887][T17580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.807154][T17580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.895011][T17771] xt_hashlimit: size too large, truncated to 1048576 [ 464.910034][T17766] sg_write: data in/out 402414/4642 bytes for SCSI command 0x0-- guessing data in; [ 464.910034][T17766] program syz.0.3617 not setting count and/or reply_len properly [ 464.993955][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.272377][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.897480][T17788] __nla_validate_parse: 2 callbacks suppressed [ 465.897508][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3622'. [ 465.968835][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.975910][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.988445][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3622'. [ 466.001150][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.008213][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.023428][T17791] loop9: detected capacity change from 0 to 2048 [ 466.087599][T17796] xt_hashlimit: max too large, truncated to 1048576 [ 466.090717][T17797] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3625'. [ 466.104005][T17580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.140099][T17797] macsec1: entered promiscuous mode [ 466.145397][T17797] geneve0: entered promiscuous mode [ 466.145480][T17791] loop9: p3 < > p4 < > [ 466.145491][T17791] loop9: partition table partially beyond EOD, truncated [ 466.169777][T17797] macsec1: entered allmulticast mode [ 466.179727][T17797] geneve0: entered allmulticast mode [ 466.181516][T17791] loop9: p3 start 4284289 is beyond EOD, [ 466.189648][T17797] geneve0: left allmulticast mode [ 466.204008][T17791] truncated [ 466.216115][T17797] geneve0: left promiscuous mode [ 466.221709][ T3000] loop9: p3 < > p4 < > [ 466.224059][T17809] loop7: detected capacity change from 0 to 512 [ 466.226186][ T3000] loop9: partition table partially beyond EOD, truncated [ 466.236196][T17809] msdos: Unknown parameter 'lfs' [ 466.240793][ T3000] loop9: p3 start 4284289 is beyond EOD, truncated [ 466.348871][T17802] lo speed is unknown, defaulting to 1000 [ 467.491479][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.580628][T17833] sg_write: data in/out 433134/4762 bytes for SCSI command 0x0-- guessing data in; [ 467.580628][T17833] program syz.0.3633 not setting count and/or reply_len properly [ 467.583579][T17834] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3632'. [ 467.662426][T17839] sg_write: data in/out 429038/4746 bytes for SCSI command 0x0-- guessing data in; [ 467.662426][T17839] program syz.8.3634 not setting count and/or reply_len properly [ 467.750280][T17847] syzkaller1: entered promiscuous mode [ 467.773566][T17847] syzkaller1: entered allmulticast mode [ 467.793080][T17847] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3635'. [ 467.821456][T17580] veth0_vlan: entered promiscuous mode [ 467.850236][T17580] veth1_vlan: entered promiscuous mode [ 467.904249][T17580] veth0_macvtap: entered promiscuous mode [ 467.927753][T17580] veth1_macvtap: entered promiscuous mode [ 467.935191][T17868] loop8: detected capacity change from 0 to 256 [ 467.938958][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.959920][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.962984][T17868] FAT-fs (loop8): bogus sectors per cluster 223 [ 467.988679][T17868] FAT-fs (loop8): Can't find a valid FAT filesystem [ 468.013869][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.025406][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.037941][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.052469][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.071465][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3639'. [ 468.080514][T17868] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3639'. [ 468.095411][T17868] bond5: option updelay: invalid value (18446744073709518596) [ 468.104525][T17868] bond5: option updelay: allowed values 0 - 2147483647 [ 468.113760][T17868] bond5 (unregistering): Released all slaves [ 468.147653][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 468.147666][ T28] audit: type=1400 audit(1774559252.154:2850): avc: denied { ioctl } for pid=17867 comm="syz.8.3639" path="socket:[53649]" dev="sockfs" ino=53649 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 470.453431][T17921] bond4: option mode: unable to set because the bond device is up [ 470.553667][T17924] loop8: detected capacity change from 0 to 256 [ 470.972743][T17924] FAT-fs (loop8): Directory bread(block 64) failed [ 470.979444][T17924] FAT-fs (loop8): Directory bread(block 65) failed [ 470.986112][T17924] FAT-fs (loop8): Directory bread(block 66) failed [ 470.992656][T17924] FAT-fs (loop8): Directory bread(block 67) failed [ 470.999310][T17924] FAT-fs (loop8): Directory bread(block 68) failed [ 471.005824][T17924] FAT-fs (loop8): Directory bread(block 69) failed [ 471.012456][T17924] FAT-fs (loop8): Directory bread(block 70) failed [ 471.019012][T17924] FAT-fs (loop8): Directory bread(block 71) failed [ 471.025596][T17924] FAT-fs (loop8): Directory bread(block 72) failed [ 471.032186][T17924] FAT-fs (loop8): Directory