last executing test programs: 5m58.604229308s ago: executing program 32 (id=43): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) add_key$fscrypt_provisioning(&(0x7f00000005c0), 0x0, 0x0, 0x18, 0xfffffffffffffff8) (async) add_key$fscrypt_provisioning(&(0x7f00000005c0), 0x0, 0x0, 0x18, 0xfffffffffffffff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x43, 0x0) pwrite64(r2, 0x0, 0x0, 0x4fed0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x4, &(0x7f00000001c0)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}]}, 0x1, 0x4d9, &(0x7f0000000740)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x78, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x30}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x78, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x30}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000240)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000280)=""/10, &(0x7f0000000080)=0xfffffffffffffedc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)='B', 0x1}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)='B', 0x1}], 0x1}}], 0x2, 0x0) unshare(0x20000400) (async) unshare(0x20000400) socketpair(0x22, 0x2, 0x22, 0x0) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x2, 0xaab80) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x20010, r7, 0x4) (async) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x20010, r7, 0x4) io_uring_enter(0xffffffffffffffff, 0xf23, 0x0, 0xc, 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x16, 0x0, @thr={0x0, 0x0}}, 0x0) 5m54.981704899s ago: executing program 33 (id=68): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x1000006, 0x692}, 0x10) sendto$inet6(r1, &(0x7f0000000040)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f82ea6fb00570dd7c6216170b6da6b0f93499817", 0x14}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x18, 0x1, 0x25, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x3) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="c4", 0x1}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9800000000"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x7, 0x8000000000000000}, &(0x7f00000001c0)=0x18) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 4m21.384744667s ago: executing program 34 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r3 = syz_io_uring_setup(0x4175, &(0x7f0000000180)={0x0, 0x136f, 0x10000, 0x2, 0x2d0}, &(0x7f00000000c0), &(0x7f0000000400)) r4 = fsopen(&(0x7f0000000140)='esdfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000280)=',^/a@\x00', 0x0, r2) inotify_init1(0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") chdir(&(0x7f0000000540)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, 0xfffffffffffffffe, 0x29) io_uring_enter(r3, 0x7b20, 0xe93c, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000)=[0x2, 0x9], 0x2) io_uring_enter(r3, 0x1e61, 0x9296, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0x3, &(0x7f0000000440)=""/224}, 0x90) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270001406"], 0xffdd) 3m43.279890261s ago: executing program 35 (id=1277): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x1088c, 0x0, 0x10000, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x136f, &(0x7f00000001c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r0, r1], 0x2}) io_uring_enter(r1, 0x47f6, 0x1000000, 0x0, 0x0, 0x0) 3m23.717373908s ago: executing program 7 (id=1523): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x11000, 0x0, 0x400, 0x80800001, 0x0, 0x0, 0x1, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffffff, 0x0, 0x20) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x88000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x5, 0x5}, &(0x7f0000000240)=0x8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x4, 0x12, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0xc913, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c74657200"], 0x330}}, 0x4008800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={r2, 0x5}, &(0x7f0000000300)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000400)='./bus\x00', 0x8100aa, &(0x7f0000000480)=ANY=[@ANYRESHEX=r5], 0x1, 0x232, &(0x7f0000000f00)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', './bus'}, 0x9) mmap(&(0x7f00001d7000/0x1000)=nil, 0x1000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r7, 0x5) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x4000, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) syz_clone3(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) 3m23.420817464s ago: executing program 0 (id=1529): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000004, 0x12, r0, 0x80000000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m23.378182306s ago: executing program 7 (id=1530): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x0, 0x2, 0x0, "a30b3b28af4d2f246a016542daa8456e6c47a34048ff2ece1e75f1fc0100f41e4de62a61093825abbc8a1dd888935ace522fa788000000000033035551502f00000000000000000000000500"}, 0xd8) (async, rerun: 32) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000280)={0x33, 0x406, 0x6, 0x13, 0xa, 0x1057400, 0x6, 0x131}) (async, rerun: 64) r2 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000000d00)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000200)="4efe54a7f754a53dc2c98b39f023c8cf5245dc1b31fef34fe2bff5955810fcad084f2dc6e7871c98c1e01fe0230f073d33d984c80bfcde5e", 0x38}], 0x1, &(0x7f0000000c00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @broadcast}}}], 0x20}, 0x84) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000140)={0x0, 0xa}, &(0x7f0000000300)=0x8) (rerun: 64) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r6, @in6={{0xa, 0x4e20, 0x7, @mcast2, 0x4}}, 0x247, 0x6, 0x7ff, 0x101, 0x0, 0x800000, 0x9}, 0x9c) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r7, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x18080, 0x0, 0x0, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 3m23.30017784s ago: executing program 7 (id=1533): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x60, 0x14, 0x6e}) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) gettid() socket(0x1, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x68, 0x0, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xffff}, {}, {0xffe0, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa720, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x5}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x8001}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6e}]}}]}}]}, 0xa4}}, 0x20040084) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r10, 0x30, 0x0, @ib={0x1b, 0xb, 0x0, {}, 0x9, 0xfffffffffffffffe}}}, 0x90) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m22.410413924s ago: executing program 7 (id=1545): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000013000500"/20, @ANYBLOB="00000000010604ad0c002b8008000400070000001400030076657468305f766c616e0000000000000a0001"], 0x4c}}, 0x48000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000001100)={0xb40, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xad8, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x3e0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x254, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x9, 0xfff7, 0x3, 0xadc2, 0x8, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xa83, 0x9, 0x2, 0xe, 0x6, 0x40, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff80, 0x4, 0xa9ce, 0x7, 0x0, 0x3868, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x1, 0x2, 0x1b, 0x12, 0x6, 0x24, 0x6c, 0x3, 0x30, 0xc, 0x0, 0x5, 0x16, 0x24, 0x12, 0x18, 0x12, 0x1f, 0x1, 0x2, 0x24, 0x6c, 0x16, 0x36, 0x5, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x3, 0xb, 0x4, 0xa26, 0x6c4, 0x401, 0x8c0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x4, 0x8}, {0x1, 0x1}, {0x3, 0x7}, {0x5, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x5, 0x7}, {0x0, 0x4}, {0x6, 0x2}, {0x3, 0x5}, {0x2, 0x1}, {}, {0x2, 0x8}, {0x2, 0x8}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x8}, {0x7, 0x12}, {0x1, 0x5}, {0x7}, {0x5, 0x3}, {0x6, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0x6}, {0x6, 0x2}, {0x6}, {0x2, 0x1}, {0x3, 0x8}, {0x0, 0x6}, {0x7, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x1}, {0x2, 0xa}, {0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x6}, {0x5, 0x4}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x7}, {0x1, 0x4}, {0x4, 0x5}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x3}, {0x5}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x3}, {0x4, 0x3}, {0x3, 0x7}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0xa}, {0x4, 0x9}, {0x2, 0x1}, {0x1}, {0x7, 0xa}, {0x2, 0x4}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0x1}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x6}, {0x0, 0x5}, {0x7, 0x9}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0x6}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x6}, {0x3, 0x5}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x1}, {0x2, 0x7}, {0x4, 0x2}, {0x6, 0x9}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x6}, {0x3, 0xa}, {0x1, 0xa}, {}, {0x2, 0x9}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x0, 0x3}, {0x3, 0xa}, {0x3, 0x4}, {0x4, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x5}, {0x7, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x9}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x7}, {}, {0x6, 0x7}, {0x6, 0x4}, {0x0, 0x6}, {0x4}, {0x6, 0x1}, {0x4, 0x8}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x3, 0x9}, {0x0, 0x1}, {0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x3}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0x5}, {0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x5, 0x1b, 0x4c, 0x16, 0x6, 0x12, 0x3, 0x5, 0x3, 0x16, 0x6c, 0xb, 0x16, 0x36, 0x6e, 0x18, 0x16, 0x4, 0x36, 0x12, 0x72, 0x16, 0x1b, 0x12, 0x1b, 0x6, 0xb, 0x12, 0x36, 0x0, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xe3, 0x5, 0x8, 0x0, 0x0, 0x5, 0x5]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b58, 0x7, 0x7, 0x4, 0x9, 0x3, 0x3, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7ff, 0xb, 0xc0, 0x1000, 0x1ff, 0x4, 0x100]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x36, 0x16, 0xe, 0x30, 0x18, 0x60, 0x6, 0x2, 0x5, 0x5, 0x5, 0x16, 0x60, 0x12, 0x60, 0x5, 0x6, 0x16, 0x16, 0x60, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0x6, 0x1, 0x9, 0x3, 0xfb29, 0x9]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x4}, {0x7, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x170, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x70, 0x8, 0x400, 0x7, 0x5, 0x9f96]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x97, 0x2, 0x100, 0x7ff, 0x8, 0x5, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x6}, {0x3, 0x2}, {0x1, 0x2}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0xb, 0x6c, 0x6, 0x2, 0x12, 0x18, 0x6f, 0x24, 0x36, 0x1, 0x6c, 0x3, 0x1]}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x0, 0xc000, 0xeb, 0x3, 0x9b, 0x8001, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x81, 0x3, 0x6, 0x3, 0x4, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x12, 0x6c, 0x6c, 0x24, 0x1b, 0x1, 0x1, 0x18, 0x3, 0x18, 0x77, 0x12, 0x5, 0x3, 0x1b, 0x5, 0x18, 0x4, 0x4, 0x2e, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x24, 0x0, 0x16, 0x35, 0xe, 0x30, 0x9, 0x6c, 0x60, 0x18, 0x12, 0x48, 0x1, 0x6c, 0x16, 0x1b, 0x6, 0xb, 0x48, 0x4, 0x48, 0x36, 0x9, 0xb, 0x1b, 0x30, 0x12, 0x30, 0x67, 0x24, 0x2, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffc, 0x2, 0x0, 0x9, 0x0, 0x4, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x9a16, 0x5, 0x0, 0x4, 0x6, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x10, 0xe, 0xe61c, 0x1, 0xb6, 0x2]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}]}, {0x468, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x44c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34, 0x0, 0x2, 0x5, 0x9, 0x8, 0x4, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff5, 0x0, 0x5, 0x6, 0x6, 0x7, 0xf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0xfffd, 0x8, 0x3, 0x7, 0xff, 0x170, 0x47]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x2, 0x5d, 0x3, 0xb, 0x48, 0x24, 0x36, 0x9, 0x60, 0x3, 0x4, 0x60, 0x6, 0x6, 0x24, 0x92b4ef1d29e9d631, 0x4, 0x6, 0x6, 0x6, 0x3, 0x16, 0x1, 0x3, 0x24, 0x3, 0x18, 0x60, 0x5, 0x4, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x1, 0x3, 0x3ff, 0x0, 0x5, 0x1c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23c, 0xc, 0x9, 0x5, 0x101, 0xffff, 0x400, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x6c, 0x60, 0x16, 0x30, 0x5, 0xc, 0x1b, 0x14, 0x1b, 0x36, 0xc, 0x1, 0x3, 0x60, 0x0, 0x5, 0x48, 0x2, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x0, 0x6}, {0x3, 0xa}, {0x3, 0x8}, {0x0, 0x5}, {0x1, 0x8}, {0x3, 0x6}, {0x2, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x1, 0x3}, {0x4, 0x6}, {0x2, 0x2}, {0x3, 0xa}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x8}, {0x7, 0x8}, {0x1, 0x6}, {0x1, 0x9}, {0x2, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x7}, {0x5, 0x7}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x4}, {0x0, 0x3}, {0x4, 0x3}, {0x4, 0xa}, {0x2, 0x1}, {0x4, 0x4}, {0x6, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0x5, 0x3}, {0x5, 0x7}, {0x2}, {0x7, 0x9}, {0x5, 0x2}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x5}, {0x1, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0xa}, {0x2, 0x4}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x368, 0x7, 0xf3, 0x6, 0x9, 0xfffd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x30, 0x6c, 0x6c, 0xb, 0x24, 0x0, 0xb, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xa, 0xfff8, 0x6, 0x380, 0x0, 0x6, 0xc]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0x1000, 0x8, 0x7, 0xa54, 0xaa37, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4cb, 0x5, 0x7, 0x8001, 0x81, 0x7, 0x9, 0x30]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x6c, 0x5, 0x3, 0x30, 0xb, 0xb, 0x16]}]}, @NL80211_BAND_6GHZ={0x160, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x7, 0x1}, {0x2, 0x6}, {0x6, 0x8}, {0x0, 0x3}, {}, {0x2, 0x6}, {0x4, 0xa}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x9}, {}, {0x5}, {0x2, 0x4}, {0x0, 0x3}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0x5}, {0x4}, {0x5, 0x5}, {0x4, 0x5}, {0x6, 0x9}, {0x3, 0x4}, {0x2, 0xa}, {0x7, 0x8}, {0x3, 0x1}, {0x5, 0xa}, {0x5, 0x4}, {0x6, 0x7}, {0x1, 0x5}, {0x4}, {0x1, 0x8}, {0x4, 0x8}, {0x5, 0x9}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x1}, {0x1}, {0x6, 0x4}, {0x0, 0x2}, {0x7, 0x3}, {0x5, 0x1}, {0x5, 0x4}, {0x3, 0xa}, {0x1, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x8}, {0x3, 0x1}, {0x3, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x6, 0x6}, {0x0, 0xa}, {0x1, 0x4}, {0x4, 0x5}, {0x5, 0x4}, {0x4, 0x4}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x1}, {0x7, 0x9}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x4}, {0x2, 0x3}, {0x3, 0x4}, {0x3, 0x2}, {0x3, 0x9}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x8}, {0x1, 0x6}, {0x2, 0x5}, {0x3, 0xa}, {0x4, 0x2}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x1e}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x7}, {0x5, 0xa}, {0x2, 0x3}, {0x4, 0x2}, {0x7, 0x2}, {0x6, 0x3}, {0x1, 0xa}, {0x1, 0x3}, {0x4, 0x4}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x9}, {0x4}, {0x0, 0x1}, {}, {0x5, 0x7}, {0x6, 0xa}, {0x3, 0x6}, {0x7, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x1}, {0x0, 0x7}, {0x6}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x3, 0x9}, {0x6, 0x3}, {0x6, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x4, 0x401, 0x3, 0x3, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x7}, {0x3}, {0x4, 0x9}, {0x3, 0x2}, {0x7}, {0x1, 0x2}, {0x2}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x1}, {0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x5, 0xa}, {0x7, 0x4}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {0x4, 0x1}, {0x3, 0x5}, {0x3, 0x5}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x1}, {0x6, 0x4}, {}, {0x7, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0xa}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x2}, {0x1, 0x1}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x3, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x7}, {0x0, 0xa}, {0x5, 0x4}, {0x6, 0x3}, {0x3, 0x2}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x7}, {0x4, 0x5}, {0x5, 0x2}, {0x2, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x7fff, 0xb, 0xd, 0xb, 0x9, 0xfff, 0x900]}}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x7, 0xa}, {0x1, 0x2}, {0x1}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x0, 0x6}, {0x5, 0x3}, {0x1, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x1}, {0x2, 0x4}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x3, 0x5}, {0x4}, {0x0, 0x6}, {0x7, 0x9}, {0x6, 0x9}, {0x4, 0x1}, {0x5, 0xa}, {0x6, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x6}, {0x5, 0x8}, {0x6, 0x3}, {0x6, 0x2}, {0x5, 0x3}, {0x6, 0x6}, {0x5, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0x4}, {0x3}, {0x6}, {0x6, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x8}, {0x3, 0x7}, {0x3, 0x7}, {0x3, 0x8}, {0x3, 0xa}, {0x6, 0x3}, {0x1}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x91, 0x1, 0x5, 0x2, 0x7, 0x1, 0xfff8]}}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x0, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x5}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x7}, {0x0, 0x17}, {0x7, 0xa}, {0x5, 0x9}, {0x6, 0x2}, {0x2, 0x6}, {0x5, 0x5}, {0x1}, {0x5}, {0x4, 0x8}, {0x4, 0x1}, {0x4, 0x6}, {}, {0x3, 0x2}, {0x6, 0x2}, {0x3, 0x7}, {0x3, 0x6}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {}, {0x4, 0x9}, {0x5, 0x8}, {0x6, 0x4}, {0x6, 0xa}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x4, 0x9}, {0x1, 0x3}, {0x2, 0x7}, {0x3, 0x4}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x5}, {0x5, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x6, 0x1}, {0x6, 0x8}, {0x2, 0x5}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x3}, {0x1, 0x1}, {0x7, 0x9}, {0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x6, 0x1e}, {0x4, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x7, 0x1}, {}, {0x3, 0x4}, {0x2, 0x9}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x5, 0xa}, {0x1, 0x9}, {0x4, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x2}, {0x1, 0xa}, {0x6, 0x8}, {0x2, 0x6}, {0x0, 0x8}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x2}, {0x2, 0x4}, {0x6, 0x5}, {0x4, 0x7}, {0x1, 0x6}, {0x5, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x1, 0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x3}, {0x1, 0x3}, {0x3, 0x1}, {0x2, 0xa}, {0x7}, {0x2, 0x4}, {}, {0x1, 0x1}, {0x7, 0x9}, {0x1, 0x2}, {0x3, 0x6}, {0x0, 0x4}, {0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0x2}, {0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x36, 0x4, 0x4, 0x16, 0x2, 0x24, 0x1b, 0x5, 0x36, 0x60, 0x2, 0xc, 0x6, 0x5b, 0x36]}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xe6, 0x101, 0x9, 0x4, 0x3ff, 0x1, 0xff61]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x9}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x8}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x2}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x8}, {0x6, 0x9}, {0x5, 0x4}, {0x1, 0x9}, {0x6, 0xb}, {0x3, 0x4}, {0x4, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x0, 0xcb03, 0x1000, 0x9, 0x919e, 0x2, 0xa]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}]}, {0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfe}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x96}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x12, 0x36, 0x4, 0x3, 0x5, 0x36, 0xc, 0x4d, 0x9, 0x2, 0x26860bbd50ab23fe, 0xb, 0x3, 0xb, 0x24, 0x36, 0x0, 0x6, 0x2, 0x9, 0x0, 0x36, 0x1c, 0x0, 0x4, 0x48, 0x3, 0x62, 0x48, 0x2]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x4}, {0x6, 0x3}, {0x6, 0x8}, {0x5, 0x1}, {0x7, 0x3}, {0x3, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x6, 0x5}, {0x6, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x4, 0xa}, {0x0, 0xa}, {0x6, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x2, 0x4}, {0x6, 0x6}, {0x1, 0x9}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xfffe, 0x94, 0x7, 0xc64, 0x5, 0x8, 0x10]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x7}, {0x1, 0x8}, {0x4, 0x1}, {0x6, 0x3}, {0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x8}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x1}, {0x3, 0x7}, {0x1, 0x5}, {0x7, 0xa}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x2, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x1, 0x1}, {0x1, 0x3}, {0x0, 0x7}, {0x5, 0x7}, {0x5, 0x3}, {0x5}, {0x3, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x3, 0x2}, {0x2, 0x7}, {0x7}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x2}, {0x5, 0x6}, {0x3, 0xa}, {0x3, 0x9}, {0x7}, {0x0, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x2, 0x6}, {0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x7}, {0x6, 0xa}, {0x0, 0x4}, {0x3, 0x3}, {0x6, 0x4}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x3}, {0x6, 0x4}, {}, {0x1, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x7}, {0x2}, {0x5, 0xa}, {0x4, 0x6}, {0x0, 0x1}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x7}, {0x2, 0x5}, {0x3, 0x5}, {0x0, 0x7}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x2}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0xc0, 0xc, 0x3, 0x60, 0x30, 0x6c, 0x60, 0x30, 0x12, 0x1b, 0x6, 0x1b, 0x1, 0x4, 0x36, 0x9, 0x3, 0x5, 0x30, 0x67, 0x16, 0x1b, 0x33, 0x6, 0x60, 0x6c, 0x1, 0x5]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x2, 0x4}, {0x0, 0x4}, {0x1, 0x7}, {0x2, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x4}, {0x3, 0x5}, {0x5, 0x9}, {0x5}, {0x2, 0x7}, {0x4, 0x1}, {0x2, 0x2}, {0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x2, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x2}, {0x2, 0x3}, {0x4, 0x5}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x1, 0x5}, {0x7, 0x7}, {0x4}, {0x5, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x3}, {0x7}, {0x6, 0x6}, {0x1}, {0x2, 0x8}, {0x4, 0x1}, {0x6, 0x2}, {}, {0x4, 0x3}, {0x0, 0x9}, {0x1}, {0x3, 0x4}, {0x5, 0x6}, {0x5, 0x9}, {0x2, 0x2}, {0x2, 0x2}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x8}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x1}, {0x7, 0x6}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x2}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x7, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {0x4, 0x5}, {0x4, 0x1}, {0x0, 0x3}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x8}, {0x6, 0x8}, {0x4}, {0x3, 0x9}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x9}, {0x3, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x3, 0x800, 0xc, 0x5, 0x8000, 0x9]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0x4}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}]}, 0xb40}, 0x1, 0x0, 0x0, 0x20008800}, 0x80c0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r7}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x1, 0x2, 0x4, 0x0, 0x0, 0x1}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000380)={0x24, r10, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x6d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x440) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xd, 0x62}}}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="00615e537d338361d31536e4ec8060"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4044085) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)={0x4c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r13 