last executing test programs: 50.826492629s ago: executing program 3 (id=291): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0xfffffdc9}, 0x0, 0x40}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) rmdir(0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd22, 0x21dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x75}, @IFLA_PORT_PROFILE={0x6, 0x2, '-\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2365c7cd3f23e835a0cb2e586c2c7066"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 49.825411528s ago: executing program 3 (id=303): r0 = socket$inet6(0xa, 0x3, 0x8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffc4a, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x10}, 0x40000) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x5b4, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) 49.753413914s ago: executing program 3 (id=305): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b58dc631604c311225f21db11c7101278ef4c7", 0xe2}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000001fc0)="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", 0x2b5}, {&(0x7f00000006c0)="26bb166f9d5605ee5a4935768bb00bd157448524c61bf81ecb58c4d8a38729506992ffc58a0c9bc5cbd1ef1a8af0e13303563acf18474242b51b33734560b0551065532a071d6d419992df64510924439efb6c94c6b7345148a39ad9139b9f796a2fe5f2ed7c51bc1c74b57cb8fb1d32f99696ca12f884136e6925e2980deba4ac650e78e2db72388a7e568f29b6761bc39155e11d66411f5197e0c8eef74c103bf0024b8c4ee587cf0274dc0b568ba454f5344d308406c87ceba2213072b5252994db2d95a283bcff08ce9b9f2e863f037121a93dec20de2849ad741b3d", 0xde}, {&(0x7f0000000000)="31d2590335dd8e9a87f11f4576e197968e2c4a2ff2256d067b23d5796b252db7d6641546cf4872", 0x27}], 0x6, 0x0, 0x0, 0x900}}], 0x1, 0x40) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@mcast2, 0x801, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x20) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = memfd_create(0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x200401) fallocate(r2, 0x0, 0x0, 0x200401) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc000, 0x0, 0xff, 0xc) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) (async) fcntl$addseals(r0, 0x409, 0xb) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="43b1849c32a1", @remote, @local, @empty}}}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0586300}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}}, 0x0) (async) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 49.501095446s ago: executing program 3 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0xfffffffffffffff6) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) 49.397327216s ago: executing program 3 (id=312): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OKEY={0x8, 0x5, 0x4}]}}}]}, 0x48}}, 0x0) 49.259410458s ago: executing program 2 (id=320): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) read$msr(r0, &(0x7f00000001c0)=""/127, 0x7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) lsm_get_self_attr(0x65, 0x0, &(0x7f00000010c0)=0x20, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xc4, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 49.259287298s ago: executing program 3 (id=321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xc4, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 3) 49.221765462s ago: executing program 32 (id=321): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xc4, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (fail_nth: 3) 48.403595314s ago: executing program 2 (id=337): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xc4, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 47.497845555s ago: executing program 2 (id=355): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xad3, 0x0, &(0x7f0000006680)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000240)}) r4 = dup2(r1, r3) close_range(r2, 0xffffffffffffffff, 0x0) mount$nfs(&(0x7f0000000080)='/dev/mISDNtimer\x00', &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000200), 0x1, &(0x7f0000000400)=ANY=[@ANYRESHEX=r4]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) pwritev2(r5, 0x0, 0x0, 0x1, 0x6, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x40200, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="02050809a26ec1d528bd70000100000004d608040000000000003b027b"], 0x30}}, 0x4000000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000100)=0x13) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x2a, 0x0, &(0x7f0000000000)) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) pidfd_send_signal(r9, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xfffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r10, 0x8905, &(0x7f0000000040)) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000000)={0x2, 0xedb, 0x9, 0x2, 0x19, "e50f74aba6a1a823"}) dup3(r2, 0xffffffffffffffff, 0x0) unlink(&(0x7f00000003c0)='./cgroup.net/cgroup.procs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x30, 0x26, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x5, 0x10}, {0xc, 0xc}, {0x0, 0x4}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040850}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="16000000100001000000000000000000062a0100000000000a0000080900020073797a3000000000140000001100010000000000000000000100000a553f823305aa6da64e1aab8a4393ebda35f5590add9fd0ea3f5e77e23660aa40a49970a0e58be85ceaec37c4ed473622b5d93cbee674e8eec0e4b490c408bb8cf138e5149f796a86964c4230c594", @ANYRESOCT], 0x48}, 0x1, 0x0, 0x0, 0x4008051}, 0x20004811) mmap(&(0x7f000095f000/0x1000)=nil, 0x1000, 0x2, 0x20010, r1, 0x3a8bc000) 47.053404314s ago: executing program 2 (id=357): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) 47.051186434s ago: executing program 2 (id=358): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x10003, &(0x7f0000000380)={[{@nodiscard}, {@jqfmt_vfsv1}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@errors_remount}, {@mblk_io_submit, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@i_version}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@fsname={'fsname', 0x3d, '\\$'}}, {@context={'context', 0x3d, 'root'}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r5, r5, r5) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@sg0, r5, &(0x7f0000000180)) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ftruncate(r1, 0x3) unlinkat(0xffffffffffffffff, &(0x7f0000003380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000004c0)="24edfc117fde28f3e6feb75ed1dc0465e43388b9b098ac11047510d886ef932d532c0f247bda4e7eac0b8b89b50f8af2e648192a54aad89fc411a57f7713d9d09082b53245997e7a0617cd7d5e411e12787427635aa7b4f16ef9254efc152abe04fc9a34c700ea", 0x67}, {&(0x7f0000001340)="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", 0x1000}], 0x2) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 46.635112622s ago: executing program 2 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x800, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0xb00000000000000}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0200000e00000000000002040000000b00000001000085030000000b0000000400000001000000005f005f6100615f6100"], &(0x7f00000000c0)=""/49, 0x46, 0x31, 0x1, 0x78}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x1f, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="154a3ffb6f39a6d45d739c6d5367a62c00699b28db65146836842bb5aadf5b04ab9e8fff71d6394bb1931e581bd2b05fc55c86b9d1708a5e91090675bb11e63c56a15e7e9ddadbff051e0e1b33bd950a938cd602483cb40e05a16210855ddf289991daeb9a7cd45b53028cea16f494c055afb26679fd49c8df406f8ba1c23fa03556719f210876ce748391ad9c624764fc141afaa2fd6a"], &(0x7f0000000080)='GPL\x00', 0x49, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 46.634950312s ago: executing program 33 (id=366): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000216, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0x800, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20000800) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback={0xb00000000000000}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0xfffffffffffffffd, 0x9b0318}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, 0x10000006, 0x0, 0x4, 0x100, 0x4000000010000009, 0x10200}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0200000e00000000000002040000000b00000001000085030000000b0000000400000001000000005f005f6100615f6100"], &(0x7f00000000c0)=""/49, 0x46, 0x31, 0x1, 0x78}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x1f, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB="154a3ffb6f39a6d45d739c6d5367a62c00699b28db65146836842bb5aadf5b04ab9e8fff71d6394bb1931e581bd2b05fc55c86b9d1708a5e91090675bb11e63c56a15e7e9ddadbff051e0e1b33bd950a938cd602483cb40e05a16210855ddf289991daeb9a7cd45b53028cea16f494c055afb26679fd49c8df406f8ba1c23fa03556719f210876ce748391ad9c624764fc141afaa2fd6a"], &(0x7f0000000080)='GPL\x00', 0x49, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 42.367332301s ago: executing program 5 (id=322): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) r1 = accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000500)={r2, 0xfffffffffffffffd, 0x0, [0xffffffffffffd09f, 0x800, 0x1, 0x3, 0x10001], [0x4, 0x7f, 0x545a, 0x100, 0x0, 0x44f, 0xfff, 0x1, 0x100, 0xb420, 0x6, 0x5, 0x1, 0x8, 0x40, 0x57f8, 0x80000001, 0x40, 0x4, 0x8f5, 0x4, 0x1000, 0x4, 0xf3c, 0x7, 0x200000000000000, 0x9, 0x7, 0x3f49, 0x0, 0x8, 0x1, 0x9, 0xfff, 0x1, 0x7, 0xddc, 0xc, 0x2, 0x6, 0x68, 0x52, 0x7fffffff, 0xfff, 0x4, 0x1, 0x40, 0x9, 0x6, 0xfd81, 0xc3, 0x6, 0x0, 0xf, 0x2, 0x9, 0x9, 0x80000001, 0x3, 0x8, 0x6, 0x8001, 0x4, 0x400, 0x80000000, 0x7, 0x401dcca3, 0x81, 0x1ff, 0x9, 0x6, 0x8, 0xf, 0x3, 0x9, 0x101, 0x7, 0x2, 0x3, 0x8000000000000000, 0xfffffffffffffffc, 0x1, 0x2, 0x3ff, 0xff, 0x1, 0xffff, 0x7, 0x3, 0x9, 0x0, 0x1, 0x7, 0x8, 0x1, 0x2, 0x9, 0x0, 0x3, 0x6, 0x4, 0x2, 0x6, 0x3, 0x4, 0x7fff, 0x4, 0x100, 0x3, 0x56e, 0x10, 0x1, 0x0, 0x8000000000000000, 0x3, 0x5, 0xa, 0x2, 0x4cf092ff, 0x8, 0x1]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x404300, 0x0) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000980)=@sr0, r4, &(0x7f0000000a80)={0x101, 0xffffffffffffb819, 0x4, 0x9503, 0x2, 0x9, 0x9, 0x5}) recvmmsg(r0, &(0x7f0000005500)=[{{&(0x7f0000000b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000b80)=""/54, 0x36}, {&(0x7f0000000bc0)=""/214, 0xd6}, {&(0x7f0000000cc0)=""/114, 0x72}, {&(0x7f0000000d40)=""/220, 0xdc}], 0x4, &(0x7f0000000e80)=""/4096, 0x1000}, 0x900000}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/69, 0x45}, {&(0x7f0000002f00)=""/129, 0x81}, {&(0x7f0000002fc0)}], 0x4, &(0x7f0000003040)=""/107, 0x6b}, 0x7}, {{&(0x7f00000030c0)=@qipcrtr, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003140)=""/126, 0x7e}], 0x1, &(0x7f0000003200)=""/98, 0x62}, 0x7}, {{&(0x7f0000003280)=@tipc, 0x80, &(0x7f0000005400)=[{&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/4096, 0x1000}, {&(0x7f0000005300)=""/231, 0xe7}], 0x3, &(0x7f0000005440)=""/145, 0x91}, 0xb722}], 0x4, 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f0000007080)=[{{&(0x7f0000005600)={0xa, 0x4e20, 0x2, @local, 0x10000}, 0x1c, &(0x7f00000056c0)=[{&(0x7f0000005640)="7567f92ca61d875ef5511acfaf8e2b9f2cbbdeb1bdf027464e139ceb83e4526ee7a67758cb9222b44f7f9e539829e082027727827bdacd988be1649c5a93416b60ece93229ac", 0x46}], 0x1, &(0x7f0000005700)=[@dstopts={{0xb0, 0x29, 0x37, {0x3a, 0x12, '\x00', [@ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xd}, @pad1, @generic={0x81, 0x84, "17a0dc17ee8a46a3e7efe6b2000e7c8972cf986a240e507ba962671d81b8de009f6e1a65eaa29bcef84acc5a24fa2b426e038345b629858d6c56adfc318710aa8f108cb8cd1e5312edcf3a5be84a52590b63f4b392e32ac4c9e65ebd813bbe1074f42c25f2929706397f5418951049de584dab70f9519eb8b161b857135c4321eb2162ee"}, @ra={0x5, 0x2, 0x9}]}}}], 0xb0}}, {{&(0x7f00000057c0)={0xa, 0x4e20, 0x0, @mcast1, 0xb}, 0x1c, &(0x7f0000005a00)=[{&(0x7f0000005800)="06c44c8c50b21c8beec29eda641a38bc8a5ad1482895afc03ad6dd8487937962a49ef5bc6502d882ff809ea46722471647d942ce0746ee99c3d0165e6bef9e0f0d2c098638dd0e9b448818aaa3c76fe47028bcfa9c08fe5736fda0494f444fdb7d5e74228d1287ba051bef4925451f15f9d95cc0a4211a3bfa4f", 0x7a}, {&(0x7f0000005880)="21703b1a200f9de961548e63b23233d673311a93acbc616b327cfcc69c7f2f7050d9bba11b6542a71d1940dc8b379b281119f9f6294f2fa0cad67d3462ea12486f279fc1c31cd4c9b7fed5ac67c071a81ea3992a7340c82a5c79a06f3009e2d8db188b379a188e81430026c442e80aa24b3d6cce7ec9707448d06526a48cb0cfcf2c2a7456424f1136b7234edd56495f24dc7dec6be785d9a74bfd74d5a35e22f660edebc3c6c7016a0fee1a52620292d6714966b871696d2e66ae1863d7b5d64ceddabf836e0dc26cb8c41f9c6e", 0xce}, {&(0x7f0000005980)="b7e6f03f727fed3109b4b9cce70dfcbd971e739cc8e9b57bbabc485e43ee5ceb2fd2c0d0cd5cc8056b524d28cf3fc8c399b73fda5b5e37cca39616c7e874c033bdcbce5b8b7089d2937e3ae65c267dc3780652878914e29986125e3eb7c70d7c", 0x60}], 0x3, &(0x7f0000005a40)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x2b, 0xa, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0xffff, [0x4, 0xb46, 0xc3, 0x7, 0x9]}}, @jumbo={0xc2, 0x4, 0xd}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14}}, @hopopts={{0x1028, 0x29, 0x36, {0xff, 0x201, '\x00', [@generic={0x5, 0x1000, "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"}, @ra={0x5, 0x2, 0x1}, @pad1, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x0, 0xc, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x101}, @generic={0x3, 0x44, "242e120a1075f7f4b8b62acb08f277c932f6b0aede9b2f109c2f5fadd4df6b4b5c0de2fbf6852f4eb46c177cd0d6a33b5ba6af4f789a9ab8e61fbead1d7c5ca9995c8bdd"}, @generic={0x6, 0x6, "676379fb4651"}, @enc_lim={0x4, 0x1, 0x7}]}}}], 0x1170}}, {{0x0, 0x0, &(0x7f0000006ec0)=[{&(0x7f0000006bc0)="d6c60e1f677474f45f38a2769c89df3129873b79d24f04ced89e11f3bd021fe2aa8174c980e9b804a1e930c5ab9ff066ee2a248a866cf7bb94fe4e8faacb8122e6ba38b8a493689b9c72c7df096eba0d0d7a052af68e1aa059f0a62b4800e5c0cb878fcb123812d70decc85f4b4abed3a3a6ffc136eb160eb57f7effe866d1d9104ef0442c9c7732febaa25d384ebdd140ec155cd54507a4925e281a7ad43b95d93c7c9ed42e4d5e5f54a9b0001ef78a1e7b3a845f1d7ff80b985060e0bc20df580dafb1545c84afa7066fa8ff643be919780f5c", 0xd4}, {&(0x7f0000006cc0)="da4a28acd9ddeb378e41d5b165ffe22f994f82517710797e775eea9f69830cccf2f514bf5c48081a3c64ce00f68b9ba75ad45ce7ac50b546b4f783e71d44adf83d2bf9735f0e3effb4003c248ce16689ff4d5b4f7975cee5e1662039bf4c437980cea88a5f5822d030fae226c00d2dc7ff88f0b91576d794a02c1ecd10f695d7626ba163815e8807b70a5ba8e2012ff08e707d75b82fed9cb45be6724350fbf787d83768988d275f56bdbeaee3c78e6bc301af828d5203160f55b3d5fa56729be0f07e49e35479d8ac730842ebf42c3bbe8c04f4ab3eb19ac83bdbd4cce4a47021f43642abe4b47a690115767aeba02142008a", 0xf3}, {&(0x7f0000006dc0)="6c26e77c2f3c662519c13863faf6349a6fa65d59f4f627858b221c42bbc4f629a1b599ac6bdb5b3f7cbbb42e2974bc78710f81d2712fc4979617dc67ed08771272d3232fdc9732ed3c4a86f6036c83dcaf621a9363ce442a27a9eec25b4728cb25bacf8aa4777f3291b5029ae7143598347b025ec3c9d21cd72161934146b5815f8a33a9f52878f0aec530276636c556fdac6a663b3d35846a89379a0e18ff0b3eb9313e45d47b3205fdc92c827132bb4ed04636cfb0f22c0900997108fc13387e8e4d81e248344fbf4affc14f3e2c59d425fdc98e6b798ebf0d3752b75d53510e86e526793339790fcc95af33303d", 0xef}], 0x3, &(0x7f0000006f00)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x8, 0x5, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x3, [0x67]}}, @enc_lim={0x4, 0x1, 0x3}, @ra, @hao={0xc9, 0x10, @private2}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2b, 0xc, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x10, 0x9, [0x1000, 0x2, 0x660, 0x3ff, 0x10001]}}, @jumbo={0xc2, 0x4, 0x7}, @enc_lim={0x4, 0x1, 0xf}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x20, {0x3, 0x6, 0xde, 0x3, [0x2, 0x7, 0x4bc0ad14]}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10001}}, @rthdr={{0x88, 0x29, 0x39, {0x87, 0xe, 0x0, 0x5, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @local, @loopback, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x178}}], 0x3, 0x4044040) r7 = openat$urandom(0xffffffffffffff9c, &(0x7f0000007140), 0x840100, 0x0) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000201, r4, &(0x7f0000007180)='./file0\x00') r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000071c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000007300)={r8, &(0x7f0000007240)="7be93d555a1bcf5b6d45b30550a94fec829a47db8f74f27189c94493c13b44afdb655ec6c99c5f67809748f31e16592ff9a7d895bf977e4c1bc2c4e2f5c532037ecab00192bfcacb99ddd9f05e1eff9df993ef35deb74406bc9283a98c6b6b107836384bf8da7c5ee5e2044797bea03239b2931b7da38efa3042abd458071d1089b0eab5bf3b587e592093042747e6392640bbb2b058db8d58cc22cd989dbc87f1b544fa958b04d615498e3a65"}, 0x20) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007380), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000073c0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000007480)={&(0x7f0000007340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007440)={&(0x7f0000007400)={0x3c, r9, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xc73}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x5) pipe2(&(0x7f00000074c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$USBDEVFS_ALLOW_SUSPEND(r11, 0x5522) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007700)={0x18, 0xd, &(0x7f0000007500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], &(0x7f0000007580)='GPL\x00', 0x3cc9, 0x50, &(0x7f00000075c0)=""/80, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000007640)={0x4, 0x10, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000007680)=[{0x1, 0x3, 0x9, 0x5}, {0x1, 0x2, 0xc, 0x6}, {0x4, 0x2, 0x8, 0x4}, {0x4, 0x1, 0x9, 0x5}, {0x0, 0x3, 0x10, 0x2}, {0x0, 0x1, 0x3, 0x7}]}, 0x94) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007a40)={0x6, 0xf, &(0x7f00000077c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xda1e}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x7ff}, @cb_func={0x18, 0x291f331699e2fd69, 0x4, 0x0, 0x2}, @jmp={0x5, 0x1, 0x7, 0x4, 0x0, 0xffffffffffffffe0, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x0, 0x2, 0x1, 0x8, 0xb, 0x20, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000007840)='GPL\x00', 0x1000, 0x93, &(0x7f0000007880)=""/147, 0x41100, 0x2c, '\x00', 0x0, 0x25, r12, 0x8, &(0x7f0000007940)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000007980)={0x4, 0x5, 0x9, 0x800}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000079c0)=[r11, r8, r8, r11, r11], &(0x7f0000007a00)=[{0x5, 0x2, 0x7, 0x2}, {0x3, 0x2, 0x8, 0x3}], 0x10, 0x5}, 0x94) r15 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000007b00)={r14, r10, 0x25, 0x14, @void}, 0x10) removexattr(&(0x7f0000007b40)='./file1\x00', &(0x7f0000007b80)=@known='trusted.overlay.impure\x00') setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000007bc0)=r12, 0x4) recvmsg(r6, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000007c00)=""/79, 0x4f}, {&(0x7f0000007c80)=""/148, 0x94}], 0x2, &(0x7f0000007d80)=""/175, 0xaf}, 0x20) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r12, 0xc0502100, &(0x7f00000081c0)={0x0, 0x0}) ioctl$BLKTRACESETUP(r12, 0xc0481273, &(0x7f0000008a80)={'\x00', 0xfff8, 0x2, 0x5, 0x8f24, 0x0, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000008b00)=0x0) r19 = getpgrp(0x0) getresgid(&(0x7f0000008d80), &(0x7f0000008dc0), &(0x7f0000008e00)=0x0) sendmmsg$unix(r12, &(0x7f000000b500)=[{{&(0x7f0000007e80)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000008040)=[{&(0x7f0000007f00)="723794d22fe887db9477c5f89d9dba6451810558d02d66672eb48e0aba2a04af9d448dd4133fdfe8092f99fbd3f54a905220914290d995b2dee90b84052122713a7311c072c02f3f2a1fe0e81eecedfb45476040c23ba972c58cf28f522c889fdde27d3a94d326493e03f8c340256155cf930b7d27a7e78efa3a0ed19a9c33821d79968937d4f5e6447fea97dbd80c320d1b1aeaa8fcf938eb78326ab4255d00cac3a9b94434b761cae1274c40cccad7f7a2fad4a9e8773f436e6df133ce3c72", 0xc0}, {&(0x7f0000007fc0)="82ebd2c3991711a4f031e80b5d1b95d131b6ded207a373d33f0cd63eb1d4637f2e096290a579e67902faf9a130762ea2705d5c0e5280186955dfd20183acd6ec60c6f23b8fa0a183d9c6e909cf3b1fbf4d9f30719969f08ae1110fbb8dec25ec66c77bff13e17408234be29e", 0x6c}], 0x2, &(0x7f0000008080)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x48002}}, {{&(0x7f00000080c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000008180)=[{&(0x7f0000008140)}], 0x1, &(0x7f0000008240)=[@rights={{0x14, 0x1, 0x1, [r13]}}, @cred={{0x1c, 0x1, 0x2, {r16, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r11]}}, @rights={{0x14, 0x1, 0x1, [r15]}}, @rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x10}}], 0x90, 0x4040044}}, {{0x0, 0x0, &(0x7f0000008800)=[{&(0x7f0000008300)="84a13b86bfaa57a188dd7d836b364087ab7a2e3fb85843fd42df48a5a810c49eca82c1c803611dc606986c8145e8944ca04c4f078764bb52da363e9f4c4a5f2539800c84e07671db35531d80e6c0eb1f17d94ece72980c8e90afc02cf7fe0e04e36a3d09e541f541b3066330f87d461438223d007c836fe3d0edfe", 0x7b}, {&(0x7f0000008380)="20f4e7710478f9f012388d725664bb2efe9f77e2647accf04fc3abd600a91da28d3be61f5590a44a9e592fe70f1a14e87e81d89a229d", 0x36}, {&(0x7f00000083c0)="1fdbb437cc94", 0x6}, {&(0x7f0000008400)="36dfb741363d3cd7c2ba8d51bf3ebf772fdafca6ad5a88c75e3bf9900013b00dd8edabd6cfcbe598eec89d96478aaecc4b061490ba6bfcf33e323ae8f6c494d4dfa6c67d1d44dc09aea871fb3c68121d3f2e5b80ba770c2182af2abe50360d382aa64fd7282f97866cb0d07c73e483d6673704ac9bc6fa34d7aa889d6a5146b0e2717d05e6596b5fc5ad754b758afc3388b8af16e7701ceac2af56177a88f0624db949ab2b80ea8da6f9049ffff982bbdad0ca03fb20d195e237e02a1a014d81", 0xc0}, {&(0x7f00000084c0)="dd31ee1dd8d35ace0fe8a5c40d19d3d8cbf4f904f3ad9596a2475975da6805bb461a57fa3bd392ef4d8c0f0b721b5f9ce98165168893f6c125a0b6e90ceca92e1e319a6c2d241700b4883779fe6ddfab42ed401621236c4bb79fc172140796670e0d67d6c4cc3463518de9d83e20d9", 0x6f}, {&(0x7f0000008540)="4a11c12303bb63a28ef0372e7691f856af27d043ecda617f72b4134b5da15a482f7aa407ac3a271bd6b56fdf51078fbf42d24f57d28adc198e7bee66d9cd332ec6e35052685b28a822b7f261c01e79c24a8543d7e4c940003114d28cb792c8aa048fe1650cc5805dc80680d5c43e6fc03e12a4c83f32c14ebb109cdc7cf902036e7e2d6cef9eadb0c3974d3d9c98cd6418e6d82d4fb92512ae4eedce8300f741ec40f70e12f91a5a47cafd8d2658b84265d53a47cb167d6232798db4b6d32edf26e6", 