bread(block 73) failed [ 471.221944][T17930] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3646'. [ 471.551333][T17945] FAULT_INJECTION: forcing a failure. [ 471.551333][T17945] name failslab, interval 1, probability 0, space 0, times 0 [ 471.650214][T17945] CPU: 0 UID: 0 PID: 17945 Comm: syz.7.3651 Tainted: G W syzkaller #0 PREEMPT(full) [ 471.650252][T17945] Tainted: [W]=WARN [ 471.650261][T17945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.650276][T17945] Call Trace: [ 471.650284][T17945] [ 471.650414][T17945] __dump_stack+0x1d/0x30 [ 471.650443][T17945] dump_stack_lvl+0x95/0xd0 [ 471.650476][T17945] dump_stack+0x15/0x1b [ 471.650496][T17945] should_fail_ex+0x263/0x280 [ 471.650524][T17945] should_failslab+0x8c/0xb0 [ 471.650623][T17945] __kmalloc_noprof+0xb8/0x4e0 [ 471.650648][T17945] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 471.650718][T17945] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 471.650764][T17945] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 471.650792][T17945] ? selinux_capable+0x31/0x40 [ 471.650824][T17945] ? security_capable+0x7b/0x90 [ 471.650904][T17945] ? ns_capable+0x7c/0xb0 [ 471.650999][T17945] genl_rcv_msg+0x432/0x470 [ 471.651058][T17945] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 471.651093][T17945] netlink_rcv_skb+0x123/0x220 [ 471.651130][T17945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.651155][T17945] genl_rcv+0x28/0x40 [ 471.651179][T17945] netlink_unicast+0x5c0/0x690 [ 471.651242][T17945] netlink_sendmsg+0x5c8/0x6f0 [ 471.651352][T17945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.651392][T17945] ____sys_sendmsg+0x563/0x5b0 [ 471.651436][T17945] ___sys_sendmsg+0x195/0x1e0 [ 471.651549][T17945] __x64_sys_sendmsg+0xd4/0x160 [ 471.651590][T17945] x64_sys_call+0x194c/0x3020 [ 471.651662][T17945] do_syscall_64+0x12c/0x370 [ 471.651687][T17945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.651713][T17945] RIP: 0033:0x7f267d5dc799 [ 471.651765][T17945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.651788][T17945] RSP: 002b:00007f267c02f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.651865][T17945] RAX: ffffffffffffffda RBX: 00007f267d855fa0 RCX: 00007f267d5dc799 [ 471.651882][T17945] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 471.651898][T17945] RBP: 00007f267c02f090 R08: 0000000000000000 R09: 0000000000000000 [ 471.651913][T17945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.651927][T17945] R13: 00007f267d856038 R14: 00007f267d855fa0 R15: 00007fffdd6f7668 [ 471.651992][T17945] [ 472.049335][T17962] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3655'. [ 472.247023][T17957] loop9: detected capacity change from 0 to 1024 [ 472.272826][T17965] syzkaller0: entered promiscuous mode [ 472.316857][T17957] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.334974][T17965] syzkaller0: entered allmulticast mode [ 472.458323][T17957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 472.480581][T17957] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.517897][ T28] audit: type=1326 audit(1774559256.524:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17952 comm="syz.9.3654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x0 [ 472.752373][ T28] audit: type=1400 audit(1774559256.754:2852): avc: denied { lock } for pid=17964 comm="syz.0.3657" path="socket:[52997]" dev="sockfs" ino=52997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 473.644068][T18028] veth0_to_bridge: left allmulticast mode [ 473.655950][T18030] loop7: detected capacity change from 0 to 512 [ 473.662979][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.676517][T18028] veth0_to_bridge: left promiscuous mode [ 473.684919][T18030] EXT4-fs (loop7): inodes count not valid: 1 vs 32 [ 473.715696][T18028] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 473.739585][T18028] bridge_slave_0: left allmulticast mode [ 473.748538][T18028] bridge_slave_0: left promiscuous mode [ 473.765675][T18028] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.779245][T18028] bridge_slave_1: left allmulticast mode [ 473.784943][T18028] bridge_slave_1: left promiscuous mode [ 473.791030][T18028] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.801789][T18028] bond0: (slave bond_slave_0): Releasing backup interface [ 473.810615][T18028] bond0: (slave bond_slave_1): Releasing backup interface [ 473.819863][T18028] veth0_to_team: left allmulticast mode [ 473.825478][T18028] veth0_to_team: left promiscuous mode [ 473.832629][T18028] Ÿë: port 2(veth0_to_team) entered disabled state [ 473.840984][T18028] team0: Port device team_slave_0 removed [ 473.848092][T18028] team0: Port device team_slave_1 removed [ 473.854677][T18028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.862420][T18028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.870245][T18028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 474.079842][T18054] sg_write: data in/out 437230/4778 bytes for SCSI command 0x0-- guessing data in; [ 474.079842][T18054] program syz.8.3664 not setting count and/or reply_len properly [ 474.172454][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3665'. [ 474.348337][T18073] loop1: detected capacity change from 0 to 