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r13, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) 3m22.048912162s ago: executing program 0 (id=1553): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xa8, 0xc8, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e5c, @multicast1}, 0x10) (async) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e5c, @multicast1}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) sendto$inet(r2, &(0x7f0000000640)="a8b36005b39fbb590b4ea4a2cd3ffd21cc436ecbf825d653dc165c6d42ac0003978cee2150a1d0651ee407dec5113d8488cc40a68518b8a8d9c3b7522af7ee3406b9c99e3e0534fe58d922b84b0c2c37e89c80277c85b3d017e310cc036489acdc53a18adeaa7931aeb28b23e278e1c1708f221d0d6f22c0b3c93c92352df438162a9ac18373d70ca8965397f2dbdd1a", 0x90, 0x40805, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$packet(r3, 0x0, 0x0, 0x40004, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) (async) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13ed", 0xe}], 0x1}}], 0x1, 0x20008000) recvmsg(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r2, 0x1) getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x22, 0x1, 0x2, 0x0, 0x0, 0x7, 0x8604, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000300), 0xe}, 0x3112, 0x4, 0x0, 0x7, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xd, 0xffffffffffffffff, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) dup(r0) (async) dup(r0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") (async) syz_read_part_table(0x60d, &(0x7f0000002200)="$eJzs3D9olHcYB/DvJbmcUTAdnFxqHDoJRXE0Q5XkqlgIp1IIDvYfIs0UIXDSw5Q4tBkUM0jHLlK4DhonYwYnRaFzEQeLkMGlYBepHXLl7l6SOyjF0oRS/HyGe353PDzf94F3/V34XxtIuTi1Kp3y/qd/298a3TzP50xzYvJ4q9VqnU5KOZtyxsq7l5MMpX9q9icZ7plz8/udq9/+9mG5+fTUq/fOPVgc2JhZyTtJdvU2Z+SvHqXyzzZlO9wafzi6cGW2erX9pdpYW/84uf1yorZycnFp+UT52Oft3y8nj4r+7osxkoup51K+zCdDbxz19eax1Jc/386vj194Um2sfdd8fnB9b3Xw7vkjr/etXrt/KJlrR0yl87JvGv6Xi/fkL/Tkz41dn15qHD1wZ8+Nw/V7j2svBn9vdRWR5a3JBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABge9xqf1yZrV6tj194Um2sffPzTx/dfjlRWzm5uLR8YvjYs6LvUVGHinox9VxKOclMZvJFZt88crrUmz/+cHRhI/+Pncnzg+t7q82754+8nly9dv9Qp6uUqXYZ2IqN+/XnN9bmxq5PLzWOHriz58bh+r3HtReD3b6ZSj7rrJuksvWPAQAAAAAAAAAAAAAAAAAAwFtuYvL4vqkPaqeTUs7uSPLrV51b9q3KyI/p3Lzv2l/UZ5Vkd5KbO7r/BdB8eurV8LkHi78Ul+LnU8l8kl0/rJxJ3t3IudwfW96czH/pzwAAAP//gTiR5w==") fsopen(&(0x7f0000000180)='ext4\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x4e240, 0x41) (async) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x4e240, 0x41) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) r5 = socket(0x11, 0x4, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'batadv0\x00', 0x3}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'batadv0\x00', 0x3}, 0x18) mmap(&(0x7f0000ad4000/0x4000)=nil, 0x4000, 0x200000b, 0x1010, r1, 0x99cd5000) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) msync(&(0x7f0000d39000/0x4000)=nil, 0x4000, 0x1) (async) msync(&(0x7f0000d39000/0x4000)=nil, 0x4000, 0x1) 3m21.90073297s ago: executing program 7 (id=1556): openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0xa0900, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x88142) r1 = dup(r0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 3m21.900430579s ago: executing program 0 (id=1557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100001000000000000000fe880000000000000000000000000101000000000000000000000000000000000000ecdf00000000000000000000000062050d0e3d3a9776bb2c8b38df9e7f33d32b00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0100000000000000000000000000010000200032000000fc010000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000002000000000000000000000000000000000800000000000000000000000000010000000000000000010000000000000000000000000000000035000002000000200000000000000048000200636263286165732900"/240], 0x138}}, 0x4050) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x1088c, 0x0, 0x10000, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x1372, &(0x7f0000000300)={0x0, 0x49fa, 0x10, 0x0, 0x50}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x60022000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000a0a03c2eae606f2131e7a9bb8c3236a0000000000000077df"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004010) rename(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[r1, r2], 0x2}) syz_open_dev$usbmon(&(0x7f0000000000), 0x5, 0x414400) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m21.548239567s ago: executing program 0 (id=1560): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000040)={0xa0202, 0x0, 0x11}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0x7f}, 0x102801, 0x9, 0x0, 0x0, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)='\\ S', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}, 0x50) r2 = syz_io_uring_setup(0x54d, &(0x7f0000000040)={0x0, 0x4ae8, 0x80, 0x809, 0x34e}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x5}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x6000, @fd_index=0x5, 0x73, 0x0, 0x0, 0x1e, 0x1, {0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x7fff}}, './file0/file0/..\x00'}) r8 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r8, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 3m20.67956796s ago: executing program 0 (id=1569): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_GET_NAME(0x10, &(0x7f0000000500)=""/174) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0xfffffffc}, {}, {0x6}]}) 3m20.2773858s ago: executing program 7 (id=1573): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 3m20.189675995s ago: executing program 36 (id=1573): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 3m20.060101451s ago: executing program 0 (id=1576): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x7e9}, 0x8) 3m19.960793706s ago: executing program 37 (id=1576): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519fd6e5e701"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r6, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x86, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbfae0dde400000800450000780000000000119078000000000000000000001b59006490780200000000000000e000000000ab08653904030401c50900000009c5000000efffffffff00000000000000009384bbeb3018ad591b661fe808b21b7769cc875dfb628774a92abc45930b1be5d2a0057e62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r1, 0x7e9}, 0x8) 3m14.574176156s ago: executing program 8 (id=1618): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_getaddr={0xa8, 0x16, 0x20, 0x70bd27, 0x25dfdbfd, {0xa, 0x38, 0x80}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x8}, @IFA_RT_PRIORITY={0x8, 0x9, 0xc}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}}, @IFA_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFA_LOCAL={0x14, 0x2, @empty}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x195}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8}, 0x0) 3m14.499540459s ago: executing program 8 (id=1620): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x280400) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x8, 0xff9, 0x1, {{0x8, 0x4, 0x2, 0x6, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0xd9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@dev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=@getpolicy={0x154, 0x15, 0x4, 0x70bd26, 0x25dfdbfd, {{@in6=@mcast2, @in=@local, 0x4e23, 0x0, 0x4e20, 0x7, 0xa, 0x20, 0x80, 0x0, r1, r2}}, [@algo_aead={0xf9, 0x12, {{'aegis128-generic\x00'}, 0x568, 0x200, "abbe3abdbbaa41f5811bf4598d1d12705849f7e93901812635a6fcddd0475acfbca512d46b78f64f6e2b94a6bda1f57faa73f0b446e540214bc372991a310e2b2cd4d2b66c69d3689044c9bf7302f5e4676e5b8622f31d9afe2a812d20954fba0ddc2782d91f9a8c801e9e09d2af823b9e4f5d6780b7eaad82f305e70d68e26d25f1466b32730b20a52a287c833676f8147ff1499b409e6abb1555b1b72217b61e04d19efe10c95d6581a4eaa8"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x154}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) recvfrom$inet6(r0, &(0x7f0000000440)=""/123, 0x7b, 0x10100, &(0x7f00000004c0)={0xa, 0x4e22, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {r2, 0xffffffffffffffff}}, './file0\x00'}) ioprio_set$uid(0x3, r4, 0x2004) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001d40)=[{{&(0x7f0000000540)={0xa, 0x4e20, 0x40, @rand_addr=' \x01\x00', 0x68}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0x1000}], 0x1, &(0x7f00000015c0)=[@tclass={{0x14, 0x29, 0x43, 0x690a}}, @hoplimit_2292={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0x6}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x87, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}, @rthdr={{0x58, 0x29, 0x39, {0x21, 0x8, 0x1, 0x1, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @remote, @private0, @private1]}}}], 0x100}}, {{&(0x7f00000016c0)={0xa, 0x4e22, 0x2, @empty, 0x3}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001700)="d030f76f7c29418bd2c70c2cf7e483668a863aae3e08930d1b1f84bcee955f15c1ff067e1754c54f813d8cf10eb8916c1875ffff41a167aeb8b18168e8460d96028d34e96d24746969", 0x49}, {&(0x7f0000001780)="01f509d46b04a031464f2f893d5444bc5e8ca8b4c77e79474d6ec51b9ef38e4589ff2aee24fecf306bfb512a3f616eab06c62cad15cd9a01a25193ed847d8bb0e1d096f1248cb0c232ae1fd470b74c05e458b4f047ac477b18f25c3d628a60f93ee58296d9385ce7a36705989e75690a2bc73e720af451ea3e74543b19886ab6b0dbdb370f6ab6e80a57ccfb1dfb14d95aa7f13cbca2fb377a4e720688385438dc15c2b3dd8f", 0xa6}, {&(0x7f0000001840)="18da3b691ff0e31d67de85aeffc215e5c94787cd233f3a2317e34aa6b3aae8d17e9b8d9fda0f3ae9972bfd15ec6dc2fe8154b4136a7b433c2d368efa244cda89af16268ca2ac89d6b373e0c6930407bb298e108118956ab22e72b6", 0x5b}, {&(0x7f00000018c0)="caf2a63ccecdf10763b392349e58aa8a68ff38e6302e39ea0805919361c081fc7f2a0a7957951a859d93a8447f0bae60a922cb67be9c15363e6e95e629bb53c28ef3e6c6f5578459c9ecf387bf5e9da9e5399f413ca7ef2c56bfad685f34175968308deb341df3261ea4b163cc48d372a69f5e11e9c1b3535fc15a045ccc23b30d1ba052442e2bd6cf9fbbf2b54c6fcbd1334929264c0abd970b4d45d1f99004979da3777847453b2dbf2fd7d5f30c4e90152b59b068406cc8e83247ca82f4810ee7b06f42d6957cd6a0d1670ea4b0b740849349", 0xd4}, {&(0x7f00000019c0)="db1a5885a7d4d2a694bab56a67a38b268a51ff65f94643afd606588499d5366b10617c175865021a6eb5fc798238fcd91af9f7d47742e719ae50f433310e96da1dfe4737f9be259258c8719245014fb3f6d99d64a65461c60014d3f059fb94220c935624145cf40aada24b8a7a206f1e7d1e857b2be9b6f03d30b267503074272a5abef5c7f2c4ffcef03569287f90ecab8be368622fddae5ea7d6f6a88a28ab39b01ecfa088", 0xa6}, {&(0x7f0000001a80)="dea1f089", 0x4}, {&(0x7f0000001ac0)="5e5a25ed081a296724565eae8dd6c2b9dcb7a036ac1742fc32fd80521e9ade9810a1efbf3d8d7e400b1c89fae0da03", 0x2f}], 0x7}}, {{&(0x7f0000001b80)={0xa, 0x4e23, 0x6, @local, 0x5ba}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001bc0)="4c2db27b0876795b98c297518f67ea8d7f36c14ac26477cddd0e082871f0dbdf5e6667c219d7d6d4aa321e32c002f5274f2ec85b9d0664c430537e4301505b3b14", 0x41}], 0x1, &(0x7f0000001c80)=[@rthdr={{0x28, 0x29, 0x39, {0x89, 0x2, 0x2, 0xa, 0x0, [@local]}}}, @tclass={{0x14, 0x29, 0x43, 0xfffffffe}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @rthdr={{0x58, 0x29, 0x39, {0x0, 0x8, 0x2, 0x3, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @empty]}}}], 0xc0}}], 0x3, 0x4040) recvmmsg(r0, &(0x7f0000004500)=[{{&(0x7f0000001e00)=@phonet, 0x80, &(0x7f0000004080)=[{&(0x7f0000001e80)=""/78, 0x4e}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/87, 0x57}, {&(0x7f0000002f80)=""/244, 0xf4}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x5, &(0x7f0000004100)=""/218, 0xda}, 0x80000000}, {{&(0x7f0000004200)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000004280)=""/54, 0x36}, {&(0x7f00000042c0)=""/39, 0x27}, {&(0x7f0000004300)=""/174, 0xae}], 0x3, &(0x7f0000004400)=""/110, 0x6e}, 0x2}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004480)=""/61, 0x3d}], 0x1}, 0x4}], 0x3, 0x40000000, &(0x7f00000045c0)={0x0, 0x989680}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000004600), 0x200000, 0x0) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000004640)=r1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000004680)={0x0, 0x1, 0x80000001}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000004a80)={r6, 0x4, 0x1, [0x9, 0x9, 0x3, 0x8, 0xa3], [0xf, 0x2, 0x8d3d, 0xfffffffffffff785, 0x1, 0x0, 0x7fe, 0x4bc, 0x7ff, 0x822f, 0x5, 0xa4, 0x1, 0x5a7a, 0xc00000000000000, 0x8, 0xffff, 0xb, 0x1c5, 0xffffffffffffffff, 0x1, 0x2, 0x6, 0x0, 0x24000, 0x4, 0x7, 0x0, 0x101, 0xf, 0x5, 0x62, 0x10, 0x8, 0x8000, 0x9, 0x80, 0x2, 0x9, 0x4, 0x8, 0x0, 0x7, 0x7fff, 0x7, 0x2, 0x3ff, 0x0, 0x3, 0x5, 0x5, 0xffffffffffffffff, 0x9, 0x17, 0x5, 0x7, 0x7fffffff, 0x1, 0x200, 0x6, 0x200, 0x2, 0x7dc2, 0x5, 0xffff, 0x7, 0x7, 0x80000000, 0x100000001, 0x5, 0x3d40, 0xe0a, 0x0, 0x7e0, 0x6, 0x2, 0x800, 0x5b7, 0xd1, 0x3, 0xffff, 0x4, 0xffffffffffffffff, 0x200, 0x8000, 0x7, 0x5, 0xee, 0x56, 0xdd, 0xdd, 0x8, 0xf7, 0x3, 0xffffffffffffffff, 0x0, 0x6, 0x9, 0x0, 0x4, 0x0, 0x8, 0x400, 0x8000, 0x40, 0x7ff, 0x7, 0x7a27, 0x8, 0x9, 0x3ff, 0x6, 0xd, 0xc5aa, 0x7, 0x10001, 0xb57, 0x2, 0x0, 0x7fffffffffffffff, 0x1]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005040)={&(0x7f0000004ec0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000005000)={&(0x7f0000004f00)={0xd0, 0x28, 0x100, 0x70bd2d, 0x25dfdbfb, {0x1b}, [@nested={0xba, 0xb9, 0x0, 0x1, [@generic="0f6a794ae70b46ab204cb272515629a8ef37fa77162ebde9c54f063c1962f1564692c39e09452e1ad2f6612bcc5043a26e151dde5bde72c8b4773195b963de8cd4981676f2d2acf43c4a59a6afcda219f7378a49f266523df1246f9564fc3b2fa70e0c88984691fc84eaee41bf2d5825588596e5c68f4f72221579f3d816dcbc4ddb408527d5bcedeaf852a587a4f3745affcd3f1d6c0697d429849231784c4bede05c50b1f519922dcc94febb19f5330ee73742de8e"]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20008804}, 0x24008841) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x8010, r0, 0x8000000) fadvise64(r0, 0x9, 0x6, 0x1) write$binfmt_misc(r0, &(0x7f0000005080)="fdebcefab9e6b982f7676cddae4a30720fb55aff97477a37e1a3a70fe84030f776f138ce6809a9db1f46417ec7c4a96848feab818c1d2a3c9fca22f3ef2709012e03d9570e00ce4a7aab8c8c20407ffc7afc1beaa7a3e3281e252a7ac4c5df74331451b459269836ef71ca6600956c0557c6f26a377157deacd3168e29235a4675a4aa79caba", 0x86) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000005140)={0xc029}) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000005180), &(0x7f00000051c0)=0x4) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000005200)={0x3}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000052c0)=@nat={'nat\x00', 0x1b, 0x5, 0x600, 0x238, 0x148, 0xffffffff, 0x238, 0x530, 0x530, 0x530, 0xffffffff, 0x530, 0x530, 0x5, &(0x7f0000005240), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x28}, {"ac60", 0x1}}, @common=@frag={{0x30}, {[0x7, 0xfff], 0x3, 0xa, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}, @port=0x4e23, @port=0x4e23}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x8, @ipv6=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}, @icmp_id=0x67, @port=0x4e20}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@srh={{0x30}, {0x2c, 0xd, 0xba, 0x9d, 0x6, 0x1220, 0x4}}, @common=@icmp6={{0x28}, {0x4, '89'}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv6=@local, @icmp_id=0x67, @gre_key=0x4}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x9], 0xfffffffa, 0x10}}, @common=@srh1={{0x90}, {0xc, 0x0, 0x2, 0x40, 0xfff, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xffffff00], 0x2405, 0x2000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x11, @ipv4=@multicast2, @ipv6=@empty, @port=0x4e22, @gre_key=0x800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) close_range(r0, r5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005ac0)={0x11, 0xf, &(0x7f0000005940)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}], &(0x7f00000059c0)='syzkaller\x00', 0x1, 0x33, &(0x7f0000005a00)=""/51, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005a40)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000005a80)={0x0, 0x9, 0x1ff, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4e}, 0x94) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000005b80)={0x7, 0x3, "a72448c70c4c3582e344f5e7de254f417278eea3d1b3dc593128f62f274baae44a26fbc803510920a6025dcc6888af23118f007dcba897349cdc532f51d085ec5c6f4d543f3c1362ca7837d9e63d7d9b920906130cd8929754afbba6f547b28045398abc86359ab962af0c7374c66b3d8dbc65c1bed56c9b461eaf39220a2201dcc9702c76575b2a0cb4c46a21a9148d3e6ed37d5c62b9b56de0adfefa77195504be7aaff39983afb31ac13db956c0d4c90500cd5f71c74e1179274a399d58e5af84b64b360cd3144bccc6ade21017a35d442408b3b53818201c41611e863117ace130e3c8ae7f4e322acb683fd6b4de0521620ea2fe6383d9af9ca894608f25"}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000005cc0)={0x84, 0x2e, '\x00', [@padn, @generic={0x7, 0xf0, "90bb629a5da63defa96c2c45a9f073526f9c6f0a752e4f8ef8c64dd5bef280b41e5734d83dec331e78cb9a5a58d6587e97dede5e03a78508d49d56e9881b028695e9c7612e69cf96c54e984f8ea43461e5f6abd19ba3b925505886a1ab3663c405a986a2bd1164759e185d4700a511736cf6074a8e69914cebaa38b7f0d9e2a877391bb103387f6689de0a8cdbbc15c088d6510a13947d081eda6ec0815c1e72dabe5e80ab3a88799c3622162c08ef3f47dcef33d12bc7fc9514f8e781ca177e20745190ce76c2c31860f80f2c57ffbffde80f82b745148d5f942960c5d374866e93f42acf3b1a7966beee7e20506a42"}, @calipso={0x7, 0x48, {0x3, 0x10, 0x41, 0x7, [0x7, 0x7f, 0x4, 0xd78, 0x9, 0xcc, 0x401, 0x0]}}, @calipso={0x7, 0x20, {0x3, 0x6, 0x1, 0x5, [0x2d0000000000000, 0x0, 0x5]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @padn={0x1, 0x1, [0x0]}]}, 0x180) stat(&(0x7f0000005e40)='./file0\x00', &(0x7f0000005e80)) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000005f00), 0x208000, 0x0) accept(r7, &(0x7f0000005f40)=@nfc_llcp, &(0x7f0000005fc0)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000006080)={0x0, @in6={{0xa, 0x4e23, 0x2, @mcast2, 0x7}}, 0x7ff, 0x0, 0xd, 0x2, 0x80, 0xd, 0x2}, &(0x7f0000006140)=0x9c) 3m14.357556436s ago: executing program 8 (id=1622): r0 = socket(0x25, 0xa, 0x3ffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14b1a000633ed19a593f54f200f8b8ff807def1e293e6c85c9f938f5dacf72c52891fdad72cdac2cdd3ae296cd2376f727f587efabea666e93d7de240c0fb88ccb3f0435aa5cdc494e460e3996dfd90e1d0f05000d53530c080e5c82ff50f67ed2c4ed854977b01e464fe39bc9439e87f7249ab6efdc5de22cfd92ac8df8d3b2f2ac21f92ab6ee7075fd87efed2c83d9f0b6f24a7e5b70056c78"], 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x0) 3m14.208377314s ago: executing program 8 (id=1623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRESOCT=r1, @ANYRES64=r2], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, 0x0, &(0x7f0000000400)=0xfec7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4820000010000507002f9e66c7eb", @ANYRES32, @ANYRES64=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x10, 0xffff}, {0x0, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r7, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r8 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodelalloc}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000200), &(0x7f0000000340)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x25, &(0x7f0000000980)=ANY=[@ANYBLOB="180000003a0400000000000008000000183e0000050000000000000000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000004c230c0016000000181b0000", @ANYRES32=r9, @ANYBLOB="d44800000000000f0000000080ffffff1812000072014e3db1477a9b7acfd8759fa8d34cc8d5ce927616875bdbafaa3f18334a528c2c6142034ea2ee1b658082872c2e948360cacec0d086107755084cd0045a5390fd1a97c3e007531c7c5ff7256018fc3a93a53ace3229ebf7c90a128bc4208093285661beba323e13b37c15147e2d26352678b2f5fb87ff9ab93d0143e67985b3a140199ded5cb5752d88ac05daf85bd5fcf98477f4108173c27391dd6e04c1cff3a3477aedf04cee2aaeec9d5c435090bbaa26f7958084aad2334d65afe07c9abdcecbb5163da673", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000007000000000000000c00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30020000}, 0x94) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) fallocate(r8, 0x0, 0x9, 0x2000403) socket$inet(0x2, 0xa, 0x6) 3m13.172023226s ago: executing program 8 (id=1633): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000000940)={{r1, &(0x7f0000000300)='mptcp_pm\x00', 0x323a00, &(0x7f0000000380)={@_ha_fsid={[0x1, 0x1]}, {0x7ff, 0xcd, 0x3, 0xa625}}, 0x3, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x70}, 0x1, &(0x7f00000004c0)=[{0x3, 0x4, &(0x7f0000000480)='ip6tnl0\x00', &(0x7f0000000840)="a8f62c82ab1798f6bc407e5c1c3d1700cea2656bc8044dac8cdb5ff00699765d9d89a0e932ef4bf428d7ab36d54483c8f788355e7d236d1ef3b5d43bfb8e8e1471492d0dd7fa7d2d4c4c324c8d41e775a4f089a2bc08c72cd2936add9396ab1fd0d513a22d1ff602d3b0d5d908f8682effa33239e39e299e6693eddb094d45f812dbf962403273fa298e791bb1e0282aca1439470415ec8579a2bc120b9afdba35a7cbaa2ace5d4081e13ad040a99db99d4d8b39fc1c5dc9f60d3214bdcac2959705231ce65d959785ce2a33", 0xcc, 0x20}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x1, 0x1, 0x8, 0x0, 0xde}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r8, r8, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="2f0000003020000004000000", @ANYRES32=r10, @ANYBLOB="c409093d4f90f9b68bb292610532f8f40b46af8f0e48fac29022beb4863331627c9da195dd97fe8b714459ed71ca3acc0690c251a91f6d8bb7318a83887fe4d92ff80e0f332fa4f4f072ac7e14fbba36cf36dde2292fe204350cbcc1998ecacf9ddae7f9acf92c5ae64f92d6cb3b9dc1c2d02aacf35122962b3f9ef8e69daa55871a7fc829ca7224ce3709a90b19f9a16b6b8b798c275fa8e747d538c77b342f08fef30762c01555452b34e1cd01bde5c703a8d5cd3566b88e6bf7e1fff89127131ddab04f1c765d4f52ad78ad3bc88db6a4", @ANYRES64=0x0], 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000040)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r3}) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x4, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) ioctl$sock_SIOCETHTOOL(r14, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x5, 0x5, 0xf550, "a98a491337d2"}}) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r11}) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x130}}, 0x4000) 3m11.88090782s ago: executing program 8 (id=1644): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="61156400000000006113500000000000bf1000000000000007000000080000002d03010000000000250500000001000069163e0000000000bf07000000000000350606000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1ef6ffffff000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4600000000000000004b7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c642"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) (async) 3m6.088505659s ago: executing program 9 (id=1694): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="584a1324b6f4af52c26fceaafd8afcf370c9cc6f0cc92f7eb392c0a2232803614115579036ef50b9e885f1d5d4bf37684e06f42cae6d3a22799410d1cd2f468149514cea37ecd4d4ebf875c7ef849b90668215f3190bd625e6b7ed7606609bd731b1fbf2e9", 0x65}, {&(0x7f0000000040)="684570ad3d8358b720af409fcc0e3e0241", 0x11}, {&(0x7f0000000240)="2a54cfc6d88baa75627282405988e1cfa714ad5cf57d6d54bbf54d9fd5af39cf9a42ef0eac60982f921a78296a7a8266198d54ecb158d3139e3b555015f9bdda898fc438fe7b14d4dd76564a4e6cd5f23646e4bd56b8ad80514fe8fc1dae223af34cafeaaaae227471503a6f4558d108c16a89aa67f392a9534d29da079eabb4ac052306e834", 0x86}], 0x3}, 0x4000000) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket(0x18, 0x3, 0x100) (async) syz_pidfd_open(0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x80000, 0x1}) (async) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) (async) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0xd, &(0x7f0000000200)=0x400, 0x4) (async) r7 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x4}], 0x1c) r8 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) 3m5.958853586s ago: executing program 9 (id=1697): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0800000, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0x7, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x275a, 