0xc2}, {&(0x7f0000008640)="bfe74c9a14efdd5869822a76a6ca8ef726baa3e6cb212f2aaaaba2a07d3d1a23f0eaeba92b606f7157a5330079a39379d106e69d61e9f66c1134fe5d2a829acddd80f31a25be5e756a5dab61a340a8321dd04b200fc8d15114dc0c5cce03857bb86e741233eaf2039fd89785073d5e95fef966da4de44adcf7b4ea470a308b50638aefc99b53dc12b09dff145ed119effea2b2", 0x93}, {&(0x7f0000008700)="f97550", 0x3}, {&(0x7f0000008740)="3ec37512ccc0049406f4795234af0d860d3d8ad70801e870e545ae3044f8e6cc609453f2fd83f75bf43a422c5321329bf5eadd3d6b1292339aff84424934945f4dbe83b6ec2377595f305f4b89e650ad4c06a5845d6fa5567b53b63d3c3f295f5097e99de391055394c646fe62feaec9b38c84f033bee0ce56eebfa75c65a2fb0b88016f2140bbf068ff1a9e07db99c0795098e933d990afb64534483d4c9e37f326392a1b18605c78c9efb1b32b8cf999fe15891a6990ff8d401efb5febc2", 0xbf}], 0x9}}, {{&(0x7f00000088c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008a40)=[{&(0x7f0000008940)="1b852f41a6ed11a0c99e458d19aea62aa9a94d9dbad8ee557bb1ea041cc00bd664efa1f174c708bb2c947373e810d581d5d452a030a38d1e798a6ea6880c8f81b050734c32b8a852521bad7dde882a15eac4ff23d89de0c597b5bf033bb81cb767ddce1711724a5a13106082e716ec4752386513344926fbbfa3bc0c7e19a224a34cf6ed558b2cebe8f11433eae08fb2136a04bb38abd75017f4acfc7e3b0318d61c5f314c15f071424000666d2df6207c229de482781b938b5875c07d89d339d7ba9534ef09dd36821a9648c8dab8886392048d205bad436b8c0080b273713bf250a77e4bd9e92d80c2df925272838592d471", 0xf3}], 0x1, &(0x7f0000008b40)=[@rights={{0x1c, 0x1, 0x1, [r11, r3, r3]}}, @rights={{0x20, 0x1, 0x1, [r13, r12, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r17, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r18, r4, r5}}}], 0x80, 0x40}}, {{0x0, 0x0, &(0x7f0000008d40)=[{&(0x7f0000008bc0)="dfa0302be2c18e5c06ff0775c59351355a93ae12f5ed1f856cf28de8519de0eb0d5171fb2cf844d35f454f8e49e400caa01682c9506ee1b081b98b64c0931090b4e5b19774b972e3fb455830beac009499d9a5629082b4e0bec487e90cb12cd3ee3bdd5fe0d4def48d4a2b9b2da965d670066d389b7e0df3a80f6f33f786793eed7bfedc8c93866a551c4e97a8bcdc85e968f3bbe03796706cc8bdda8af20cbbf842c6aadfb604ae5b3e8d68aabc3fb42aaed2c1eb9a7faae40e08dd883f448a0ce2883b405f284be5953735daebb0c9d7", 0xd1}, {&(0x7f0000008cc0)="fd19494aedaa6a0cc4fb69793e17374392e00b22c2efeaa3e5b23398ba3a222f963fecc785c6f4c9117c3956baecc6582da54a64e21ae17739062ec2c151e3702c482f", 0x43}], 0x2, &(0x7f0000008e80)=[@cred={{0x1c, 0x1, 0x2, {r19, r4, r20}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}], 0x60, 0x4000000}}, {{&(0x7f0000008f00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000a040)=[{&(0x7f0000008f80)="57c404c3b5309c64706eb8f19cee3d6a0d368417a6eaa96d348d9d029d98cd5c90fe0928f25db08f32f3e1bbe7dd668dc65e8847c034abc700db275ab0e1338f18607840d0b8f9e4e59e501035fea85747406d2245c06e29343a26b61690936f12f4ee7ad2604a91d32785635f43c13140f2c4f29391d636f0b0958e268a14dc2506c6e08d776bd5ffeaf469e33dbba10adc652adbf3af225f7e9680bdb90fbf8aaa0d4836", 0xa5}, {&(0x7f0000009040)="e46ef69dbff2590c393116691aff9f4f0ff91f4582eef263d09b468df24ec71a17fac1ab1b0b12344ea7bb68fd5dc58d58d047747ef4bc767ab26ab1443559f113052b7d3d07d2614fb1b2290c62dfcbe74ad48962acfca28705b79228ef4e48a6ea0b689f8d698cabc4fd9f42c2234574dfa1b078152d2ae60b1310aa2c55ff8a832445bf7a1eb6c483bae95f89ce1d57f0cd6badf3985ed08d0867fdc4e207068d44d217f0955d3eea2264da4f63def2ee7cd94f7a89b53ad07cae816d0c54bf6b6f00a2c6596a0b7638ec931baa383c3d33495fc8bd0049773657d29fb49926db537a405a22cf1648355c1f793ff09cf4b306e61d93768ed03493cf2657923d41f5cf86eb7cd1106e1a3a9165c2b63860990947d5bbabfa57389e2085a8f9f5d9429dcb10d9bba7a527d702b26d5302bfdc558220678b18d0b685381db2e74a03ac53b35dde3658df26e1b94f1ac072eb32cca2eead5565c3de9244ef804c02da2ee290b92b26ede8ffc186e3c2f97b072117b033c48e7ec45379b44e62682728ca84dc3aab2efd2296d5879ffa02fa4a132b8387f02a075e0d68e86cac9008d4a14d946140c0b682e21ac1b820a17741836c653395ed2242aed79477b3d34cabe018c78de596ebbee822992adb41e15c6e0d986f23ea69149e2a4a44abdc2b1ef81b27c656845fd2bef68b7e66b4744d35045c74ea3b2f8e880615185e258eec04e9048f74dbb6fcf27a543e508ccc63f70c5f1a5a8ec5ffe8ed9adbf695debec4f84d0807fc9dbf4acc30f6bb98a98a686927e0ecfec26d85b44f6e886c3ef729bf923dc271677efb9278e8401265e084690dc21c69e066275de81d61fe2e6888f2bffcfae6867c2cf892e33f9046221fb1d0831dfbc23375f10f4dfed9f43db33c22c36712353a2c50d679dcba396e9d487998b025e068d4db0be0910e0826c8503355e83fdbba881acac83793dadc5d04f99103c7c56d140b0a0f00c78b83aa23f9cfc040b220e2f19ab8bc28b3ed5c582ef5b8cba2fecf924fee2a66c406a22e87b626e86e23fefeb3186103ccf98aa60ec02426116839bcbb6d856d42b91f4df4f1d2282651f2625579f750140ac554648e44afac32ab74e861920ff83c649ad2b9856605fdec7c09441433d2110824c10b095074d3171d6be490e173fd05a9c34aaf0246f8caa52e8e5e2460f2fe0fdc25b350419c11cbb9cf7b7e535bb00b5489942dd8fba0b8c2aad49a5fc872cfc77ba7f53dbf1a4d7d3adc356a88bfebc2a93ec4a1ea0a78a47ca10199d092355d8a4e80e3ecbf656e886126bee5c250a658ce0905074a8e2b25a003f93af36a3fe1aa4e02b94dcc094b14396e09beeebd24b8f0b0c52e9aeecc097bcfad9a5a56be5d3f040599963ffc21e3517d723892d923b6ee39d4563249f025b0d83125b577e02d467c8be66a60a969d76d471e074f80dba8f382fb74dc0efdaec525848089def56bd42987d9094d43fcf4238de14a252f6d9454449fc3a2736b6649fc09f6a4ee7aa42836c0b4213f51cb2c2fea178f692233c9a29bd298052ea901611eae86de91cefee0be8cb3ed1065dc039e51016a4d34166609095c48e24b671025af18592cc0e83b94b940b25823c0c0d8ce7745b4888b4b4438d286bfd2f1e7cbaea80132279f59e62ce9e0f9c39024731ffbb6fede7f374eaf9bc707424fd013c3c2af702d6432ab8c24cf6c822db36739c731ca2fb2dfaf49db5a5c8ebb8f71da207a2425b63ee8eda6fdb882e9bd1ebed19379315670101cb65a52eec6ecd143fe041ec314df37c358f94b7829657b9eb7bce8cf9656afa2f48345357240b00a164649bdff8c0a75a39a8159e91f5340ca90154dc5c33f95310131584d51839a16c72e3d26a432c92967790e95d1b32fdf121278a2db4e21b8ee39dc713bef0e3ea1d15cef8410213fdbbe4df6f553f1d7ac3084315359b5ddc7f8d6ba4191e200ad9df8a9fec79b19548446e63acaaa151d57183cf180a8ec13c3614781cbe21fec18cca5f72fd41a4683c57cb5327ab1eef9fccccde845504ad2f7d26c4a26703d5310aa3807c92def22b74da359a7f09aab10e627dd7f278397de51f42e0e2f05f1e57c2f198c7e46e31b797d39b09fc1652e9e5bba8aee3fcd4bb747476d3fb47f3896c5f871427540153e6c449f4d040c68513f05d7c651333fe2684626ecba76359ba0a1c3dc628d04232f6568fbc60b7758ed5913f072471cb440deb17fcf96afe405bf6179827ea491df2ba6500401039358ed23eed93fab344b49935d268e9d5f0d3cf78a905c80fa798a70eae795545764601f1feea1e3d2777e32e64380590b0a5ca7f9dabc1b649b8bb6126e41f23c48c2690f85bbce43ef306e9990c17f4efca6a1e83edef09032995b4b421fe16e41cac8d948ef84279a64b85943bdf7dc8b5a9b3261afaffa71be4b91be716a76b3426311103b8ac8735371011d5a934b7ae01d3280a7589e2ac3a653e48d7c30c068ec123e18d403452ce1b1d1e904888588a46ae7035d702a6743243e93fe6fe574943849b88fe5522f074fbd31719bfdcc29a732d460f249a20e58b6e928144ae97d1e38f14993940a86e31fecc2b641dbff11a9f531d9d2feaf44f800ed1ff42176bbcc704590622329ab6ec815e2ca1c461c3a526911afe9005045f524f40eaf307bd0c5cec1ab83a1b633a494e062d904baa0478a0326b849c3fc90461c4ba08ea82a32096de736a17e41ab67966f11ecd18993509ff61e1080ab09645b9d1d5e8f221a502c8040d7fc1c9e0f667f6209a39796e6797b8c3c6489c7ee4b364137632a3869f08c54bff92eb61a683d4f5bb7965621c4921e698f58359785cc23cc30f6e1efd96a0ce2926cb033745f9582329604958a35bfdecfaacdb5d270cad8ee3cdfd6caba51d780774e3d3776aea2835b0106333ff920a1face1898787df3ad3f1126552058d113499b66582dd767c301546bc7cc44a948484e8b1d71cbca3fdff4ad7921403d64c43197b3186564ecfce1afb1d502712eb7d71a55e8a2e398507a34d258d6d6bac67a90c496d28b9209d4e8fd27137f68c1abfd823976ca7701bcfccae1d738185aac744bdcac191027cfc3e9988e86a680443ec0849200c61135c79be88a7b360e4969719795a8eeeba215c9b6f02bbe9270f673c79e82f8447a695df8ae737fe5e3d3f8a7dd3a111f459d057b42672d3a20f3632ba75fe172649a10f500b7fa50d784942c6d0c0a0fe6722173c55824b14e1f743e276ecb221a2b30eeee19218ca2aa412c0bfc3a9eebd9478906e395f2e1c5f179d9c0b2bee6c97986b0fa3dfc8e1a937896af735597b05018c7acb5a0c6cc27c01aeaa6dcd657b0f3adf67a314dd610a51535b2423d64d8e064647bf8c3a07c27ac9eada48bc602e1dc512e60287317221149156cb06c7e74662e8ca4ef8edbad14f0c38352677d07adf69e5583613e5d3987746c3396cec9901c311948cb686d5368e5816c5f260cc239f56f952609dccaaf3a187a467785e9dac02b333d7721c71179b4b963c04d58a65e632651594dcc592240cf7e8f1542716f0f2b001e993586654429b2853b1dc1a8d9a2b663741879e875c304902f06816303b53222b28bfd2e255f12f2624ac275c3c0b59ed748cb05610994a7bc2a53a2e87bede082646f277308db659c4900124c0c4a0340d5915709dfab5c97f04052739314e6b645c6a55544711a5dfb591965d33a2bbd424d80aa72618c70d27da047e72046da7e03729118081f29b8e5dcca35fa162bca2ffaafaabf05fb017e4cfd78c0eb9415bf882792068dd7457977280b47bcb215d8f217ef1934c2b0f63eece0a1d2092778676919acb80e07f5e062b1fbe3ced13f64c7311e35287df0f0cd89eb0fabbf62ffb44d4c9f4e5ba3a13bbbf7d44aac5a1a4d9db78bd3ccc0680a60a88bcf18435bdf3c995f664d5bcc1b8477dccbb246ad3408124b13c2c341ec18633bf675de8a1e3d5eed1aab3c90ad6c26c9b85a79e9d03a28c9e38d0854e5b9347c3d59401080ca668d552faa3885bc7395bebc768f6d110d57a804773a33407076aaa0b704bca3f0a15d4fea902af7284054c250d58bc766e4e0b61f0a67844879532b0e6f9bd6a2507b89f30a43f1294d52d7b9a25e6b6091260d4ed7bd8f2774f0ec7ceee0792345b6f63e7ada170b398143891420d7e31e5484fb1a3df53307d69dbcb4c96f9f0de2b82a278cc3f047e73fd9baa4cef18c1d7383eda4022e23906d7fe3f08e33ff1279ac501940a00d20f5d5ceb021ccc1057ce84890c996a5e83a70de6db51abf38c96b15ec6b9f06c4578cb08e760b63ef827f7414e7ede5303398c819942e1e0d4db732d713214005a5aff70565b4e3d6f56c67c3ebe44891c9d32ea234fa752289ec6c7a37128149967b81dffe5a7ccfc79fb96485da0ccb4422bbb81f9649746aac50dde9a3e58e24882cc7c0331fa7deb3ed465c1adacb51f175359ebac82ea22be3ca1c231fc11f316f782f7d5e7bce2cdc8530d2abb1c1fe2daa39d0fcdb261f9ae40893684a824386cd8cd5bb35f649b20eeffec17e48e8de5991f24019ad9d61ee7820f04a231d66262bfc0fdf5f59720fac09cbc5ebb16ad3aced1b45024f4d239e1959edbf672e8eaf932f0190c6a9c8da2b3523e07efd61b6afa3077ff41153d78649bbc02d88cd86e9dc6f2e0857f68d3ea92d3dbef5c93b2e196ae563e12510cabcb66f985ff937c9579cfd3e84bcc323cd0068a564445204033e7a96a723bbbf2ef5ebe421cb5abfce42e2f1f6cd23c3e29a8cf15bbd795ec0ca2a94ba3edc62a5bf11f156c3ca6aaa0b38ac99684125995a6daea66926ae4ecbe36f605a6c26d235453ac1af5d689d5637f7109cfe996178022fb23adfbdd38e2507b198f9c5916828516b3eb8917900526152da547e3e080286ff29bd2d320b208773aa362f5284ce1d74a6bf75d2f639b804e636f1741c5893b83dc97b7799d36a9c6438f95ca27f8d0fd6333e142993da0ddd4a130a456aad48a7b1f54a25400ba0c1d313ad79acf49ed544d504280299310687df5ce77775f7f86c94cb949a56951be6d525e807f862c3bbc84c8dedd207e353335a29355389ee2d37dbd1484d57c45dd143c3d637558611130a7f27c22771ba61a86965ca51d6e519f898adf8dd616c29883a263d80d1c8dc4e43499fa8a12cc192d958da0beaf2e878f7c36b84ad8a812a3e0a64b40b1e0a8444374b334c3fb4b89c0973ddf6aad38a2742a37148af80e2f7f4840fb1945c8c9a2ddf6b37730691d58ae3098bd40105e4ada23f3c7e390c62902e4ebf5dddd411bf0ecdd0c411fba4754452136188a475211c82210956b3944dc80ce8bb28f645c5b0f0cd37e4ab1ea1ac3849a62f193b482dbe1570b25e8c89f07bd47d6d2b416ff21a8fbf9592f5618b4e2fc785efb1c56387aa27772a8004de9c22f47c732bee0d654124b29a119a72cb0fb1d70d4fdc3bf5a6fdad211a9164e139815d386c97f11632f092f42441d3980b35b51a89733816fef7041d6897ee97d8c0c28927a105ee6b9f1657c5f81c06bb00e24633a62ac5b86ce8780171b8d442b349857536482747d0588192e36fa906102149ffdbdf6eee0b6ea9a3802a3f37b679166d183971950b921a6fe94f41880f5527b72ee71d489919c5a2c7e1a7d3f67f0d3e90470b8061179379113797746eaca8b78120683af6974641de37f3b07cfededb6c32b981ba6aceb6c30003eca58eb61b4c7648e992c84cd36f0deaf0", 0x1000}], 0x2, &(0x7f000000a2c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x28, 0x1, 0x1, [r0, r11, r15, r15, r3, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, r8]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x30, 0x1, 0x1, [r8, r11, 0xffffffffffffffff, r12, 0xffffffffffffffff, r6, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r5}}}], 0x150, 0x90}}, {{0x0, 0x0, &(0x7f000000a640)=[{&(0x7f000000a440)="ddf9556eca69ec01a9", 0x9}, {&(0x7f000000a480)="90e04e4697274dcfa282b3c6dcf576421986b8589931c537873a0e13b998aa7d1dc963f4e12c73e972c3069b23ae523cd33e25644d53c6bae776df9c1802fafde50a164d3dfd54e9e92aa200f27516213d75aa6f5ce097edaa347cbd452f825f7c528f0ffe0fa73b265675da09dae8730242e76d7838b3cd109af32beea8c0867b194494285dda35f5ce321ac85db8b63586c02086e0412f54630a73c8d4433784f909feb5d1c8aa1baf5ec6f4", 0xad}, {&(0x7f000000a540)="c6dd56a913a091f7c56bc1582cf7b250f6379a6db796a4594b69704320a740c794e6557f8e26abb600fc600e0ea672879c70b9ad143de17cbc5d473449f7080a4d0d9587fab2006e876844423b29de0c2ef20bfd187b3e425a1e7e3b328bd70954676de3f8721ed3264b049a65d2bc4d3408b51f59e2ffad36112c26a73615ef2ca6cabd03d39704b1e543df2f91dbb94b43a0f54ff1d4710a4d8be871087675aec08cf604822e37612eb17ed88b469e8ccf0f3b0ba94f9241b6fb8a9fe941b993a4b1420bb0ce80fc246d821366064ab82db21d118de18ccf58c861485ca7c7303c001e6adb262f", 0xe8}], 0x3, &(0x7f000000a680)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r14, r0, r11, r15, r6]}}], 0x48, 0x4000}}, {{&(0x7f000000a700)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f000000a880)=[{&(0x7f000000a780)="22934c3eb100dc6141266d2616a0cdb193f5c45e4411bcd45574d66d15021814f2f9c6d6a7ca49d9a04f3bab6dddde4464daa89fe7386adc18d6d53a2fff4d7eeea55f9fdbf64e35735ab60755fd06231d5252d1ba15f58d744ecd5f254527a86cd1e0d7cd4fc9b5224a675f82f699936e7e99404402bf913065a2da89de9200", 0x80}, {&(0x7f000000a800)="c803aef5e064435a8cd1468a3d1cbec50f593a30b4bf8aaff8e186c7cf4d48b326923d08dcbc248c27e8dc12db5a899f11ef7dbca7bccda28ec29d872d574ead719d8e696f036c", 0x47}], 0x2, &(0x7f000000b140)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r15]}}, @rights={{0x18, 0x1, 0x1, [r0, r12]}}, @rights={{0x18, 0x1, 0x1, [r6, r12]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}], 0x100, 0x20000000}}, {{&(0x7f000000b240)=@file={0x1, './file0\x00'}, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f000000b400)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x18, 0x1, 0x1, [r12, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r13, 0xffffffffffffffff, r14, r3, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r14]}}], 0xe0, 0x40}}], 0x9, 0x40000c0) 42.302223027s ago: executing program 5 (id=399): sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c010) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) sched_setscheduler(0x0, 0x3, &(0x7f0000000100)=0x7) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1411, 0xa91, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000180)={&(0x7f00000002c0)=""/48, 0x30}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, r2, 0xffbfffffffffffff, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x80, 0xfe, 0x0, 0x0, 0x200, 0x10200, 0x9, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x2}, 0x800c, 0x200004, 0x1, 0x1, 0x6, 0x35, 0x6f88, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x80000000000004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000000206010200000000000000000000000011000300686173683a6e65742c6e657400230000050005000d00000005000400000000000900020073797a31000000000500010007000000"], 0x4c}}, 0x0) read(r3, &(0x7f0000000000)=""/65, 0x41) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") socket(0x400000000010, 0x3, 0x0) r5 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x32}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x7a4, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x32}, 0x2, @in=@local, 0x3506, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)=""/116) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 41.414297026s ago: executing program 5 (id=405): r0 = syz_io_uring_setup(0x426, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000090}, 0x44014) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r4, 0x40085507, &(0x7f0000000080)=0xfffffffc) 41.069152727s ago: executing program 5 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x16, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffe, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 41.068785557s ago: executing program 34 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0x60, 0xd0e0000, 0x0, 0x100, 0x390, 0x1d8, 0x1d8, 0x390, 0x1d8, 0x7fffffe, 0x0, {[{{@uncond, 0xee02, 0x2a0, 0x2c0, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x3, 0x77, 0x7, 0x2}, {0x16, 0x5d, 0x8, 0xf}, {0x0, 0x7, 0x4, 0x5}, {0x200, 0x10, 0x4, 0x401}, {0x2, 0x7, 0x9, 0x7}, {0x8, 0x2, 0x40, 0x80}, {0x7, 0x10, 0x4, 0xc27e}, {0x0, 0x8, 0x1, 0x9}, {0xa66, 0xf9, 0x2, 0x40}, {0xf207, 0x18, 0x1, 0x6}, {0x2, 0x8, 0x6, 0xb6}, {0x0, 0x5, 0x5, 0x4}, {0x9, 0x7f, 0x5, 0x2}, {0x5, 0x2, 0xf, 0xc00}, {0x1, 0x9, 0x2, 0x54}, {0x3, 0x2b, 0x2, 0x3}, {0xffff, 0x5, 0x6d, 0x7}, {0x6, 0xa, 0x5, 0x51d8}, {0x8, 0xe, 0x5}, {0x0, 0x40, 0x7, 0x88}, {0x7, 0x2, 0x6, 0x3}, {0x98d, 0x2, 0xff, 0x5}, {0x81, 0x1, 0x3, 0x7f}, {0x1, 0x2, 0xc0, 0x86f}, {0x8, 0x2, 0x9, 0x6}, {0x7, 0x75, 0x7, 0xd}, {0x6, 0x6, 0x6, 0x8001}, {0x120, 0x5, 0x2, 0x3dbd}, {0x5, 0x8, 0x9, 0x1}, {0x0, 0x3, 0x9, 0xff}, {0x0, 0x4, 0x0, 0xfffffff8}, {0x7, 0x1, 0x9, 0xd}, {0xfff, 0x7, 0x0, 0xbc}, {0x0, 0x4c, 0x8, 0xff}, {0x8, 0xc0, 0x80, 0x4}, {0x1, 0x1, 0x0, 0x508d}, {0x1ff, 0x5, 0x81, 0xd}, {0x0, 0x0, 0x2, 0x5}, {0x401, 0x3, 0x80, 0x9}, {0x9, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xfb, 0x7}, {0xa, 0xff, 0x1, 0x7fffffff}, {0x7, 0x4, 0x7, 0x40}, {0xa, 0xc, 0x6, 0x5}, {0x9, 0x8, 0x7, 0x10000}, {0xe9, 0x6, 0x3, 0x3}, {0xb, 0x7, 0x7, 0x200}, {0xe, 0x5, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x1}, {0x9, 0x1, 0x7, 0x1}, {0x1c0, 0x5, 0x2, 0x8e1}, {0x0, 0x5, 0x0, 0x7f07}, {0x6, 0x0, 0x1, 0x1ff}, {0x2, 0x28, 0xfc, 0x8}, {0x6, 0x3, 0x7, 0x2}, {0xa, 0xc5, 0x4, 0x3}, {0x3, 0x71, 0x8, 0x7}, {0x6e, 0x2, 0x0, 0x8}, {0x0, 0x7, 0x7, 0x10000}, {0x9, 0x7, 0x5, 0x7}, {0x100, 0x8, 0x3}, {0xd34, 0x7, 0x8}, {0x9, 0x9, 0x1, 0x80000001}, {0x6, 0xfe, 0x3, 0x3}], {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0xffffffff, 0xffffff00, 'veth1_virt_wifi\x00', 'xfrm0\x00', {}, {}, 0x1, 0x1, 0x6c}, 0x9400, 0x70, 0xd0, 0x94}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xfffe, [0x0, 0x5, 0x0, 0x6, 0x4, 0x6], 0x0, 0x3}, {0x0, [0x5, 0x1, 0x6, 0x0, 0x3, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x488) 22.381404419s ago: executing program 4 (id=583): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000002480), 0x1, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 22.381100209s ago: executing program 4 (id=584): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x14, r1, 0x705, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0xa1ff}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 22.340117043s ago: executing program 4 (id=585): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 22.182595207s ago: executing program 4 (id=587): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_async', 0x20001, 0x82) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) (async) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="855fc32839c1d5b7f4eddfd658a8d8cf3dd056dca36632e6143e9561b2c9a742c6876d4b8d153c09e2bcfab8f722458a5082e7aba36a30cca1adcbe0909a857f6499203f6a56db24e08e16e431e2a35f", @ANYRESDEC, @ANYRESDEC, @ANYRESHEX=0x0], 0x2, 0x9fc, &(0x7f0000002680)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x3, &(0x7f00000001c0)={[{@lazytime}, {@norecovery}, {@test_dummy_encryption}, {@grpid}]}, 0x1, 0x612, &(0x7f0000000740)="$eJzs3c1vFOUfAPDvbLfvv58txKh4kCbGQKK0tIIhxkS4E4IvN71UWghSKKE1WiSxJHgxGi8eTDx5EP8KlcSr/4AHL54MCTGGgxgia2Y7U7Yvu3Tb7k7pfj7J0HnpzvMd6Jfvs0+f2QmgY42kf5Qi9kXE5SRiqOZYObKDI0vfd/eva2fSJYlK5a0/k7j2SbJYe64k+7one/G/Q5GkL9878cOaducWrl6YnJmZvpJtj81fvDw2t3D10PmLk+emz01fmnhl4tjRI0ePjR/e+vVlTt54/8Ohz069890395Px7387lcTxeNC1dCy9rtWv7d1Sy2nbI1FZcq92f/r3emyL594p/h7Kf05y/ZGUCwuHJp3Nfh67I+LpGIqumn/Nofj0jUKDA1qqkkReo4COk2wq//u2PxCgzfJ+QP7efr33wWuVWtwrAdrhzomlAYCl3O+OiDz/y9nYWV91bGDgbrJinCeJiK2NzC1J2/jl51M30iXqjMMBrbF4vTcbt19d/5Nqbg5HX3Vr4G5pRf6XapZ0/5ubbH9k1bb8h/ZZvB4Rz2T1vyeayv+Rmvx/b5Pty38AAAAAAADYPrdORMRL683/Ky3P/+lZZ/7PYEQc34b2H/37v9LtbCXZhuaAGndORLy27vzf5Tm+w13Z1v+r8wG6k7PnZ6YPR8QTEXEwunvT7fFV562dIXzoi71f12u/dv5fuqTt53MBszPdLq+6EXdqcn5yq9cNRNy5HvFsdf7v/mzPyvk/af1P1qn/aX5f3mAbe1+4ebresUfnP9AqlW8jDqxb/x92t5PGn88xVu0PjOW9gtzDHsBzH3/5Y7325T8UJ63/A43zvzep/byeuebO3xMRLy+UK/WOb7b/35O83ZWfP/XR5Pz8lfGInuTk2v0TzcUMu1WeD3m+pPl/8PnG43/L/f+aPOyPiMXVJ68zQvfUg8Hf68Wj/kNx0vyfalz/h1fW/+ZXJm4O/1Sv/dMbqv9HqjX9YLbH+B/UWvt5HBtN0ELCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHXCki/hdJaXR5vVQaHY0YjIgnY6A0Mzs3/+LZ2Q8uTaXHqs//L+VP+h1a2k7y5/8P12xPrNzuT9vaExFfdfVXj4+emZ2ZKvriAQAAAAAAAAAAAAAAAAAAYIcYrN7zX+ldff9/6o+uoqMDWq6cfZXv0Hmy/P/83aZfWend/miAdioXHQBQmI3nf3dL4wDar37+37tfqWprOEAb6f9D59pk/vt1AewC6j90qg2O6fW1Og6gCOo/AAAAAADsKnv23/o1iYjFV/urS6onO2ayP+xupaIDAApjDi90rvJs0REARfEeH0iW1/5Z92b/+rP/k9YEBAAAAAAAAAAAAACscWCf+/+hUzW+/9/cftjNGtz/X03+8oa/HXjc1H/0h9oPu12D9/ge+AUd4lHV3v3/AAAAAAAAAAAAALAD9F29MDkzM31lbuHxW3l9Z4TR3Mri5I4IY6sr/RGxvOdBa9rqjojir7SIlfwjOAoMo+D/lwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGX/BQAA///uyiaG") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x58) (async) getdents(r4, 0x0, 0x58) syz_io_uring_setup(0x10b, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380), &(0x7f0000000280)) (async) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0x10000, 0x0, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x200850, &(0x7f0000000080)={[{@nogrpid}, {@debug}, {@noload}, {@nodelalloc}, {@oldalloc}, {@orlov}, {@nodelalloc}, {@barrier}, {@norecovery}]}, 0x1, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000340)='./file0\x00') (async) chdir(&(0x7f0000000340)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r9, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b941eb6a3f6dedf11f1508685636", 0xfffffffffffffda4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r6, 0x118, &(0x7f0000000000), 0x0, 0x4) 21.333206532s ago: executing program 4 (id=592): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x2c020400) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x67) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000600)=""/224, 