1024 [ 475.304779][T18073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.319971][T18097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3673'. [ 475.342683][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3668'. [ 475.366153][T17580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.392080][ T28] audit: type=1400 audit(1774559259.404:2853): avc: denied { mount } for pid=18087 comm="syz.9.3670" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 475.448021][T18106] loop7: detected capacity change from 0 to 512 [ 475.464114][T18106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 475.482280][T18106] System zones: 1-12 [ 475.491696][T18106] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.3675: corrupted in-inode xattr: e_value size too large [ 475.535247][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3674'. [ 475.547844][T18106] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 475.548160][T18106] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3675: couldn't read orphan inode 15 (err -117) [ 475.557335][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 475.557355][ C1] EXT4-fs (loop7): initial error at time 1774559259: ext4_iget_extra_inode:5025: inode 15 [ 475.557389][ C1] EXT4-fs (loop7): last error at time 1774559259: ext4_iget_extra_inode:5025: inode 15 [ 475.639222][T18106] loop7: lost filesystem error report for type 5 error -117 [ 475.699108][T18106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.744341][T18106] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.3675: Unrecognised inode hash code 4 [ 475.758682][T18106] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3675: Corrupt directory, running e2fsck is recommended [ 475.775458][T18106] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.3675: Unrecognised inode hash code 4 [ 475.787253][T18106] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.3675: Corrupt directory, running e2fsck is recommended [ 475.835060][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.183212][T18156] lo speed is unknown, defaulting to 1000 [ 476.365508][T18177] sg_write: data in/out 420846/4714 bytes for SCSI command 0x0-- guessing data in; [ 476.365508][T18177] program syz.7.3687 not setting count and/or reply_len properly [ 476.596179][T18180] loop9: detected capacity change from 0 to 1024 [ 476.622986][T18180] EXT4-fs: Ignoring removed orlov option [ 476.638434][T18180] ext4: Unknown parameter 'obj_role' [ 476.716947][T18199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3691'. [ 476.810378][T18203] FAULT_INJECTION: forcing a failure. [ 476.810378][T18203] name failslab, interval 1, probability 0, space 0, times 0 [ 476.825353][T18203] CPU: 0 UID: 0 PID: 18203 Comm: syz.9.3693 Tainted: G W syzkaller #0 PREEMPT(full) [ 476.825455][T18203] Tainted: [W]=WARN [ 476.825463][T18203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.825477][T18203] Call Trace: [ 476.825484][T18203] [ 476.825558][T18203] __dump_stack+0x1d/0x30 [ 476.825619][T18203] dump_stack_lvl+0x95/0xd0 [ 476.825706][T18203] dump_stack+0x15/0x1b [ 476.825731][T18203] should_fail_ex+0x263/0x280 [ 476.825802][T18203] ? vmstat_start+0x8d/0x480 [ 476.825833][T18203] should_failslab+0x8c/0xb0 [ 476.825858][T18203] __kmalloc_cache_noprof+0x5f/0x410 [ 476.825889][T18203] vmstat_start+0x8d/0x480 [ 476.825945][T18203] traverse+0xf4/0x3a0 [ 476.825973][T18203] seq_read_iter+0x85f/0x940 [ 476.826006][T18203] ? _parse_integer+0x27/0x40 [ 476.826156][T18203] ? kstrtoull+0x111/0x140 [ 476.826182][T18203] proc_reg_read_iter+0x110/0x180 [ 476.826271][T18203] do_iter_readv_writev+0x4fd/0x5a0 [ 476.826299][T18203] vfs_readv+0x1f4/0x6e0 [ 476.826329][T18203] __x64_sys_preadv+0xfd/0x1c0 [ 476.826351][T18203] x64_sys_call+0x2915/0x3020 [ 476.826417][T18203] do_syscall_64+0x12c/0x370 [ 476.826441][T18203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.826462][T18203] RIP: 0033:0x7f77deb2c799 [ 476.826478][T18203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.826499][T18203] RSP: 002b:00007f77dd57f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 476.826602][T18203] RAX: ffffffffffffffda RBX: 00007f77deda5fa0 RCX: 00007f77deb2c799 [ 476.826649][T18203] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 476.826665][T18203] RBP: 00007f77dd57f090 R08: 000000000000000a R09: 0000000000000000 [ 476.826677][T18203] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 476.826689][T18203] R13: 00007f77deda6038 R14: 00007f77deda5fa0 R15: 00007ffe27a51068 [ 476.826709][T18203] [ 477.211161][T18214] loop8: detected capacity change from 0 to 128 [ 477.218324][T18214] msdos: Bad value for 'gid' [ 477.222955][T18214] msdos: Bad value for 'gid' [ 477.440463][T18219] bond0: entered promiscuous mode [ 477.458192][T18219] bond_slave_0: entered promiscuous mode [ 477.478102][T18219] bond_slave_1: entered promiscuous mode [ 477.516217][T18219] batadv0: entered promiscuous mode [ 477.522247][T18219] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 477.553441][T18219] bond0: left promiscuous mode [ 477.558397][T18219] bond_slave_0: left promiscuous mode [ 477.565115][T18219] bond_slave_1: left promiscuous mode [ 477.571321][T18219] batadv0: left promiscuous mode [ 