0x0) splice(r1, 0x0, r2, &(0x7f0000000140)=0x8005, 0x4, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffffe, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c000013003f00b5215740a8670c73f5a2ce73980b61cc1fba2684d4ee3c5718b24ca5671724732507a55fdb05425f3f58bcb27e176ac49592a7bb52fe52e06d0f71", @ANYRES16=r0, @ANYBLOB="010025bd7000ffdbdf2512000000080007000900000028000180080003000100000008000300030000001400020076657468305f6d6163767461700000000800080088f8a13a"], 0x4c}, 0x1, 0x0, 0x0, 0x20000051}, 0x20008081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x7fffffff, 0x12) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0x7, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x27, 0x30, 0x0]}}, &(0x7f00000005c0)=""/43, 0x29, 0x2b, 0x0, 0x40}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xffffffff, 0xfee0, 0x4, 0x1000, r6, 0x6, '\x00', 0x0, r7, 0x0, 0x5, 0x65}, 0x50) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m5.919239858s ago: executing program 9 (id=1699): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="93d90400", 0x4}, {&(0x7f0000000180)="139001", 0x3}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x3f0a3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmmsg(r5, &(0x7f0000001f00)=[{{&(0x7f00000004c0)=@can={0x1d, r6, 0xeb00}, 0x80, &(0x7f0000001a40)=[{&(0x7f00000008c0)="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", 0x6fa}], 0x1}}], 0x1, 0x8000) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x5, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x42, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0xd2210, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x5, 0x2, 0xe41, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x108000, &(0x7f0000000840)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYBLOB="87c21ed4465818ef73bde7252f4e2bbdeabd8e1ae96652d02040e9020aad10b5f3f5633a173558fc5e91795e7daa02c3efc622e68660cd20e18eb7b2dc211f9376b7104df98be74d57609eb462920a7246ec36589adabbbb3cb9cdeebe3bfae7a2f7b688a202301bf83ec33abc95c98a8ef9126f659d3958e9c192d1a6447438c6fe1c82ca4263d748452ffc", @ANYRES64], 0x25, 0x359, &(0x7f0000000bc0)="$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") r9 = syz_open_procfs(0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000001c0)=@sg0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES8=r8, @ANYRES8=r7, @ANYRES64, @ANYBLOB="256a94a4ac9cc4213db7f2d19b25", @ANYRESDEC=r4], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x80, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 3m4.927592607s ago: executing program 9 (id=1704): r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x400, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x1261, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x218, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000740)={0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x9}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000140)="6bc6ef183a2fc18041d61bc0216258442f4fc48e7a6394991a035d4d475370fe0bca9fbdf7d6eb00c075a97b6194c241cdb275dd5842e05db4a47ae863b83c4ab54df9f69e2ddcd9b558a79b515f457417604a3613285fe5a4cb8fee6ace6de76d6f658686753010df1457f0bad4eef66df0f67df9c669e8ef93cfe9") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f0000002800)=[{0x2, 0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)=""/97, 0x61}, {&(0x7f0000000580)=""/201, 0xc9}], &(0x7f0000000680)=[0x8000000000000001, 0x8, 0x9, 0x5, 0x3, 0x7fff]}, {0x6, 0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/94, 0x5e}, {&(0x7f0000000780)=""/124, 0x7c}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f00000008c0)=""/221, 0xdd}, {&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000ac0)=""/195, 0xc3}], &(0x7f0000000c40)=[0xe, 0x9, 0x5a15, 0x8, 0x81, 0xa, 0x8f]}, {0x4, 0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000c80)=""/17, 0x11}, {&(0x7f0000000cc0)=""/172, 0xac}, {&(0x7f0000000d80)=""/134, 0x86}, {&(0x7f0000000e40)=""/89, 0x59}], &(0x7f0000000f00)=[0x7, 0x2, 0x3, 0x65a83738]}, {0x6, 0x1, 0x0, &(0x7f0000001340)=[{&(0x7f00000028c0)=""/158, 0x9e}, {&(0x7f0000001000)=""/160, 0xa0}, {&(0x7f00000010c0)=""/114, 0x72}, {&(0x7f0000001140)=""/186, 0xba}, {&(0x7f0000001200)=""/24, 0x18}, {&(0x7f0000001240)=""/213, 0xd5}], &(0x7f00000013c0)=[0x5, 0x30a, 0xb47e, 0x2, 0x6, 0x7fff]}, {0x6, 0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/101, 0x65}, {&(0x7f0000001400)=""/32, 0x20}, {&(0x7f0000002580)=""/44, 0x2c}, {&(0x7f00000025c0)=""/216, 0xd8}, {&(0x7f00000014c0)=""/175, 0xaf}, {&(0x7f0000001580)=""/4096, 0x1000}], &(0x7f0000002740)=[0x1c]}, {0x0, 0x1, 0x0, &(0x7f0000002780), &(0x7f00000027c0)=[0x400, 0x1]}], 0x6) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000f40)=ANY=[@ANYBLOB="38000000550001032dbd7000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="010201000000000000000000000000000000000086dd0000152641d4bc21dd"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x2004c000) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x4, @random="09076314ed8e"}, 0x27) close_range(r6, 0xffffffffffffffff, 0x200000000000000) write$cgroup_int(r5, &(0x7f00000003c0), 0x4) 3m4.240553132s ago: executing program 9 (id=1709): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000840)='maps\x00') getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x4, 0x6, @remote}, 0x14) sendmmsg$sock(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x1, 0x20004874) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000001700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m4.099208029s ago: executing program 9 (id=1712): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0xb, 0x1, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6c106d2d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6602}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c884}, 0x400c800) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='*\\\x00', 0x0, r3) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4018, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x1, 0xf53, 0x800, 0x7, 0x10, "1014300a3edf0187b58ef32392f6826631c423", 0x2, 0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) fcntl$setownex(r5, 0xf, &(0x7f00000003c0)={0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x200}, @NL80211_ATTR_SSID={0x22, 0x34, @random="6cf4001b98f28b0c136dae17c280cb430b77c6d9cb18d92bdd7d4011fcaa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x7, 0x7, 0x475, 0x80000001, {{0x5b, 0x4, 0x0, 0x7, 0x16c, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0xa, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@multicast2, 0x401}]}, @cipso={0x86, 0x5c, 0x1a4b4bf6677e58e6, [{0x1, 0x3, '\v'}, {0x5, 0x4, "2bd9"}, {0x0, 0xe, "4c316cc05a658730c3bd594a"}, {0x0, 0x10, "c4932478e46e176995244eacdd8d"}, {0x1, 0xc, "c9a7aecfacef70fce042"}, {0x7, 0x7, "017bdd307c"}, {0x7, 0x10, "3f044804bc93d36b71c932f85445"}, {0x6, 0x7, "18f8243bff"}, {0x5, 0x7, "15685fce07"}]}, @rr={0x7, 0x13, 0xc1, [@loopback, @local, @rand_addr=0x64010102, @empty]}, @lsrr={0x83, 0x13, 0xef, [@loopback, @remote, @empty, @empty]}, @rr={0x7, 0x1f, 0xb3, [@rand_addr=0x64010102, @multicast1, @loopback, @multicast1, @rand_addr=0x64010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x14, 0x9, 0x3, 0x5, [{@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b8a400}]}, @cipso={0x86, 0x4f, 0x3, [{0x5, 0x9, "1a752444d96a71"}, {0x5, 0xc, "832a48502badcf30cdac"}, {0x5, 0xc, "c6fd21c981592d5f2416"}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0xd, "caf1ffe695ef54259a1f9e"}, {0x2, 0x9, "2ab1f146f874d6"}, {0x5, 0xe, "13cfbb89717cb352dbc14183"}]}, @timestamp_addr={0x44, 0x34, 0x9c, 0x1, 0x2, [{@rand_addr=0x64010100, 0x2}, {@multicast2, 0x9}, {@private=0xa010101, 0x6c5}, {@private=0xa010101, 0x7}, {@broadcast, 0x5}, {@private=0xa010102, 0x1}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000040) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa4, r10, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', r9, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@generic={&(0x7f0000001c00)='./file0/file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x2, &(0x7f0000000b40)=@raw=[@map_fd={0x18, 0xd, 0x1, 0x0, r11}], &(0x7f0000000b80)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x38, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x1, 0x0, 0x3ff, 0x400}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001c80)=[r12, r2], &(0x7f0000001cc0)=[{0x2, 0x2, 0x0, 0x2}, {0x1, 0x1, 0x1, 0x9}, {0x3, 0x4, 0xe, 0xc}, {0x1, 0x5, 0x8, 0xc}, {0x1, 0x4, 0x7, 0x9}, {0x3, 0x1, 0x3, 0x4}], 0x10, 0xd218}, 0x94) close(r1) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001e00)=""/136) r13 = getuid() quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000001ec0)=@loop={'/dev/loop', 0x0}, r13, &(0x7f0000001f00)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002180)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002140)={&(0x7f0000001f80)={0x188, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x762}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf35}, {0x8, 0x15, 0x6e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xeb0}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd0}, {0x8}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4080}, 0x400c0a1) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r13, &(0x7f00000021c0)) 3m4.07349491s ago: executing program 38 (id=1712): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0xb, 0x1, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r4, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6c106d2d}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6602}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c884}, 0x400c800) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000240)='*\\\x00', 0x0, r3) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4018, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x1, 0xf53, 0x800, 0x7, 0x10, "1014300a3edf0187b58ef32392f6826631c423", 0x2, 0x5}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x100}}, './file0\x00'}) fcntl$setownex(r5, 0xf, &(0x7f00000003c0)={0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0xe}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x200}, @NL80211_ATTR_SSID={0x22, 0x34, @random="6cf4001b98f28b0c136dae17c280cb430b77c6d9cb18d92bdd7d4011fcaa"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x58}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000600)={'gre0\x00', 0x0, 0x7, 0x7, 0x475, 0x80000001, {{0x5b, 0x4, 0x0, 0x7, 0x16c, 0x64, 0x0, 0x1, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0xa, [{@local, 0x7}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@multicast2, 0x401}]}, @cipso={0x86, 0x5c, 0x1a4b4bf6677e58e6, [{0x1, 0x3, '\v'}, {0x5, 0x4, "2bd9"}, {0x0, 0xe, "4c316cc05a658730c3bd594a"}, {0x0, 0x10, "c4932478e46e176995244eacdd8d"}, {0x1, 0xc, "c9a7aecfacef70fce042"}, {0x7, 0x7, "017bdd307c"}, {0x7, 0x10, "3f044804bc93d36b71c932f85445"}, {0x6, 0x7, "18f8243bff"}, {0x5, 0x7, "15685fce07"}]}, @rr={0x7, 0x13, 0xc1, [@loopback, @local, @rand_addr=0x64010102, @empty]}, @lsrr={0x83, 0x13, 0xef, [@loopback, @remote, @empty, @empty]}, @rr={0x7, 0x1f, 0xb3, [@rand_addr=0x64010102, @multicast1, @loopback, @multicast1, @rand_addr=0x64010100, @multicast2, @local]}, @timestamp_prespec={0x44, 0x14, 0x9, 0x3, 0x5, [{@private=0xa010101, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1b8a400}]}, @cipso={0x86, 0x4f, 0x3, [{0x5, 0x9, "1a752444d96a71"}, {0x5, 0xc, "832a48502badcf30cdac"}, {0x5, 0xc, "c6fd21c981592d5f2416"}, {0x7, 0x2}, {0x7, 0x2}, {0x5, 0xd, "caf1ffe695ef54259a1f9e"}, {0x2, 0x9, "2ab1f146f874d6"}, {0x5, 0xe, "13cfbb89717cb352dbc14183"}]}, @timestamp_addr={0x44, 0x34, 0x9c, 0x1, 0x2, [{@rand_addr=0x64010100, 0x2}, {@multicast2, 0x9}, {@private=0xa010101, 0x6c5}, {@private=0xa010101, 0x7}, {@broadcast, 0x5}, {@private=0xa010102, 0x1}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r8, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000040) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000940), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa4, r10, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x8, '\x00', r9, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c40)=@generic={&(0x7f0000001c00)='./file0/file0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x0, 0x2, &(0x7f0000000b40)=@raw=[@map_fd={0x18, 0xd, 0x1, 0x0, r11}], &(0x7f0000000b80)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x38, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x1, 0x0, 0x3ff, 0x400}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001c80)=[r12, r2], &(0x7f0000001cc0)=[{0x2, 0x2, 0x0, 0x2}, {0x1, 0x1, 0x1, 0x9}, {0x3, 0x4, 0xe, 0xc}, {0x1, 0x5, 0x8, 0xc}, {0x1, 0x4, 0x7, 0x9}, {0x3, 0x1, 0x3, 0x4}], 0x10, 0xd218}, 0x94) close(r1) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000001e00)=""/136) r13 = getuid() quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000001ec0)=@loop={'/dev/loop', 0x0}, r13, &(0x7f0000001f00)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000002180)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002140)={&(0x7f0000001f80)={0x188, r10, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x762}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x10000}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xf35}, {0x8, 0x15, 0x6e}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xeb0}, {0x8, 0x15, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd0}, {0x8}}]}, 0x188}, 0x1, 0x0, 0x0, 0x4080}, 0x400c0a1) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000402, r13, &(0x7f00000021c0)) 2m57.441675512s ago: executing program 39 (id=1644): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f00000000c0)) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8}, 0x94) (async) 1m24.05739128s ago: executing program 4 (id=2606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xca081, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp1\x00', 0x2}) linkat(0xffffffffffffffff, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f00000008c0)='./file1\x00', 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 1m23.899940788s ago: executing program 4 (id=2609): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4) write$binfmt_script(r1, &(0x7f00000000c0), 0x28) recvmmsg(r1, &(0x7f0000006640)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002000, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) timer_settime(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x3a, 0x0, 0x0) r2 = fsopen(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x79, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0x0) fchdir(r4) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m23.759468785s ago: executing program 4 (id=2613): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x400000000, 0x0, 0x5, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e657200"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000010000000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000074109dff3483a9713af42694099b40e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bff", 0xd8}], 0x1}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000680)={0x1d, r3, 0x1, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000001000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000004000/0x2000)=nil, &(0x7f0000003000/0x13000)=nil, &(0x7f0000000100)="c9f0f46d2a7c06949baf1fa685b780e355f518e910f27fb06e04af2dee7040c68da822897a22c861c307bb72055c9a532cb7aa47d2d856f5d87edc11dd8947bb74f8a92439b52c5931c11c596621630b8b40789dfea1095ea4d3b763ebdd89fc685c77851fa0b7b383473ad40803f5c84ccb6a0722e86e6fab3939a7e7480cfe38fdf436", 0x84, r1}, 0x68) preadv(r0, &(0x7f00000004c0), 0x0, 0xffffffff, 0x3) 1m23.606397592s ago: executing program 4 (id=2619): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, 0x1c) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x2, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x1, {[0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0xfffffffc, @mcast2}, 0x1, {[0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfff]}}, 0x5c) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast2, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x73e9}) connect$unix(r4, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x81000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000380)=r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x8, 0x2, 0x0, @empty, @private1, 0x7, 0x1, 0x100, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x22, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085b4fefffcffffff18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000e4ab00007b8af8ff00000000bfa200000000009ef8b6a700f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b70200000200000085000000503a518ab7000000000000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x4, '\x00', r8, @sched_cls=0x37, r3, 0x8, &(0x7f0000000680)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x10, 0x400, 0x18}, 0x10, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000840)=[{0x2, 0x80000002, 0x5, 0xa}, {0x0, 0x3, 0xe, 0x2}, {0x1, 0x3, 0xa, 0xc}, {0x2, 0x2, 0x5, 0x9}], 0x10, 0x5}, 0x94) r9 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$SG_BLKTRACETEARDOWN(r3, 0x1276, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r10, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, r11}]) open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0) 1m22.888329118s ago: executing program 4 (id=2630): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000080)) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_io_uring_setup(0x61ac, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x37d, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x10, 0x5, 0x3, 0xb7}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x700) io_uring_enter(r1, 0x92, 0x2, 0x9, 0x0, 0x0) 1m22.166331944s ago: executing program 4 (id=2636): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"}) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r0, 0x719, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1m22.162408234s ago: executing program 40 (id=2636): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded01007eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) (async) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101001, 0x200) write$tun(r3, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, r0, 0x719, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 12.198553951s ago: executing program 5 (id=3215): r0 = syz_io_uring_setup(0x3129, &(0x7f0000000000)={0x0, 0x62fb, 0x20000, 0x1, 0x3b7}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) io_uring_enter(r0, 0xbda, 0x6d5a, 0x7e, &(0x7f0000000100)={[0xab6]}, 0x8) (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x14d1c0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x81}}, '.\x00'}) r5 = accept$phonet_pipe(r4, &(0x7f00000001c0), &(0x7f0000000200)=0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000240)={0x0, 0x7, [0x5, 0x1, 0x7, 0xa, 0xc, 0x100000000]}) (async) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x6880, 0x0) ioctl$FITHAW(r6, 0xc0045878) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000002c0)={0xffffffffffffffff, 0x9, 0x8, 0xffffffffffffffff}) (rerun: 32) r8 = open(&(0x7f0000000300)='\x00', 0x40000, 0x12) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f00000004c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x400, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@directio}, {@ignoreqv}, {@cachetag}], [{@dont_appraise}, {@fsname={'fsname', 0x3d, '['}}, {@permit_directio}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '*[()),+%:.\x10'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}}) (async) r10 = accept4$x25(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x12, 0x80000) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f0000000680)={0x64, 0x8001, 0xb, 0x4, 0x5, 0x81}) (async) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000006c0)={'\x00', 0x1, 0x8, 0x0, 0x85b, 0xce, 0xffffffffffffffff}) ptrace$setregset(0x4205, r11, 0x6, &(0x7f0000000780)={&(0x7f0000000740)="145015b7ab1b3512edd97f921ac2385390b7e6d904f2643f0c4e903231587911f223ac2722e8ac2d161d3057a288fa14ee2c23cd7b0aaf", 0x37}) (async, rerun: 64) mount$bind(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x850007, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x13, r10, 0xc76f6000) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map=r8, r8, 0x32, 0x4, 0x0, @void, @value=r7}, 0x20) (async, rerun: 32) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004) (async, rerun: 32) syz_io_uring_submit(r1, r2, &(0x7f0000000900)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r3, r4], 0x2}) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000940)=0x202e40, 0x4) sendto$inet6(r8, &(0x7f0000000980)="cf13e4bedc5dd6ee5f31767ae4dcfe3935fe74173e47fd2953db9249719814", 0x1f, 0x8000, 0x0, 0x0) (async) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r7) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f0000000c80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x144, r12, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf1ba}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf89a}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x174}}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000080) (async) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xa0, 0x7, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x4c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6bb1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", ""]}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20048850}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f00000012c0)={0x0, 0xffffffffffffffff, 0x80000000}) 11.980841742s ago: executing program 5 (id=3216): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 10.893324936s ago: executing program 5 (id=3218): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xb, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000340)=0x6) socket(0x23, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = io_uring_setup(0x29f5, &(0x7f0000000100)={0x0, 0x5a99, 0x80, 0x3, 0x2db}) r3 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3, 0x0, r2}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r8) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000005f80)={0x34, r9, 0x219, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4080) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) syz_usb_connect(0x3, 0x48, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000001c0)={r11, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r11, 0x8}, &(0x7f0000000040)=0x8) 10.074849576s ago: executing program 5 (id=3226): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x77359400, @ANYRES64, @ANYBLOB="0000000001"], 0x48}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4000014}, 0x40) write(0xffffffffffffffff, 0x0, 0x0) r6 = getpid() r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x6d007ee5}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e26, 0x1, @loopback, 0xfffffffe}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b00"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000140)={0x0, 0xffff}, 0x8) syz_pidfd_open(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 8.784399091s ago: executing program 5 (id=3233): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x0, 0x2, 0x4, 0x10, 0x0, 0x4, 0x8000, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x100000, 0x8, 0x3, 0x6, 0x3ac724f3, 0x9, 0x1, 0x0, 0xca6e, 0x0, 