0x32, 0xe0, 0x1, 0x2}, 0x28) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) timer_create(0x3, 0x0, &(0x7f0000000300)=0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000c00)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvLRxQ0Nq7ybqxU8d5GOrfT7IzszvrmW93xx7vZB1A16pkT0nE1oj4NSIGatn6ApXan5vXL0/8df3yRBJzcy//mVTL3bh+eaIoWmy3Jc8MpRHp+0nsbVDv9MVLZ8anpiYv5PmRmbNvjkxfvPTE6bPjpyZPTZ4bO3r0yOHRp58ae3JV4sziurHnnfP7dh9/9aMXJ+bitR8+z9q7NV9fjqNmcMV1VqISc7mFpf3V50dW/Or/LdtK6aS3gw1hWXoiIjtcfdX+PxA9sXDwBuKF9+Yz33aogcCayT6bdixa2pP/Tec/v4A7UaKPQ5cqPvGz77/FYz3HH5127dnsebIa/838UVvTG2n2XXaw9o29p8n2x1ZY/9aIODH798fZIxpehwAAWF1fZ+OfxxuN/9K4p1Ruez6HMhgRByNiZ0TcFRG7IuLuiGrZeyPivmXWX7klv3j88/OmtgJrUTb+eyaf26of/6V5iWQ+t60af1/y+umpyUP5PhmKvg1ZfnSJOr55/pcPm62rlMZ/2SOrvxgL5u34o3dD/TYnx2fGVxBynWvvRuzpbRR/Mj8TkO2B3RGxp43Xz/bZ6cc+25elt29ZvP728S9hFeaZ5j6NeLR2/GfjlvgLSa2mZvOTIxtjavLQSHFWLPbjT1dfKuf7Sum6+De2FtPGdoNtIDv+mxue/3n8RTco5munl1/H1d8+aPqdZvHxT+LEbLlE7fxPS0uy878/eaWa7s+XvT0+M3NhNKI/X1C3fGxh2yJflM/iHzrQuP/vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYIv7vn3v4jaX3UJvn/yrI4j+51PGPGEzK8/VtJHrOfPdVs/pbe/87Uk0N5Utaef9rtYEr2XcAAADwf5FW56CTdLhIly5O7YrN6dT56ZmDlXjr3MnaXPVg9KXFla6B0vXQ0fzacJEfuyV/OCJ2VP/TaFM1PzxxfmpbJwMHqvfq1PX/SNPh4dq635v90wtw51jWPFr57sAvvlz9xgDryv2a0L30f+he+j90L/0fulej/n8l4mYHmgKsM5//0L30f+he+j90L/0futLiW+KLn1tp507/hcTO4yvafM0TcwNr8sqzy9+qZ40ijfKPdjRNJBHRXhWRLl2mv4XaO5ZIb1vmWJu7ZRmJ/XliQ0S0utWVddurnX1fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC3/BgAA//+NJdz0") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r4, r4, 0x0, 0x7ffffffc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000001c0)={"8f661e425a868056d57b058e542fae58", 0x0, 0x0, {0x1a, 0xfffffffe}, {0x6, 0x5}, 0xffffffff, [0x7, 0x8, 0x9a, 0x9, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8, 0x1, 0xe2cc, 0x6, 0x8000000000000001, 0x8, 0xfffffffffffffffa, 0x800, 0x528b]}) ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f00000000c0)=r5) timer_getoverrun(r2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 20.819686998s ago: executing program 4 (id=595): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48613, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x40000000000000, 0x1, 0x5, 0x101, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xd) io_setup(0x3ff, &(0x7f0000000500)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x48fc}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) 20.754022344s ago: executing program 35 (id=595): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48613, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x40000000000000, 0x1, 0x5, 0x101, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xd) io_setup(0x3ff, &(0x7f0000000500)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x48fc}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) 5.84784611s ago: executing program 6 (id=775): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48613, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x40000000000000, 0x1, 0x5, 0x101, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xd) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x48fc}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone(0x884000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35}, {}, {0x3}, {}, {}, {}, {0x15}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:e:'], 0x13) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000001300), 0x8) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, 0x0) 4.38219482s ago: executing program 1 (id=784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r1, 0x533, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c040}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x3814004, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7bb, &(0x7f0000000f80)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x480c0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x1}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r4) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x20000800) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r6 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000007060102000000000000000001000008100001"], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x8080) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 4.121028904s ago: executing program 6 (id=788): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x7, 0x282dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x4000000000000008, 0x6}, 0x0, 0x10002, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x108, 0x30, 0xb, 0x0, 0x0, {}, [{0xf4, 0x1, [@m_tunnel_key={0x90, 0xf, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x9e, 0x6, "c735435a11a675b894e6d1abc1f3ed5ada1cdcc487fd838a89b4746cdb4b43ad6cc17b40ee4d74f4c29b0ce940189e476ec773954b3148a463ca0985ff71db5aff344fddfdcde497235d10f03e4528dec8a62901553a7c157ef97c57b3b1a3e12dce038367f9be889b2e5e3072c31215de523b69cd2a568fbb73c563ca2f3cbe11be08d4629324b63efcd232699a10412352651075ec255d16a5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'dummy0\x00', @broadcast}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty, 0xe0}, 0x1c, 0x0}}], 0x300, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000200)={&(0x7f00005a6000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/23, 0x17, 0x1, &(0x7f0000000600)=""/185, 0xb9}, &(0x7f0000000240)=0x40) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000780)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x9}}, {@noblock_validity}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x2000) sendto$inet(r2, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) 3.996901265s ago: executing program 8 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0xfffffdc9}, 0x0, 0x40}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) rmdir(0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd22, 0x21dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x75}, @IFLA_PORT_PROFILE={0x6, 0x2, '-\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2365c7cd3f23e835a0cb2e586c2c7066"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.747831857s ago: executing program 8 (id=791): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0x3}, {0x5, 0xffff}, {0xfff2, 0xf}}}, 0x16}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89a6, 0x4, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a480000000c0a010200000000000000000200000108000440000000000900010073797a31000000000900010073797a30000000000900020073797a3100000000080004400000000194010000160a0102000000000000000001000004080007400000000308000740000000030c000540000000000000000208000500000000010c000540000000000000000504010380a4000380140001007465616d30000000000000000000000014000100636169663000000000000000000000001400010076657468305f746f5f627269646765001400010076657468315f6d6163767461700000001400010074756e6c300000000000000000000000140001006261746164765f736c6176655f3100001400010069703665727370616e300000000000001400010065727370616e3000000000000000000008000140000000000800014000000000080001400000000008000140000000002c00038014000100764c7468305f746f5f627269646765001400010069703665727370616e3000000000000008000140000000000800014000000000340003800800024000000006080002400000000408000240000080010800014000000000080002400000000908000140000000000900020073797a32000000000900020073797a300000000014"], 0x204}, 0x1, 0x0, 0x0, 0x84}, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806050000000000000000000a00000005000140"], 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x0) r5 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) r6 = openat$cgroup_type(r5, &(0x7f0000000000), 0x2, 0x0) readv(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/92, 0x5c}], 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x41, 0x0, 0x0, 0x0, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r11 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) fsconfig$FSCONFIG_SET_FD(r13, 0x5, &(0x7f00000005c0)='fd', 0x0, r12) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0x2) fchdir(r14) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r9, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000) ioctl$SIOCGIFMTU(r5, 0x8921, &(0x7f0000000280)={'veth0_to_bridge\x00'}) 3.581524452s ago: executing program 8 (id=795): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x1000, 0x3, 0x1d1, 0x0, r1}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000040)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0xf48f, 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400f098f672371d1b1cc70024db8695ccc67ee9bc80000000c823236e66fbee9ce95bd86729925a4455a50054b0b13310dbc702d1bd4f8c682d9feb1731c335c989242229f88505c56de7a1e24b1b4a69739e3876b1565feee071815b28", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000040)=0x0) r13 = getpid() r14 = syz_pidfd_open(r13, 0x0) setns(r14, 0x24020000) r15 = syz_clone(0xb3340000, 0x0, 0xf9, 0x0, 0x0, 0x0) r16 = syz_pidfd_open(r15, 0x0) setns(r16, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145c7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) 3.164906839s ago: executing program 8 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @local}, 0x14) sendto$inet6(r4, 0x0, 0x0, 0x4000, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$kcm(0xa, 0x2, 0x88) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) pread64(r6, &(0x7f0000002500)=""/233, 0xe9, 0x7ffffffeffffffff) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 2.950482668s ago: executing program 1 (id=798): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48613, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x40000000000000, 0x1, 0x5, 0x101, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xd) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x48fc}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone(0x884000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35}, {}, {0x3}, {}, {}, {}, {0x15}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:e:'], 0x13) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000001300), 0x8) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, 0x0) 2.516749086s ago: executing program 6 (id=800): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0xf60}, 0xc) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x3, {{0xa, 0x4, 0x0, @private0}}, {{0xa, 0x0, 0x7f, @loopback}}}, 0x112) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000380)="d5a5262ed7cc3ebeab87f45fcada57d44c992371be848d8431b4ad31d57edcaffcabb8d0f7a5d505419ffe03d9ab10bf654a68ea5e855f64d6aa9a3949bd4507354e255a2d90ad97c08ec281a9386d92dc61c6a4a3bd2b3b2c537d34e2ea5cadbd9a765721a284306346cbc4221586089174373fbd86a4c2708af839e25d1b8ce325ef34f58ec73bb6208e5c492a9071d2b43df410577bf37f1c7b91dc8b2e0974376becbec2c7f16341f953c63250519bf44baeb997f7b5d7ed5614170fdb5d19de4d0179d9", &(0x7f0000000280)=@tcp6=r1, 0x4}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) 2.445274673s ago: executing program 7 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = syz_io_uring_setup(0x2152, &(0x7f0000000840)={0x0, 0x4660, 0x1000, 0xfffffffe, 0xa85}, &(0x7f00000004c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2, 0x0, 0xfffffdc9}, 0x0, 0x40}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) rmdir(0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x54, 0x10, 0x1, 0x70bd22, 0x21dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_VF_PORTS={0x2c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x75}, @IFLA_PORT_PROFILE={0x6, 0x2, '-\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2365c7cd3f23e835a0cb2e586c2c7066"}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 2.170833117s ago: executing program 6 (id=805): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000120001030000000000000000000002000000000000000087000000000000000000000000d8640b6c000000000000000000000000219cce619f7a6f27b446e2701d86c423d99c59eefb5f5c0867bb7ea8dd3f5920f6fc67ce3c", @ANYRES32=0x0, @ANYBLOB="0000000000000000fffffff0000000000800030011000000"], 0x54}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 2.083654185s ago: executing program 6 (id=806): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0xfffd, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x25, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x721d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ldst={0x3, 0x0, 0x1, 0x0, 0x6, 0x20, 0xffffffffffffffff}, @map_val={0x18, 0xa, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3c000}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f00000002c0)=""/45, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x0, 0x8, 0x10}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x0, 0x1, 0xe, 0xb}, {0x4, 0x3, 0x9, 0x7}, {0x1, 0x5, 0x1, 0xb}, {0x4, 0x1, 0x204000c, 0x8}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x0, 0xfe, 0x2d, &(0x7f00000004c0)="7ce667d784c7c8eed4bfb554cd9e48cf4a05dbb66512f6b4174df0390bb09db4f9d596c9221f9199b08bbcdac66c4177f63fa6a2618df8e03b7f9c66ba24e74e0503969ba44dbe321dfc2e98697734f05770e154b305da60abfd35de2617a965d831861e61bc209002bfc54125d3ee89ebd060c38bad29f1a0f04a9b7447cfaf88d9fcbacfde590c30cb1c9f3931bcc338905582f2fa9e81d417bc755b2b66afacc17a08b87e89c7782a32279b06f765675557f7bbbeab52dc223aa5083ced68e7382fedf9ee29a71b838cbea31ceced83c774a25b385a7e6bf66de58110155b8781522802548ef4cae185300d8ca90ff120748155d8cee9b5816ca694a2", &(0x7f00000005c0)=""/45, 0x5, 0x0, 0xa5, 0x2b, &(0x7f0000000600)="d5acd49b3a8dbd2053b2ebf45aa890f32062ae6d04192dcdc20c72209ac8e297bd08e31c10bee1d058a85ae561432fadfabd3d5484ffe985b353dfb8dc109adf7b27979aefe361eea5aef6fcc80853c5dc091d87054e02f70d4b96d4593a3c61a020ebbb70f65c1b08d22957c6048befdb27db0f5ed898a7c86f8d2a0bc3e305b13d8fbff3c8b743cf42a9a57ed0005e8512feea062fc507599556bb076afc5ac81345c0ae", &(0x7f00000006c0)="c4ea06bc8079eab18bb769da7c6a8f4e5185b8f569bd6a863beb6435e2871292448288f99b99bf24c04ede", 0x1, 0x0, 0x5f}, 0x50) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0xb, 0x3, 0x0, 0x0, 0xfc, 0x0, 0x4f, 0xff, 0x5, 0x0, 0x8, 0x81}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000100)={r4, 0x9}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r5, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r8, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r7], 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#Y?0W\xb3W\xd2\xbfP\xee'}, 0x30) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) rmdir(&(0x7f0000000000)='./file0\x00') dup2(r0, r0) 2.083392805s ago: executing program 7 (id=807): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="08c58d73617ce08214a3f4bdf29c0803b07f6f4099c288715241790f3b2d0e434afd6320c849beb288275f3f34", 0x2d}], 0x1, 0x1600, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x9}) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xcdfd, 0x280002, @local, 0xfffbfffa}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x4008040) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) 2.063695547s ago: executing program 8 (id=809): dup(0xffffffffffffffff) creat(&(0x7f0000000180)='./file1\x00', 0x102) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000640)="$eJzs2r+LHGUYB/BnzsSLFy574i8SEF+0UJshd7VFDklAXFA0K0RBMvFmddlx99hZDlbEbKWtf4K1WNoJktLmGv8CC7trrkwhjmz21GzYFEHNJfHzaeaBd77M+zLvvDzFHLz29af9bp13i3GsZFmsXIhp3MxiI1biT9N49eUrPz3/7pX339xuty++k9Kl7cubWymlMy/8+MHn3714Y3z6ve/P/LAa+xsfHhxu/br/7P7Zg98vf9KrU69Og+E4FenacDgurlVl2unV/Tylt6uyqMvUG9TlaGG8Ww13dyepGOysr+2OyrpOxWCS+uUkjYdpPJqk4uOiN0h5nqf1teCf6Hx7s2nisDl5NZqmeeKbOH0j1n+JVmRPpuypC9kzV7PnptnZw6ZpHfdU+U94//9vtx3qpyKqr/Y6e535dT6+3Y1eVFHG+WjFbzHbJkfm9aU32hfPp1s24svq+lH++l7nscX8ZrRiY3l+c55Pi/nVWIs4GXGU34pWPL08v7U0fypeeem25+fRip8/imFUsROz7N/5LzZTev2t9h35c7fuAwB41OTpL0v7tzy/2/g8fw/94R391Yk4d+J4105EPfmsX1RVOXpki9kqH4BpKP7NYjXuKZVFTGf74IGY/OMPx6d3rMcS98niOQkAAAAAAAAAAMDD4n79gQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA3fwQAAP//rHDMJg==") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000000000000) 1.447891911s ago: executing program 8 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r1, 0x533, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2004c040}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x3814004, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7bb, &(0x7f0000000f80)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x2}], 0x1}, 0x480c0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000001c0)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x1}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), r4) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x20000800) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) r6 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x37d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000007060102000000000000000001000008100001"], 0x24}, 0x1, 0x0, 0x0, 0x48084}, 0x8080) syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 1.447192932s ago: executing program 6 (id=811): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40009, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000008}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], 0x0, 0xff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x11}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) ioctl$XFS_IOC_BULKSTAT(r3, 0x8040587f, &(0x7f00000001c0)={{0x1, 0x1, 0x1, 0xb884, 0x8001}, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget$private(0x0, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.037571388s ago: executing program 1 (id=812): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xd20a, 0x1000, 0x3, 0x1d1, 0x0, r1}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6000, @fd=r0, 0x1, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x28}, {&(0x7f0000000040)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x1009, 0xf48f, 0x12) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x3a) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400f098f672371d1b1cc70024db8695ccc67ee9bc80000000c823236e66fbee9ce95bd86729925a4455a50054b0b13310dbc702d1bd4f8c682d9feb1731c335c989242229f88505c56de7a1e24b1b4a69739e3876b1565feee071815b28", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000040)=0x0) r13 = getpid() r14 = syz_pidfd_open(r13, 0x0) setns(r14, 0x24020000) r15 = syz_clone(0xb3340000, 0x0, 0xf9, 0x0, 0x0, 0x0) r16 = syz_pidfd_open(r15, 0x0) setns(r16, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa145c7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) 1.037307508s ago: executing program 7 (id=813): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000f80)}], 0x1) 1.023303369s ago: executing program 0 (id=814): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x24, r1, 0x221, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 964.214755ms ago: executing program 0 (id=815): r0 = socket(0x1e, 0x4, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) move_pages(0x0, 0x1, &(0x7f0000000100)=[&(0x7f0000002000/0x4000)=nil], &(0x7f0000001180), 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 877.333592ms ago: executing program 7 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 503.911426ms ago: executing program 1 (id=818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000100039042ab97000eaffffff000003e4", @ANYRES32=0x0, @ANYBLOB="03000000c010060034001280080001007369740028000280080003000a01010214000b00fc01000000000000000000000000000108000c0004000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3ffbffffc, 0xfffffffffffffffd}, 0x10000, 0x3, 0x80, 0x3, 0xffd, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6dbd, &(0x7f0000000a40)={0x0, 0x211a, 0x800a, 0x0, 0x306}, 0x0, 0x0) 503.400476ms ago: executing program 0 (id=828): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x600, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 479.077488ms ago: executing program 0 (id=819): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x40, 0xfd}, {0x6, 0xba, 0xa, 0xfffb}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{&(0x7f0000000940)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x2}], 0x1}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d80), 0x30}}], 0x2, 0x41) 194.791493ms ago: executing program 0 (id=820): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000a40)=0xe8) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) r4 = syz_open_dev$loop(&(0x7f0000000a80), 0xa0000000, 0x101402) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200000, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000b00)={{{@in6=@private0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000c00)=0xe8) r8 = getegid() r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)) setreuid(0x0, 0x0) getgroups(0x4, &(0x7f0000000c40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee01]) r11 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000c80)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) r13 = getgid() r14 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x89e2, &(0x7f0000000740)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000dc0)=0x0) r16 = timerfd_create(0x0, 0x800) fstat(r16, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r17) statx(0xffffffffffffffff, &(0x7f0000000e00)='./file0\x00', 0x4000, 0x20, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x20000}, 0xc, &(0x7f0000000740)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="0c010000313d450020002abd7000ffdbdf251c00028008001300ac1414aa0400fb800800c600", @ANYRES32=0x0, @ANYBLOB="040037800400828057da9ca016ffcd425eb500ddf487c2b49583d42d942b3b0c88558d2bb8c9cce1e5edb863270d1a8b66aa0d75f668728e215a840e374f913990381063e7c14a883f18c6f334e98f9b3b3eb08e6c6c20e12239a75c70672a64c0d73b8ad30297e6cb5750a39d6724c09633df3c18bef1ad9d717399963201b38709d31bbc168b09bac7f2e9f9e6bf2e055d8268fb4e25a1397694560a982399d8f2f4ebd190648127968bda80a035bf14a625249f8c96729815331f680ac941ea87968422b957f2daad487f19aa966614003a8008001c00ffffffff08003100", @ANYRES32=r0, @ANYBLOB], 