477.623437][T18225] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3700'. [ 477.632590][T18225] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3700'. [ 477.764675][T18238] loop7: detected capacity change from 0 to 1024 [ 477.773018][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3704'. [ 477.782924][T18240] lo speed is unknown, defaulting to 1000 [ 477.862164][T18238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.889865][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.004077][T18267] xt_NFQUEUE: number of queues (65533) out of range (got 65539) [ 478.135660][T18270] hub 8-0:1.0: USB hub found [ 478.140445][T18270] hub 8-0:1.0: 8 ports detected [ 478.152731][T18270] netlink: 'syz.8.3710': attribute type 36 has an invalid length. [ 478.168457][T18270] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 478.178401][T18270] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 478.191809][T18270] netlink: 'syz.8.3710': attribute type 10 has an invalid length. [ 478.730746][T18280] netlink: 'syz.9.3716': attribute type 11 has an invalid length. [ 478.738569][T18280] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3716'. [ 478.755644][T18280] loop9: detected capacity change from 0 to 1764 [ 478.780151][T18280] /dev/loop9: Can't open blockdev [ 478.816348][T18284] syzkaller1: entered promiscuous mode [ 478.891079][T18284] syzkaller1: entered allmulticast mode [ 478.972815][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3720'. [ 478.991020][T18295] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3721'. [ 478.996139][T18291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 479.050282][T18297] loop8: detected capacity change from 0 to 512 [ 479.085947][T18297] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 479.102610][T18297] System zones: 1-12 [ 479.158546][T18297] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.3722: corrupted in-inode xattr: e_value size too large [ 479.184777][ T28] audit: type=1326 audit(1774559263.124:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.249080][T18292] bond6: (slave batadv1): Opening slave failed [ 479.309806][T18297] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.316726][T18297] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3722: couldn't read orphan inode 15 (err -117) [ 479.325939][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 479.325956][ C0] EXT4-fs (loop8): initial error at time 1774559263: ext4_iget_extra_inode:5025: inode 15 [ 479.326005][ C0] EXT4-fs (loop8): last error at time 1774559263: ext4_iget_extra_inode:5025: inode 15 [ 479.407040][ T28] audit: type=1326 audit(1774559263.124:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.430581][ T28] audit: type=1326 audit(1774559263.134:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.455916][ T28] audit: type=1326 audit(1774559263.134:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.480840][T18297] loop8: lost filesystem error report for type 5 error -117 [ 479.480900][ T28] audit: type=1326 audit(1774559263.134:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.512393][T18297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.525440][ T28] audit: type=1326 audit(1774559263.134:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.565589][ T28] audit: type=1326 audit(1774559263.134:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.594568][T10542] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.605131][ T28] audit: type=1326 audit(1774559263.134:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.629857][ T28] audit: type=1326 audit(1774559263.134:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18285 comm="syz.9.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77deb2c799 code=0x7ffc0000 [ 479.655288][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 479.656421][T18309] loop7: detected capacity change from 0 to 512 [ 479.679981][T18309] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 479.690176][T18309] EXT4-fs (loop7): Invalid default hash set in the superblock [ 479.842422][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3728'. [ 479.854455][T18319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.872576][T18316] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3728'. [ 479.882266][T18319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.982924][T18318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.992461][T18318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.029942][T18331] sg_write: data in/out 441326/4794 bytes for SCSI command 0x0-- guessing data in; [ 480.029942][T18331] program syz.9.3733 not setting count and/or reply_len properly [ 480.551501][T18352] netlink: 'syz.1.3740': attribute type 1 has an invalid length. [ 480.565215][T18354] FAULT_INJECTION: forcing a failure. [ 480.565215][T18354] name failslab, interval 1, probability 0, space 0, times 0 [ 480.580642][T18354] CPU: 1 UID: 0 PID: 18354 Comm: syz.0.3741 Tainted: G W syzkaller #0 PREEMPT(full) [ 480.580707][T18354] Tainted: [W]=WARN [ 480.580715][T18354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.580728][T18354] Call Trace: [ 480.580735][T18354] [ 480.580744][T18354] __dump_stack+0x1d/0x30 [ 480.580833][T18354] dump_stack_lvl+0x95/0xd0 [ 480.580860][T18354] dump_stack+0x15/0x1b [ 480.580884][T18354] should_fail_ex+0x263/0x280 [ 480.580913][T18354] should_failslab+0x8c/0xb0 [ 480.580996][T18354] kmem_cache_alloc_noprof+0x66/0x400 [ 480.581022][T18354] ? skb_clone+0x151/0x1f0 [ 480.581058][T18354] skb_clone+0x151/0x1f0 [ 480.581161][T18354] __netlink_deliver_tap+0x2c9/0x500 [ 480.581197][T18354] ? netlink_attachskb+0x2e2/0x660 [ 480.581265][T18354] netlink_sendskb+0x126/0x150 [ 480.581290][T18354] netlink_unicast+0x2a2/0x690 [ 480.581317][T18354] netlink_ack+0x4c8/0x500 [ 480.581421][T18354] netlink_rcv_skb+0x192/0x220 [ 480.581504][T18354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 480.581533][T18354] rtnetlink_rcv+0x1c/0x30 [ 480.581555][T18354] netlink_unicast+0x5c0/0x690 [ 480.581596][T18354] netlink_sendmsg+0x5c8/0x6f0 [ 480.581712][T18354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.581743][T18354] ____sys_sendmsg+0x563/0x5b0 [ 480.581779][T18354] ___sys_sendmsg+0x195/0x1e0 [ 480.581905][T18354] __x64_sys_sendmsg+0xd4/0x160 [ 480.581944][T18354] x64_sys_call+0x194c/0x3020 [ 480.582038][T18354] do_syscall_64+0x12c/0x370 [ 480.582067][T18354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.582093][T18354] RIP: 0033:0x7f78fabfc799 [ 480.582111][T18354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.582139][T18354] RSP: 002b:00007f78f964f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.582163][T18354] RAX: ffffffffffffffda RBX: 00007f78fae75fa0 RCX: 00007f78fabfc799 [ 480.582179][T18354] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 480.582195][T18354] RBP: 00007f78f964f090 R08: 0000000000000000 R09: 0000000000000000 [ 480.582210][T18354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.582225][T18354] R13: 00007f78fae76038 R14: 00007f78fae75fa0 R15: 00007ffd4dc87e58 [ 480.582319][T18354] [ 480.894669][T18324] loop7: detected capacity change from 0 to 2048 [ 480.898441][T18363] bridge0: entered promiscuous mode [ 480.911531][T18324] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 480.976000][T18324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.096575][T18381] loop1: detected capacity change from 0 to 512 [ 481.109670][T18381] EXT4-fs: Ignoring removed bh option [ 481.140341][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.150767][T18381] EXT4-fs: inline encryption not supported [ 481.157826][T18381] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 481.264627][T18385] loop9: detected capacity change from 0 to 128 [ 481.271651][T18385] msdos: Bad value for 'gid' [ 481.276369][T18385] msdos: Bad value for 'gid' [ 481.596084][T18381] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 481.618123][T18381] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3748: bg 0: block 248: padding at end of block bitmap is not set [ 481.633135][T18381] loop1: lost filesystem error report for type 5 error -117 [ 481.633419][T18381] __quota_error: 63 callbacks suppressed [ 481.633431][T18381] Quota error (device loop1): write_blk: dquota write failed [ 481.641127][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 481.641147][ C1] EXT4-fs (loop1): last error at time 1774559265: ext4_validate_block_bitmap:441 [ 481.669892][T18381] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 481.679950][T18381] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3748: Failed to acquire dquot type 1 [ 481.691267][T18381] loop1: lost filesystem error report for type 5 error -117 [ 481.691722][T18381] EXT4-fs (loop1): 1 truncate cleaned up [ 481.707780][T18381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 481.722184][T18381] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.3748: deleted inode referenced: 12 [ 481.734178][T18381] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.3748: deleted inode referenced: 12 [ 481.746534][T18381] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0008-000000000000. [ 481.900347][T18398] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.3748: deleted inode referenced: 12 [ 481.924927][T18399] __nla_validate_parse: 1 callbacks suppressed [ 481.924942][T18399] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3754'. [ 481.940562][T18398] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.3748: deleted inode referenced: 12 [ 481.953056][T18398] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.3748: deleted inode referenced: 12 [ 481.995061][T18399] loop9: detected capacity change from 0 to 1024 [ 482.996726][T18399] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 484.013244][T18399] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 484.770850][T18399] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 484.820146][T18399] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 484.836557][T18399] EXT4-fs (loop9): orphan cleanup on readonly fs [ 484.858341][T18399] EXT4-fs error (device loop9): ext4_read_inode_bitmap:167: comm syz.9.3754: Inode bitmap for bg 0 marked uninitialized [ 484.893947][T18399] loop9: lost filesystem error report for type 5 error -117 [ 484.894468][T18399] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.085574][T17580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 485.170300][T16729] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.371642][T18438] loop8: detected capacity change from 0 to 2048 [ 485.481276][T18438] GPT:first_usable_lbas don't match. [ 485.515257][T18443] loop9: detected capacity change from 0 to 128 [ 485.522324][T18443] msdos: Bad value for 'gid' [ 485.526919][T18443] msdos: Bad value for 'gid' [ 485.569308][T18438] GPT:34 != 290 [ 485.587135][T18438] GPT: Use GNU Parted to correct GPT errors. [ 485.658376][T18438] loop8: p1 p2 p3 [ 485.845326][T18450] xt_hashlimit: max too large, truncated to 1048576 [ 485.883943][ T3826] udevd[3826]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 485.887186][T18452] sg_write: data in/out 441326/4794 bytes for SCSI command 0x0-- guessing data in; [ 485.887186][T18452] program syz.7.3765 not setting count and/or reply_len properly [ 485.908120][ T4510] udevd[4510]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 485.923862][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 486.079937][T18438] loop8: detected capacity change from 0 to 512 [ 486.623853][T18468] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3770'. [ 486.750746][T18478] netlink: 'syz.0.3774': attribute type 4 has an invalid length. [ 486.753734][T18480] 9p: Bad value for 'wfdno' [ 486.766478][T18478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3774'. [ 487.617753][T18486] loop7: detected capacity change from 0 to 512 [ 487.638213][T18486] EXT4-fs: Ignoring removed bh option [ 487.653891][T18486] EXT4-fs: inline encryption not supported [ 487.734061][T18486] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.792907][T18486] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 487.870461][T18486] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3777: bg 0: block 248: padding at end of block bitmap is not set [ 487.938836][T18500] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 487.959107][T18486] loop7: lost filesystem error report for type 5 error -117 [ 487.959269][T18486] Quota error (device loop7): write_blk: dquota write failed [ 487.974066][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 487.974102][ C0] EXT4-fs (loop7): last error at time 1774559271: ext4_validate_block_bitmap:441 [ 488.088736][T18486] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 488.130841][T18486] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.3777: Failed to acquire dquot type 1 [ 488.185696][T18486] loop7: lost filesystem error report for type 5 error -117 [ 488.186344][T18486] EXT4-fs (loop7): 1 truncate cleaned up [ 488.250216][T18486] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 488.342136][T18486] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0008-000000000000. [ 488.386405][T18486] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.3777: deleted inode referenced: 12 [ 488.456843][T18521] EXT4-fs error (device loop7): ext4_lookup:1789: inode #2: comm syz.7.3777: deleted inode referenced: 12 [ 488.559536][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 489.412902][T18568] loop9: detected capacity change from 0 to 512 [ 489.429369][T18568] EXT4-fs (loop9): inodes count not valid: 63 vs 32 [ 489.639256][T18584] lo speed is unknown, defaulting to 1000 [ 489.705171][T18591] loop9: detected capacity change from 0 to 512 [ 490.331528][T18614] sg_write: data in/out 424942/4730 bytes for SCSI command 0x0-- guessing data in; [ 490.331528][T18614] program syz.1.3805 not setting count and/or reply_len properly [ 490.451775][T18621] loop1: detected capacity change from 0 to 512 [ 490.466065][T18622] sg_write: data in/out 441326/4794 bytes for SCSI command 0x0-- guessing data in; [ 490.466065][T18622] program syz.0.3809 not setting count and/or reply_len properly [ 490.500557][T18621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.500886][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3810'. [ 490.514270][T18621] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.626070][ T28] audit: type=1400 audit(1774559274.634:2926): avc: denied { ioctl } for pid=18628 comm="syz.0.3812" path="socket:[55640]" dev="sockfs" ino=55640 ioctlcmd=0x8917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 491.080377][T18644] sg_write: data in/out 433134/4762 bytes for SCSI command 0x0-- guessing data in; [ 491.080377][T18644] program syz.7.3814 not setting count and/or reply_len properly [ 491.887525][T18659] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3818'. [ 492.005539][T18666] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 492.036874][T18666] bond5: (slave lo): Enslaving as an active interface with an up link [ 492.056472][T18666] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 492.270922][T18671] loop8: detected capacity change from 0 to 512 [ 492.317319][T17580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.996090][T18696] sg_write: data in/out 451565/4578 bytes for SCSI command 0x0-- guessing data in; [ 492.996090][T18696] program syz.1.3828 not setting count and/or reply_len properly [ 493.055748][T18698] loop7: detected capacity change from 0 to 1024 [ 493.386321][T18702] FAULT_INJECTION: forcing a failure. [ 493.386321][T18702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.415081][T18702] CPU: 1 UID: 0 PID: 18702 Comm: syz.1.3831 Tainted: G W