0x80000000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x9) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1b, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x4}, 0x0, 0x3, 0x0, 0x4, 0x9}, r1, 0xffffffffffffffff, r2, 0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x2}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110a28bd7000fbdbdf250900000008000100030000000800010001000000050007000f000000050008000b00000008000300", @ANYRES32=r7], 0x4c}}, 0x40000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 4.720774105s ago: executing program 5 (id=3252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.674467226s ago: executing program 41 (id=3252): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4.537115313s ago: executing program 3 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRESDEC=r0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 4.0055039s ago: executing program 3 (id=3258): socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) semget$private(0x0, 0x1, 0x110) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) (async) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@delchain={0x30, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) lseek(0xffffffffffffffff, 0x2, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) statx(r7, &(0x7f0000000080)='./file0\x00', 0x1000, 0x4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000180)) (async) quotactl_fd$Q_GETQUOTA(r7, 0xffffffff80000700, r8, &(0x7f0000000180)) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newsa={0x160, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@local, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, {@in=@loopback, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {0xf67, 0x0, 0x401, 0x5c57}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x6d, 0x14, {{'cmac(aes)\x00'}, 0x108, 0x60, "9c850df0ac5e668bcdd900f0bce86ea890cea23d2a76397da808534e4203c40161"}}]}, 0x160}}, 0x0) 3.348734403s ago: executing program 2 (id=3261): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) creat(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 3.288789746s ago: executing program 1 (id=3262): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@resgid={'resgid', 0x3d, r0}, 0x32}]}, 0x1d, 0x4e8, &(0x7f0000000540)="$eJzs3d9rXFkdAPDvvcn0Z2pS9KEWrMVWkqKdSRrbBh+qguhTQa3vNSaTEDLJhMykbULRFP8AQUQFn3zyRfAPEKR/gggFfReVXZbddvdhYXc7y9yZSdN0pknpZKZNPh84M+ecuXe+58wwZ+6593JvAIfW+Yi4EBFPa7XapYgYbtanzRSbjVRf7snj+zP1lEStduv9JCJp1NUXG9v2niebqx2LiJ/8MOLnyYtxK+sbi9OlUnG1WS5Ul1YKlfWNywtL0/PF+eLy5OTEtanrU1enxrvSz6GIuPH9///u13/+wY2/f/Puf26/O/aLpFkf8awf3dboei77LFoGI2J1P4L1yWDWQwAA3gat7fyvRcSlGI6BbGsOAAAAOEhq3xmKT5OI2g5Hd1YAAAAAb600Owc2SfPN8wCGIk3z+cY5vF+KE2mpXKl+Y668tjzbOFd2JHLp3EKpON48V3gkckm9PJHln5WvbJWTrDwZEacj4rfDx7NyfqZcmu33zg8AAAA4JE7umP9/NNyY/2/zSd8aBwAAAHTPSL8bAAAAAOw7838AAAA4+Mz/AQAA4ED70c2b9VRr3f969s762mL5zuXZYmUxv7Q2k58pr67k58vl+eyafUu7vV+pXF75Viyv3StUi5VqobK+cXupvLZcvb3w3C2wAQAAgB46/dWH/04iYvPbx7NUd6TfjQJ6YvBVFv7f/rUD6L2BfjcA6JtX+v8HDpRcvxsA9F2yy+sdT975R/fbAgAA7I/RL7c//p/uum9gM+1RE4F9Yv8fHF677fcDDi7H/+HwysVAmMjD4bbbJUBf//h/rfZKDQIAALpuKEtJmm8e8x+KNM3nI05lc4JcMrdQKo5HxBci4l/DuaP18kS2ZuLYAQAAAAAAAAAAAAAAAAAAAAAAAADsUa2WHK0BAAAAB1pE+k7SvA/w6PDFoZ37B44kHw9nzxFx94+3fn9vulpdnajXf7BVX/1Ds/5KP/ZgAAAAADu15umteTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNOTx/dnWqmXcd/7XkSMtIs/GMey52ORi4gTHyYxuG29JCIGuhB/80FEnGkXP6k3K0aarWgX/3gf46cRcbIL8eEwe1gff77b7veXxvnsuf3v71o2Qr2+zuNfujX+DbSJX687tccYZx/9tdAx/oOIs4Ptx59W/KTD+Hdhj/F/9tONjU6v1f4UMdr2/yd5LlahurRSqKxvXF5Ymp4vzheXJycnrk1dn7o6NV6YWygVm49tY/zmK397+rL+n+gQf2SX/l/cY/8/e3Tv8Rcb2dzW6smz+GMX2n//ZzrET5vf/9eb+frro638ZiO/3bm//PPcy/o/26H/u33/Y3vs/6Uf/+q/e1wUAOiByvrG4nSpVFw91JnX+jTqm0VvRC/ezEz9c30DmtE288t9eOf6lnm/+9WNTF+HJQAAYB+8OAcGAAAAAAAAAAAAAAAAAAAAeq0XlxPL7Yi5mT124+r5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd83kAAAD//7kT0VY=") 3.288611136s ago: executing program 3 (id=3263): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 2.492637075s ago: executing program 1 (id=3264): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8080, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) epoll_create1(0x80000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000c0010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 2.420179629s ago: executing program 2 (id=3266): inotify_init1(0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 1.40464256s ago: executing program 1 (id=3267): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="d50a0000000000006111780000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/route\x00') preadv2(r1, &(0x7f0000002780)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x2, 0x7, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, r1, 0x3, 0x2, 0x1}, 0x50) 1.379754131s ago: executing program 2 (id=3268): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_QTHRESH={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c000}, 0x20008090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xefff, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1.329766323s ago: executing program 1 (id=3269): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000005c0)=""/160) pread64(r4, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x43000000) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x9, 0xe) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='freezer.parent_freezing\x00', 0x275a, 0x0) unshare(0x42000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(0xffffffffffffffff, 0x5d62, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/76, 0x4c}], 0x1, 0x3, 0x3b16) 1.164530702s ago: executing program 2 (id=3270): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0xd25f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x4, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) capset(0x0, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = syz_open_dev$mouse(&(0x7f0000000140), 0x1, 0x90300) fcntl$getownex(r5, 0x10, &(0x7f0000000180)) (async) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x7, 0x6, 0xd, 0xe547, 0xffffffff, 0xfffffffa, 0x9, 0xfffffffb, 0xc00, 0x16, 0x1c, 0x1f, 0x5, 0x8, 0x40}}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8205, &(0x7f00000000c0)={[{@grpjquota}, {@abort}, {@nolazytime}, {@dioread_lock}, {@errors_remount}]}, 0x81, 0x633, &(0x7f0000000600)="$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") (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa00100}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=@newtfilter={0x1d4, 0x2c, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0xfff1, 0x6}, {0x0, 0x1}, {0xffe0, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x19c, 0x2, [@TCA_BASIC_EMATCHES={0x94, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0x5001, 0x9, 0xfffa}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}, @TCA_EMATCH_TREE_LIST={0x64, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x9}, {0x5, 0x4111, 0x7ff, 0x3, 0x4}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xc, 0x1, 0x91a}, {0x3, 0x3, 0x0, 0x4, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x20}, {0x4, 0x0, 0x100, 0x4}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x9}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}}}]}]}, @TCA_BASIC_ACT={0xc4, 0x3, [@m_gact={0xc0, 0x20, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x0, 0x8, 0xfffffffd, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7, 0x1, 0xfffffffe, 0xfffff001}}]}, {0x61, 0x6, "672feb8b066cc69c525a31d9f36d5a326e263cb4f787c8c2c4ac78d8d8eb8f028d9a39f76b1e63af3627e0995f8754891610cbf1b2ba18d214b71178492ac4cce67be9948bedd3862ad1b1b10876dd69ab8df67aba87410fe12a1a3667"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7a91, 0xffffffffffffffff, 0x1ff, 0x2, 0xb9c, {0xe, 0x2, 0x8, 0x8000, 0x6, 0x6c22}, {0xd, 0x0, 0x4, 0x9, 0xa, 0x2}, 0x1, 0xd, 0x1a86}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x1}, 0x20000805) listen(r6, 0x0) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x13, 0xffffffffffffffff, 0xe) (async) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) poll(0x0, 0x0, 0x9) (async) syz_pidfd_open(r4, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x60, 0x0, 0x0, r10, {0xb}, {0xffff, 0xc}, {0x0, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.164343192s ago: executing program 6 (id=3271): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e000004000280080005ef", @ANYRES32=r1, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 1.102194396s ago: executing program 6 (id=3272): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x2c, r1, 0x1, 0x0, 0x30000, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r2, 0xee01, 0xee00) keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0) 1.076803036s ago: executing program 3 (id=3273): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x40a38}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}]}}}]}, 0x50}}, 0x8000002) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=""/161, 0x1002000, 0x1800, 0x90, 0x2}, 0x20) 1.00457763s ago: executing program 2 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000000)={0x2, 0x2, 0x10}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x71bf, 0x777}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x2ef1) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000140)={r2, 0x1c0000000000, 0x3ff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x25c, r3, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x15}}}}, [@NL80211_ATTR_FRAME_MATCH={0x77, 0x5b, "1b6e9868263f0342e3cefff6644d24e41f6d646b4631c12d7b3069b10a491bfc1983c44d4bfb2f59af4c9c975bbd189083335cc50124edc61dddc13151e616748b307e2aadc0a8aaa3962f12c80f6f0d41ba7e3fd12becc7d56fc50c184e223d4fee8e3e9e199170b4fac7c2f4ea2b56baac7c"}, @NL80211_ATTR_FRAME_MATCH={0xde, 0x5b, "b826745c0557d71208acbfb8201ca8c691be108d385dbbe73577bfe6bb487c6b94615c028cb51502ba3da8b8e42718368ee9c2a3431590bf2f0d266a65576e77be2818d94485cc16b3c6c358237a9fee7957308ff47181b034d3d442db28944e7457e2287c56be493298f23161ebf55b33a9227f1a06e8bf9f6bb7093334a0208e2adeb190630de611150a51b6d1e5e7ea5905d70d0e46b3fa54912e7d57c3b7d4948fee51982cae47182e8d3f9bda1a44d34fd0ccba6833ada45aa12a2d6dfd0a745b52349900e1efcf9fcb26031410e8ed1e702f35d9170680"}, @NL80211_ATTR_FRAME_MATCH={0xe4, 0x5b, "0ca0174ce4e9ecd8eafcab1306eb9bfe1c9a78320e3b35fc5682193ab41fda7f1659d4bba299d85e0ca5e199f8620eab58236fc54df882cbee7432154385d4a91bfccb6b9dfa13edec92922e3c4dce9260848aa26c093ed280284768552ab6813e74e02d873c88be94b43acfe323475a585eb648e0fea69a51bdd5b99e37ba6042a526b69eb025063b5b9de541adfab1060bd1ea966c184d3c07f5ee4db8d7ba5bc1ba9b642838cf14464c6f702a63b6764aa603f67ae7aed472819cb71b02fc38329cedac12686b70eaed8aff65b3dcefa847e5e92b6e36ebb0ea6e10173af8"}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r4 = dup2(r1, r1) r5 = signalfd4(r0, &(0x7f0000000500)={[0x63]}, 0x8, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000540)=0x3, 0x8) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000580)={0x5, 0xa621, 0x7, 0x8, 0x2}) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) ioctl$FITHAW(r4, 0xc0045878) sendmsg$nl_route(r4, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)=@bridge_dellink={0x1d0, 0x11, 0x800, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x108}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x5123}, @IFLA_VF_PORTS={0xe8, 0x18, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "64fdb0f4e867dc3bb0b2c6dea121df8f"}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "b294b32833d1d1c43ca774a0cfdee24b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e3b80486fb9431f1d22a8c7ae957a35f"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d0faebb2cc993d7a564a9c419e2542b3"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9d7750726ce38278af4eac9fb79e717d"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "33f605b51688ce350bf07aa9c3c78326"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x94}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "313c03da1da420c656125623f09308b5"}, @IFLA_PORT_PROFILE={0x7, 0x2, '/$\x00'}]}]}, @IFLA_AF_SPEC={0xc0, 0x1a, 0x0, 0x1, [@AF_INET={0x50, 0x2, 0x0, 0x1, {0x4c, 0x1, 0x0, 0x1, [{0x8, 0xa, 0x0, 0x0, 0x7}, {0x8, 0x1e, 0x0, 0x0, 0x800}, {0x8, 0x19}, {0x8, 0x1, 0x0, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x1000}, {0x8, 0x1a, 0x0, 0x0, 0x9}, {0x8, 0x18, 0x0, 0x0, 0x2}, {0x8, 0x13, 0x0, 0x0, 0x1}, {0x8, 0xd, 0x0, 0x0, 0xf}]}}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_INET6={0x44, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x25}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000880)={{0x1, 0x1, 0x18, r5, {r1}}, './file0\x00'}) syslog(0x2, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r7, &(0x7f00000008c0)="7b52fbd40ebac73b5277bafadfa3f2ce4127b0da1dd59e53d832bad9dfb2fa3a36582c903a591d42625b13a0277f96679ee195f39664ec935b981df358b0d6f39467409d", 0x44, 0x40000000, 0x0, 0x0) membarrier(0x20, 0x0) clock_gettime(0x0, &(0x7f0000000940)={0x0, 0x0}) write$evdev(r6, &(0x7f0000000980)=[{{0x77359400}, 0x15, 0x1000, 0x1}, {{}, 0x15, 0x100, 0x99a}, {{0x77359400}, 0x1, 0x7}, {{r8, r9/1000+10000}, 0x2, 0x8000, 0xbe9}], 0x60) r10 = semget$private(0x0, 0x1, 0x20) semtimedop(r10, &(0x7f0000000a00)=[{0x1, 0x200, 0x1000}, {0x3, 0x9, 0x1000}, {0x0, 0x4, 0x1000}, {0x0, 0x8001, 0x800}], 0x4, &(0x7f0000000a40)={0x77359400}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000a80)=@sack_info={0x0, 0xf6d1}, &(0x7f0000000ac0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000c40)=0xe8) getgroups(0x1, &(0x7f0000000c80)=[0xee00]) fsetxattr$system_posix_acl(r5, &(0x7f0000000b00)='system.posix_acl_default\x00', &(0x7f0000000e80)={{}, {0x1, 0x1}, [{0x2, 0x0, r11}], {0x4, 0x5}, [{0x8, 0x4, r12}, {0x8, 0x2, 0xee00}, {0x8, 0x6}, {}, {}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x5, 0xee01}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x4}}, 0x74, 0x2) 998.1742ms ago: executing program 2 (id=3275): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000bc0)=ANY=[@ANYBLOB='f\n\x00\x00\t\x00\x00\x00a'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/current\x00') r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) listen(r1, 0x100) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}], 0x18}, 0x8050) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000080000000000007000000", @ANYRES32=r9, @ANYBLOB="0c00028005be"], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014) writev(r0, &(0x7f00000003c0), 0x100000000000022d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="7a0a00ff0000000071104300000000009500000000000000c3d8bac20aa85cccdb1f52621a9c227f70ec7a4b0b9079ec2d33e875ffd305d6"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 991.656541ms ago: executing program 3 (id=3276): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x105, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x5, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8080, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) epoll_create1(0x80000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000c0010000400000008"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x2000cc0, r1}, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) 863.086237ms ago: executing program 6 (id=3277): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xefff, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf25efff0000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 823.327199ms ago: executing program 1 (id=3278): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x10000a0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x100, 0x0, 0x15b}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x80000, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x1d}) io_uring_enter(r0, 0x6f58, 0x0, 0x0, 0x0, 0x0) 820.750609ms ago: executing program 3 (id=3279): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xefff, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7100fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB="08000400ff"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc000802) 640.733108ms ago: executing program 6 (id=3280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1ffffffffffffd36, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 640.245468ms ago: executing program 6 (id=3281): ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) write(0xffffffffffffffff, &(0x7f0000000040)="cb62d177", 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)=')\'\x00', 0x300, &(0x7f00000000c0)={@_ha_fsid={[0xfe3, 0x6381dff9]}, {0xf, 0x3ff, 0x9, 0x80000000}}, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x2347}) r1 = syz_open_dev$vcsu(&(0x7f0000000580), 0x3, 0xa000) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x4a, 0x141800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000600)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r6 = epoll_create(0xfffffff7) sendmsg$netlink(r0, &(0x7f0000000780)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000200)={0x1c0, 0x3f, 0x8, 0x70bd25, 0x25dfdbfd, "", [@generic="11b8e7c2760ea6ec0bb5277301f76dcf5975f48c7409b75888ac43164173f83df5b9380258fca16385abb340b64e2b68e93f5061b939d464aacfcdefc6b720dad53b00e33dacb17d94c07b673974b7f8c321963b0ae03ed4c182435180e09ce68e268cf55217a4730ffb1a613aeddec4713d175e80f3bd6e73f8307c268383f1056c0b4f02ad7124603dc24773974b2e99bb8457cde0cbf1ce75b9ecd5cc5bfd9b8e42395d7a65c8eb43086f1f9a5b88", @generic="aef436b1a3c88aa097ada23213f1985597731551def627da95a1994302e26efd2c5038e12992fa03510a688098cc9c38a6fa7e992ab966ac2828a1370aa046b554869fe164265158d733763646a2ed86a90de830409c17b64edd534bf4ec0402fc6381a1755a490e3a2b4a0a401b4ec236c866c5df217fa7b1606215125cd4aa82cfe81e1bb4ec2535a2ac330da78dfd153e18ad98288618adefb2cc926b02b7c0e39762aaf4a5aa1419c390e2b4091acf48001b4a5a5c58cddf3458aa593eb0bdf6f0d0e72fb749f7ee6f5943311a1ebcca8f5ae1a05c0b08d45b25e0f02af557589f8bfda98e79dacce29db4f34386a60740647f31db806f7ea9fe7d2d1c"]}, 0x1c0}, {&(0x7f00000003c0)={0x154, 0x29, 0x0, 0x70bd25, 0x25dfdbfb, "", [@nested={0x8, 0x7a, 0x0, 0x1, [@nested={0x4, 0xaa}]}, @typed={0x8, 0x134, 0x0, 0x0, @u32=0x4}, @generic="80834935df64bf3368db8eb59d992d67bf036047170b8580d4250f7efbb28ac85aa4ddd844c0202c4dc53af1d539a62803488bd731cf386e5b5663741993c56d95c28c645478053b165d847a622ddf6756a86fd59e8fa3d417e2598383b609ad9a047462de4a52c52ecf89846e5f1c19ab0b8693ea57a9958fd9ff58a4f69e739940d8724e63924008ba97535593e3f7004619d84382827bd8f59ef305b06d4cd1c0f435fa1cf00e3304091c1fbd25f6b24e83da61", @generic="908646142602752d00501a8f8ca3ba11cb202e933edc0b7c114f2fb775de1d3875eecdf016986effd8021f6a0a709668a3f3c1d185291dd9356e32f9ab0ed472bfb164bdb8032a46ea1d9f197a1266dfdc4a8d522d46289bd41bded2e05d646e289f8d317e283ac51562367338b0601cf4e976ed75228c1f6af3e8e0bab2"]}, 0x154}], 0x2, &(0x7f0000000700)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee01, r5}}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x50, 0xc041}, 0x40) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000007c0)) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r4, &(0x7f0000000840)={0x0, 0xf, 0x1, 0x2}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000880)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000008c0)=0x8, 0x4) pipe2(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) ioctl$XFS_IOC_DIOINFO(r8, 0x800c581e, &(0x7f0000000940)) ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f0000000980)={0x9}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000009c0)=0x0) connect$nfc_raw(r0, &(0x7f0000000a00)={0x27, r9, 0xffffffffffffffff, 0x1}, 0x10) fcntl$setstatus(r1, 0x4, 0x40000) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000a40)=""/154) getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x8) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), r7) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x60, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4d05}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd7}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20000084) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r8) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r12, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xff, 0x6c}}}}, ["", "", ""]}, 0x20}}, 0x20060800) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r1, &(0x7f0000000e40)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x1, 0x1}}, 0x2e) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000e80)=0x7, 0x4) ioctl$KDENABIO(r0, 0x4b36) 436.149779ms ago: executing program 6 (id=3282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='id_resolver\x00', &(0x7f00000003c0)=@secondary) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010100}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2}) (async, rerun: 32) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (rerun: 32) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async, rerun: 64) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000009f320000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) close(r5) (async, rerun: 32) r9 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r9, 0x400, 0x1) (async, rerun: 32) r10 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) (rerun: 32) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) (async) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 0s ago: executing program 1 (id=3283): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff}}, './file1\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) kernel console output (not intermixed with test programs): 00-0000-000000000000. [ 352.100558][T16043] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.2849: deleted inode referenced: 12 [ 352.178118][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.196100][T16086] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2853'. [ 352.229345][T16087] x_tables: duplicate underflow at hook 1 [ 352.257911][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2853'. [ 352.379914][T16086] bond2: option xmit_hash_policy: invalid value (64) [ 352.389199][T16086] bond2 (unregistering): Released all slaves [ 352.415334][T16105] bridge1: entered promiscuous mode [ 352.490488][T16114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16114 comm=syz.3.2857 [ 352.595971][T16121] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.643407][T16121] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.676016][T16121] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 3: comm syz.5.2860: lblock 8 mapped to illegal pblock 3 (length 26) [ 352.703209][T16132] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 3: comm syz.5.2860: lblock 8 mapped to illegal pblock 3 (length 26) [ 352.792386][T16135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2861'. [ 352.812166][T16121] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 18: comm syz.5.2860: lblock 23 mapped to illegal pblock 18 (length 1) [ 352.854541][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.011960][T16169] set_capacity_and_notify: 1 callbacks suppressed [ 353.011979][T16169] loop1: detected capacity change from 0 to 128 [ 353.594605][T16197] loop2: detected capacity change from 0 to 128 [ 353.658729][T16197] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 353.695834][T16200] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2871'. [ 353.770624][T16197] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 353.843429][T14634] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 354.248259][T16236] loop2: detected capacity change from 0 to 128 [ 354.265609][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2874'. [ 354.561792][T16237] lo speed is unknown, defaulting to 1000 [ 355.013778][T16254] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2883'. [ 355.050234][T16256] loop1: detected