0x10c}, {&(0x7f0000000380)={0x1f8, 0x15, 0x200, 0x70bd25, 0x25dfdbfd, "", [@generic="a2ffe373f91e34e9b8b8349c2c7e9c046d28f2b8314de498ce571ffb3e836cc8bcb341387a6cd8f6ff9719338d251a27f01788cd054b39930f7b1bbf78622a9f025c4158b746cbe2cd606a3a1a5e69", @generic="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", @typed={0x8, 0x131, 0x0, 0x0, @pid}, @nested={0x90, 0x157, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="948da189b090534356991bcdc48c3c81f60603612a583909449658f18d49e15ee50b3c509b6c0d6e7240b3455660498a65380f800cca2c6c07a4bc0aa2ab92605b7b3c3e83505341c831c20151de214de2fd15d4b7438b03e7ac175854d1283b9f922ec472f65d21f28a7eed4e0858c406b868dcadbe6c2959d9c885d7f2116517f4414e68a3a984"]}]}, 0x1f8}, {&(0x7f0000000580)={0x118, 0x27, 0x400, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xb6, 0x0, 0x0, @fd=r0}, @generic="9cad7fa5aea46a8a5aa7f12a25b2e6a95d10096895dd9eb3280b39012db8c79b8123961fdfc6238c552dd0ffb484f45e14ab8bb44f668ae25b9fc4fe45989c1c11145e15ad037b0e9e86d0fa166dcf4a5533f019b7e7106292edc2449fcf5e15127ef8638f98c24fbe492d0d2599747fb0b75af8dfdf74b9e85d03ecd5163283a7b6dc2c0e608ad2d57c494dea8a074f7529551b08d070ab9c948163bf2b130eb63677dea03ec1a8eb2f5c321cb53bf61627925646cc4d8b6dc29657959b3d511587e636d129afc62eff29dcae53f3b6df02a49eb75aa0a3f088cd8eb0c4bbcad3ad394431ddb1486c08f31cb984b3ceaa44f95ef34d", @typed={0x8, 0x48, 0x0, 0x0, @u32=0xe}]}, 0x118}, {&(0x7f00000000c0)={0x1c, 0x1f, 0x400, 0x70bd28, 0x25dfdbfc, "", [@nested={0xc, 0x34, 0x0, 0x1, [@typed={0x8, 0x111, 0x0, 0x0, @uid}]}]}, 0x1c}], 0x4, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1, r3}}}, @rights={{0x28, 0x1, 0x1, [r4, r0, r0, r0, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r5, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r0, r14, r0, r0, r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r15, r17, r18}}}], 0x140, 0x2000c000}, 0x10) 147.392447ms ago: executing program 7 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x80108906, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 121.54658ms ago: executing program 1 (id=822): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.29504ms ago: executing program 0 (id=823): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48613, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x40000000000000, 0x1, 0x5, 0x101, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xd) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x48fc}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}]}]}, 0xc0}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0x1}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_clone(0x884000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35}, {}, {0x3}, {}, {}, {}, {0x15}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:e:'], 0x13) rt_sigprocmask(0x2, &(0x7f0000000100)={[0xfc6]}, &(0x7f0000001300), 0x8) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$HDIO_GETGEO(r7, 0x301, 0x0) 5.02572ms ago: executing program 1 (id=824): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="08c58d73617ce08214a3f4bdf29c0803b07f6f4099c288715241790f3b2d0e434afd6320c849beb288275f3f34", 0x2d}], 0x1, 0x1600, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffe, 0x0, 0x0, 0x9}) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0xcdfd, 0x280002, @local, 0xfffbfffa}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x30}, 0x4008040) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) 0s ago: executing program 7 (id=825): process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x58040}, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x6100, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) kernel console output (not intermixed with test programs): ermissive=1 [ 65.834786][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.843972][ T28] audit: type=1400 audit(1771364789.945:753): avc: denied { nlmsg_write } for pid=4797 comm="syz.1.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 65.875205][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.875986][ T28] audit: type=1400 audit(1771364790.076:754): avc: denied { shutdown } for pid=4801 comm="syz.1.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 65.899829][ T4802] netlink: 'syz.1.377': attribute type 11 has an invalid length. [ 65.912323][ T58] bond0 (unregistering): Released all slaves [ 65.955546][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.970170][ T4564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.997171][ T58] hsr_slave_0: left promiscuous mode [ 66.006523][ T58] hsr_slave_1: left promiscuous mode [ 66.082739][ T4813] netlink: 182 bytes leftover after parsing attributes in process `syz.0.379'. [ 66.093893][ T58] veth1_macvtap: left promiscuous mode [ 66.106015][ T58] veth0_macvtap: left promiscuous mode [ 66.111910][ T58] veth1_vlan: left promiscuous mode [ 66.120433][ T58] veth0_vlan: left promiscuous mode [ 66.144498][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.268826][ T4820] loop0: detected capacity change from 0 to 8192 [ 66.294435][ T58] team0 (unregistering): Port device team_slave_1 removed [ 66.308074][ T58] team0 (unregistering): Port device team_slave_0 removed [ 66.343879][ T4388] loop0: p1 p2 p4 < > [ 66.353626][ T4388] loop0: partition table partially beyond EOD, truncated [ 66.371707][ T4388] loop0: p1 start 16777216 is beyond EOD, truncated [ 66.378468][ T4388] loop0: p2 size 515840 extends beyond EOD, truncated [ 66.388811][ T4388] loop0: p4 start 16777216 is beyond EOD, truncated [ 66.404156][ T4820] loop0: p1 p2 p4 < > [ 66.408451][ T4820] loop0: partition table partially beyond EOD, truncated [ 66.418934][ T4820] loop0: p1 start 16777216 is beyond EOD, truncated [ 66.451362][ T4820] loop0: p2 size 515840 extends beyond EOD, truncated [ 66.461684][ T4820] loop0: p4 start 16777216 is beyond EOD, truncated [ 66.553908][ T4849] syz.4.383 (4849): /proc/4847/oom_adj is deprecated, please use /proc/4847/oom_score_adj instead. [ 66.584705][ T4760] chnl_net:caif_netlink_parms(): no params data found [ 66.618197][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 66.663235][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 66.675826][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 66.705463][ T4862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.384'. [ 66.789207][ T4760] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.817745][ T4760] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.834838][ T4760] bridge_slave_0: entered allmulticast mode [ 66.841903][ T4760] bridge_slave_0: entered promiscuous mode [ 66.852375][ T4760] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.859531][ T4760] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.866991][ T4760] bridge_slave_1: entered allmulticast mode [ 66.873781][ T4760] bridge_slave_1: entered promiscuous mode [ 67.031009][ T4564] veth0_vlan: entered promiscuous mode [ 67.600711][ T4760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.639497][ T4760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.662932][ T4564] veth1_vlan: entered promiscuous mode [ 67.695325][ T4894] loop0: detected capacity change from 0 to 8192 [ 67.792609][ T4760] team0: Port device team_slave_0 added [ 67.806347][ T4760] team0: Port device team_slave_1 added [ 67.867694][ T4564] veth0_macvtap: entered promiscuous mode [ 67.896028][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.903013][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.940730][ T4760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.961363][ T4916] FAULT_INJECTION: forcing a failure. [ 67.961363][ T4916] name failslab, interval 1, probability 0, space 0, times 0 [ 67.976875][ T4916] CPU: 0 UID: 0 PID: 4916 Comm: syz.0.394 Not tainted syzkaller #0 PREEMPT(full) [ 67.976905][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 67.977016][ T4916] Call Trace: [ 67.977022][ T4916] [ 67.977059][ T4916] __dump_stack+0x1d/0x30 [ 67.977100][ T4916] dump_stack_lvl+0x95/0xd0 [ 67.977129][ T4916] dump_stack+0x15/0x1b [ 67.977156][ T4916] should_fail_ex+0x263/0x280 [ 67.977186][ T4916] should_failslab+0x8c/0xb0 [ 67.977255][ T4916] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 67.977309][ T4916] ? __d_alloc+0x37/0x340 [ 67.977339][ T4916] __d_alloc+0x37/0x340 [ 67.977429][ T4916] d_alloc_pseudo+0x1e/0x80 [ 67.977457][ T4916] alloc_file_pseudo+0x91/0x190 [ 67.977481][ T4916] __shmem_file_setup+0x1dd/0x210 [ 67.977579][ T4916] shmem_file_setup+0x3b/0x50 [ 67.977604][ T4916] memfd_alloc_file+0x4e/0x300 [ 67.977640][ T4916] __se_sys_memfd_create+0x2e1/0x3b0 [ 67.977746][ T4916] __x64_sys_memfd_create+0x31/0x40 [ 67.977780][ T4916] x64_sys_call+0x1f22/0x3020 [ 67.977812][ T4916] do_syscall_64+0x12c/0x370 [ 67.977838][ T4916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.977965][ T4916] RIP: 0033:0x7fdc55aec629 [ 67.977986][ T4916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.978021][ T4916] RSP: 002b:00007fdc54546e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 67.978040][ T4916] RAX: ffffffffffffffda RBX: 0000000000000506 RCX: 00007fdc55aec629 [ 67.978052][ T4916] RDX: 00007fdc54546ee0 RSI: 0000000000000000 RDI: 00007fdc55b82d19 [ 67.978081][ T4916] RBP: 0000200000000f00 R08: 00000000ffffffff R09: 0000000000000000 [ 67.978101][ T4916] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000140 [ 67.978117][ T4916] R13: 00007fdc54546ee0 R14: 00007fdc54546ea0 R15: 0000200000000400 [ 67.978141][ T4916] [ 67.980446][ T4760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.123493][ T4920] netlink: 10 bytes leftover after parsing attributes in process `syz.1.395'. [ 68.125961][ T4760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.210967][ T4760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.248799][ T4564] veth1_macvtap: entered promiscuous mode [ 68.302490][ T4760] hsr_slave_0: entered promiscuous mode [ 68.316679][ T4760] hsr_slave_1: entered promiscuous mode [ 68.327508][ T4760] debugfs: 'hsr0' already exists in 'hsr' [ 68.333504][ T4760] Cannot create hsr debugfs directory [ 68.349764][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.368143][ T4920] loop1: detected capacity change from 0 to 512 [ 68.399091][ T4927] loop4: detected capacity change from 0 to 512 [ 68.426921][ T4920] EXT4-fs error (device loop1): __ext4_fill_super:5565: inode #2: comm syz.1.395: casefold flag without casefold feature [ 68.485910][ T4920] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 68.486117][ T4920] EXT4-fs (loop1): get root inode failed [ 68.495338][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 68.495360][ C1] EXT4-fs (loop1): last error at time 1771364792: __ext4_fill_super:5565: inode 2 [ 68.526375][ T4564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.540236][ T4920] EXT4-fs (loop1): mount failed [ 68.563188][ T4927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.578193][ T4927] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.581022][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.624292][ T4927] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.639028][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.662783][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.771546][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.825338][ T4760] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 68.871711][ T4760] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 68.882002][ T4760] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 68.900600][ T4760] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 69.041601][ T4760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.092172][ T4760] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.128643][ T4961] loop5: detected capacity change from 0 to 8192 [ 69.195767][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 69.195783][ T28] audit: type=1400 audit(1771364793.489:761): avc: denied { create } for pid=4960 comm="syz.5.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.247740][ T28] audit: type=1400 audit(1771364793.489:762): avc: denied { write } for pid=4960 comm="syz.5.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 69.286694][ T28] audit: type=1400 audit(1771364793.559:763): avc: denied { setopt } for pid=4960 comm="syz.5.399" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.324258][ T263] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.331385][ T263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.488495][ T4972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 69.515227][ T4972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 69.563674][ T263] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.570806][ T263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.617569][ T4760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.716760][ T4760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.793693][ T28] audit: type=1400 audit(1771364794.103:764): avc: denied { listen } for pid=4985 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.831915][ T28] audit: type=1400 audit(1771364794.123:765): avc: denied { accept } for pid=4985 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.880874][ T4564] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 69.907192][ T4564] FAT-fs (loop5): Filesystem has been set read-only [ 70.017760][ T4760] veth0_vlan: entered promiscuous mode [ 70.036428][ T4760] veth1_vlan: entered promiscuous mode [ 70.066341][ T4760] veth0_macvtap: entered promiscuous mode [ 70.083443][ T4760] veth1_macvtap: entered promiscuous mode [ 70.136626][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.162647][ T4760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.201913][ T3499] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.221153][ T3499] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.253986][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.282609][ T3499] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.332643][ T3499] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.400355][ T5003] netlink: 48 bytes leftover after parsing attributes in process `syz.0.406'. [ 70.471051][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.532364][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.679278][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.702319][ T5020] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.799028][ T28] audit: type=1400 audit(1771364795.109:766): avc: denied { kexec_image_load } for pid=5019 comm="syz.6.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 70.845627][ T5003] loop0: detected capacity change from 0 to 512 [ 70.855943][ T5020] loop1: detected capacity change from 0 to 512 [ 70.926478][ T5020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 70.941114][ T5003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 70.954986][ T5003] System zones: 0-2, 18-18, 34-34 [ 70.964292][ T5003] EXT4-fs (loop0): too many log groups per flexible block group [ 70.982354][ T5003] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 70.994289][ T5003] EXT4-fs (loop0): mount failed [ 71.018438][ T5020] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.409: corrupted in-inode xattr: bad e_name length [ 71.042703][ T5020] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.042961][ T5020] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.409: couldn't read orphan inode 15 (err -117) [ 71.042988][ T5020] loop1: lost filesystem error report for type 5 error -117 [ 71.043747][ T5020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.115576][ T36] bridge_slave_1: left allmulticast mode [ 71.115596][ T36] bridge_slave_1: left promiscuous mode [ 71.115698][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.116404][ T36] bridge_slave_0: left allmulticast mode [ 71.116460][ T36] bridge_slave_0: left promiscuous mode [ 71.116580][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.136661][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.266645][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.272730][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.303733][ T36] bond0 (unregistering): Released all slaves [ 71.305186][ T5041] FAULT_INJECTION: forcing a failure. [ 71.305186][ T5041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.305219][ T5041] CPU: 1 UID: 0 PID: 5041 Comm: syz.0.412 Not tainted syzkaller #0 PREEMPT(full) [ 71.305290][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 71.305306][ T5041] Call Trace: [ 71.305314][ T5041] [ 71.305323][ T5041] __dump_stack+0x1d/0x30 [ 71.305356][ T5041] dump_stack_lvl+0x95/0xd0 [ 71.305516][ T5041] dump_stack+0x15/0x1b [ 71.305614][ T5041] should_fail_ex+0x263/0x280 [ 71.305640][ T5041] should_fail+0xb/0x20 [ 71.305667][ T5041] should_fail_usercopy+0x1a/0x20 [ 71.305700][ T5041] strncpy_from_user+0x27/0x250 [ 71.305753][ T5041] ? kmem_cache_alloc_noprof+0x2f9/0x400 [ 71.305787][ T5041] do_getname+0x59/0x1c0 [ 71.305810][ T5041] __se_sys_rename+0x20/0x1c0 [ 71.305906][ T5041] __x64_sys_rename+0x31/0x40 [ 71.305925][ T5041] x64_sys_call+0x2b3/0x3020 [ 71.305976][ T5041] do_syscall_64+0x12c/0x370 [ 71.306145][ T5041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.306244][ T5041] RIP: 0033:0x7fdc55aec629 [ 71.306263][ T5041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.306286][ T5041] RSP: 002b:00007fdc54547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 71.306311][ T5041] RAX: ffffffffffffffda RBX: 00007fdc55d65fa0 RCX: 00007fdc55aec629 [ 71.306327][ T5041] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000001f80 [ 71.306356][ T5041] RBP: 00007fdc54547090 R08: 0000000000000000 R09: 0000000000000000 [ 71.306368][ T5041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.306379][ T5041] R13: 00007fdc55d66038 R14: 00007fdc55d65fa0 R15: 00007ffe84630ab8 [ 71.306399][ T5041] [ 71.357956][ T5004] chnl_net:caif_netlink_parms(): no params data found [ 71.400806][ T36] hsr_slave_0: left promiscuous mode [ 71.411609][ T36] hsr_slave_1: left promiscuous mode [ 71.412038][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.412057][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.412429][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.412445][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.416131][ T36] veth1_macvtap: left promiscuous mode [ 71.416159][ T36] veth0_macvtap: left promiscuous mode [ 71.416220][ T36] veth1_vlan: left promiscuous mode [ 71.416253][ T36] veth0_vlan: left promiscuous mode [ 71.595454][ T36] team0 (unregistering): Port device team_slave_1 removed [ 71.598892][ T36] team0 (unregistering): Port device team_slave_0 removed [ 71.676522][ T5063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'. [ 71.676549][ T5063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'. [ 71.723696][ T5070] netlink: 'syz.4.415': attribute type 66 has an invalid length. [ 71.766705][ T28] audit: type=1400 audit(1771364796.085:767): avc: denied { firmware_load } for pid=5052 comm="syz.4.415" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 72.142271][ T5004] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.142467][ T5004] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.143326][ T5004] bridge_slave_0: entered allmulticast mode [ 72.156024][ T5004] bridge_slave_0: entered promiscuous mode [ 72.157894][ T5004] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.158105][ T5004] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.158329][ T5004] bridge_slave_1: entered allmulticast mode [ 72.172996][ T5004] bridge_slave_1: entered promiscuous mode [ 72.259216][ T5004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.267645][ T5004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.377769][ T5004] team0: Port device team_slave_0 added [ 72.388383][ T5004] team0: Port device team_slave_1 added [ 72.505860][ T28] audit: type=1400 audit(1771364796.820:768): avc: denied { ioctl } for pid=5088 comm="syz.4.418" path="socket:[9951]" dev="sockfs" ino=9951 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.506589][ T5004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.506605][ T5004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.506639][ T5004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.511938][ T5004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.511956][ T5004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.511992][ T5004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.590468][ T5097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.420'. [ 72.617682][ T5004] hsr_slave_0: entered promiscuous mode [ 72.618303][ T5004] hsr_slave_1: entered promiscuous mode [ 72.618598][ T5004] debugfs: 'hsr0' already exists in 'hsr' [ 72.618611][ T5004] Cannot create hsr debugfs directory [ 72.628721][ T5095] loop4: detected capacity change from 0 to 1024 [ 72.629092][ T5095] EXT4-fs: Ignoring removed orlov option [ 72.737387][ T5102] FAULT_INJECTION: forcing a failure. [ 72.737387][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 72.737693][ T5102] CPU: 0 UID: 0 PID: 5102 Comm: syz.1.422 Not tainted syzkaller #0 PREEMPT(full) [ 72.737724][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 72.737741][ T5102] Call Trace: [ 72.737748][ T5102] [ 72.737757][ T5102] __dump_stack+0x1d/0x30 [ 72.737806][ T5102] dump_stack_lvl+0x95/0xd0 [ 72.737832][ T5102] dump_stack+0x15/0x1b [ 72.737853][ T5102] should_fail_ex+0x263/0x280 [ 72.737887][ T5102] should_failslab+0x8c/0xb0 [ 72.737929][ T5102] __kmalloc_noprof+0xb8/0x4e0 [ 72.737953][ T5102] ? __list_lru_init+0x72/0x2e0 [ 72.738026][ T5102] __list_lru_init+0x72/0x2e0 [ 72.738058][ T5102] alloc_super+0x519/0x580 [ 72.738092][ T5102] sget_fc+0x24e/0x6e0 [ 72.738127][ T5102] ? __pfx_set_anon_super_fc+0x10/0x10 [ 72.738158][ T5102] ? __pfx_mqueue_fill_super+0x10/0x10 [ 72.738216][ T5102] get_tree_nodev+0x2a/0x100 [ 72.738251][ T5102] mqueue_get_tree+0x63/0x90 [ 72.738371][ T5102] vfs_get_tree+0x57/0x1d0 [ 72.738409][ T5102] fc_mount_longterm+0x18/0xb0 [ 72.738444][ T5102] mq_init_ns+0x2db/0x370 [ 72.738469][ T5102] copy_ipcs+0x26e/0x460 [ 72.738545][ T5102] create_new_namespaces+0x12a/0x440 [ 72.738579][ T5102] unshare_nsproxy_namespaces+0xe6/0x120 [ 72.738611][ T5102] ksys_unshare+0x3cd/0x6d0 [ 72.738691][ T5102] ? ksys_write+0x194/0x1a0 [ 72.738722][ T5102] __x64_sys_unshare+0x1f/0x30 [ 72.738753][ T5102] x64_sys_call+0x1cef/0x3020 [ 72.738787][ T5102] do_syscall_64+0x12c/0x370 [ 72.738822][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.738843][ T5102] RIP: 0033:0x7fe22d36c629 [ 72.738861][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.738880][ T5102] RSP: 002b:00007fe22bdbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 72.738902][ T5102] RAX: ffffffffffffffda RBX: 00007fe22d5e5fa0 RCX: 00007fe22d36c629 [ 72.738920][ T5102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 72.738935][ T5102] RBP: 00007fe22bdbf090 R08: 0000000000000000 R09: 0000000000000000 [ 72.738947][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.738966][ T5102] R13: 00007fe22d5e6038 R14: 00007fe22d5e5fa0 R15: 00007ffe30f90c98 [ 72.738986][ T5102] [ 72.754885][ T5095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.768955][ T28] audit: type=1400 audit(1771364797.091:769): avc: denied { override_creds } for pid=5094 comm="syz.4.