syzkaller #0 PREEMPT(full) [ 493.415114][T18702] Tainted: [W]=WARN [ 493.415178][T18702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.415228][T18702] Call Trace: [ 493.415234][T18702] [ 493.415243][T18702] __dump_stack+0x1d/0x30 [ 493.415271][T18702] dump_stack_lvl+0x95/0xd0 [ 493.415350][T18702] dump_stack+0x15/0x1b [ 493.415374][T18702] should_fail_ex+0x263/0x280 [ 493.415452][T18702] should_fail+0xb/0x20 [ 493.415479][T18702] should_fail_usercopy+0x1a/0x20 [ 493.415541][T18702] _copy_from_user+0x1c/0xb0 [ 493.415574][T18702] ___sys_recvmsg+0xaa/0x3b0 [ 493.415697][T18702] do_recvmmsg+0x1ef/0x560 [ 493.415749][T18702] ? fput+0x8f/0xc0 [ 493.415773][T18702] __x64_sys_recvmmsg+0xe5/0x170 [ 493.415797][T18702] x64_sys_call+0x80f/0x3020 [ 493.415826][T18702] do_syscall_64+0x12c/0x370 [ 493.415908][T18702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.415933][T18702] RIP: 0033:0x7fdfdba2c799 [ 493.416005][T18702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.416023][T18702] RSP: 002b:00007fdfda487028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 493.416042][T18702] RAX: ffffffffffffffda RBX: 00007fdfdbca5fa0 RCX: 00007fdfdba2c799 [ 493.416058][T18702] RDX: 0400000000000284 RSI: 0000200000000040 RDI: 0000000000000003 [ 493.416230][T18702] RBP: 00007fdfda487090 R08: 0000000000000000 R09: 0000000000000000 [ 493.416246][T18702] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 493.416259][T18702] R13: 00007fdfdbca6038 R14: 00007fdfdbca5fa0 R15: 00007ffed9a1bed8 [ 493.416276][T18702] [ 493.607285][T18698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.779634][T18713] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3833'. [ 493.898497][T18715] xt_hashlimit: size too large, truncated to 1048576 [ 494.122254][ T7945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.194110][T18718] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3835'. [ 494.213158][T18724] SET target dimension over the limit! [ 494.265435][T18728] ================================================================== [ 494.273545][T18728] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 494.281480][T18728] [ 494.283807][T18728] write to 0xffff88811c664c70 of 8 bytes by task 18720 on cpu 0: [ 494.291531][T18728] cpu_map_kthread_run+0x4fe/0x1680 [ 494.296822][T18728] kthread+0x22a/0x280 [ 494.300926][T18728] ret_from_fork+0x150/0x360 [ 494.305540][T18728] ret_from_fork_asm+0x1a/0x30 [ 494.310339][T18728] [ 494.312657][T18728] read to 0xffff88811c664c70 of 8 bytes by task 18728 on cpu 1: [ 494.320286][T18728] bq_flush_to_queue+0x124/0x360 [ 494.325228][T18728] __cpu_map_flush+0x47/0xa0 [ 494.329822][T18728] xdp_do_flush+0xf8/0x160 [ 494.334239][T18728] bpf_test_run_xdp_live+0xe8a/0x1360 [ 494.339632][T18728] bpf_prog_test_run_xdp+0x57b/0xa10 [ 494.344935][T18728] bpf_prog_test_run+0x204/0x340 [ 494.349875][T18728] __sys_bpf+0x52e/0x7e0 [ 494.354121][T18728] __x64_sys_bpf+0x41/0x50 [ 494.358554][T18728] x64_sys_call+0x10cb/0x3020 [ 494.363241][T18728] do_syscall_64+0x12c/0x370 [ 494.367845][T18728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.373739][T18728] [ 494.376050][T18728] value changed: 0xffff888153878070 -> 0x0000000000000000 [ 494.383138][T18728] [ 494.385446][T18728] Reported by Kernel Concurrency Sanitizer on: [ 494.391598][T18728] CPU: 1 UID: 0 PID: 18728 Comm: syz.8.3835 Tainted: G W syzkaller #0 PREEMPT(full) [ 494.402546][T18728] Tainted: [W]=WARN [ 494.406342][T18728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.416398][T18728] ================================================================== [ 494.431753][T18718] bond6: option primary_reselect: invalid value (8) [ 494.454362][T18721] loop1: detected capacity change from 0 to 512 [ 494.479692][T18718] bond6 (unregistering): Released all slaves [ 494.492177][T18721] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 494.527179][T18721] EXT4-fs (loop1): 1 truncate cleaned up [ 494.574560][T18726] lo: entered promiscuous mode [ 494.579514][T18726] lo: entered allmulticast mode [ 494.585837][T18726] tunl0: entered promiscuous mode [ 494.594149][T18726] tunl0: entered allmulticast mode [ 494.605868][T18721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.621609][T18726] gre0: entered promiscuous mode [ 494.637036][T18726] gre0: entered allmulticast mode [ 494.664000][T18726] gretap0: entered promiscuous mode [ 494.680634][ T28] audit: type=1326 audit(1774559278.694:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.692638][T18726] gretap0: entered allmulticast mode [ 494.728813][ T28] audit: type=1326 audit(1774559278.694:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.763142][T18726] erspan0: entered promiscuous mode [ 494.787551][T18726] erspan0: entered allmulticast mode [ 494.797275][ T28] audit: type=1326 audit(1774559278.694:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.830338][T18726] ip_vti0: entered promiscuous mode [ 494.835634][T18726] ip_vti0: entered allmulticast mode [ 494.842425][T18726] ip6_vti0: entered promiscuous mode [ 494.844266][ T28] audit: type=1326 audit(1774559278.694:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.847908][T18726] ip6_vti0: entered allmulticast mode [ 494.898743][ T28] audit: type=1326 