capacity change from 0 to 512 [ 355.066331][T16256] EXT4-fs: Ignoring removed bh option [ 355.114089][T16256] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 355.128683][T16256] EXT4-fs (loop1): 1 truncate cleaned up [ 355.156547][T16256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.190144][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.408163][T16270] syzkaller0: entered allmulticast mode [ 355.421944][T16270] syzkaller0: entered promiscuous mode [ 355.607337][T16270] syzkaller0 (unregistering): left allmulticast mode [ 355.630845][T16270] syzkaller0 (unregistering): left promiscuous mode [ 355.982333][T16277] loop3: detected capacity change from 0 to 4096 [ 356.007966][T16277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.024555][T16275] lo speed is unknown, defaulting to 1000 [ 356.052324][ T3425] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 356.080314][T16282] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2891'. [ 356.148423][ T3425] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 356.436896][T16292] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2890: corrupted inode contents [ 356.498660][T16292] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.2890: mark_inode_dirty error [ 356.511295][T16292] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2890: corrupted inode contents [ 356.526597][T16292] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.2890: mark_inode_dirty error [ 356.554600][T16292] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2890: corrupted inode contents [ 356.576171][T16297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2896'. [ 356.618737][T16292] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.2890: mark_inode_dirty error [ 356.691874][T16292] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2890: corrupted inode contents [ 356.749977][T16299] random: crng reseeded on system resumption [ 356.867429][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 356.867507][ T28] audit: type=1400 audit(1773961018.480:6124): avc: denied { add_name } for pid=16300 comm="syz.2.2897" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 356.964185][T16292] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.2890: mark_inode_dirty error [ 357.164846][ T28] audit: type=1400 audit(1773961018.511:6125): avc: denied { create } for pid=16300 comm="syz.2.2897" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:proc_net_t tclass=file permissive=1 [ 357.278434][T16292] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem [ 357.403120][ T28] audit: type=1400 audit(1773961018.511:6126): avc: denied { associate } for pid=16300 comm="syz.2.2897" name="memory.stat" scontext=root:object_r:proc_net_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 357.478961][T16277] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.2890: corrupted inode contents [ 357.879469][T12418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.001202][T16308] netlink: 'syz.6.2900': attribute type 1 has an invalid length. [ 358.037164][T16308] vlan2: entered promiscuous mode [ 358.057880][T16308] vlan2: entered allmulticast mode [ 358.077678][T16308] veth1_vlan: entered allmulticast mode [ 358.359152][T16315] loop1: detected capacity change from 0 to 512 [ 358.392259][T16315] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 358.445791][T16324] loop5: detected capacity change from 0 to 128 [ 358.446956][T16326] xt_hashlimit: size too large, truncated to 1048576 [ 358.523292][T16329] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2907'. [ 358.620097][T16333] loop3: detected capacity change from 0 to 128 [ 358.629885][ T28] audit: type=1326 audit(1773961020.317:6127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 358.664079][ T28] audit: type=1326 audit(1773961020.317:6128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 358.692302][T16333] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.704979][ T28] audit: type=1326 audit(1773961020.317:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 358.774803][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 358.784434][T16333] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.828588][T16339] hsr_slave_0: left promiscuous mode [ 358.839247][T16339] hsr_slave_1: left promiscuous mode [ 358.851348][ T28] audit: type=1326 audit(1773961020.317:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 358.918598][ T28] audit: type=1326 audit(1773961020.317:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 358.946353][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 358.955548][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 358.969387][ T28] audit: type=1326 audit(1773961020.317:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 358.995203][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 359.025466][ T28] audit: type=1326 audit(1773961020.317:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16332 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d87bc799 code=0x7ffc0000 [ 359.075314][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 359.085231][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 359.094710][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 359.105436][T16347] loop6: detected capacity change from 0 to 128 [ 359.112057][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2911'. [ 359.122413][T16347] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 359.136094][T16348] netlink: 'syz.2.2912': attribute type 39 has an invalid length. [ 359.145312][T16347] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 359.220071][T16345] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2912'. [ 359.311460][T16333] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.327692][T16351] loop5: detected capacity change from 0 to 1024 [ 359.334953][T16351] EXT4-fs (loop5): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 359.863243][T14025] udevd[14025]: incorrect ext4 checksum on /dev/loop5 [ 360.085083][ T4987] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.408174][T16370] tipc: Enabling of bearer rejected, failed to enable media [ 360.456122][T16376] loop6: detected capacity change from 0 to 512 [ 360.476800][T16376] EXT4-fs: Ignoring removed nobh option [ 360.515246][T16376] EXT4-fs (loop6): 1 orphan inode deleted [ 360.521788][T16376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.540988][T16378] lo speed is unknown, defaulting to 1000 [ 360.658892][T16384] bridge2: entered promiscuous mode [ 360.666611][T16388] loop2: detected capacity change from 0 to 512 [ 360.675962][T16388] EXT4-fs: inline encryption not supported [ 360.689364][T16388] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 360.719897][T16389] loop2: detected capacity change from 0 to 512 [ 360.732760][T16389] EXT4-fs: inline encryption not supported [ 360.758586][T16389] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 360.785184][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.901224][T16401] netlink: 'syz.2.2930': attribute type 11 has an invalid length. [ 361.003188][T16412] loop5: detected capacity change from 0 to 128 [ 361.026355][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.032810][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.034460][T16414] loop1: detected capacity change from 0 to 128 [ 361.039494][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.060827][T16416] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 361.077508][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.085403][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.092374][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.099500][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.106519][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.113944][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.121545][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.128697][T16412] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.176302][T16414] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.194427][T16412] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.205304][T16416] dummy0 speed is unknown, defaulting to 1000 [ 361.299020][T16414] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.405490][T16414] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.417589][T16412] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 362.115004][ T28] kauditd_printk_skb: 355 callbacks suppressed [ 362.115025][ T28] audit: type=1326 audit(1773961023.991:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.154845][ T28] audit: type=1326 audit(1773961023.991:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.242544][ T28] audit: type=1326 audit(1773961023.991:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.266769][ T28] audit: type=1326 audit(1773961024.002:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.326721][ T28] audit: type=1326 audit(1773961024.002:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.381667][ T28] audit: type=1326 audit(1773961024.002:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.594301][ T28] audit: type=1326 audit(1773961024.002:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.618305][ T28] audit: type=1326 audit(1773961024.012:6496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.670836][ T28] audit: type=1326 audit(1773961024.012:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.772882][T16465] EXT4-fs: Ignoring removed oldalloc option [ 362.780235][T16467] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 362.811580][T16466] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 362.813929][ T28] audit: type=1326 audit(1773961024.012:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16439 comm="syz.5.2940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffb6967c799 code=0x7ffc0000 [ 362.840242][T16466] System zones: [ 362.845604][T16460] lo speed is unknown, defaulting to 1000 [ 362.850249][T16466] 0-2 [ 362.856380][T16460] dummy0 speed is unknown, defaulting to 1000 [ 362.886637][T16467] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 362.888784][T16466] , 18-18, 34-34 [ 362.910512][T16465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 362.940431][T16466] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 362.957059][T16466] EXT4-fs (loop6): Remounting filesystem read-only [ 362.975171][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 362.981694][ C1] EXT4-fs (loop6): initial error at time 1773961024: ext4_mb_generate_buddy:1315 [ 362.990909][ C1] EXT4-fs (loop6): last error at time 1773961024: ext4_mb_generate_buddy:1315 [ 363.003897][T16466] EXT4-fs (loop6): 1 truncate cleaned up [ 363.013531][T13210] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 363.039269][T13210] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 363.061727][T16466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.076282][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.085959][T13210] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 363.109782][T16466] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.135390][T15621] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.601579][T16486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 363.723911][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.390933][T16506] set_capacity_and_notify: 4 callbacks suppressed [ 364.390954][T16506] loop6: detected capacity change from 0 to 1024 [ 364.477278][T16506] EXT4-fs: inline encryption not supported [ 364.553306][T16506] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 364.658779][T16506] syzkaller0: entered allmulticast mode [ 364.828841][T16511] loop1: detected capacity change from 0 to 128 [ 364.849807][T16511] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 364.885256][T16511] ext4 filesystem being mounted at /257/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 364.946172][T16511] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.046751][T16514] lo speed is unknown, defaulting to 1000 [ 365.055833][T16514] dummy0 speed is unknown, defaulting to 1000 [ 365.197644][T16521] __nla_validate_parse: 62 callbacks suppressed [ 365.197693][T16521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2964'. [ 365.333092][T16534] loop1: detected capacity change from 0 to 512 [ 365.367199][T16534] msdos: Unknown parameter 'error' [ 365.622760][T16550] loop1: detected capacity change from 0 to 128 [ 365.670628][T16550] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 365.784182][T16550] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 366.056952][T11104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 366.258794][T16563] loop2: detected capacity change from 0 to 2048 [ 366.287362][T16560] loop1: detected capacity change from 0 to 512 [ 366.340587][T16563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.353145][T16560] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 366.382114][T16560] EXT4-fs (loop1): mount failed [ 366.417006][T16582] loop6: detected capacity change from 0 to 512 [ 366.488386][T16582] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.2979: inode #0: comm syz.6.2979: iget: illegal inode # [ 366.521098][T16582] loop6: lost filesystem error report for type 5 error -117 [ 366.528578][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 366.542446][ C0] EXT4-fs (loop6): initial error at time 1773961028: ext4_init_orphan_info:583 [ 366.551510][ C0] EXT4-fs (loop6): last error at time 1773961028: ext4_init_orphan_info:583 [ 366.561846][T16582] EXT4-fs (loop6): get orphan inode failed [ 366.568016][T16582] EXT4-fs (loop6): mount failed [ 366.617245][T14634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.766892][T16597] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2985'. [ 366.803809][T16605] loop6: detected capacity change from 0 to 128 [ 366.933695][T16605] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 366.962973][T16605] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 367.083107][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 367.083141][ T28] audit: type=1326 audit(1773961029.125:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9efcc1cfce code=0x7ffc0000 [ 367.211576][ T28] audit: type=1326 audit(1773961029.125:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9efcc5abd7 code=0x7ffc0000 [ 367.239788][ T28] audit: type=1326 audit(1773961029.125:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9efcc1cfce code=0x7ffc0000 [ 367.264523][ T28] audit: type=1326 audit(1773961029.125:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efcc5c799 code=0x7ffc0000 [ 367.289863][ T28] audit: type=1326 audit(1773961029.125:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efcc5c799 code=0x7ffc0000 [ 367.315450][ T28] audit: type=1326 audit(1773961029.251:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f9efcc5c799 code=0x7ffc0000 [ 367.343851][ T28] audit: type=1326 audit(1773961029.261:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efcc5c799 code=0x7ffc0000 [ 367.369681][ T28] audit: type=1326 audit(1773961029.272:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16604 comm="syz.6.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9efcc5c799 code=0x7ffc0000 [ 367.408481][T16605] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 367.468641][T16617] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2991'. [ 367.480308][T16617] netlink: 'syz.5.2991': attribute type 6 has an invalid length. [ 367.610414][T16621] loop6: detected capacity change from 0 to 2048 [ 367.702550][T16621] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.847342][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.867796][T16630] loop1: detected capacity change from 0 to 512 [ 368.015101][T16644] SELinux: Context › is not valid (left unmapped). [ 368.048072][T16653] FAULT_INJECTION: forcing a failure. [ 368.048072][T16653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.065054][T16653] CPU: 0 UID: 0 PID: 16653 Comm: syz.3.3001 Tainted: G W syzkaller #0 PREEMPT(full) [ 368.065092][T16653] Tainted: [W]=WARN [ 368.065101][T16653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.065118][T16653] Call Trace: [ 368.065126][T16653] [ 368.065136][T16653] __dump_stack+0x1d/0x30 [ 368.065217][T16653] dump_stack_lvl+0x95/0xd0 [ 368.065256][T16653] dump_stack+0x15/0x1b [ 368.065323][T16653] should_fail_ex+0x263/0x280 [ 368.065408][T16653] should_fail+0xb/0x20 [ 368.065439][T16653] should_fail_usercopy+0x1a/0x20 [ 368.065476][T16653] _copy_from_user+0x1c/0xb0 [ 368.065553][T16653] ___sys_sendmsg+0xc1/0x1e0 [ 368.065609][T16653] __x64_sys_sendmsg+0xd4/0x160 [ 368.065733][T16653] x64_sys_call+0x194c/0x3020 [ 368.065762][T16653] do_syscall_64+0x12c/0x370 [ 368.065792][T16653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.065821][T16653] RIP: 0033:0x7fa9d87bc799 [ 368.065845][T16653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.065911][T16653] RSP: 002b:00007fa9d7217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.065935][T16653] RAX: ffffffffffffffda RBX: 00007fa9d8a35fa0 RCX: 00007fa9d87bc799 [ 368.065949][T16653] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 368.065963][T16653] RBP: 00007fa9d7217090 R08: 0000000000000000 R09: 0000000000000000 [ 368.066009][T16653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.066025][T16653] R13: 00007fa9d8a36038 R14: 00007fa9d8a35fa0 R15: 00007ffd824eda98 [ 368.066051][T16653] [ 368.256479][T16630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.322215][T16644] SELinux: Context ./file1 is not valid (left unmapped). [ 368.393849][ T28] audit: type=1400 audit(1773961030.427:6631): avc: denied { create } for pid=16643 comm="syz.2.2999" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=9B [ 368.515765][T16656] journal_path: Non-blockdev passed as './file1' [ 368.561128][T16630] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.615601][T16656] EXT4-fs: error: could not find journal device path [ 368.630452][ T28] audit: type=1400 audit(1773961030.427:6632): avc: denied { associate } for pid=16643 comm="syz.2.2999" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=9B [ 368.664014][T16630] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 368.759599][T16630] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 368.796366][T16666] lo speed is unknown, defaulting to 1000 [ 368.805474][T16666] dummy0 speed is unknown, defaulting to 1000 [ 369.261183][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.293658][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.511616][T16666] dvmrp0: entered allmulticast mode [ 369.524585][T16683] set_capacity_and_notify: 2 callbacks suppressed [ 369.524602][T16683] loop5: detected capacity change from 0 to 2048 [ 369.591385][T16683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.649736][T13203] dvmrp0 (unregistering): left allmulticast mode [ 369.718986][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.796412][T16698] loop1: detected capacity change from 0 to 128 [ 369.807201][T16698] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.819810][T16698] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.872611][T16704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3015'. [ 370.086214][T16721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3018'. [ 370.125684][T16722] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16722 comm=syz.6.3019 [ 370.247038][T16721] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3018'. [ 370.459882][T16731] loop3: detected capacity change from 0 to 256 [ 370.466890][T16731] vfat: Unknown parameter '·' [ 370.537310][T11104] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.643974][T16740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3015'. [ 370.658897][T16736] loop3: detected capacity change from 0 to 2048 [ 370.834440][T16744] 9p: Could not find request transport:  [ 370.854172][T16736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.948708][T16758] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3028'. [ 370.983039][T16761] loop5: detected capacity change from 0 to 512 [ 371.026225][T16761] ext4: Unknown parameter 'delalloc"data' [ 371.039811][T12418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.127660][T16768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3028'. [ 371.634463][T16761] loop5: detected capacity change from 0 to 512 [ 371.970726][T16761] EXT4-fs (loop5): 1 orphan inode deleted [ 371.986816][T13203] __quota_error: 89 callbacks suppressed [ 371.986836][T13203] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 372.015117][T16794] syzkaller0: entered promiscuous mode [ 372.056020][T16794] syzkaller0: entered allmulticast mode [ 372.087903][T16761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.127095][T13203] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:41: Failed to release dquot type 1 [ 372.168206][T13203] loop5: lost filesystem error report for type 5 error -117 [ 372.173058][T16761] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.194318][ T28] audit: type=1400 audit(1773961034.563:6722): avc: denied { setcheckreqprot } for pid=16795 comm="syz.6.3039" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 372.219658][T16798] loop6: detected capacity change from 0 to 512 [ 372.235134][T16798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 372.263481][T16796] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 372.330248][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.354183][T16800] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=46724 sclass=netlink_xfrm_socket pid=16800 comm=syz.5.3029 [ 372.377878][T16800] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3029'. [ 372.395109][ T28] audit: type=1400 audit(1773961034.783:6723): avc: denied { write } for pid=16760 comm="syz.5.3029" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 372.425139][T16805] loop1: detected capacity change from 0 to 512 [ 372.448077][T16805] EXT4-fs (loop1): 1 truncate cleaned up [ 372.457899][T16806] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 372.466371][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.486212][T16802] loop2: detected capacity change from 0 to 2048 [ 372.508519][T16805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.545418][T16802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.593225][T16815] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=16815 comm=syz.6.3044 [ 372.682779][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.709649][T14634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.773505][T16825] loop1: detected capacity change from 0 to 512 [ 372.921947][T16835] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3050'. [ 372.935524][T16835] netlink: zone id is out of range [ 373.547956][T16849] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3053'. [ 373.708846][T16856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3054'. [ 373.790813][T16864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.975149][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.994553][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3061'. [ 374.054697][ T3573] kernel read not supported for file /166/net/dev_snmp6 (pid: 3573 comm: kworker/0:6) [ 374.084899][T16891] FAULT_INJECTION: forcing a failure. [ 374.084899][T16891] name failslab, interval 1, probability 0, space 0, times 0 [ 374.140378][T16891] CPU: 1 UID: 0 PID: 16891 Comm: syz.2.3064 Tainted: G W syzkaller #0 PREEMPT(full) [ 374.140425][T16891] Tainted: [W]=WARN [ 374.140434][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.140452][T16891] Call Trace: [ 374.140461][T16891] [ 374.140530][T16891] __dump_stack+0x1d/0x30 [ 374.140568][T16891] dump_stack_lvl+0x95/0xd0 [ 374.140600][T16891] dump_stack+0x15/0x1b [ 374.140630][T16891] should_fail_ex+0x263/0x280 [ 374.140666][T16891] should_failslab+0x8c/0xb0 [ 374.140761][T16891] kmem_cache_alloc_noprof+0x66/0x400 [ 374.140792][T16891] ? skb_clone+0x151/0x1f0 [ 374.140837][T16891] skb_clone+0x151/0x1f0 [ 374.140885][T16891] __netlink_deliver_tap+0x2c9/0x500 [ 374.140934][T16891] netlink_unicast+0x66b/0x690 [ 374.141004][T16891] netlink_sendmsg+0x5c8/0x6f0 [ 374.141049][T16891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.141200][T16891] ____sys_sendmsg+0x563/0x5b0 [ 374.141245][T16891] ___sys_sendmsg+0x195/0x1e0 [ 374.141381][T16891] __x64_sys_sendmsg+0xd4/0x160 [ 374.141424][T16891] x64_sys_call+0x194c/0x3020 [ 374.141496][T16891] do_syscall_64+0x12c/0x370 [ 374.141531][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.141571][T16891] RIP: 0033:0x7efc355ac799 [ 374.141592][T16891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.141610][T16891] RSP: 002b:00007efc33fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.141632][T16891] RAX: ffffffffffffffda RBX: 00007efc35825fa0 RCX: 00007efc355ac799 [ 374.141647][T16891] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 374.141664][T16891] RBP: 00007efc33fff090 R08: 0000000000000000 R09: 0000000000000000 [ 374.141681][T16891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.141698][T16891] R13: 00007efc35826038 R14: 00007efc35825fa0 R15: 00007ffedb66a218 [ 374.141732][T16891] [ 374.167402][T16884] vlan3: entered allmulticast mode [ 374.394128][ T28] audit: type=1400 audit(1773961036.831:6724): avc: denied { ioctl } for pid=16903 comm="syz.1.3066" path="socket:[50448]" dev="sockfs" ino=50448 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 374.455487][T16909] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 374.596280][T16912] set_capacity_and_notify: 2 callbacks suppressed [ 374.596334][T16912] loop1: detected capacity change from 0 to 1764 [ 374.611141][T16913] loop5: detected capacity change from 0 to 1024 [ 374.646376][T16913] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 374.746333][T16913] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.251498][T16913] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3067: bg 0: block 112: padding at end of block bitmap is not set [ 375.315051][T16913] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 375.352978][T16913] EXT4-fs (loop5): This should not happen!! Data will be lost [ 375.352978][T16913] [ 375.455615][T16913] tipc: Started in network mode [ 375.460577][T16913] tipc: Node identity , cluster identity 4711 [ 375.467742][T16913] tipc: Failed to obtain node identity [ 375.473581][T16913] tipc: Enabling of bearer rejected, failed to enable media [ 375.482895][ T28] audit: type=1326 audit(1773961038.017:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.1.