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.010990][ T5115] netlink: 'syz.1.424': attribute type 16 has an invalid length. [ 73.011015][ T5115] netlink: 'syz.1.424': attribute type 17 has an invalid length. [ 73.051137][ T5115] lo: entered promiscuous mode [ 73.052330][ T5115] tunl0: entered promiscuous mode [ 73.053536][ T5115] gre0: entered promiscuous mode [ 73.054576][ T5115] gretap0: entered promiscuous mode [ 73.055488][ T5115] erspan0: entered promiscuous mode [ 73.056712][ T5115] ip_vti0: entered promiscuous mode [ 73.057785][ T5115] ip6_vti0: entered promiscuous mode [ 73.058876][ T5115] sit0: entered promiscuous mode [ 73.059953][ T5115] ip6tnl0: entered promiscuous mode [ 73.061318][ T5115] ip6gre0: entered promiscuous mode [ 73.062643][ T5115] syz_tun: entered promiscuous mode [ 73.063806][ T5115] ip6gretap0: entered promiscuous mode [ 73.064717][ T5115] bridge0: entered promiscuous mode [ 73.086336][ T5115] vcan0: entered promiscuous mode [ 73.087570][ T5115] bond0: entered promiscuous mode [ 73.087589][ T5115] bond_slave_0: entered promiscuous mode [ 73.087656][ T5115] bond_slave_1: entered promiscuous mode [ 73.089722][ T5115] team0: entered promiscuous mode [ 73.089741][ T5115] team_slave_0: entered promiscuous mode [ 73.089870][ T5115] team_slave_1: entered promiscuous mode [ 73.108353][ T5115] dummy0: left allmulticast mode [ 73.109398][ T5115] nlmon0: entered promiscuous mode [ 73.112854][ T5115] caif0: entered promiscuous mode [ 73.112872][ T5115] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.201797][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.276990][ T5004] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 73.298867][ T5004] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 73.321438][ T5004] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 73.341428][ T5137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 73.343762][ T5004] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 73.346803][ T5137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 73.870295][ T5132] loop4: detected capacity change from 0 to 8192 [ 73.890011][ T5137] vhci_hcd vhci_hcd.0: Device attached [ 73.912253][ T28] audit: type=1400 audit(1771364798.238:770): avc: denied { create } for pid=5130 comm="syz.0.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 73.931146][ T5167] loop1: detected capacity change from 0 to 512 [ 73.938527][ T5132] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.951591][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 73.969346][ T5146] vhci_hcd: connection closed [ 73.973328][ T5167] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.996313][ T12] vhci_hcd vhci_hcd.0: stop threads [ 74.004900][ T5132] FAT-fs (loop4): Filesystem has been set read-only [ 74.014116][ T12] vhci_hcd vhci_hcd.0: release socket [ 74.025327][ T5004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.038688][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.047732][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 74.056476][ T5167] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 74.075333][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 74.081822][ C1] EXT4-fs (loop1): initial error at time 1771364798: ext4_mb_generate_buddy:1315 [ 74.090140][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.091058][ C1] EXT4-fs (loop1): last error at time 1771364798: ext4_mb_generate_buddy:1315 [ 74.100553][ T5167] EXT4-fs (loop1): 1 truncate cleaned up [ 74.112050][ T5004] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.123423][ T5172] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.432'. [ 74.132719][ T5172] netlink: 24 bytes leftover after parsing attributes in process `syz.6.432'. [ 74.142078][ T5167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.155754][ T117] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.162844][ T117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.165090][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.179091][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.191880][ T117] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.191835][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.199013][ T117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.217161][ T5167] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.1.433: path /67/bus/file0: bad entry in directory: directory entry overrun - offset=80, inode=2147483648, rec_len=1024, size=60 fake=0 [ 74.244513][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.256259][ T5004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.281477][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.300262][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.332406][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.360155][ T5132] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 74.414279][ T5186] FAULT_INJECTION: forcing a failure. [ 74.414279][ T5186] name failslab, interval 1, probability 0, space 0, times 0 [ 74.455476][ T5004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.470537][ T5186] CPU: 0 UID: 0 PID: 5186 Comm: syz.1.434 Not tainted syzkaller #0 PREEMPT(full) [ 74.470589][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 74.470684][ T5186] Call Trace: [ 74.470693][ T5186] [ 74.470703][ T5186] __dump_stack+0x1d/0x30 [ 74.470738][ T5186] dump_stack_lvl+0x95/0xd0 [ 74.470768][ T5186] dump_stack+0x15/0x1b [ 74.470795][ T5186] should_fail_ex+0x263/0x280 [ 74.470901][ T5186] should_failslab+0x8c/0xb0 [ 74.470938][ T5186] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 74.471011][ T5186] ? __alloc_skb+0x2d6/0x690 [ 74.471045][ T5186] __alloc_skb+0x2d6/0x690 [ 74.471118][ T5186] ? __alloc_skb+0x200/0x690 [ 74.471205][ T5186] netlink_alloc_large_skb+0xbf/0xf0 [ 74.471245][ T5186] netlink_sendmsg+0x40c/0x6f0 [ 74.471288][ T5186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.471328][ T5186] ____sys_sendmsg+0x5af/0x600 [ 74.471370][ T5186] ___sys_sendmsg+0x195/0x1e0 [ 74.471425][ T5186] __x64_sys_sendmsg+0xd4/0x160 [ 74.471461][ T5186] x64_sys_call+0x194c/0x3020 [ 74.471576][ T5186] do_syscall_64+0x12c/0x370 [ 74.471604][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.471629][ T5186] RIP: 0033:0x7fe22d36c629 [ 74.471711][ T5186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.471732][ T5186] RSP: 002b:00007fe22bd9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.471751][ T5186] RAX: ffffffffffffffda RBX: 00007fe22d5e6090 RCX: 00007fe22d36c629 [ 74.471766][ T5186] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000009 [ 74.471781][ T5186] RBP: 00007fe22bd9e090 R08: 0000000000000000 R09: 0000000000000000 [ 74.471797][ T5186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.471811][ T5186] R13: 00007fe22d5e6128 R14: 00007fe22d5e6090 R15: 00007ffe30f90c98 [ 74.471876][ T5186] [ 74.798971][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 74.798988][ T28] audit: type=1400 audit(1771364799.133:773): avc: denied { append } for pid=5207 comm="syz.0.436" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 74.873920][ T5214] loop4: detected capacity change from 0 to 512 [ 74.883992][ T28] audit: type=1400 audit(1771364799.184:774): avc: denied { write } for pid=5205 comm="syz.1.435" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 74.924086][ T5214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.950187][ T5214] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.006750][ T5004] veth0_vlan: entered promiscuous mode [ 75.016907][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.028774][ T5004] veth1_vlan: entered promiscuous mode [ 75.042720][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.056898][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.085504][ T5004] veth0_macvtap: entered promiscuous mode [ 75.112714][ T5004] veth1_macvtap: entered promiscuous mode [ 75.125110][ T5004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.137562][ T5004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.174379][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.209717][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.248657][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258098][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.288979][ T5234] FAULT_INJECTION: forcing a failure. [ 75.288979][ T5234] name failslab, interval 1, probability 0, space 0, times 0 [ 75.301721][ T5234] CPU: 1 UID: 0 PID: 5234 Comm: syz.0.436 Not tainted syzkaller #0 PREEMPT(full) [ 75.301749][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.301762][ T5234] Call Trace: [ 75.301783][ T5234] [ 75.301793][ T5234] __dump_stack+0x1d/0x30 [ 75.301826][ T5234] dump_stack_lvl+0x95/0xd0 [ 75.301850][ T5234] dump_stack+0x15/0x1b [ 75.301931][ T5234] should_fail_ex+0x263/0x280 [ 75.301956][ T5234] ? shrinker_alloc+0x3b/0x650 [ 75.302053][ T5234] should_failslab+0x8c/0xb0 [ 75.302085][ T5234] __kmalloc_cache_noprof+0x5f/0x410 [ 75.302111][ T5234] ? pcpu_alloc_noprof+0xab2/0x1030 [ 75.302143][ T5234] shrinker_alloc+0x3b/0x650 [ 75.302178][ T5234] ? rcu_sync_init+0x32/0x40 [ 75.302208][ T5234] alloc_super+0x41a/0x580 [ 75.302241][ T5234] sget_fc+0x24e/0x6e0 [ 75.302372][ T5234] ? __pfx_set_anon_super_fc+0x10/0x10 [ 75.302419][ T5234] ? __pfx_mqueue_fill_super+0x10/0x10 [ 75.302447][ T5234] get_tree_nodev+0x2a/0x100 [ 75.302476][ T5234] mqueue_get_tree+0x63/0x90 [ 75.302548][ T5234] vfs_get_tree+0x57/0x1d0 [ 75.302639][ T5234] fc_mount_longterm+0x18/0xb0 [ 75.302666][ T5234] mq_init_ns+0x2db/0x370 [ 75.302684][ T5234] copy_ipcs+0x26e/0x460 [ 75.302708][ T5234] create_new_namespaces+0x12a/0x440 [ 75.302816][ T5234] unshare_nsproxy_namespaces+0xe6/0x120 [ 75.302857][ T5234] ksys_unshare+0x3cd/0x6d0 [ 75.302890][ T5234] ? ksys_write+0x194/0x1a0 [ 75.302988][ T5234] __x64_sys_unshare+0x1f/0x30 [ 75.303013][ T5234] x64_sys_call+0x1cef/0x3020 [ 75.303038][ T5234] do_syscall_64+0x12c/0x370 [ 75.303137][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.303164][ T5234] RIP: 0033:0x7fdc55aec629 [ 75.303251][ T5234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.303272][ T5234] RSP: 002b:00007fdc54505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 75.303348][ T5234] RAX: ffffffffffffffda RBX: 00007fdc55d66180 RCX: 00007fdc55aec629 [ 75.303361][ T5234] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000200 [ 75.303373][ T5234] RBP: 00007fdc54505090 R08: 0000000000000000 R09: 0000000000000000 [ 75.303389][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.303404][ T5234] R13: 00007fdc55d66218 R14: 00007fdc55d66180 R15: 00007ffe84630ab8 [ 75.303428][ T5234] [ 75.571045][ T28] audit: type=1400 audit(1771364799.646:775): avc: denied { bind } for pid=5207 comm="syz.0.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.736742][ T28] audit: type=1400 audit(1771364799.646:776): avc: denied { connect } for pid=5207 comm="syz.0.436" laddr=::ffff:0.0.0.0 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.819438][ T28] audit: type=1400 audit(1771364800.119:777): avc: denied { connect } for pid=5240 comm="syz.1.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 76.170078][ T28] audit: type=1400 audit(1771364800.511:778): avc: denied { ioctl } for pid=5250 comm="syz.1.444" path="socket:[11259]" dev="sockfs" ino=11259 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 77.468795][ T5273] loop6: detected capacity change from 0 to 1024 [ 77.478327][ T5273] EXT4-fs: Ignoring removed orlov option [ 77.500532][ T5270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.449'. [ 77.505156][ T5273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.617372][ T5275] loop1: detected capacity change from 0 to 8192 [ 77.678304][ T5290] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 77.696528][ T5275] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.714595][ T5293] program syz.4.450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.765608][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.783805][ T5275] FAT-fs (loop1): Filesystem has been set read-only [ 77.826244][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.836049][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.886141][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.905570][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.914849][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.941486][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.973084][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 77.986735][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.022465][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.041750][ T5275] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 78.118393][ T5312] loop6: detected capacity change from 0 to 8192 [ 78.199237][ T5335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 78.210466][ T5335] netlink: 28 bytes leftover after parsing attributes in process `syz.4.456'. [ 78.256512][ T28] audit: type=1400 audit(1771364802.613:779): avc: denied { setopt } for pid=5339 comm="syz.6.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.308894][ T5345] loop6: detected capacity change from 0 to 512 [ 78.328721][ T5345] EXT4-fs: Ignoring removed i_version option [ 78.370545][ T5345] EXT4-fs: Ignoring removed bh option [ 78.402250][ T5345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.420392][ T5345] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.475981][ T28] audit: type=1400 audit(1771364802.825:780): avc: denied { listen } for pid=5339 comm="syz.6.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.476460][ T5345] netlink: 32 bytes leftover after parsing attributes in process `syz.6.457'. [ 78.647420][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 78.666236][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 78.705501][ T3499] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.714817][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 78.728249][ T3499] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.747248][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.458'. [ 78.760231][ T3499] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.795454][ T3499] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.064323][ T5376] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 79.085192][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.797054][ T5385] loop4: detected capacity change from 0 to 128 [ 79.822331][ T5388] loop1: detected capacity change from 0 to 1024 [ 79.830567][ T5385] EXT4-fs: Ignoring removed nobh option [ 79.871228][ T5388] EXT4-fs: Ignoring removed orlov option [ 79.953491][ T5385] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.967032][ T5385] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.983660][ T5388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.000645][ T5396] loop0: detected capacity change from 0 to 128 [ 80.084910][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.116850][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.185545][ T5396] bio_check_eod: 7459 callbacks suppressed [ 80.185560][ T5396] syz.0.467: attempt to access beyond end of device [ 80.185560][ T5396] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 80.206727][ T5396] syz.0.467: attempt to access beyond end of device [ 80.206727][ T5396] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 80.260618][ T5402] loop4: detected capacity change from 0 to 8192 [ 80.291529][ T5396] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 80.300147][ T5396] syz.0.467: attempt to access beyond end of device [ 80.300147][ T5396] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 80.314316][ T5396] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 80.318631][ T5407] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 80.340233][ T5396] syz.0.467: attempt to access beyond end of device [ 80.340233][ T5396] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 80.364053][ T28] audit: type=1400 audit(1771364804.705:781): avc: denied { mount } for pid=5393 comm="syz.0.467" name="/" dev="rpc_pipefs" ino=12422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 80.390120][ T5415] program syz.1.470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.414623][ T5396] syz.0.467: attempt to access beyond end of device [ 80.414623][ T5396] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 80.445256][ T5416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 80.472136][ T5416] netlink: 28 bytes leftover after parsing attributes in process `syz.4.473'. [ 80.483717][ T5396] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 80.494635][ T5396] syz.0.467: attempt to access beyond end of device [ 80.494635][ T5396] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 80.512179][ T5396] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 80.522746][ T5396] syz.0.467: attempt to access beyond end of device [ 80.522746][ T5396] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 80.537022][ T5396] syz.0.467: attempt to access beyond end of device [ 80.537022][ T5396] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 80.561093][ T5396] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 80.570137][ T5396] syz.0.467: attempt to access beyond end of device [ 80.570137][ T5396] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 80.623052][ T5427] loop7: detected capacity change from 0 to 128 [ 80.631086][ T5427] EXT4-fs: Ignoring removed nobh option [ 80.636807][ T5396] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 80.646694][ T5423] loop1: detected capacity change from 0 to 1024 [ 80.653982][ T5396] syz.0.467: attempt to access beyond end of device [ 80.653982][ T5396] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 80.679958][ T5427] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.692317][ T5423] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 80.712695][ T5427] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.716155][ T5423] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 80.733079][ T5396] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 80.745310][ T5423] JBD2: no valid journal superblock found [ 80.755361][ T5423] EXT4-fs (loop1): Could not load journal inode [ 80.762745][ T5396] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 80.778982][ T5396] Buffer I/O error on dev loop0, logical block 111, lost async page write [ 80.802453][ T5396] Buffer I/O error on dev loop0, logical block 112, lost async page write [ 80.831342][ T28] audit: type=1400 audit(1771364805.197:782): avc: denied { getopt } for pid=5434 comm="syz.6.