audit(1774559278.694:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.924271][T18726] sit0: entered promiscuous mode [ 494.947295][ T28] audit: type=1326 audit(1774559278.694:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.954154][T18726] sit0: entered allmulticast mode [ 494.996432][ T28] audit: type=1326 audit(1774559278.694:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 494.998915][T18726] ip6tnl0: entered promiscuous mode [ 495.054117][ T28] audit: type=1326 audit(1774559278.694:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 495.084280][ T28] audit: type=1326 audit(1774559278.694:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 495.086223][T18726] ip6tnl0: entered allmulticast mode [ 495.107959][ T28] audit: type=1326 audit(1774559278.694:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18719 comm="syz.1.3837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfdba2c799 code=0x7ffc0000 [ 495.168909][T18726] ip6gre0: entered promiscuous mode [ 495.169799][T17580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.176434][T18726] ip6gre0: entered allmulticast mode [ 495.200866][T18726] syz_tun: entered promiscuous mode [ 495.210530][T18726] syz_tun: entered allmulticast mode [ 495.228140][T18726] ip6gretap0: entered promiscuous mode [ 495.237759][T18726] ip6gretap0: entered allmulticast mode [ 495.255640][T18726] bridge0: entered promiscuous mode [ 495.265211][T18726] bridge0: entered allmulticast mode [ 495.277410][T18726] vcan0: entered promiscuous mode [ 495.288051][T18726] vcan0: entered allmulticast mode [ 495.300148][T18726] bond0: entered promiscuous mode [ 495.310638][T18726] bond0: entered allmulticast mode [ 495.323391][T18726] team0: entered promiscuous mode [ 495.334888][T18726] team0: entered allmulticast mode [ 495.349218][T18726] dummy0: entered promiscuous mode [ 495.361885][T18726] dummy0: entered allmulticast mode [ 495.375761][T18726] nlmon0: entered promiscuous mode [ 495.388466][T18726] nlmon0: entered allmulticast mode [ 495.402516][T18726] caif0: entered promiscuous mode [ 495.411464][T18726] caif0: entered allmulticast mode [ 495.416911][T18726] batadv0: entered promiscuous mode [ 495.422362][T18726] batadv0: entered allmulticast mode [ 495.432085][T18726] vxcan0: entered promiscuous mode [ 495.438644][T18726] vxcan0: entered allmulticast mode [ 495.444572][T18726] vxcan1: entered promiscuous mode [ 495.454868][T18726] vxcan1: entered allmulticast mode [ 495.465191][T18726] veth0: entered allmulticast mode [ 495.477350][T18726] veth1: entered promiscuous mode [ 495.488690][T18726] veth1: entered allmulticast mode [ 495.507443][T18726] wg0: entered promiscuous mode [ 495.512485][T18726] wg0: entered allmulticast mode [ 495.518428][T18726] wg1: entered promiscuous mode [ 495.534028][T18726] wg1: entered allmulticast mode [ 495.544513][T18726] wg2: entered promiscuous mode [ 495.553191][T18726] wg2: entered allmulticast mode [ 495.570267][T18726] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 495.578142][T18726] bridge_slave_0: entered promiscuous mode [ 495.584422][T18726] bridge_slave_0: entered allmulticast mode [ 495.595734][T18726] veth1_to_bridge: entered promiscuous mode [ 495.603214][T18726] veth1_to_bridge: entered allmulticast mode [ 495.611243][T18726] bridge_slave_1: entered promiscuous mode [ 495.617104][T18726] bridge_slave_1: entered allmulticast mode [ 495.637426][T18726] veth0_to_bond: entered promiscuous mode [ 495.643522][T18726] veth0_to_bond: entered allmulticast mode [ 495.653535][T18726] bond_slave_0: entered promiscuous mode [ 495.661233][T18726] bond_slave_0: entered allmulticast mode [ 495.667297][T18726] veth1_to_bond: entered promiscuous mode [ 495.673246][T18726] veth1_to_bond: entered allmulticast mode [ 495.684940][T18726] bond_slave_1: entered promiscuous mode [ 495.691492][T18726] bond_slave_1: entered allmulticast mode [ 495.699028][T18726] Ÿë: port 2(veth0_to_team) entered disabled state [ 495.706612][T18726] team_slave_0: entered promiscuous mode [ 495.712487][T18726] team_slave_0: entered allmulticast mode [ 495.718475][T18726] veth1_to_team: entered promiscuous mode [ 495.724349][T18726] veth1_to_team: entered allmulticast mode [ 495.738541][T18726] team_slave_1: entered promiscuous mode [ 495.744731][T18726] team_slave_1: entered allmulticast mode [ 495.750787][T18726] –: entered promiscuous mode [ 495.755486][T18726] –: entered allmulticast mode [ 495.763258][T18726] batadv_slave_0: entered promiscuous mode [ 495.769219][T18726] batadv_slave_0: entered allmulticast mode [ 495.779609][T18726] veth1_to_batadv: entered promiscuous mode [ 495.785520][T18726] veth1_to_batadv: entered allmulticast mode [ 495.799271][T18726] batadv_slave_1: entered allmulticast mode [ 495.806995][T18726] xfrm0: entered promiscuous mode [ 495.812680][T18726] xfrm0: entered allmulticast mode [ 495.824137][T18726] veth0_to_hsr: entered promiscuous mode [ 495.840009][T18726] veth0_to_hsr: entered allmulticast mode [ 495.848414][T18726] hsr_slave_0: entered allmulticast mode [ 495.860025][T18726] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 495.888754][ T859] lo speed is unknown, defaulting to 1000 [ 495.895094][ T859] syz2: Port: 1 Link DOWN