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2a6c799 code=0x7ffc0000 [ 375.506974][ T28] audit: type=1326 audit(1773961038.017:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.1.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2a6c799 code=0x7ffc0000 [ 375.546791][T16929] lo speed is unknown, defaulting to 1000 [ 375.553943][T16929] dummy0 speed is unknown, defaulting to 1000 [ 375.563233][ T28] audit: type=1326 audit(1773961038.059:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.1.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2a6c799 code=0x7ffc0000 [ 375.612593][ T28] audit: type=1326 audit(1773961038.059:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.1.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2a6c799 code=0x7ffc0000 [ 375.680575][ T28] audit: type=1326 audit(1773961038.080:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.1.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f0ce2a6c799 code=0x7ffc0000 [ 375.712884][T16934] loop6: detected capacity change from 0 to 2048 [ 375.721428][ T28] audit: type=1326 audit(1773961038.080:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16928 comm="syz.1.3071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ce2a6c799 code=0x7ffc0000 [ 375.773395][T16934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.806534][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 375.817488][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 375.844935][T16936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 375.982122][T16943] loop3: detected capacity change from 0 to 2048 [ 376.001205][T16936] netlink: 'syz.2.3075': attribute type 18 has an invalid length. [ 376.013645][T16936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3075'. [ 376.134629][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.438701][T16950] netlink: 'syz.6.3080': attribute type 4 has an invalid length. [ 376.597985][T16966] lo speed is unknown, defaulting to 1000 [ 376.617554][T16966] dummy0 speed is unknown, defaulting to 1000 [ 376.648177][T16970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3085'. [ 376.784796][T16980] loop6: detected capacity change from 0 to 1024 [ 376.804026][T16980] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 376.819629][T16980] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.948167][T16985] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3088: bg 0: block 112: padding at end of block bitmap is not set [ 377.339243][T16985] tipc: Started in network mode [ 377.349609][T16985] tipc: Node identity , cluster identity 4711 [ 377.361075][T16985] tipc: Failed to obtain node identity [ 377.374957][T16989] loop2: detected capacity change from 0 to 2048 [ 377.382204][T16985] tipc: Enabling of bearer rejected, failed to enable media [ 377.410420][T16989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.463587][T16993] loop1: detected capacity change from 0 to 1024 [ 377.560591][T14634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.579131][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 377.588866][T16993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 377.673816][T16993] ext4 filesystem being mounted at /284/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.765281][T16993] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 377.792509][ T28] kauditd_printk_skb: 399 callbacks suppressed [ 377.792538][ T28] audit: type=1400 audit(1773961040.452:7130): avc: denied { recv } for pid=17018 comm="sed" saddr=10.128.0.163 src=30036 daddr=10.128.1.143 dest=51812 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 377.887088][ T28] audit: type=1400 audit(1773961040.452:7131): avc: denied { read write } for pid=15495 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 377.918929][T17029] loop2: detected capacity change from 0 to 128 [ 377.986140][T17036] syzkaller0: entered promiscuous mode [ 377.994241][T17036] syzkaller0: entered allmulticast mode [ 378.021263][ T28] audit: type=1400 audit(1773961040.452:7132): avc: denied { open } for pid=15495 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.063936][T17041] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3102'. [ 378.110613][ T28] audit: type=1400 audit(1773961040.452:7133): avc: denied { ioctl } for pid=15495 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 378.152997][T17041] netlink: 'syz.2.3102': attribute type 10 has an invalid length. [ 378.170922][T17049] loop5: detected capacity change from 0 to 736 [ 378.185141][T17048] loop6: detected capacity change from 0 to 2048 [ 378.252161][T17041] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.296001][ T28] audit: type=1400 audit(1773961040.484:7134): avc: denied { bpf } for pid=17019 comm="syz.2.3096" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 378.296341][T17048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.334655][T17041] bond0: (slave team0): Enslaving as an active interface with an up link [ 378.381907][ T28] audit: type=1400 audit(1773961040.505:7135): avc: denied { search } for pid=17018 comm="sed" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.712190][ T28] audit: type=1400 audit(1773961040.505:7136): avc: denied { read } for pid=17018 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 378.791479][ T28] audit: type=1400 audit(1773961040.505:7137): avc: denied { open } for pid=17018 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 378.863806][ T28] audit: type=1400 audit(1773961040.505:7138): avc: denied { getattr } for pid=17018 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 378.889267][ T28] audit: type=1400 audit(1773961040.526:7139): avc: denied { create } for pid=17021 comm="syz.6.3097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.022605][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.301574][T17077] loop6: detected capacity change from 0 to 1024 [ 381.347404][T17077] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 381.364730][T17077] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 381.374767][T17077] EXT4-fs (loop6): orphan cleanup on readonly fs [ 381.384800][T17077] EXT4-fs error (device loop6): ext4_free_blocks:6724: comm syz.6.3108: Freeing blocks not in datazone - block = 0, count = 4096 [ 381.399184][T17077] loop6: lost filesystem error report for type 5 error -117 [ 381.401747][T17077] EXT4-fs (loop6): 1 orphan inode deleted [ 381.409397][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 381.409443][ C1] EXT4-fs (loop6): initial error at time 1773961044: ext4_free_blocks:6724 [ 381.409640][ C1] EXT4-fs (loop6): last error at time 1773961044: ext4_free_blocks:6724 [ 381.447701][T17077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.494500][T17077] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3108'. [ 382.079737][T17091] loop2: detected capacity change from 0 to 2048 [ 382.268773][T17100] loop3: detected capacity change from 0 to 128 [ 382.294764][T14025] loop2: unable to read partition table [ 382.303167][T14025] loop2: partition table beyond EOD, truncated [ 382.325195][T17100] syz.3.3116: attempt to access beyond end of device [ 382.325195][T17100] loop3: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 382.406042][T17105] loop5: detected capacity change from 0 to 2048 [ 382.436176][T17107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3116'. [ 382.529597][T17100] syz.3.3116: attempt to access beyond end of device [ 382.529597][T17100] loop3: rw=2049, sector=170, nr_sectors = 48 limit=128 [ 382.571231][T17105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.595824][T17100] syz.3.3116: attempt to access beyond end of device [ 382.595824][T17100] loop3: rw=2049, sector=234, nr_sectors = 6 limit=128 [ 382.636749][T17100] syz.3.3116: attempt to access beyond end of device [ 382.636749][T17100] loop3: rw=8390657, sector=238, nr_sectors = 2 limit=128 [ 382.667576][T17100] Buffer I/O error on dev loop3, logical block 119, lost async page write [ 382.678890][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.688170][T17100] syz.3.3116: attempt to access beyond end of device [ 382.688170][T17100] loop3: rw=8390657, sector=240, nr_sectors = 2 limit=128 [ 382.703162][T17100] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 382.705606][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.730825][T17100] syz.3.3116: attempt to access beyond end of device [ 382.730825][T17100] loop3: rw=2049, sector=242, nr_sectors = 6 limit=128 [ 382.769002][T17100] syz.3.3116: attempt to access beyond end of device [ 382.769002][T17100] loop3: rw=8390657, sector=246, nr_sectors = 2 limit=128 [ 382.798141][T17100] Buffer I/O error on dev loop3, logical block 123, lost async page write [ 382.864052][T17100] syz.3.3116: attempt to access beyond end of device [ 382.864052][T17100] loop3: rw=8390657, sector=248, nr_sectors = 2 limit=128 [ 382.896056][T17118] loop1: detected capacity change from 0 to 4096 [ 382.917823][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 382.917893][ T28] audit: type=1400 audit(1773961045.827:7214): avc: denied { create } for pid=17119 comm="syz.2.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 382.944002][T17100] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 382.967537][T17100] syz.3.3116: attempt to access beyond end of device [ 382.967537][T17100] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 382.998539][ T28] audit: type=1400 audit(1773961045.838:7215): avc: denied { write } for pid=17119 comm="syz.2.3123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 383.105632][T17118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.318068][ T28] audit: type=1400 audit(1773961046.247:7216): avc: denied { read write } for pid=17117 comm="syz.1.3122" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 383.380423][T17118] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3122: corrupted inode contents [ 383.462664][ T28] audit: type=1400 audit(1773961046.247:7217): avc: denied { open } for pid=17117 comm="syz.1.3122" path="/291/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 383.551356][T17118] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.3122: mark_inode_dirty error [ 383.577008][ T28] audit: type=1400 audit(1773961046.520:7218): avc: denied { append } for pid=17117 comm="syz.1.3122" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 383.654465][T17130] loop2: detected capacity change from 0 to 512 [ 383.685539][ T28] audit: type=1400 audit(1773961046.625:7219): avc: denied { bind } for pid=17125 comm="syz.2.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 383.710873][T17118] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3122: corrupted inode contents [ 383.727527][T17118] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3122: mark_inode_dirty error [ 383.773209][ T28] audit: type=1400 audit(1773961046.730:7220): avc: denied { unmount } for pid=12418 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 383.800584][T17118] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3122: corrupted inode contents [ 383.993330][T17136] loop3: detected capacity change from 0 to 512 [ 384.050559][ T28] audit: type=1400 audit(1773961046.919:7221): avc: denied { execute } for pid=17135 comm="syz.6.3125" name="file1" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.112893][T17136] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 384.282417][T17118] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.3122: mark_inode_dirty error [ 384.294728][T17136] EXT4-fs (loop3): 1 truncate cleaned up [ 384.300823][T17136] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.325993][ T28] audit: type=1400 audit(1773961046.919:7222): avc: denied { execute_no_trans } for pid=17135 comm="syz.6.3125" path="/70/file1" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 384.369899][T17118] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3122: corrupted inode contents [ 384.387552][T17143] netlink: 228 bytes leftover after parsing attributes in process `syz.6.3128'. [ 384.441428][T17118] EXT4-fs error (device loop1): ext4_truncate:4587: inode #15: comm syz.1.3122: mark_inode_dirty error [ 384.487950][T17118] EXT4-fs error (device loop1) in ext4_setattr:5983: Corrupt filesystem [ 384.536794][T17149] loop6: detected capacity change from 0 to 2048 [ 384.558867][T17118] Process accounting resumed [ 384.598895][T17118] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.3122: corrupted inode contents [ 384.658771][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.768908][T12418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.783149][ T28] audit: type=1400 audit(1773961047.790:7223): avc: denied { name_bind } for pid=17152 comm="syz.1.3131" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 384.852150][T17155] loop3: detected capacity change from 0 to 512 [ 384.904654][T17155] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.3132: corrupted inode contents [ 384.942029][T17155] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 384.943096][T17155] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.3132: mark_inode_dirty error [ 384.952302][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 384.952327][ C0] EXT4-fs (loop3): initial error at time 1773961047: ext4_do_update_inode:5569: inode 3 [ 384.952362][ C0] EXT4-fs (loop3): last error at time 1773961047: ext4_do_update_inode:5569: inode 3 [ 385.062337][T17155] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 385.063544][T17155] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.3132: corrupted inode contents [ 385.132757][T17155] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 385.133177][T17155] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.3132: mark_inode_dirty error [ 385.190927][T17155] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 385.192147][T17155] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.3132: Failed to acquire dquot type 0 [ 385.268374][T17155] loop3: lost filesystem error report for type 5 error -117 [ 385.269010][T17155] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.3132: corrupted inode contents [ 385.346309][T17155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.346598][T17155] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.3132: mark_inode_dirty error [ 385.429865][T17155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.430233][T17155] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.3132: corrupted inode contents [ 385.493871][T17155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.494155][T17155] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.3132: mark_inode_dirty error [ 385.537431][T17149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.559237][T17155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.569082][T17155] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.3132: corrupted inode contents [ 385.614183][T17155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.614445][T17155] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 385.667243][T17155] loop3: lost filesystem error report for type 5 error -117 [ 385.670629][T17155] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.3132: corrupted inode contents [ 385.694647][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.739055][T17174] loop2: detected capacity change from 0 to 1024 [ 385.745538][T17155] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 385.746560][T17155] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.3132: mark_inode_dirty error [ 385.791683][T17174] EXT4-fs: Ignoring removed i_version option [ 385.814984][T17174] ext4: Unknown parameter 'noacl' [ 385.824625][T17155] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 385.844090][T17155] loop3: lost filesystem error report for type 5 error -117 [ 385.844585][T17155] EXT4-fs (loop3): 1 truncate cleaned up [ 385.889356][T17155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.932153][T17155] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.944817][T17186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17186 comm=syz.6.3139 [ 385.962545][T17186] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3139'. [ 386.002370][T17155] EXT4-fs warning (device loop3): ext4_es_cache_extent:1082: inode #3: comm syz.3.3132: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 386.002370][T17155] [ 386.120782][T17166] syz.5.3135 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 386.126805][T12418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.170466][T17166] CPU: 0 UID: 0 PID: 17166 Comm: syz.5.3135 Tainted: G W syzkaller #0 PREEMPT(full) [ 386.170507][T17166] Tainted: [W]=WARN [ 386.170538][T17166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.170552][T17166] Call Trace: [ 386.170559][T17166] [ 386.170568][T17166] __dump_stack+0x1d/0x30 [ 386.170619][T17166] dump_stack_lvl+0x95/0xd0 [ 386.170651][T17166] dump_stack+0x15/0x1b [ 386.170703][T17166] dump_header+0x80/0x240 [ 386.170730][T17166] oom_kill_process+0x295/0x350 [ 386.170756][T17166] out_of_memory+0x97d/0xb80 [ 386.170827][T17166] try_charge_memcg+0x62e/0xa10 [ 386.170902][T17166] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 386.170945][T17166] __swap_cache_prepare_and_add+0x386/0x530 [ 386.171075][T17166] swap_cache_alloc_folio+0xa2/0x120 [ 386.171115][T17166] swap_cluster_readahead+0x26e/0x3d0 [ 386.171220][T17166] swapin_readahead+0xde/0x840 [ 386.171252][T17166] ? _raw_spin_unlock+0x9/0x30 [ 386.171282][T17166] ? swap_put_entries_cluster+0x385/0x3a0 [ 386.171346][T17166] ? swap_put_entries_cluster+0x81/0x3a0 [ 386.171451][T17166] ? __rcu_read_unlock+0x4e/0x70 [ 386.171481][T17166] ? swap_cache_get_folio+0x26f/0x280 [ 386.171588][T17166] do_swap_page+0x30d/0x2220 [ 386.171650][T17166] ? css_rstat_updated+0xbb/0x280 [ 386.171672][T17166] ? __rcu_read_lock+0x36/0x50 [ 386.171693][T17166] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 386.171756][T17166] handle_mm_fault+0xb46/0x3020 [ 386.171802][T17166] ? vma_start_read+0x1c7/0x2c0 [ 386.171841][T17166] do_user_addr_fault+0x62f/0x1050 [ 386.171884][T17166] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 386.171954][T17166] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 386.171988][T17166] ? trace_page_fault_user+0x1f/0xe0 [ 386.172025][T17166] exc_page_fault+0x62/0xa0 [ 386.172147][T17166] asm_exc_page_fault+0x26/0x30 [ 386.172176][T17166] RIP: 0033:0x7ffb6954a14c [ 386.172303][T17166] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 386.172326][T17166] RSP: 002b:00007fffe01851f0 EFLAGS: 00010206 [ 386.172349][T17166] RAX: 0000000000000000 RBX: 00007ffb698f5fa0 RCX: 000055555deac808 [ 386.172368][T17166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 386.172384][T17166] RBP: 00007ffb698f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 386.172498][T17166] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000613ce [ 386.172515][T17166] R13: 00007ffb698f609c R14: 000000000006110a R15: 00007ffb698f6090 [ 386.172541][T17166] [ 386.172549][T17166] memory: usage 284060kB, limit 307200kB, failcnt 273 [ 386.440444][T17166] memory+swap: usage 245484kB, limit 9007199254740988kB, failcnt 0 [ 386.448484][T17166] kmem: usage 244712kB, limit 9007199254740988kB, failcnt 0 [ 386.455968][T17166] Memory cgroup stats for /syz5: [ 386.456210][T17166] cache 0 [ 386.464208][T17166] rss 4096 [ 386.467778][T17166] shmem 0 [ 386.470874][T17166] mapped_file 0 [ 386.492368][T17166] dirty 0 [ 386.528059][T17200] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3144'. [ 386.537372][T17200] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3144'. [ 386.551495][T17166] writeback 0 [ 386.561174][T17197] loop3: detected capacity change from 0 to 4096 [ 386.596980][T17166] workingset_refault_anon 93 [ 386.612079][T17197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.630850][T17202] loop6: detected capacity change from 0 to 4096 [ 386.667417][T17202] EXT4-fs (loop6): inodes count not valid: 32 vs 27 [ 386.677149][T17166] workingset_refault_file 32 [ 386.684787][T17197] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3142: corrupted inode contents [ 386.733059][T17166] swap 389120 [ 386.736461][T17166] swapcached 413696 [ 386.740369][T17166] pgpgin 191160 [ 386.773510][T17197] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.3142: mark_inode_dirty error [ 386.844003][T17197] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3142: corrupted inode contents [ 386.856506][T17166] pgpgout 191155 [ 386.860098][T17166] pgfault 197725 [ 386.868890][T17212] loop6: detected capacity change from 0 to 2048 [ 386.894662][T17197] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.3142: mark_inode_dirty error [ 386.907604][T17166] pgmajfault 2912 [ 386.911372][T17166] inactive_anon 0 [ 386.915467][T17197] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3142: corrupted inode contents [ 386.934101][T17212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.951440][T17166] active_anon 4096 [ 386.955218][T17166] inactive_file 0 [ 386.958897][T17166] active_file 16384 [ 386.984196][T17197] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm syz.3.3142: mark_inode_dirty error [ 387.010010][T17166] unevictable 0 [ 387.013636][T17166] hierarchical_memory_limit 314572800 [ 387.019730][T17166] hierarchical_memsw_limit 9223372036854771712 [ 387.026065][T17166] total_cache 0 [ 387.029998][T17166] total_rss 4096 [ 387.033741][T17166] total_shmem 0 [ 387.034582][T17197] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3142: corrupted inode contents [ 387.037418][T17166] total_mapped_file 0 [ 387.053242][T17166] total_dirty 0 [ 387.056832][T17166] total_writeback 0 [ 387.060697][T17166] total_workingset_refault_anon 93 [ 387.065932][T17166] total_workingset_refault_file 32 [ 387.071078][T17166] total_swap 389120 [ 387.074924][T17166] total_swapcached 413696 [ 387.079524][T17166] total_pgpgin 191160 [ 387.083552][T17166] total_pgpgout 191155 [ 387.087803][T17166] total_pgfault 197725 [ 387.091097][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.092073][T17166] total_pgmajfault 2912 [ 387.105443][T17166] total_inactive_anon 0 [ 387.109624][T17166] total_active_anon 4096 [ 387.113950][T17166] total_inactive_file 0 [ 387.118332][T17166] total_active_file 16384 [ 387.122683][T17166] total_unevictable 0 [ 387.126984][T17166] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.3135,pid=17166,uid=0 [ 387.141768][T17166] Memory cgroup out of memory: Killed process 17166 (syz.5.3135) total-vm:96212kB, anon-rss:1228kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 387.162510][T17197] EXT4-fs error (device loop3): ext4_truncate:4587: inode #15: comm syz.3.3142: mark_inode_dirty error [ 387.211299][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3150'. [ 387.214985][T17197] EXT4-fs error (device loop3) in ext4_setattr:5983: Corrupt filesystem [ 387.274482][T17197] Process accounting resumed [ 387.281457][T17197] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.3142: corrupted inode contents [ 387.330354][T17228] netlink: 'syz.6.3152': attribute type 15 has an invalid length. [ 387.344653][T12418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.357666][T17229] loop5: detected capacity change from 0 to 512 [ 387.403931][T17229] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 387.430515][T17229] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.3153: bad orphan inode 131083 [ 387.456106][T17229] loop5: lost filesystem error report for type 5 error -117 [ 387.456887][T17229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.541768][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.589458][T17238] syzkaller0: entered promiscuous mode [ 387.595063][T17238] syzkaller0: entered allmulticast mode [ 387.608672][T17237] loop3: detected capacity change from 0 to 128 [ 387.634170][T17237] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.650627][T17237] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 387.716788][T17237] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.726700][T17247] loop6: detected capacity change from 0 to 512 [ 387.832895][T17247] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 387.858772][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 387.858857][ T28] audit: type=1400 audit(1773961051.013:7251): avc: denied { create } for pid=17253 comm="syz.3.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.913187][T17254] lo speed is unknown, defaulting to 1000 [ 387.920405][T17247] EXT4-fs (loop6): 1 truncate cleaned up [ 387.926243][ T28] audit: type=1400 audit(1773961051.055:7252): avc: denied { write } for pid=17253 comm="syz.3.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.936854][T17254] dummy0 speed is unknown, defaulting to 1000 [ 387.955075][T17247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.984342][T17257] loop3: detected capacity change from 0 to 128 [ 388.053600][T17262] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3162'. [ 388.095282][ T28] audit: type=1326 audit(1773961051.255:7253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17253 comm="syz.3.3160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d87bc799 code=0x0 [ 388.109137][T17247] EXT4-fs error (device loop6): ext4_lookup:1785: inode #14: comm syz.6.3155: invalid fast symlink length 39 [ 388.208177][T17247] EXT4-fs (loop6): Remounting filesystem read-only [ 388.387329][T17264] syzkaller0: entered promiscuous mode [ 388.437580][T17264] syzkaller0: entered allmulticast mode [ 388.657755][T17270] tmpfs: Bad value for 'mpol' [ 388.662549][ T28] audit: type=1400 audit(1773961051.853:7254): avc: denied { ioctl } for pid=17269 comm="syz.2.3164" path="socket:[50886]" dev="sockfs" ino=50886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 388.735866][ T28] audit: type=1400 audit(1773961051.853:7255): avc: denied { connect } for pid=17269 comm="syz.2.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 388.821624][ T28] audit: type=1400 audit(1773961051.853:7256): avc: denied { mounton } for pid=17269 comm="syz.2.3164" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 389.142424][T17282] loop2: detected capacity change from 0 to 512 [ 389.284782][T17282] EXT4-fs (loop2): 1 orphan inode deleted [ 389.302561][T17282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.324159][T17282] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.380586][ T28] audit: type=1400 audit(1773961052.578:7257): avc: denied { read write } for pid=17276 comm="syz.2.3166" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 389.420377][ T4986] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 389.573521][ T4986] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 1 [ 390.237780][ T28] audit: type=1400 audit(1773961052.578:7258): avc: denied { open } for pid=17276 comm="syz.2.3166" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 390.398900][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3171'. [ 390.454704][T17293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 390.677431][ T28] audit: type=1400 audit(1773961053.974:7259): avc: denied { egress } for pid=14 comm="ksoftirqd/0" saddr=fe80::a8aa:aaff:feaa:aa1c daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 390.729670][T14634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.767305][T17307] FAULT_INJECTION: forcing a failure. [ 390.767305][T17307] name failslab, interval 1, probability 0, space 0, times 0 [ 390.793385][T17307] CPU: 1 UID: 0 PID: 17307 Comm: syz.3.3177 Tainted: G W syzkaller #0 PREEMPT(full) [ 390.793469][T17307] Tainted: [W]=WARN [ 390.793520][T17307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 390.793534][T17307] Call Trace: [ 390.793542][T17307] [ 390.793549][T17307] __dump_stack+0x1d/0x30 [ 390.793623][T17307] dump_stack_lvl+0x95/0xd0 [ 390.793654][T17307] dump_stack+0x15/0x1b [ 390.793681][T17307] should_fail_ex+0x263/0x280 [ 390.793756][T17307] should_failslab+0x8c/0xb0 [ 390.793800][T17307] __kvmalloc_node_noprof+0x155/0x650 [ 390.793837][T17307] ? alloc_netdev_mqs+0x54f/0xa40 [ 390.793953][T17307] alloc_netdev_mqs+0x54f/0xa40 [ 390.794045][T17307] rtnl_create_link+0x239/0x720 [ 390.794228][T17307] rtnl_newlink_create+0x174/0x650 [ 390.794260][T17307] ? security_capable+0x7b/0x90 [ 390.794307][T17307] ? netlink_ns_capable+0x86/0xa0 [ 390.794344][T17307] rtnl_newlink+0x10a0/0x1330 [ 390.794380][T17307] ? __rcu_read_unlock+0x4e/0x70 [ 390.794432][T17307] ? xa_load+0xb1/0xe0 [ 390.794501][T17307] ? __rcu_read_unlock+0x4e/0x70 [ 390.794596][T17307] ? avc_has_perm_noaudit+0xab/0x130 [ 390.794637][T17307] ? cred_has_capability+0x224/0x2a0 [ 390.794676][T17307] ? selinux_capable+0x31/0x40 [ 390.794716][T17307] ? security_capable+0x7b/0x90 [ 390.794751][T17307] ? ns_capable+0x7c/0xb0 [ 390.794791][T17307] ? __pfx_rtnl_newlink+0x10/0x10 [ 390.794834][T17307] rtnetlink_rcv_msg+0x64b/0x720 [ 390.794859][T17307] ? avc_has_perm_noaudit+0xab/0x130 [ 390.794964][T17307] netlink_rcv_skb+0x123/0x220 [ 390.795003][T17307] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.795096][T17307] rtnetlink_rcv+0x1c/0x30 [ 390.795121][T17307] netlink_unicast+0x5c0/0x690 [ 390.795165][T17307] netlink_sendmsg+0x5c8/0x6f0 [ 390.795250][T17307] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.795294][T17307] ____sys_sendmsg+0x563/0x5b0 [ 390.795394][T17307] ___sys_sendmsg+0x195/0x1e0 [ 390.795488][T17307] __x64_sys_sendmsg+0xd4/0x160 [ 390.795568][T17307] x64_sys_call+0x194c/0x3020 [ 390.795637][T17307] do_syscall_64+0x12c/0x370 [ 390.795670][T17307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.795788][T17307] RIP: 0033:0x7fa9d87bc799 [ 390.795809][T17307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.795831][T17307] RSP: 002b:00007fa9d7217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.795858][T17307] RAX: ffffffffffffffda RBX: 00007fa9d8a35fa0 RCX: 00007fa9d87bc799 [ 390.795874][T17307] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 390.795920][T17307] RBP: 00007fa9d7217090 R08: 0000000000000000 R09: 0000000000000000 [ 390.795938][T17307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.795955][T17307] R13: 00007fa9d8a36038 R14: 00007fa9d8a35fa0 R15: 00007ffd824eda98 [ 390.795981][T17307] [ 391.285427][T17313] loop2: detected capacity change from 0 to 2048 [ 391.985630][T17313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.081718][T14634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.092859][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.122320][T17327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61200 sclass=netlink_route_socket pid=17327 comm=syz.2.3182 [ 392.166226][T17329] netlink: 'syz.2.3184': attribute type 10 has an invalid length. [ 392.175476][T17329] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3184'. [ 392.283120][T17335] loop5: detected capacity change from 0 to 512 [ 392.314407][T17333] netlink: 'syz.1.3186': attribute type 21 has an invalid length. [ 392.329751][T17335] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.382063][T17335] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 392.410501][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 392.417202][ C0] EXT4-fs (loop5): initial error at time 1773961055: ext4_mb_generate_buddy:1315 [ 392.426597][ C0] EXT4-fs (loop5): last error at time 1773961055: ext4_mb_generate_buddy:1315 [ 392.437585][T17335] EXT4-fs (loop5): 1 truncate cleaned up [ 392.443985][T17335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.487157][T17338] xt_CT: No such helper "netbios-ns" [ 392.563567][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.960450][T17353] loop5: detected capacity change from 0 to 2048 [ 393.004731][T17353] loop5: p1 < > p4 [ 393.011605][T17333] netlink: 'syz.1.3186': attribute type 1 has an invalid length. [ 393.021848][T17353] loop5: p4 size 8388608 extends beyond EOD, truncated [ 393.072254][ T3003] loop5: p1 < > p4 [ 393.081905][T17333] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3186'. [ 393.111561][ T3003] loop5: p4 size 8388608 extends beyond EOD, truncated [ 393.251906][T17357] FAULT_INJECTION: forcing a failure. [ 393.251906][T17357] name failslab, interval 1, probability 0, space 0, times 0 [ 393.352905][T17357] CPU: 0 UID: 0 PID: 17357 Comm: syz.2.3190 Tainted: G W syzkaller #0 PREEMPT(full) [ 393.352944][T17357] Tainted: [W]=WARN [ 393.352953][T17357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.352969][T17357] Call Trace: [ 393.352977][T17357] [ 393.352987][T17357] __dump_stack+0x1d/0x30 [ 393.353046][T17357] dump_stack_lvl+0x95/0xd0 [ 393.353074][T17357] dump_stack+0x15/0x1b [ 393.353101][T17357] should_fail_ex+0x263/0x280 [ 393.353172][T17357] should_failslab+0x8c/0xb0 [ 393.353199][T17357] __kvmalloc_node_noprof+0x155/0x650 [ 393.353230][T17357] ? alloc_netdev_mqs+0x54f/0xa40 [ 393.353271][T17357] alloc_netdev_mqs+0x54f/0xa40 [ 393.353315][T17357] rtnl_create_link+0x239/0x720 [ 393.353352][T17357] rtnl_newlink_create+0x174/0x650 [ 393.353406][T17357] rtnl_newlink+0x10a0/0x1330 [ 393.353524][T17357] ? __memcg_slab_free_hook+0x14b/0x240 [ 393.353567][T17357] ? __rcu_read_unlock+0x4e/0x70 [ 393.353596][T17357] ? avc_has_perm_noaudit+0xab/0x130 [ 393.353701][T17357] ? cred_has_capability+0x224/0x2a0 [ 393.353740][T17357] ? selinux_capable+0x31/0x40 [ 393.353785][T17357] ? security_capable+0x7b/0x90 [ 393.353818][T17357] ? ns_capable+0x7c/0xb0 [ 393.353869][T17357] ? __pfx_rtnl_newlink+0x10/0x10 [ 393.353892][T17357] rtnetlink_rcv_msg+0x64b/0x720 [ 393.353921][T17357] netlink_rcv_skb+0x123/0x220 [ 393.354016][T17357] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 393.354047][T17357] rtnetlink_rcv+0x1c/0x30 [ 393.354067][T17357] netlink_unicast+0x5c0/0x690 [ 393.354128][T17357] netlink_sendmsg+0x5c8/0x6f0 [ 393.354191][T17357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.354281][T17357] ____sys_sendmsg+0x563/0x5b0 [ 393.354324][T17357] ___sys_sendmsg+0x195/0x1e0 [ 393.354426][T17357] __x64_sys_sendmsg+0xd4/0x160 [ 393.354535][T17357] x64_sys_call+0x194c/0x3020 [ 393.354573][T17357] do_syscall_64+0x12c/0x370 [ 393.354607][T17357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.354716][T17357] RIP: 0033:0x7efc355ac799 [ 393.354738][T17357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.354771][T17357] RSP: 002b:00007efc33fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.354822][T17357] RAX: ffffffffffffffda RBX: 00007efc35825fa0 RCX: 00007efc355ac799 [ 393.354839][T17357] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 393.354854][T17357] RBP: 00007efc33fff090 R08: 0000000000000000 R09: 0000000000000000 [ 393.354895][T17357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.354909][T17357] R13: 00007efc35826038 R14: 00007efc35825fa0 R15: 00007ffedb66a218 [ 393.354931][T17357] [ 393.723821][T15121] udevd[15121]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 393.735865][T14025] udevd[14025]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 393.771992][T17369] loop1: detected capacity change from 0 to 2048 [ 393.819634][T17368] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3193'. [ 393.843333][T17369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.862922][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 393.862937][ T28] audit: type=1400 audit(1773961057.312:7266): avc: denied { setopt } for pid=17379 comm="syz.6.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.916132][T17388] loop6: detected capacity change from 0 to 512 [ 393.917340][ T28] audit: type=1400 audit(1773961057.312:7267): avc: denied { bind } for pid=17379 comm="syz.6.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 393.944300][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.946616][ T28] audit: type=1400 audit(1773961057.312:7268): avc: denied { name_bind } for pid=17379 comm="syz.6.3198" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 393.975303][ T28] audit: type=1400 audit(1773961057.312:7269): avc: denied { node_bind } for pid=17379 comm="syz.6.3198" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 393.996635][T17388] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.013682][ T28] audit: type=1400 audit(1773961057.312:7270): avc: denied { write } for pid=17379 comm="syz.6.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.033857][ T28] audit: type=1400 audit(1773961057.312:7271): avc: denied { connect } for pid=17379 comm="syz.6.3198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 394.092085][ T28] audit: type=1400 audit(1773961057.312:7272): avc: denied { name_connect } for pid=17379 comm="syz.6.3198" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 394.115823][ T28] audit: type=1400 audit(1773961057.533:7273): avc: denied { name_bind } for pid=17379 comm="syz.6.3198" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 394.130877][T17398] netlink: 'syz.5.3202': attribute type 2 has an invalid length. [ 394.163294][T17398] netlink: 'syz.5.3202': attribute type 1 has an invalid length. [ 394.173794][T17398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.189824][ T28] audit: type=1400 audit(1773961057.627:7274): avc: denied { read } for pid=17395 comm="syz.1.3200" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.215262][ T28] audit: type=1400 audit(1773961057.627:7275): avc: denied { open } for pid=17395 comm="syz.1.3200" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 394.216943][T17404] FAULT_INJECTION: forcing a failure. [ 394.216943][T17404] name failslab, interval 1, probability 0, space 0, times 0 [ 394.276753][T17404] CPU: 1 UID: 0 PID: 17404 Comm: syz.3.3204 Tainted: G W syzkaller #0 PREEMPT(full) [ 394.276833][T17404] Tainted: [W]=WARN [ 394.276856][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.276869][T17404] Call Trace: [ 394.276875][T17404] [ 394.276884][T17404] __dump_stack+0x1d/0x30 [ 394.276942][T17404] dump_stack_lvl+0x95/0xd0 [ 394.276970][T17404] dump_stack+0x15/0x1b [ 394.276993][T17404] should_fail_ex+0x263/0x280 [ 394.277032][T17404] ? alloc_netdev_mqs+0x7cc/0xa40 [ 394.277116][T17404] should_failslab+0x8c/0xb0 [ 394.277143][T17404] __kmalloc_cache_noprof+0x5f/0x410 [ 394.277201][T17404] alloc_netdev_mqs+0x7cc/0xa40 [ 394.277239][T17404] rtnl_create_link+0x239/0x720 [ 394.277359][T17404] rtnl_newlink_create+0x174/0x650 [ 394.277421][T17404] rtnl_newlink+0x10a0/0x1330 [ 394.277455][T17404] ? __rcu_read_unlock+0x4e/0x70 [ 394.277640][T17404] ? xa_load+0xb1/0xe0 [ 394.277667][T17404] ? __rcu_read_unlock+0x4e/0x70 [ 394.277700][T17404] ? avc_has_perm_noaudit+0xab/0x130 [ 394.277744][T17404] ? cred_has_capability+0x224/0x2a0 [ 394.277820][T17404] ? selinux_capable+0x31/0x40 [ 394.277853][T17404] ? security_capable+0x7b/0x90 [ 394.277881][T17404] ? ns_capable+0x7c/0xb0 [ 394.277901][T17404] ? __pfx_rtnl_newlink+0x10/0x10 [ 394.277974][T17404] rtnetlink_rcv_msg+0x64b/0x720 [ 394.278001][T17404] ? avc_has_perm_noaudit+0xab/0x130 [ 394.278041][T17404] netlink_rcv_skb+0x123/0x220 [ 394.278118][T17404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.278149][T17404] rtnetlink_rcv+0x1c/0x30 [ 394.278167][T17404] netlink_unicast+0x5c0/0x690 [ 394.278281][T17404] netlink_sendmsg+0x5c8/0x6f0 [ 394.278374][T17404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.278505][T17404] ____sys_sendmsg+0x563/0x5b0 [ 394.278558][T17404] ___sys_sendmsg+0x195/0x1e0 [ 394.278634][T17404] __x64_sys_sendmsg+0xd4/0x160 [ 394.278724][T17404] x64_sys_call+0x194c/0x3020 [ 394.278793][T17404] do_syscall_64+0x12c/0x370 [ 394.278825][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.278872][T17404] RIP: 0033:0x7fa9d87bc799 [ 394.278890][T17404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.278923][T17404] RSP: 002b:00007fa9d7217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.278944][T17404] RAX: ffffffffffffffda RBX: 00007fa9d8a35fa0 RCX: 00007fa9d87bc799 [ 394.278962][T17404] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 394.278979][T17404] RBP: 00007fa9d7217090 R08: 0000000000000000 R09: 0000000000000000 [ 394.278996][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 394.279012][T17404] R13: 00007fa9d8a36038 R14: 00007fa9d8a35fa0 R15: 00007ffd824eda98 [ 394.279089][T17404] [ 395.022077][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.089221][T17418] loop5: detected capacity change from 0 to 2048 [ 395.118365][T17418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.178530][T15621] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.212774][T17430] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3214'. [ 395.253556][T17430] loop1: detected capacity change from 0 to 2048 [ 395.277746][T17431] lo speed is unknown, defaulting to 1000 [ 395.283986][T17431] dummy0 speed is unknown, defaulting to 1000 [ 395.335885][T15121] Alternate GPT is invalid, using primary GPT. [ 395.342622][T15121] loop1: p1 p2 p3 [ 395.351740][T15121] loop1: partition table partially beyond EOD, truncated [ 395.443608][T17430] Alternate GPT is invalid, using primary GPT. [ 395.450088][T17430] loop1: p1 p2 p3 [ 395.453888][T17430] loop1: partition table partially beyond EOD, truncated [ 395.849891][T15121] udevd[15121]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 395.862306][T14025] udevd[14025]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 396.068604][T14021] udevd[14021]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 396.384477][T15121] udevd[15121]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 396.396309][T14025] udevd[14025]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 396.397298][T14021] udevd[14021]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 396.729933][T17459] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 396.957705][T17465] loop1: detected capacity change from 0 to 128 [ 396.980961][T17465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 397.404479][T17470] loop6: detected capacity change from 0 to 2048 [ 397.480023][T17470] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.552348][T17474] loop5: detected capacity change from 0 to 128 [ 397.645427][T15495] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.683202][T17480] loop2: detected capacity change from 0 to 128 [ 397.738343][T17480] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 397.757459][T17488] FAULT_INJECTION: forcing a failure. [ 397.757459][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 397.791884][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.1.3231 Tainted: G W syzkaller #0 PREEMPT(full) [ 397.792014][T17488] Tainted: [W]=WARN [ 397.792023][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 397.792039][T17488] Call Trace: [ 397.792047][T17488] [ 397.792057][T17488] __dump_stack+0x1d/0x30 [ 397.792094][T17488] dump_stack_lvl+0x95/0xd0 [ 397.792125][T17488] dump_stack+0x15/0x1b [ 397.792156][T17488] should_fail_ex+0x263/0x280 [ 397.792192][T17488] should_failslab+0x8c/0xb0 [ 397.792229][T17488] __kmalloc_noprof+0xb8/0x4e0 [ 397.792258][T17488] ? bitmap_zalloc+0x29/0x40 [ 397.792367][T17488] bitmap_zalloc+0x29/0x40 [ 397.792453][T17488] dev_prep_valid_name+0x139/0x540 [ 397.792481][T17488] ? bcmp+0x2e/0x90 [ 397.792509][T17488] register_netdevice+0x169/0x1000 [ 397.792622][T17488] ? dev_addr_mod+0x1e0/0x220 [ 397.792695][T17488] ipvlan_link_new+0x298/0x5d0 [ 397.792725][T17488] ? __pfx_ipvlan_link_new+0x10/0x10 [ 397.792790][T17488] rtnl_newlink_create+0x1e4/0x650 [ 397.792820][T17488] ? security_capable+0x7b/0x90 [ 397.792875][T17488] ? netlink_ns_capable+0x86/0xa0 [ 397.792908][T17488] rtnl_newlink+0x10a0/0x1330 [ 397.792986][T17488] ? __rcu_read_unlock+0x4e/0x70 [ 397.793012][T17488] ? xa_load+0xb1/0xe0 [ 397.793075][T17488] ? __rcu_read_unlock+0x4e/0x70 [ 397.793164][T17488] ? avc_has_perm_noaudit+0xab/0x130 [ 397.793210][T17488] ? cred_has_capability+0x224/0x2a0 [ 397.793245][T17488] ? selinux_capable+0x31/0x40 [ 397.793283][T17488] ? security_capable+0x7b/0x90 [ 397.793342][T17488] ? ns_capable+0x7c/0xb0 [ 397.793365][T17488] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.793391][T17488] rtnetlink_rcv_msg+0x64b/0x720 [ 397.793419][T17488] ? avc_has_perm_noaudit+0xab/0x130 [ 397.793489][T17488] netlink_rcv_skb+0x123/0x220 [ 397.793600][T17488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.793634][T17488] rtnetlink_rcv+0x1c/0x30 [ 397.793662][T17488] netlink_unicast+0x5c0/0x690 [ 397.793702][T17488] netlink_sendmsg+0x5c8/0x6f0 [ 397.793766][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.793799][T17488] ____sys_sendmsg+0x563/0x5b0 [ 397.793843][T17488] ___sys_sendmsg+0x195/0x1e0 [ 397.793963][T17488] __x64_sys_sendmsg+0xd4/0x160 [ 397.794004][T17488] x64_sys_call+0x194c/0x3020 [ 397.794034][T17488] do_syscall_64+0x12c/0x370 [ 397.794077][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.794101][T17488] RIP: 0033:0x7f0ce2a6c799 [ 397.794148][T17488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.794227][T17488] RSP: 002b:00007f0ce14bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.794306][T17488] RAX: ffffffffffffffda RBX: 00007f0ce2ce5fa0 RCX: 00007f0ce2a6c799 [ 397.794321][T17488] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 397.794336][T17488] RBP: 00007f0ce14bf090 R08: 0000000000000000 R09: 0000000000000000 [ 397.794350][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.794363][T17488] R13: 00007f0ce2ce6038 R14: 00007f0ce2ce5fa0 R15: 00007ffd5cce6f08 [ 397.794386][T17488] [ 398.426605][T17474] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.475252][T17474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.486239][T17474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.536633][T17474] bridge1: left promiscuous mode [ 398.554153][T17474] syzkaller0: left promiscuous mode [ 398.559550][T17474] syzkaller0: left allmulticast mode [ 398.573837][T17474] bridge2: left promiscuous mode [ 398.592367][T13201] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.606585][T17480] EXT4-fs unmount: 1 callbacks suppressed [ 398.606605][T17480] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 398.606670][T13201] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.660575][T13201] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.691178][T13201] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.766110][T17502] tmpfs: Bad value for 'mpol' [ 398.775388][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 398.775408][ T28] audit: type=1400 audit(1773961062.477:7314): avc: denied { accept } for pid=17501 comm="syz.3.