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.890537][ T5439] rdma_op ffff88811d54b180 conn xmit_rdma 0000000000000000 [ 80.930330][ T4388] loop1: p1 p2 p4 [ 80.934263][ T4388] loop1: p1 start 2130708480 is beyond EOD, truncated [ 80.946380][ T4388] loop1: p2 size 8388608 extends beyond EOD, truncated [ 80.956962][ T4388] loop1: p4 size 262144 extends beyond EOD, truncated [ 80.985037][ T5424] loop1: p1 p2 p4 [ 80.989853][ T5424] loop1: p1 start 2130708480 is beyond EOD, truncated [ 81.006578][ T5424] loop1: p2 size 8388608 extends beyond EOD, truncated [ 81.026369][ T5424] loop1: p4 size 262144 extends beyond EOD, truncated [ 81.075546][ T5004] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.123218][ T5424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.139613][ T5454] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.178949][ T5454] EXT4-fs: inline encryption not supported [ 81.189690][ T5424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.215181][ T5454] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 81.270513][ T5454] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.482: bad orphan inode 11 [ 81.283656][ T5454] loop6: lost filesystem error report for type 5 error -117 [ 81.284527][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 81.298298][ C0] EXT4-fs (loop6): initial error at time 1771364805: ext4_orphan_get:1417 [ 81.306837][ C0] EXT4-fs (loop6): last error at time 1771364805: ext4_orphan_get:1417 [ 81.317088][ T5454] EXT4-fs (loop6): Remounting filesystem read-only [ 81.323664][ T5454] ext4_test_bit(bit=10, block=4) = 1 [ 81.335355][ T5454] is_bad_inode(inode)=0 [ 81.339595][ T5454] NEXT_ORPHAN(inode)=3254779904 [ 81.346827][ T5424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.357188][ T5454] max_ino=32 [ 81.360493][ T5454] i_nlink=0 [ 81.364258][ T5454] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.374405][ T5424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.378110][ T5454] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.486078][ T5424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.507561][ T5424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.568183][ T5424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.594538][ T5424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.709804][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.724251][ T5500] EXT4-fs: Ignoring removed i_version option [ 81.726967][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.754917][ T5500] EXT4-fs: Ignoring removed bh option [ 81.774670][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.795963][ T5505] 9p: Bad value for 'rfdno' [ 81.903634][ T5500] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.920965][ T5500] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.934980][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.973887][ T5513] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.973957][ T5513] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.010734][ T30] bond0: (slave bond_slave_0): interface is now down [ 82.010758][ T30] bond0: (slave bond_slave_1): interface is now down [ 82.011017][ T30] bond0: now running without any active interface! [ 82.012104][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.012142][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.012191][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.012240][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.395179][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.470087][ T5004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.558058][ T5558] dvmrp6: entered allmulticast mode [ 82.566126][ T5561] FAULT_INJECTION: forcing a failure. [ 82.566126][ T5561] name failslab, interval 1, probability 0, space 0, times 0 [ 82.612697][ T5561] CPU: 0 UID: 0 PID: 5561 Comm: syz.7.500 Not tainted syzkaller #0 PREEMPT(full) [ 82.612730][ T5561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 82.612742][ T5561] Call Trace: [ 82.612748][ T5561] [ 82.612881][ T5561] __dump_stack+0x1d/0x30 [ 82.612911][ T5561] dump_stack_lvl+0x95/0xd0 [ 82.612941][ T5561] dump_stack+0x15/0x1b [ 82.612968][ T5561] should_fail_ex+0x263/0x280 [ 82.613034][ T5561] ? hugetlbfs_init_fs_context+0x38/0x170 [ 82.613100][ T5561] should_failslab+0x8c/0xb0 [ 82.613209][ T5561] __kmalloc_cache_noprof+0x5f/0x410 [ 82.613275][ T5561] hugetlbfs_init_fs_context+0x38/0x170 [ 82.613313][ T5561] alloc_fs_context+0x4a6/0x580 [ 82.613416][ T5561] fs_context_for_mount+0x22/0x30 [ 82.613438][ T5561] __se_sys_fsopen+0xa0/0x1e0 [ 82.613464][ T5561] __x64_sys_fsopen+0x31/0x40 [ 82.613492][ T5561] x64_sys_call+0x29af/0x3020 [ 82.613631][ T5561] do_syscall_64+0x12c/0x370 [ 82.613660][ T5561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.613767][ T5561] RIP: 0033:0x7f4d7839c629 [ 82.613791][ T5561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.613814][ T5561] RSP: 002b:00007f4d76df7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 82.613839][ T5561] RAX: ffffffffffffffda RBX: 00007f4d78615fa0 RCX: 00007f4d7839c629 [ 82.613897][ T5561] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001140 [ 82.613910][ T5561] RBP: 00007f4d76df7090 R08: 0000000000000000 R09: 0000000000000000 [ 82.613922][ T5561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.613933][ T5561] R13: 00007f4d78616038 R14: 00007f4d78615fa0 R15: 00007ffd067be208 [ 82.613956][ T5561] [ 82.929058][ T5578] set_capacity_and_notify: 6 callbacks suppressed [ 82.929075][ T5578] loop7: detected capacity change from 0 to 1024 [ 82.985686][ T36] bond0: (slave bond_slave_0): interface is now down [ 82.992930][ T5578] EXT4-fs: Ignoring removed orlov option [ 83.004989][ T36] bond0: (slave bond_slave_1): interface is now down [ 83.041326][ T5578] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 83.043713][ T28] audit: type=1400 audit(1771364807.399:783): avc: denied { getopt } for pid=5587 comm="syz.0.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 83.084138][ T36] bond0: now running without any active interface! [ 83.091760][ T5578] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.212939][ T5578] __nla_validate_parse: 3 callbacks suppressed [ 83.212959][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.505'. [ 83.243292][ T5594] loop4: detected capacity change from 0 to 512 [ 83.403761][ T5594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.461394][ T5594] ext4 filesystem being mounted at /109/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.497068][ T5594] FAULT_INJECTION: forcing a failure. [ 83.497068][ T5594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.512650][ T5594] CPU: 0 UID: 0 PID: 5594 Comm: syz.4.514 Not tainted syzkaller #0 PREEMPT(full) [ 83.512682][ T5594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.512697][ T5594] Call Trace: [ 83.512704][ T5594] [ 83.512713][ T5594] __dump_stack+0x1d/0x30 [ 83.512760][ T5594] dump_stack_lvl+0x95/0xd0 [ 83.512788][ T5594] dump_stack+0x15/0x1b [ 83.512814][ T5594] should_fail_ex+0x263/0x280 [ 83.512923][ T5594] should_fail+0xb/0x20 [ 83.512945][ T5594] should_fail_usercopy+0x1a/0x20 [ 83.512975][ T5594] strncpy_from_user+0x27/0x250 [ 83.513077][ T5594] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 83.513151][ T5594] do_getname+0x59/0x1c0 [ 83.513216][ T5594] __se_sys_rename+0x20/0x1c0 [ 83.513243][ T5594] __x64_sys_rename+0x31/0x40 [ 83.513279][ T5594] x64_sys_call+0x2b3/0x3020 [ 83.513338][ T5594] do_syscall_64+0x12c/0x370 [ 83.513360][ T5594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.513424][ T5594] RIP: 0033:0x7f6e40d3c629 [ 83.513445][ T5594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.513469][ T5594] RSP: 002b:00007f6e3f797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 83.513490][ T5594] RAX: ffffffffffffffda RBX: 00007f6e40fb5fa0 RCX: 00007f6e40d3c629 [ 83.513503][ T5594] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 83.513578][ T5594] RBP: 00007f6e3f797090 R08: 0000000000000000 R09: 0000000000000000 [ 83.513594][ T5594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.513608][ T5594] R13: 00007f6e40fb6038 R14: 00007f6e40fb5fa0 R15: 00007ffc32683d78 [ 83.513632][ T5594] [ 83.695942][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.708113][ T5004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.745479][ T5602] x_tables: unsorted underflow at hook 2 [ 83.751860][ T28] audit: type=1400 audit(1771364808.143:784): avc: denied { read write } for pid=5601 comm="syz.7.517" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.775852][ T5602] 9p: Bad value for 'rfdno' [ 83.806736][ T5602] SELinux: ebitmap start bit (3072) is beyond the end of the bitmap (320) [ 83.815531][ T5602] SELinux: failed to load policy [ 83.855871][ T5604] loop4: detected capacity change from 0 to 128 [ 83.861715][ T5609] loop1: detected capacity change from 0 to 512 [ 83.879197][ T28] audit: type=1400 audit(1771364808.163:785): avc: denied { open } for pid=5601 comm="syz.7.517" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.905423][ T5613] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 83.931718][ T5609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.947945][ T5609] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.971110][ T5609] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.518: corrupted inode contents [ 84.116075][ T5609] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #4: comm syz.1.518: mark_inode_dirty error [ 84.136127][ T5621] xt_hashlimit: size too large, truncated to 1048576 [ 84.154960][ T5609] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #4: comm syz.1.518: corrupted inode contents [ 84.170153][ T5629] netlink: 28 bytes leftover after parsing attributes in process `syz.6.524'. [ 84.209832][ T5609] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #4: comm syz.1.518: mark_inode_dirty error [ 84.233365][ T5629] netlink: 28 bytes leftover after parsing attributes in process `syz.6.524'. [ 84.239788][ T5609] Quota error (device loop1): write_blk: dquota write failed [ 84.257376][ T5609] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 84.287994][ T5609] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 84.344707][ T5609] EXT4-fs error (device loop1): ext4_acquire_dquot:7003: comm syz.1.518: Failed to acquire dquot type 1 [ 84.368200][ T28] audit: type=1400 audit(1771364808.736:786): avc: denied { bind } for pid=5630 comm="syz.0.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.404430][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.508689][ T5635] Falling back ldisc for ptm0. [ 84.516036][ T5642] netlink: 24 bytes leftover after parsing attributes in process `syz.7.529'. [ 84.525520][ T5643] loop1: detected capacity change from 0 to 1024 [ 84.543566][ T5643] EXT4-fs: Ignoring removed orlov option [ 84.577570][ T5643] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 84.716577][ T5643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.742876][ T5650] loop7: detected capacity change from 0 to 1024 [ 84.752236][ T5650] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 84.869777][ T5650] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.023875][ T5650] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 85.074213][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.133602][ T5650] EXT4-fs (loop7): orphan cleanup on readonly fs [ 85.176970][ T5650] EXT4-fs error (device loop7): ext4_read_inode_bitmap:167: comm syz.7.531: Inode bitmap for bg 0 marked uninitialized [ 85.276114][ T5650] loop7: lost filesystem error report for type 5 error -117 [ 85.277631][ T5650] EXT4-fs (loop7): Remounting filesystem read-only [ 85.285080][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 85.285105][ C0] EXT4-fs (loop7): initial error at time 1771364809: ext4_read_inode_bitmap:167 [ 85.285151][ C0] EXT4-fs (loop7): last error at time 1771364809: ext4_read_inode_bitmap:167 [ 85.356815][ T5650] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.527068][ T5667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.535'. [ 85.539304][ T5668] netlink: 8 bytes leftover after parsing attributes in process `syz.7.531'. [ 85.550640][ T5668] netlink: 312 bytes leftover after parsing attributes in process `syz.7.531'. [ 85.600844][ T5671] netlink: 'syz.4.537': attribute type 1 has an invalid length. [ 85.609318][ T28] audit: type=1400 audit(1771364809.992:787): avc: denied { accept } for pid=5670 comm="syz.4.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 85.670341][ T5671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 85.727437][ T50] bond0: (slave bond_slave_0): interface is now down [ 85.766382][ T50] bond0: (slave bond_slave_1): interface is now down [ 85.800068][ T5685] loop1: detected capacity change from 0 to 512 [ 85.805164][ T50] bond0: now running without any active interface! [ 85.832290][ T5685] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.196581][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 86.331375][ T5685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 86.337035][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.543'. [ 86.360765][ T5685] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.387802][ T5004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.442772][ T5708] netlink: 13 bytes leftover after parsing attributes in process `syz.6.544'. [ 86.462653][ T28] audit: type=1400 audit(1771364810.856:788): avc: denied { map } for pid=5711 comm="syz.7.542" path="/dev/null" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 86.490475][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.500232][ T28] audit: type=1400 audit(1771364810.887:789): avc: denied { ioctl } for pid=5709 comm="syz.4.545" path="socket:[11939]" dev="sockfs" ino=11939 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.529261][ T5710] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 86.587943][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 86.598311][ T5710] bond0: (slave gre0): Error -95 calling set_mac_address [ 86.875156][ T28] audit: type=1400 audit(1771364811.268:790): avc: denied { listen } for pid=5731 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.968461][ T5729] loop4: detected capacity change from 0 to 2048 [ 87.184843][ T4388] loop4: p3 < > p4 < > [ 87.191585][ T4388] loop4: partition table partially beyond EOD, truncated [ 87.206968][ T4388] loop4: p3 start 4284289 is beyond EOD, truncated [ 87.257386][ T5729] loop4: p3 < > p4 < > [ 87.261626][ T5729] loop4: partition table partially beyond EOD, truncated [ 87.269530][ T5729] loop4: p3 start 4284289 is beyond EOD, truncated [ 87.684589][ T5807] loop4: detected capacity change from 0 to 512 [ 87.718663][ T5784] loop6: detected capacity change from 0 to 1024 [ 87.752794][ T28] audit: type=1400 audit(1771364812.133:791): avc: denied { ioctl } for pid=5809 comm="syz.7.562" path="socket:[12064]" dev="sockfs" ino=12064 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 87.804701][ T5807] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.820834][ T5784] EXT4-fs: Ignoring removed orlov option [ 87.867332][ T28] audit: type=1400 audit(1771364812.273:792): avc: denied { setopt } for pid=5815 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 87.889048][ T5784] EXT4-fs: inline encryption not supported [ 87.915871][ T5807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 87.963987][ T5807] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.134045][ T5784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.175418][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 88.204538][ T5848] __nla_validate_parse: 1 callbacks suppressed [ 88.204559][ T5848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.567'. [ 88.249856][ T5848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.567'. [ 88.320290][ T5856] netlink: 79 bytes leftover after parsing attributes in process `syz.6.554'. [ 88.440062][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.613599][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.6.574'. [ 88.628681][ T28] audit: type=1400 audit(1771364813.037:793): avc: denied { watch watch_reads } for pid=5866 comm="syz.1.576" path="/101" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.792594][ T28] audit: type=1400 audit(1771364813.188:794): avc: denied { setattr } for pid=5883 comm="syz.4.580" path="socket:[12124]" dev="sockfs" ino=12124 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.117156][ T5906] loop1: detected capacity change from 0 to 2048 [ 89.172256][ T5906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.231212][ T5909] loop4: detected capacity change from 0 to 1764 [ 89.258780][ T28] audit: type=1400 audit(1771364813.670:795): avc: denied { mount } for pid=5907 comm="syz.4.587" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 89.341236][ T5914] loop7: detected capacity change from 0 to 2048 [ 89.374317][ T5915] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 89.382081][ T5915] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 89.406133][ T5914] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 89.436109][ T5914] program syz.7.588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.445731][ T5914] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 89.638515][ T28] audit: type=1400 audit(1771364814.052:796): avc: denied { accept } for pid=5907 comm="syz.4.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 89.726288][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.735675][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.794550][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 89.808857][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.587'. [ 89.912098][ T3319] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 89.930753][ T3319] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 90.207620][ T5882] loop6: detected capacity change from 0 to 1024 [ 90.315377][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.445087][ T5930] netlink: 'syz.0.594': attribute type 83 has an invalid length. [ 90.522159][ T5882] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 90.546931][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.569155][ T30] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.594787][ T5882] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 90.619244][ T5882] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.651765][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 90.666674][ T5882] EXT4-fs error (device loop6): ext4_get_journal_inode:5865: inode #32: comm \: iget: special inode unallocated [ 90.686029][ T5939] loop0: detected capacity change from 0 to 128 [ 90.690924][ T5934] loop1: detected capacity change from 0 to 512 [ 90.718480][ T30] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.755807][ T5882] loop6: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 90.777642][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 90.793748][ T5934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.794590][ C1] EXT4-fs (loop6): initial error at time 1771364815: ext4_get_journal_inode:5865: inode 32 [ 90.794749][ C1] EXT4-fs (loop6): last error at time 1771364815: ext4_get_journal_inode:5865: inode 32 [ 90.808981][ T5882] EXT4-fs (loop6): no journal found [ 90.809050][ T5882] EXT4-fs (loop6): can't get journal size [ 90.845429][ T5934] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.846186][ T5882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.865466][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 90.865482][ T28] audit: type=1400 audit(1771364815.277:798): avc: denied { read write } for pid=5933 comm="syz.1.593" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 90.867452][ T28] audit: type=1400 audit(1771364815.277:799): avc: denied { open } for pid=5933 comm="syz.1.593" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 91.038841][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.055260][ T30] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.084208][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.141606][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 91.164829][ T30] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.278411][ T5954] netlink: 20 bytes leftover after parsing attributes in process `syz.6.578'. [ 91.309983][ T5959] loop0: detected capacity change from 0 to 2048 [ 91.345214][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.373057][ T5959] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 91.412535][ T30] bridge_slave_1: left allmulticast mode [ 91.418816][ T30] bridge_slave_1: left promiscuous mode [ 91.434073][ T5959] program syz.0.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.448894][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.460861][ T5961] loop6: detected capacity change from 0 to 4096 [ 91.465128][ T5959] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 91.477243][ T30] bridge_slave_0: left allmulticast mode [ 91.483136][ T30] bridge_slave_0: left promiscuous mode [ 91.496044][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.504375][ T5961] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.547269][ T5961] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #3: comm syz.6.600: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 91.585156][ T5961] EXT4-fs error (device loop6): ext4_quota_enable:7197: comm syz.6.600: Bad quota inode: 3, type: 0 [ 91.609969][ T5961] EXT4-fs warning (device loop6): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 91.676418][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.686457][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.700228][ T30] bond0 (unregistering): Released all slaves [ 91.712516][ T30] bond1 (unregistering): Released all slaves [ 91.723707][ T30] bond2 (unregistering): Released all slaves [ 91.736061][ T30] bond3 (unregistering): Released all slaves [ 91.761074][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.883332][ T30] hsr_slave_0: left promiscuous mode [ 91.894743][ T30] hsr_slave_1: left promiscuous mode [ 91.910497][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.920424][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.939363][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.967748][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.980669][ T30] veth1_macvtap: left promiscuous mode [ 91.988153][ T30] veth0_macvtap: left promiscuous mode [ 91.993804][ T30] veth1_vlan: left promiscuous mode [ 92.137524][ T30] team0 (unregistering): Port device team_slave_1 removed [ 92.147998][ T30] team0 (unregistering): Port device team_slave_0 removed [ 92.197281][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 92.269677][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.289054][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.309640][ T5937] bridge_slave_0: entered allmulticast mode [ 92.319040][ T5937] bridge_slave_0: entered promiscuous mode [ 92.326630][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.334026][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.348522][ T5937] bridge_slave_1: entered allmulticast mode [ 92.357905][ T5937] bridge_slave_1: entered promiscuous mode [ 92.382279][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.400948][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.426504][ T5937] team0: Port device team_slave_0 added [ 92.433471][ T5937] team0: Port device team_slave_1 added [ 92.450618][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.457731][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.506420][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.518099][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.525338][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.596751][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.635203][ T6014] loop0: detected capacity change from 0 to 512 [ 92.675629][ T6016] netlink: 'syz.7.607': attribute type 29 has an invalid length. [ 92.712504][ T6014] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 92.761585][ T5989] loop1: detected capacity change from 0 to 512 [ 92.770254][ T5937] hsr_slave_0: entered promiscuous mode [ 92.776401][ T5937] hsr_slave_1: entered promiscuous mode [ 92.782754][ T6014] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 92.799707][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 92.822011][ T6014] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.606: Corrupt directory, running e2fsck is recommended [ 92.863102][ T5937] Cannot create hsr debugfs directory [ 92.909544][ T5989] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 92.939329][ T28] audit: type=1400 audit(1771364817.357:800): avc: denied { create } for pid=6012 comm="syz.7.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 92.974358][ T5989] System zones: 0-2, 18-18, 34-34 [ 93.004421][ T6014] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 93.021207][ T5989] EXT4-fs (loop1): too many log groups per flexible block group [ 93.047703][ T6014] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.606: corrupted in-inode xattr: invalid ea_ino [ 93.070255][ T5989] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 93.090950][ T6014] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.091193][ T6014] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.606: couldn't read orphan inode 15 (err -117) [ 93.100412][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 93.100429][ C0] EXT4-fs (loop0): initial error at time 1771364817: ext4_iget_extra_inode:5025: inode 15 [ 93.100468][ C0] EXT4-fs (loop0): last error at time 1771364817: ext4_iget_extra_inode:5025: inode 15 [ 93.138290][ T28] audit: type=1400 audit(1771364817.517:801): avc: denied { sys_admin } for pid=6012 comm="syz.7.607" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 93.167603][ T5989] EXT4-fs (loop1): mount failed [ 93.197313][ T6014] loop0: lost filesystem error report for type 5 error -117 [ 93.199871][ T6014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.377726][ T5937] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 93.417879][ T6014] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.420117][ T28] audit: type=1400 audit(1771364817.849:802): avc: denied { map } for pid=6046 comm="syz.1.613" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.451220][ T5937] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 93.466457][ T5937] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 93.483564][ T28] audit: type=1400 audit(1771364817.849:803): avc: denied { execute } for pid=6046 comm="syz.1.613" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.512863][ T5937] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 93.652575][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.663528][ T6067] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 93.702852][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.744446][ T6067] program syz.1.618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.754259][ T6067] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 93.775163][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.782257][ T5086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.801180][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.808281][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.950056][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.163741][ T6095] set_capacity_and_notify: 3 callbacks suppressed [ 94.163765][ T6095] loop6: detected capacity change from 0 to 8192 [ 94.193624][ T6116] loop7: detected capacity change from 0 to 512 [ 94.205646][ T6112] netlink: 'syz.0.633': attribute type 4 has an invalid length. [ 94.222133][ T6112] netlink: 17 bytes leftover after parsing attributes in process `syz.0.633'. [ 94.234748][ T4388] loop6: p1 < > p2 p4 < p5 > [ 94.241059][ T4388] loop6: partition table partially beyond EOD, truncated [ 94.256512][ T4388] loop6: p1 start 8388608 is beyond EOD, truncated [ 94.263501][ T5937] veth0_vlan: entered promiscuous mode [ 94.268764][ T4388] loop6: p2 size 16128 extends beyond EOD, truncated [ 94.277028][ T6116] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 94.290357][ T4388] loop6: p5 size 16128 extends beyond EOD, truncated [ 94.308992][ T6116] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 94.321175][ T5937] veth1_vlan: entered promiscuous mode [ 94.331381][ T6095] loop6: p1 < > p2 p4 < p5 > [ 94.345371][ T6095] loop6: partition table partially beyond EOD, truncated [ 94.366314][ T5937] veth0_macvtap: entered promiscuous mode [ 94.381672][ T6095] loop6: p1 start 8388608 is beyond EOD, truncated [ 94.402353][ T5937] veth1_macvtap: entered promiscuous mode [ 94.408189][ T6116] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.624: Corrupt directory, running e2fsck is recommended [ 94.423804][ T6095] loop6: p2 size 16128 extends beyond EOD, truncated [ 94.451035][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.462375][ T6121] netlink: 14 bytes leftover after parsing attributes in process `syz.0.625'. [ 94.465464][ T6095] loop6: p5 size 16128 extends beyond EOD, truncated [ 94.480712][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.624333][ T6121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.646788][ T6125] loop0: detected capacity change from 0 to 512 [ 94.666111][ T6121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.684858][ T6121] bond0 (unregistering): Released all slaves [ 94.708826][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.718325][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.746542][ T6125] Quota error (device loop0): v2_read_file_info: Free block number 67108864 out of range (1, 6). [ 94.761148][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.761842][ T6125] EXT4-fs warning (device loop0): ext4_enable_quotas:7238: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 94.801646][ T5086] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.820041][ T6116] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 94.824592][ T28] audit: type=1400 audit(1771364819.245:804): avc: denied { mount } for pid=5937 comm="syz-executor" name="/" dev="gadgetfs" ino=4702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 94.829143][ T6116] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.624: corrupted in-inode xattr: invalid ea_ino [ 94.864434][ T6116] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.871095][ T6116] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.624: couldn't read orphan inode 15 (err -117) [ 94.880294][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 94.880315][ C0] EXT4-fs (loop7): initial error at time 1771364819: ext4_iget_extra_inode:5025: inode 15 [ 94.880339][ C0] EXT4-fs (loop7): last error at time 1771364819: ext4_iget_extra_inode:5025: inode 15 [ 94.899698][ T6125] EXT4-fs (loop0): mount failed [ 94.945637][ T6116] loop7: lost filesystem error report for type 5 error -117 [ 94.958378][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 94.959752][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 94.994958][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 95.041974][ T6116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.106526][ T5958] udevd[5958]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 95.106852][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 95.130515][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 95.157832][ T6136] loop1: detected capacity change from 0 to 128 [ 95.289194][ T6145] loop1: detected capacity change from 0 to 1024 [ 95.315012][ T6116] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.319008][ T6145] EXT4-fs: Ignoring removed orlov option [ 95.340510][ T6149] loop6: detected capacity change from 0 to 2048 [ 95.351062][ T6149] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 95.362969][ T6145] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 95.391269][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.476158][ T6156] loop7: detected capacity change from 0 to 512 [ 95.510132][ T6156] EXT4-fs (loop7): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 95.592148][ T6156] netlink: 'syz.7.635': attribute type 39 has an invalid length. [ 95.616241][ T6162] loop0: detected capacity change from 0 to 512 [ 95.623355][ T6162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.643663][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.660070][ T6162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.668678][ T6162] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.711946][ T6162] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4224: comm syz.0.638: Allocating blocks 41-42 which overlap fs metadata [ 95.744945][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.7.635'. [ 95.748564][ T6162] loop0: lost filesystem error report for type 5 error -117 [ 95.773363][ T6162] EXT4-fs (loop0): Remounting filesystem read-only [ 95.780762][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 95.780785][ C1] EXT4-fs (loop0): initial error at time 1771364820: ext4_mb_mark_diskspace_used:4224 [ 95.780803][ C1] EXT4-fs (loop0): last error at time 1771364820: ext4_mb_mark_diskspace_used:4224 [ 95.818137][ T6162] Quota error (device loop0): write_blk: dquota write failed [ 95.825823][ T6162] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 95.843295][ T6162] EXT4-fs (loop0): 1 truncate cleaned up [ 95.857224][ T6162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.904444][ T6170] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 95.915041][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.924094][ T36] bond0: (slave bond_slave_0): interface is now down [ 95.944605][ T36] bond0: (slave bond_slave_1): interface is now down [ 96.076713][ T6188] loop0: detected capacity change from 0 to 2048 [ 96.090839][ T6188] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 96.100016][ T5086] bond0: (slave bond_slave_0): interface is now down [ 96.107186][ T6189] loop8: detected capacity change from 0 to 128 [ 96.119063][ T5086] bond0: (slave bond_slave_1): interface is now down [ 96.142500][ T5086] bond0: now running without any active interface! [ 96.204149][ T6195] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 96.249679][ T6200] EXT4-fs: Ignoring removed orlov option [ 96.271022][ T6195] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 96.300076][ T6195] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.648: Corrupt directory, running e2fsck is recommended [ 96.323567][ T6200] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.376396][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.402386][ T6195] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 96.441538][ T6195] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.648: corrupted in-inode xattr: invalid ea_ino [ 96.488924][ T6195] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.492386][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 96.508032][ C1] EXT4-fs (loop1): initial error at time 1771364820: ext4_iget_extra_inode:5025: inode 15 [ 96.511639][ T6205] netlink: 16 bytes leftover after parsing attributes in process `syz.6.651'. [ 96.517985][ C1] EXT4-fs (loop1): last error at time 1771364820: ext4_iget_extra_inode:5025: inode 15 [ 96.541643][ T6195] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.648: couldn't read orphan inode 15 (err -117) [ 96.595618][ T6195] loop1: lost filesystem error report for type 5 error -117 [ 96.653975][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.683315][ T6207] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.720775][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.732588][ T6195] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.842155][ T6220] netlink: 'syz.8.652': attribute type 1 has an invalid length. [ 96.861072][ T6220] netlink: 'syz.8.652': attribute type 1 has an invalid length. [ 96.886777][ T6223] ext4: Unknown parameter 'smackfsdef' [ 97.024044][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.660'. [ 97.038870][ T6231] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 97.070735][ T6233] netlink: 'syz.7.660': attribute type 1 has an invalid length. [ 97.084059][ T6233] netlink: 'syz.7.660': attribute type 2 has an invalid length. [ 97.119251][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 97.119266][ T28] audit: type=1326 audit(1771364821.555:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22d36c629 code=0x7ffc0000 [ 97.154160][ T28] audit: type=1326 audit(1771364821.555:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe22d36c629 code=0x7ffc0000 [ 97.178649][ T6239] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 97.199685][ T6239] EXT4-fs (loop1): orphan cleanup on readonly fs [ 97.216507][ T28] audit: type=1326 audit(1771364821.595:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe22d36c629 code=0x7ffc0000 [ 97.235934][ T6239] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.662: Block bitmap for bg 0 marked uninitialized [ 97.249273][ T28] audit: type=1326 audit(1771364821.595:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe22d36c392 code=0x7ffc0000 [ 97.256374][ T6241] EXT4-fs: Ignoring removed orlov option [ 97.276496][ T28] audit: type=1326 audit(1771364821.595:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe22d32cece code=0x7ffc0000 [ 97.276557][ T28] audit: type=1326 audit(1771364821.595:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe22d36c457 code=0x7ffc0000 [ 97.276603][ T28] audit: type=1326 audit(1771364821.595:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe22d32cece code=0x7ffc0000 [ 97.351922][ T28] audit: type=1326 audit(1771364821.595:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe22d36c2bb code=0x7ffc0000 [ 97.385336][ T6239] loop1: lost filesystem error report for type 5 error -117 [ 97.387546][ T6247] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.389724][ T28] audit: type=1326 audit(1771364821.595:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe22d32cece code=0x7ffc0000 [ 97.395031][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 97.406981][ T28] audit: type=1326 audit(1771364821.595:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6238 comm="syz.1.662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe22d32cece code=0x7ffc0000 [ 97.429612][ C1] EXT4-fs (loop1): initial error at time 1771364821: ext4_read_block_bitmap_nowait:517 [ 97.438596][ T6239] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 97.459092][ C1] [ 97.459102][ C1] EXT4-fs (loop1): last error at time 1771364821: ext4_read_block_bitmap_nowait:517 [ 97.496616][ T6239] loop1: lost filesystem error report for type 5 error -117 [ 97.496918][ T6239] EXT4-fs (loop1): 1 orphan inode deleted [ 97.518287][ T6241] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 97.536838][ T6247] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 97.547126][ T6247] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.665: Corrupt directory, running e2fsck is recommended [ 97.550443][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 97.583660][ T6247] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 97.591981][ T6247] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.665: corrupted in-inode xattr: invalid ea_ino [ 97.592846][ T6241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.610785][ T6247] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 97.624495][ T6247] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.665: couldn't read orphan inode 15 (err -117) [ 97.633900][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 97.633937][ C0] EXT4-fs (loop7): initial error at time 1771364822: ext4_iget_extra_inode:5025: inode 15 [ 97.633963][ C0] EXT4-fs (loop7): last error at time 1771364822: ext4_iget_extra_inode:5025: inode 15 [ 97.678380][ T6247] loop7: lost filesystem error report for type 5 error -117 [ 97.679069][ T6247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.780230][ T6257] FAULT_INJECTION: forcing a failure. [ 97.780230][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 97.814471][ T6257] CPU: 0 UID: 0 PID: 6257 Comm: syz.7.667 Not tainted syzkaller #0 PREEMPT(full) [ 97.814579][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 97.814592][ T6257] Call Trace: [ 97.814600][ T6257] [ 97.814610][ T6257] __dump_stack+0x1d/0x30 [ 97.814645][ T6257] dump_stack_lvl+0x95/0xd0 [ 97.814719][ T6257] dump_stack+0x15/0x1b [ 97.814748][ T6257] should_fail_ex+0x263/0x280 [ 97.814780][ T6257] ? snd_seq_prioq_new+0x2c/0x60 [ 97.814809][ T6257] should_failslab+0x8c/0xb0 [ 97.814906][ T6257] __kmalloc_cache_noprof+0x5f/0x410 [ 97.814974][ T6257] snd_seq_prioq_new+0x2c/0x60 [ 97.815020][ T6257] snd_seq_queue_alloc+0xc9/0x440 [ 97.815050][ T6257] snd_seq_ioctl_create_queue+0x4d/0x1c0 [ 97.815144][ T6257] snd_seq_ioctl+0x177/0x2f0 [ 97.815238][ T6257] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 97.815326][ T6257] __se_sys_ioctl+0xce/0x140 [ 97.815359][ T6257] __x64_sys_ioctl+0x43/0x50 [ 97.815395][ T6257] x64_sys_call+0x1563/0x3020 [ 97.815504][ T6257] do_syscall_64+0x12c/0x370 [ 97.815536][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.815563][ T6257] RIP: 0033:0x7f4d7839c629 [ 97.815637][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.815655][ T6257] RSP: 002b:00007f4d76df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.815674][ T6257] RAX: ffffffffffffffda RBX: 00007f4d78615fa0 RCX: 00007f4d7839c629 [ 97.815689][ T6257] RDX: 0000200000000280 RSI: 00000000c08c5332 RDI: 0000000000000003 [ 97.815761][ T6257] RBP: 00007f4d76df7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.815778][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.815794][ T6257] R13: 00007f4d78616038 R14: 00007f4d78615fa0 R15: 00007ffd067be208 [ 97.815818][ T6257] [ 98.046727][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.7.672'. [ 98.144488][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.165737][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.183528][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.201350][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.212811][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.225612][ T6274] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 98.225639][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.262804][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.275444][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.282908][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.292008][ T10] hid-generic 0009:0800:0004.0001: unknown main item tag 0x0 [ 98.322452][ T10] hid-generic 0009:0800:0004.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 98.376398][ T6279] netlink: 'syz.7.678': attribute type 1 has an invalid length. [ 98.387472][ T6284] netlink: 'syz.0.677': attribute type 5 has an invalid length. [ 98.398335][ T6281] EXT4-fs: Ignoring removed orlov option [ 98.416420][ T6281] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.445117][ T6277] fido_id[6277]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.604409][ T6294] IPVS: set_ctl: invalid protocol: 4 172.30.0.7:20003 [ 98.641429][ T6301] EXT4-fs (loop0): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 98.766404][ T6310] netlink: 'syz.0.684': attribute type 39 has an invalid length. [ 98.886893][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.6.688'. [ 98.987213][ T6316] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.074026][ T6320] syzkaller1: entered promiscuous mode [ 99.093637][ T6320] syzkaller1: entered allmulticast mode [ 99.138256][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 99.289270][ T6301] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 99.466415][ T6329] FAULT_INJECTION: forcing a failure. [ 99.466415][ T6329] name failslab, interval 1, probability 0, space 0, times 0 [ 99.512362][ T6329] CPU: 0 UID: 0 PID: 6329 Comm: syz.6.693 Not tainted syzkaller #0 PREEMPT(full) [ 99.512446][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 99.512462][ T6329] Call Trace: [ 99.512468][ T6329] [ 99.512475][ T6329] __dump_stack+0x1d/0x30 [ 99.512501][ T6329] dump_stack_lvl+0x95/0xd0 [ 99.512524][ T6329] dump_stack+0x15/0x1b [ 99.512562][ T6329] should_fail_ex+0x263/0x280 [ 99.512607][ T6329] should_failslab+0x8c/0xb0 [ 99.512645][ T6329] __kmalloc_node_track_caller_noprof+0xc3/0x560 [ 99.512674][ T6329] ? __request_module+0x1df/0x3f0 [ 99.512702][ T6329] kstrdup+0x3e/0xd0 [ 99.512777][ T6329] __request_module+0x1df/0x3f0 [ 99.512837][ T6329] ? capable+0x7b/0xb0 [ 99.512878][ T6329] ? security_capable+0x7b/0x90 [ 99.512902][ T6329] tcp_ca_get_key_by_name+0x94/0x140 [ 99.512974][ T6329] ip_fib_metrics_init+0x172/0x470 [ 99.513074][ T6329] fib_create_info+0xbcc/0x1950 [ 99.513138][ T6329] fib_table_insert+0x60/0xe80 [ 99.513202][ T6329] ? __mutex_lock_slowpath+0xa/0x10 [ 99.513241][ T6329] ? fib_new_table+0xad/0x1c0 [ 99.513268][ T6329] inet_rtm_newroute+0xb5/0x160 [ 99.513336][ T6329] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 99.513367][ T6329] rtnetlink_rcv_msg+0x64b/0x720 [ 99.513403][ T6329] netlink_rcv_skb+0x123/0x220 [ 99.513453][ T6329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.513495][ T6329] rtnetlink_rcv+0x1c/0x30 [ 99.513522][ T6329] netlink_unicast+0x5c0/0x690 [ 99.513572][ T6329] netlink_sendmsg+0x5c8/0x6f0 [ 99.513601][ T6329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.513632][ T6329] __sys_sendto+0x470/0x4d0 [ 99.513688][ T6329] __x64_sys_sendto+0x76/0x90 [ 99.513712][ T6329] x64_sys_call+0x2d35/0x3020 [ 99.513735][ T6329] do_syscall_64+0x12c/0x370 [ 99.513808][ T6329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.513833][ T6329] RIP: 0033:0x7f239728c629 [ 99.513850][ T6329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.513966][ T6329] RSP: 002b:00007f2395ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 99.513991][ T6329] RAX: ffffffffffffffda RBX: 00007f2397505fa0 RCX: 00007f239728c629 [ 99.514009][ T6329] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000005 [ 99.514073][ T6329] RBP: 00007f2395ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.514110][ T6329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.514125][ T6329] R13: 00007f2397506038 R14: 00007f2397505fa0 R15: 00007fffcb94b988 [ 99.514149][ T6329] [ 99.630871][ T6338] set_capacity_and_notify: 13 callbacks suppressed [ 99.630917][ T6338] loop8: detected capacity change from 0 to 512 [ 99.825946][ T6338] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 99.839205][ T6338] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it [ 99.857695][ T6338] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.696: Corrupt directory, running e2fsck is recommended [ 99.938112][ T6338] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 99.966295][ T6338] EXT4-fs error (device loop8): ext4_iget_extra_inode:5025: inode #15: comm syz.8.696: corrupted in-inode xattr: invalid ea_ino [ 99.982638][ T6338] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 99.998028][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 100.013670][ C0] EXT4-fs (loop8): initial error at time 1771364824: ext4_iget_extra_inode:5025: inode 15 [ 100.023654][ C0] EXT4-fs (loop8): last error at time 1771364824: ext4_iget_extra_inode:5025: inode 15 [ 100.033926][ T6338] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.696: couldn't read orphan inode 15 (err -117) [ 100.047127][ T6346] loop0: detected capacity change from 0 to 1024 [ 100.054097][ T6346] EXT4-fs: Ignoring removed orlov option [ 100.073852][ T6346] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 100.090618][ T6338] loop8: lost filesystem error report for type 5 error -117 [ 100.260711][ T6357] loop7: detected capacity change from 0 to 512 [ 100.324367][ T6365] FAULT_INJECTION: forcing a failure. [ 100.324367][ T6365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.350695][ T6357] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 100.362376][ T6357] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 100.372616][ T6357] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.703: Corrupt directory, running e2fsck is recommended [ 100.404684][ T6357] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 100.412957][ T6357] EXT4-fs error (device loop7): ext4_iget_extra_inode:5025: inode #15: comm syz.7.703: corrupted in-inode xattr: invalid ea_ino [ 100.426646][ T6357] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.427464][ T6357] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.703: couldn't read orphan inode 15 (err -117) [ 100.436738][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 100.436757][ C0] EXT4-fs (loop7): initial error at time 1771364824: ext4_iget_extra_inode:5025: inode 15 [ 100.436790][ C0] EXT4-fs (loop7): last error at time 1771364824: ext4_iget_extra_inode:5025: inode 15 [ 100.438319][ T6365] CPU: 1 UID: 0 PID: 6365 Comm: syz.0.705 Not tainted syzkaller #0 PREEMPT(full) [ 100.438409][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.438462][ T6365] Call Trace: [ 100.438488][ T6365] [ 100.438576][ T6365] __dump_stack+0x1d/0x30 [ 100.438654][ T6365] dump_stack_lvl+0x95/0xd0 [ 100.438722][ T6365] dump_stack+0x15/0x1b [ 100.438787][ T6365] should_fail_ex+0x263/0x280 [ 100.438856][ T6365] should_fail+0xb/0x20 [ 100.438952][ T6365] should_fail_usercopy+0x1a/0x20 [ 100.439094][ T6365] _copy_from_user+0x1c/0xb0 [ 100.439168][ T6365] __sys_bpf+0x183/0x7e0 [ 100.439330][ T6365] __x64_sys_bpf+0x41/0x50 [ 100.439468][ T6365] x64_sys_call+0x10cb/0x3020 [ 100.439544][ T6365] do_syscall_64+0x12c/0x370 [ 100.439600][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.439678][ T6365] RIP: 0033:0x7fdc55aec629 [ 100.439767][ T6365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.439849][ T6365] RSP: 002b:00007fdc54547028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.439926][ T6365] RAX: ffffffffffffffda RBX: 00007fdc55d65fa0 RCX: 00007fdc55aec629 [ 100.440028][ T6365] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 0000000000000008 [ 100.440086][ T6365] RBP: 00007fdc54547090 R08: 0000000000000000 R09: 0000000000000000 [ 100.440125][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.440167][ T6365] R13: 00007fdc55d66038 R14: 00007fdc55d65fa0 R15: 00007ffe84630ab8 [ 100.440241][ T6365] [ 100.675192][ T6357] loop7: lost filesystem error report for type 5 error -117 [ 100.691068][ T6378] loop0: detected capacity change from 0 to 2048 [ 101.035352][ T6387] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 101.043247][ T6387] netlink: 'syz.0.708': attribute type 1 has an invalid length. [ 101.089947][ T6390] loop1: detected capacity change from 0 to 512 [ 101.107282][ T6390] EXT4-fs (loop1): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 101.276382][ T6390] netlink: 'syz.1.710': attribute type 39 has an invalid length. [ 101.370411][ T6400] loop7: detected capacity change from 0 to 1024 [ 101.403477][ T6400] EXT4-fs: Ignoring removed orlov option [ 101.409800][ T6400] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 101.437938][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 101.463613][ T6400] EXT4-fs mount: 15 callbacks suppressed [ 101.463630][ T6400] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.732191][ T6401] syzkaller1: entered promiscuous mode [ 101.737777][ T6401] syzkaller1: entered allmulticast mode [ 101.767102][ T5004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.784325][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.795559][ T6405] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 101.814638][ T6417] loop7: detected capacity change from 0 to 512 [ 101.822046][ T6417] ext4: Unknown parameter 'audit' [ 101.853182][ T6418] loop6: detected capacity change from 0 to 512 [ 101.885544][ T6418] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 101.918941][ T6418] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 101.929381][ T6418] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.718: Corrupt directory, running e2fsck is recommended [ 101.959975][ T6418] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 101.968327][ T6418] EXT4-fs error (device loop6): ext4_iget_extra_inode:5025: inode #15: comm syz.6.718: corrupted in-inode xattr: invalid ea_ino [ 101.981913][ T6418] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.983124][ T6418] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.718: couldn't read orphan inode 15 (err -117) [ 101.992341][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 101.992364][ C0] EXT4-fs (loop6): initial error at time 1771364826: ext4_iget_extra_inode:5025: inode 15 [ 101.992407][ C0] EXT4-fs (loop6): last error at time 1771364826: ext4_iget_extra_inode:5025: inode 15 [ 102.030432][ T6418] loop6: lost filesystem error report for type 5 error -117 [ 102.031134][ T6418] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.074582][ T6429] loop8: detected capacity change from 0 to 512 [ 102.183873][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.193325][ T6434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6434 comm=syz.1.723 [ 102.280562][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 102.326081][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 102.326104][ T28] audit: type=1400 audit(1771364826.785:872): avc: denied { mount } for pid=6440 comm="syz.6.726" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 102.354659][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.725'. [ 102.394357][ T28] audit: type=1400 audit(1771364826.785:873): avc: denied { search } for pid=6440 comm="syz.6.726" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.417766][ T28] audit: type=1400 audit(1771364826.785:874): avc: denied { search } for pid=6440 comm="syz.6.726" name="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.441809][ T28] audit: type=1400 audit(1771364826.785:875): avc: denied { read open } for pid=6440 comm="syz.6.726" path="/" dev="configfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 102.481818][ T6447] loop1: detected capacity change from 0 to 1024 [ 102.502910][ T6447] EXT4-fs: Ignoring removed orlov option [ 102.526448][ T6447] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 102.552281][ T6447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.686625][ T28] audit: type=1326 audit(1771364827.147:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.8.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3854ffc629 code=0x7ffc0000 [ 102.981573][ T28] audit: type=1326 audit(1771364827.147:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6419 comm="syz.8.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3854ffc629 code=0x7ffc0000 [ 103.030539][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.107317][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.735'. [ 103.144850][ T6467] vlan2: entered allmulticast mode [ 103.155839][ T6467] bridge0: entered allmulticast mode [ 103.211341][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.7.739'. [ 103.259557][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.7.739'. [ 103.294655][ T6491] netlink: 'syz.1.741': attribute type 13 has an invalid length. [ 103.296315][ T6488] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6488 comm=syz.8.743 [ 103.305244][ T6491] netlink: 'syz.1.741': attribute type 17 has an invalid length. [ 103.329951][ T6492] EXT4-fs: Ignoring removed orlov option [ 103.340044][ T6492] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 103.355128][ T6491] lo: left promiscuous mode [ 103.375214][ T6491] tunl0: left promiscuous mode [ 103.396267][ T6492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.424166][ T6491] gre0: left promiscuous mode [ 103.433670][ T6491] gretap0: left promiscuous mode [ 103.454035][ T6491] erspan0: left promiscuous mode [ 103.468652][ T6494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.508197][ T6491] ip_vti0: left promiscuous mode [ 103.514843][ T6491] ip6_vti0: left promiscuous mode [ 103.521500][ T6491] sit0: left promiscuous mode [ 103.528070][ T6491] ip6tnl0: left promiscuous mode [ 103.544935][ T6494] usb usb8: usbfs: process 6494 (syz.1.741) did not claim interface 0 before use [ 103.822675][ T28] audit: type=1400 audit(1771364828.291:878): avc: denied { write } for pid=6509 comm="syz.6.750" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.185383][ T6491] ip6gre0: left promiscuous mode [ 104.192360][ T6491] syz_tun: left promiscuous mode [ 104.205068][ T6491] ip6gretap0: left promiscuous mode [ 104.222416][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.244419][ T6491] bridge0: left promiscuous mode [ 104.255032][ T6517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.256028][ T6491] vcan0: left promiscuous mode [ 104.274674][ T6491] bond0: left promiscuous mode [ 104.279529][ T6491] bond_slave_0: left promiscuous mode [ 104.286331][ T6491] bond_slave_1: left promiscuous mode [ 104.295548][ T6491] team0: left promiscuous mode [ 104.300466][ T6491] team_slave_0: left promiscuous mode [ 104.307168][ T6491] team_slave_1: left promiscuous mode [ 104.315859][ T6491] dummy0: left promiscuous mode [ 104.322751][ T6491] nlmon0: left promiscuous mode [ 104.334527][ T6491] caif0: left promiscuous mode [ 104.339455][ T6491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.354673][ T6524] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 104.371303][ T50] bond0: (slave bond_slave_0): interface is now down [ 104.385441][ T50] bond0: (slave bond_slave_1): interface is now down [ 104.409252][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.419765][ T6533] netlink: 'syz.8.752': attribute type 1 has an invalid length. [ 104.430277][ T6533] netlink: 'syz.8.752': attribute type 1 has an invalid length. [ 104.438429][ T50] bond0: now running without any active interface! [ 104.447001][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 104.464143][ T6524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 104.472616][ T30] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.482872][ T30] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.503115][ T30] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.512107][ T6534] netlink: 'syz.7.756': attribute type 5 has an invalid length. [ 104.522040][ T30] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.522544][ T6534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.756'. [ 104.651709][ T6543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.757'. [ 104.677024][ T6550] set_capacity_and_notify: 3 callbacks suppressed [ 104.677114][ T6550] loop7: detected capacity change from 0 to 1024 [ 104.702843][ T6552] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6552 comm=syz.6.761 [ 104.714993][ T6550] ext3: Bad value for 'debug_want_extra_isize' [ 104.722303][ T6555] netlink: 'syz.1.759': attribute type 29 has an invalid length. [ 104.815069][ T6562] loop0: detected capacity change from 0 to 1024 [ 104.825041][ T6562] EXT4-fs: Ignoring removed orlov option [ 104.867154][ T6562] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 104.892078][ T6562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.943930][ T28] audit: type=1400 audit(1771364829.395:879): avc: denied { ioctl } for pid=6577 comm="syz.6.766" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 ioctlcmd=0x9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 105.036987][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.071275][ T6589] loop6: detected capacity change from 0 to 512 [ 105.100381][ T6589] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 105.119211][ T6589] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 105.132344][ T6589] EXT4-fs (loop6): 1 truncate cleaned up [ 105.146897][ T6593] vlan2: entered allmulticast mode [ 105.155681][ T6589] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.171331][ T6593] bridge0: entered allmulticast mode [ 105.177219][ T6593] bridge1: port 1(vlan2) entered blocking state [ 105.196798][ T6593] bridge1: port 1(vlan2) entered disabled state [ 105.206893][ T6589] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.768: Logical block already allocated [ 105.229187][ T6593] vlan2: entered promiscuous mode [ 105.234408][ T6593] bridge0: entered promiscuous mode [ 105.243365][ T6598] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 105.254829][ T6589] EXT4-fs (loop6): Remounting filesystem read-only [ 105.338343][ T4760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.354385][ T5937] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.374637][ T6603] netlink: 'syz.0.773': attribute type 5 has an invalid length. [ 105.420695][ T6610] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6610 comm=syz.8.774 [ 105.547909][ T6625] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 106.775405][ T6643] __nla_validate_parse: 6 callbacks suppressed [ 106.775459][ T6643] netlink: 236 bytes leftover after parsing attributes in process `syz.0.781'. [ 106.791861][ T6643] netlink: 236 bytes leftover after parsing attributes in process `syz.0.781'. [ 107.129005][ T6659] loop1: detected capacity change from 0 to 2048 [ 107.168271][ T6659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.202472][ T6677] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6677 comm=syz.8.787 [ 107.227357][ T6678] netlink: 96 bytes leftover after parsing attributes in process `syz.6.788'. [ 107.283294][ T6678] dummy0: entered promiscuous mode [ 107.296646][ T6678] dummy0: entered allmulticast mode [ 107.381572][ T6688] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 107.389339][ T6688] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 107.437449][ T6678] loop6: detected capacity change from 0 to 512 [ 107.458438][ T6691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.486737][ T6678] EXT4-fs: Invalid want_extra_isize 9 [ 107.642421][ T6696] netlink: 'syz.8.791': attribute type 5 has an invalid length. [ 107.660714][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.8.791'. [ 107.727799][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.794'. [ 108.546894][ T6718] netlink: 236 bytes leftover after parsing attributes in process `syz.8.797'. [ 108.556808][ T6718] netlink: 236 bytes leftover after parsing attributes in process `syz.8.797'. [ 108.575643][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.960067][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 108.985039][ T6731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.798'. [ 109.076655][ T6723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.233770][ T6740] loop7: detected capacity change from 0 to 1024 [ 109.271161][ T6740] EXT4-fs: Ignoring removed orlov option [ 109.317282][ T6740] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 109.382373][ T6744] loop8: detected capacity change from 0 to 128 [ 109.402857][ T6740] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.252961][ T5004] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.344624][ T6761] loop8: detected capacity change from 0 to 2048 [ 110.422584][ T6761] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.612976][ T6774] validate_nla: 2 callbacks suppressed [ 110.613026][ T6774] netlink: 'syz.1.812': attribute type 29 has an invalid length. [ 110.640069][ T6776] netlink: 'syz.8.810': attribute type 1 has an invalid length. [ 110.647828][ T6776] netlink: 'syz.8.810': attribute type 1 has an invalid length. [ 110.833789][ T28] audit: type=1326 audit(1771364835.326:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 110.877411][ T28] audit: type=1326 audit(1771364835.346:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 110.900845][ T28] audit: type=1326 audit(1771364835.346:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 110.924448][ T28] audit: type=1326 audit(1771364835.346:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 110.948333][ T28] audit: type=1326 audit(1771364835.346:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 110.971941][ T28] audit: type=1326 audit(1771364835.356:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 110.995474][ T28] audit: type=1326 audit(1771364835.396:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 111.019145][ T28] audit: type=1326 audit(1771364835.396:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6754 comm="syz.6.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f239728c629 code=0x7ffc0000 [ 111.103988][ T28] audit: type=1400 audit(1771364835.597:888): avc: denied { append } for pid=6787 comm="syz.0.820" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 111.307280][ T6798] loop1: detected capacity change from 0 to 1024 [ 111.315575][ T6798] EXT4-fs: Ignoring removed orlov option [ 111.328285][ T6798] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 111.346942][ T12] ================================================================== [ 111.355051][ T12] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 111.362374][ T12] [ 111.364710][ T12] read to 0xffff88811ada06c0 of 4 bytes by task 5086 on cpu 0: [ 111.372276][ T12] atime_needs_update+0x25f/0x3e0 [ 111.377369][ T12] touch_atime+0x4a/0x330 [ 111.381732][ T12] shmem_file_read_iter+0x477/0x540 [ 111.386961][ T12] lo_rw_aio+0x67d/0x730 [ 111.391239][ T12] loop_process_work+0x56c/0xac0 [ 111.396220][ T12] loop_workfn+0x31/0x40 [ 111.400508][ T12] process_scheduled_works+0x4de/0x9e0 [ 111.405995][ T12] worker_thread+0x581/0x770 [ 111.410629][ T12] kthread+0x22a/0x280 [ 111.410652][ T12] ret_from_fork+0x150/0x360 [ 111.419351][ T12] ret_from_fork_asm+0x1a/0x30 [ 111.424155][ T12] [ 111.426522][ T12] write to 0xffff88811ada06c0 of 4 bytes by task 12 on cpu 1: [ 111.434090][ T12] touch_atime+0x1d7/0x330 [ 111.438543][ T12] shmem_file_read_iter+0x477/0x540 [ 111.443772][ T12] lo_rw_aio+0x67d/0x730 [ 111.448067][ T12] loop_process_work+0x56c/0xac0 [ 111.453045][ T12] loop_rootcg_workfn+0x22/0x30 [ 111.458210][ T12] process_scheduled_works+0x4de/0x9e0 [ 111.463711][ T12] worker_thread+0x581/0x770 [ 111.468341][ T12] kthread+0x22a/0x280 [ 111.472450][ T12] ret_from_fork+0x150/0x360 [ 111.477080][ T12] ret_from_fork_asm+0x1a/0x30 [ 111.481882][ T12] [ 111.484269][ T12] value changed: 0x315c25fe -> 0x328e57c9 [ 111.490015][ T12] [ 111.492369][ T12] Reported by Kernel Concurrency Sanitizer on: [ 111.498542][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 111.507841][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.517917][ T12] Workqueue: loop1 loop_rootcg_workfn [ 111.523322][ T12] ================================================================== [ 111.551044][ T5937] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.567084][ T6798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.595958][ T6804] netlink: 28 bytes leftover after parsing attributes in process `syz.0.823'. [ 111.665037][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.