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 398.849354][T17502] loop3: detected capacity change from 0 to 736 [ 399.032503][T17506] loop1: detected capacity change from 0 to 2048 [ 399.073981][T17506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.212913][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.223359][T17511] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=17511 comm=syz.3.3237 [ 399.239611][ T28] audit: type=1400 audit(1773961062.950:7315): avc: denied { write } for pid=17501 comm="syz.3.3237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 399.264136][T17502] netlink: 'syz.3.3237': attribute type 4 has an invalid length. [ 399.267365][T17500] syz.2.3236 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 399.289960][T17500] CPU: 1 UID: 0 PID: 17500 Comm: syz.2.3236 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.290024][T17500] Tainted: [W]=WARN [ 399.290031][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.290048][T17500] Call Trace: [ 399.290058][T17500] [ 399.290068][T17500] __dump_stack+0x1d/0x30 [ 399.290142][T17500] dump_stack_lvl+0x95/0xd0 [ 399.290168][T17500] dump_stack+0x15/0x1b [ 399.290196][T17500] dump_header+0x80/0x240 [ 399.290229][T17500] oom_kill_process+0x295/0x350 [ 399.290281][T17500] out_of_memory+0x97d/0xb80 [ 399.290331][T17500] try_charge_memcg+0x62e/0xa10 [ 399.290432][T17500] obj_cgroup_charge_pages+0x23/0xc0 [ 399.290500][T17500] __memcg_kmem_charge_page+0x9e/0x170 [ 399.290596][T17500] __alloc_frozen_pages_noprof+0x18a/0x360 [ 399.290702][T17500] alloc_pages_mpol+0xb3/0x260 [ 399.290740][T17500] alloc_pages_noprof+0x8f/0x130 [ 399.290783][T17500] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 399.290899][T17500] __kvmalloc_node_noprof+0x3d4/0x650 [ 399.290997][T17500] ? futex_hash_allocate+0x190/0x9d0 [ 399.291037][T17500] ? futex_hash_allocate+0x190/0x9d0 [ 399.291069][T17500] futex_hash_allocate+0x190/0x9d0 [ 399.291120][T17500] ? cap_task_prctl+0x13f/0x6e0 [ 399.291184][T17500] futex_hash_prctl+0xd8/0xf0 [ 399.291230][T17500] __se_sys_prctl+0xa3d/0x13f0 [ 399.291271][T17500] __x64_sys_prctl+0x67/0x80 [ 399.291306][T17500] x64_sys_call+0x2533/0x3020 [ 399.291385][T17500] do_syscall_64+0x12c/0x370 [ 399.291412][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.291441][T17500] RIP: 0033:0x7efc355ac799 [ 399.291463][T17500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.291528][T17500] RSP: 002b:00007efc33fff028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 399.291552][T17500] RAX: ffffffffffffffda RBX: 00007efc35825fa0 RCX: 00007efc355ac799 [ 399.291572][T17500] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 399.291590][T17500] RBP: 00007efc35642c99 R08: 0000000000000000 R09: 0000000000000000 [ 399.291680][T17500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 399.291697][T17500] R13: 00007efc35826038 R14: 00007efc35825fa0 R15: 00007ffedb66a218 [ 399.291724][T17500] [ 399.528686][T17500] memory: usage 307200kB, limit 307200kB, failcnt 2960 [ 399.535753][T17500] memory+swap: usage 307496kB, limit 9007199254740988kB, failcnt 0 [ 399.543695][T17500] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 399.551886][T17500] Memory cgroup stats for /syz2: [ 399.552149][T17500] cache 0 [ 399.561646][T17500] rss 0 [ 399.574278][T17500] shmem 0 [ 399.580025][T17500] mapped_file 0 [ 399.583682][T17500] dirty 0 [ 399.586665][T17500] writeback 0 [ 399.590050][T17500] workingset_refault_anon 1997 [ 399.594896][T17500] workingset_refault_file 6688 [ 399.599685][T17500] swap 299008 [ 399.605294][T17500] swapcached 111677440 [ 399.610216][T17500] pgpgin 585202 [ 399.613874][T17500] pgpgout 585200 [ 399.617624][T17500] pgfault 450006 [ 399.621391][T17500] pgmajfault 344 [ 399.625062][T17500] inactive_anon 0 [ 399.639730][T17500] active_anon 0 [ 399.643521][T17500] inactive_file 0 [ 399.647211][T17500] active_file 4096 [ 399.651183][T17500] unevictable 0 [ 399.661108][T17500] hierarchical_memory_limit 314572800 [ 399.674725][T17500] hierarchical_memsw_limit 9223372036854771712 [ 399.710714][T17500] total_cache 0 [ 399.729903][T17500] total_rss 0 [ 399.733288][T17500] total_shmem 0 [ 399.754112][T17500] total_mapped_file 0 [ 399.758188][T17500] total_dirty 0 [ 399.761688][T17500] total_writeback 0 [ 399.801790][T17500] total_workingset_refault_anon 1997 [ 399.807222][T17500] total_workingset_refault_file 6688 [ 399.816809][T17500] total_swap 299008 [ 399.820995][T17500] total_swapcached 111677440 [ 399.826042][T17500] total_pgpgin 585202 [ 399.830108][T17500] total_pgpgout 585200 [ 399.863270][T17519] FAULT_INJECTION: forcing a failure. [ 399.863270][T17519] name failslab, interval 1, probability 0, space 0, times 0 [ 399.887926][T17500] total_pgfault 450006 [ 399.913201][T17500] total_pgmajfault 344 [ 399.919313][T17519] CPU: 1 UID: 0 PID: 17519 Comm: syz.6.3242 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.919345][T17519] Tainted: [W]=WARN [ 399.919358][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.919371][T17519] Call Trace: [ 399.919379][T17519] [ 399.919389][T17519] __dump_stack+0x1d/0x30 [ 399.919486][T17519] dump_stack_lvl+0x95/0xd0 [ 399.919518][T17519] dump_stack+0x15/0x1b [ 399.919542][T17519] should_fail_ex+0x263/0x280 [ 399.919571][T17519] should_failslab+0x8c/0xb0 [ 399.919608][T17519] __kvmalloc_node_noprof+0x155/0x650 [ 399.919643][T17519] ? alloc_netdev_mqs+0x873/0xa40 [ 399.919740][T17519] alloc_netdev_mqs+0x873/0xa40 [ 399.919803][T17519] rtnl_create_link+0x239/0x720 [ 399.919841][T17519] rtnl_newlink_create+0x174/0x650 [ 399.919993][T17519] ? security_capable+0x7b/0x90 [ 399.920085][T17519] ? netlink_ns_capable+0x86/0xa0 [ 399.920147][T17519] rtnl_newlink+0x10a0/0x1330 [ 399.920193][T17519] ? __memcg_slab_free_hook+0x14b/0x240 [ 399.920265][T17519] ? __rcu_read_unlock+0x4e/0x70 [ 399.920295][T17519] ? avc_has_perm_noaudit+0xab/0x130 [ 399.920388][T17519] ? cred_has_capability+0x224/0x2a0 [ 399.920426][T17519] ? selinux_capable+0x31/0x40 [ 399.920463][T17519] ? security_capable+0x7b/0x90 [ 399.920602][T17519] ? ns_capable+0x7c/0xb0 [ 399.920625][T17519] ? __pfx_rtnl_newlink+0x10/0x10 [ 399.920645][T17519] rtnetlink_rcv_msg+0x64b/0x720 [ 399.920676][T17519] netlink_rcv_skb+0x123/0x220 [ 399.920755][T17519] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.920789][T17519] rtnetlink_rcv+0x1c/0x30 [ 399.920808][T17519] netlink_unicast+0x5c0/0x690 [ 399.920839][T17519] netlink_sendmsg+0x5c8/0x6f0 [ 399.920941][T17519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.921041][T17519] ____sys_sendmsg+0x563/0x5b0 [ 399.921089][T17519] ___sys_sendmsg+0x195/0x1e0 [ 399.921169][T17519] __x64_sys_sendmsg+0xd4/0x160 [ 399.921217][T17519] x64_sys_call+0x194c/0x3020 [ 399.921305][T17519] do_syscall_64+0x12c/0x370 [ 399.921339][T17519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.921369][T17519] RIP: 0033:0x7f9efcc5c799 [ 399.921390][T17519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.921440][T17519] RSP: 002b:00007f9efb6af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.921461][T17519] RAX: ffffffffffffffda RBX: 00007f9efced5fa0 RCX: 00007f9efcc5c799 [ 399.921476][T17519] RDX: 000000000c000802 RSI: 0000200000000000 RDI: 0000000000000003 [ 399.921493][T17519] RBP: 00007f9efb6af090 R08: 0000000000000000 R09: 0000000000000000 [ 399.921558][T17519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.921576][T17519] R13: 00007f9efced6038 R14: 00007f9efced5fa0 R15: 00007ffe35b220f8 [ 399.921624][T17519] [ 400.240746][T17500] total_inactive_anon 0 [ 400.245034][T17500] total_active_anon 0 [ 400.249325][T17500] total_inactive_file 0 [ 400.253711][T17500] total_active_file 4096 [ 400.258092][T17500] total_unevictable 0 [ 400.262705][T17500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3236,pid=17499,uid=0 [ 400.277819][T17500] Memory cgroup out of memory: Killed process 17499 (syz.2.3236) total-vm:96080kB, anon-rss:1224kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 400.400777][T17522] loop3: detected capacity change from 0 to 128 [ 400.479841][T17522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3241'. [ 401.022584][T17534] loop6: detected capacity change from 0 to 764 [ 401.035747][T17534] rock: directory entry would overflow storage [ 401.042344][T17534] rock: sig=0x5245, size=8, remaining=5 [ 401.102631][T17537] can0: slcan on ttyS3. [ 401.172186][T17538] loop2: detected capacity change from 0 to 2048 [ 401.202745][T17538] loop2: p1 < > p4 [ 401.208145][T17538] loop2: p4 size 8388608 extends beyond EOD, truncated [ 401.438942][ T3003] loop2: p1 < > p4 [ 401.482910][ T3003] loop2: p4 size 8388608 extends beyond EOD, truncated [ 401.796263][T17550] loop2: detected capacity change from 0 to 512 [ 401.811435][T17531] can0 (unregistered): slcan off ttyS3. [ 401.821253][T17550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 401.855004][T17550] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 401.873253][T17550] EXT4-fs (loop2): 1 truncate cleaned up [ 401.878994][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 401.879017][ C0] EXT4-fs (loop2): initial error at time 1773961321: ext4_mb_generate_buddy:1315 [ 401.879041][ C0] EXT4-fs (loop2): last error at time 1773961321: ext4_mb_generate_buddy:1315 [ 401.903009][T14025] udevd[14025]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 401.905661][T17550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.941143][T17531] syz.6.3245 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 401.952240][T17531] CPU: 1 UID: 0 PID: 17531 Comm: syz.6.3245 Tainted: G W syzkaller #0 PREEMPT(full) [ 401.952338][T17531] Tainted: [W]=WARN [ 401.952345][T17531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.952359][T17531] Call Trace: [ 401.952368][T17531] [ 401.952378][T17531] __dump_stack+0x1d/0x30 [ 401.952487][T17531] dump_stack_lvl+0x95/0xd0 [ 401.952519][T17531] dump_stack+0x15/0x1b [ 401.952543][T17531] dump_header+0x80/0x240 [ 401.952594][T17531] oom_kill_process+0x295/0x350 [ 401.952625][T17531] out_of_memory+0x97d/0xb80 [ 401.952656][T17531] try_charge_memcg+0x62e/0xa10 [ 401.952762][T17531] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 401.952847][T17531] __swap_cache_prepare_and_add+0x386/0x530 [ 401.952944][T17531] swap_cache_alloc_folio+0xa2/0x120 [ 401.953140][T17531] swap_cluster_readahead+0x26e/0x3d0 [ 401.953185][T17531] swapin_readahead+0xde/0x840 [ 401.953216][T17531] ? call_rcu+0x2bb/0x430 [ 401.953262][T17531] ? __rcu_read_unlock+0x4e/0x70 [ 401.953319][T17531] ? swap_cache_get_folio+0x26f/0x280 [ 401.953355][T17531] do_swap_page+0x30d/0x2220 [ 401.953446][T17531] ? refill_obj_stock+0x23c/0x3f0 [ 401.953533][T17531] ? __rcu_read_unlock+0x4e/0x70 [ 401.953557][T17531] ? __rcu_read_lock+0x36/0x50 [ 401.953585][T17531] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 401.953625][T17531] handle_mm_fault+0xb46/0x3020 [ 401.953660][T17531] ? vma_start_read+0x1c7/0x2c0 [ 401.953693][T17531] do_user_addr_fault+0x62f/0x1050 [ 401.953749][T17531] ? trace_page_fault_user+0x1f/0xe0 [ 401.953785][T17531] exc_page_fault+0x62/0xa0 [ 401.953896][T17531] asm_exc_page_fault+0x26/0x30 [ 401.953924][T17531] RIP: 0033:0x7f9efcc5c7a1 [ 401.953966][T17531] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 401.953986][T17531] RSP: 002b:00007ffe35b22258 EFLAGS: 00010217 [ 401.954066][T17531] RAX: 0000000000000000 RBX: 00007f9efced7da0 RCX: 00007f9efcc5c799 [ 401.954086][T17531] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 401.954103][T17531] RBP: 00007f9efced7da0 R08: 0000000000000006 R09: 0000000000000000 [ 401.954121][T17531] R10: 00007f9efced7cb0 R11: 0000000000000246 R12: 00000000000653ad [ 401.954136][T17531] R13: 00007f9efced618c R14: 0000000000065134 R15: 00007f9efced6180 [ 401.954157][T17531] [ 401.977584][T15121] udevd[15121]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 401.979662][T17531] memory: usage 307200kB, limit 307200kB, failcnt 1356 [ 402.208985][T17531] memory+swap: usage 307768kB, limit 9007199254740988kB, failcnt 0 [ 402.217061][T17531] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 402.224541][T17531] Memory cgroup stats for /syz6: [ 402.224891][T17531] cache 0 [ 402.233877][T17531] rss 4096 [ 402.237005][T17531] shmem 0 [ 402.239976][T17531] mapped_file 0 [ 402.243547][T17531] dirty 0 [ 402.246594][T17531] writeback 4096 [ 402.250217][T17531] workingset_refault_anon 670 [ 402.255253][T17531] workingset_refault_file 450 [ 402.259992][T17531] swap 581632 [ 402.263310][T17531] swapcached 24510464 [ 402.267405][T17531] pgpgin 389006 [ 402.271003][T17531] pgpgout 388996 [ 402.274669][T17531] pgfault 398761 [ 402.278374][T17531] pgmajfault 173 [ 402.282001][T17531] inactive_anon 16384 [ 402.286092][T17531] active_anon 0 [ 402.289694][T17531] inactive_file 24576 [ 402.293719][T17531] active_file 0 [ 402.297641][T17531] unevictable 0 [ 402.301141][T17531] hierarchical_memory_limit 314572800 [ 402.306797][T17531] hierarchical_memsw_limit 9223372036854771712 [ 402.313122][T17531] total_cache 0 [ 402.316695][T17531] total_rss 4096 [ 402.320344][T17531] total_shmem 0 [ 402.323834][T17531] total_mapped_file 0 [ 402.328078][T17531] total_dirty 0 [ 402.331647][T17531] total_writeback 4096 [ 402.335871][T17531] total_workingset_refault_anon 670 [ 402.341401][T17531] total_workingset_refault_file 450 [ 402.346714][T17531] total_swap 581632 [ 402.350569][T17531] total_swapcached 24510464 [ 402.355726][T17531] total_pgpgin 389006 [ 402.360002][T17531] total_pgpgout 388996 [ 402.364207][T17531] total_pgfault 398761 [ 402.368467][T17531] total_pgmajfault 173 [ 402.373094][T17531] total_inactive_anon 16384 [ 402.377699][T17531] total_active_anon 0 [ 402.381939][T17531] total_inactive_file 24576 [ 402.386615][T17531] total_active_file 0 [ 402.390625][T17531] total_unevictable 0 [ 402.394702][T17531] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3245,pid=17531,uid=0 [ 402.410939][T17531] Memory cgroup out of memory: Killed process 17531 (syz.6.3245) total-vm:94296kB, anon-rss:1228kB, file-rss:22604kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 402.469348][T17560] loop1: detected capacity change from 0 to 2048 [ 402.564671][T17560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.741337][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.811842][ T4987] bridge_slave_1: left allmulticast mode [ 402.827614][ T4987] bridge_slave_1: left promiscuous mode [ 402.845576][T17582] loop1: detected capacity change from 0 to 128 [ 402.859365][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.878842][ T4987] bridge_slave_0: left allmulticast mode [ 402.885021][ T4987] bridge_slave_0: left promiscuous mode [ 402.919976][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.929005][ T28] audit: type=1400 audit(1773961322.837:7316): avc: denied { mounton } for pid=17587 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 402.980843][T17591] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3256'. [ 403.062663][T17589] syz.1.3255: attempt to access beyond end of device [ 403.062663][T17589] loop1: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 403.091474][T17589] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 403.100742][T17589] syz.1.3255: attempt to access beyond end of device [ 403.100742][T17589] loop1: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 403.114896][T17589] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 403.125432][T17589] syz.1.3255: attempt to access beyond end of device [ 403.125432][T17589] loop1: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 403.142688][T17589] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 403.151623][T17589] syz.1.3255: attempt to access beyond end of device [ 403.151623][T17589] loop1: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 403.168414][T14634] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.180210][T17589] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 403.191521][T17589] syz.1.3255: attempt to access beyond end of device [ 403.191521][T17589] loop1: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 403.205698][T17589] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 403.214924][T17589] syz.1.3255: attempt to access beyond end of device [ 403.214924][T17589] loop1: rw=8390657, sector=129, nr_sectors = 1 limit=128 [ 403.240232][T17589] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 403.252122][ T4987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.261491][T17589] syz.1.3255: attempt to access beyond end of device [ 403.261491][T17589] loop1: rw=8390657, sector=130, nr_sectors = 1 limit=128 [ 403.276569][T17589] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 403.285997][ T4987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.295161][T17589] syz.1.3255: attempt to access beyond end of device [ 403.295161][T17589] loop1: rw=8390657, sector=131, nr_sectors = 1 limit=128 [ 403.309825][ T4987] bond0 (unregistering): Released all slaves [ 403.337911][T17589] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 403.353271][ T28] audit: type=1326 audit(1773961323.278:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.368875][T17602] loop2: detected capacity change from 0 to 128 [ 403.384347][T17589] syz.1.3255: attempt to access beyond end of device [ 403.384347][T17589] loop1: rw=8390657, sector=132, nr_sectors = 1 limit=128 [ 403.405083][T17605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'. [ 403.428990][T17602] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 403.440453][ T28] audit: type=1326 audit(1773961323.278:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.462776][T17602] ext4 filesystem being mounted at /128/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 403.465884][T17589] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 403.494250][T17604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3258'. [ 403.503808][ T28] audit: type=1326 audit(1773961323.278:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.528145][ T4987] hsr_slave_0: left promiscuous mode [ 403.534198][T17589] syz.1.3255: attempt to access beyond end of device [ 403.534198][T17589] loop1: rw=8390657, sector=133, nr_sectors = 1 limit=128 [ 403.534232][ T28] audit: type=1326 audit(1773961323.278:7320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.534265][ T28] audit: type=1326 audit(1773961323.278:7321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.598767][ T28] audit: type=1326 audit(1773961323.278:7322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.622469][ T28] audit: type=1326 audit(1773961323.278:7323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.646046][ T4987] hsr_slave_1: left promiscuous mode [ 403.651911][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.659578][T17589] Buffer I/O error on dev loop1, logical block 133, lost async page write [ 403.669852][ T4987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.677361][ T28] audit: type=1326 audit(1773961323.288:7324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.702889][ T28] audit: type=1326 audit(1773961323.288:7325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.732592][ T28] audit: type=1326 audit(1773961323.288:7326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.758762][ T28] audit: type=1326 audit(1773961323.288:7327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.841011][ T4987] team0 (unregistering): Port device team_slave_1 removed [ 403.856770][ T28] audit: type=1326 audit(1773961323.299:7328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.881643][ T4987] team0 (unregistering): Port device team_slave_0 removed [ 403.895814][ T28] audit: type=1326 audit(1773961323.299:7329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 403.959485][ T28] audit: type=1326 audit(1773961323.299:7330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 404.007787][ T28] audit: type=1326 audit(1773961323.299:7331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17598 comm="syz.2.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efc355ac799 code=0x7ffc0000 [ 404.049685][T14634] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.083619][T17633] loop1: detected capacity change from 0 to 512 [ 404.092479][T17633] EXT4-fs: inline encryption not supported [ 404.112148][T17587] lo speed is unknown, defaulting to 1000 [ 404.138582][T17587] dummy0 speed is unknown, defaulting to 1000 [ 404.250864][T17633] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 404.260861][T17633] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 404.462508][T17633] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.3262: Failed to acquire dquot type 1 [ 404.478376][T17633] loop1: lost filesystem error report for type 5 error -5 [ 404.479194][T17633] EXT4-fs (loop1): Remounting filesystem read-only [ 404.493318][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 404.493352][ C1] EXT4-fs (loop1): initial error at time 1773961324: ext4_acquire_dquot:7001 [ 404.493383][ C1] EXT4-fs (loop1): last error at time 1773961324: ext4_acquire_dquot:7001 [ 404.805174][T17633] EXT4-fs (loop1): 1 truncate cleaned up [ 404.811504][T17633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.862246][T17587] chnl_net:caif_netlink_parms(): no params data found [ 404.899363][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.023639][T17638] syz.3.3263 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 405.042456][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.3.3263 Tainted: G W syzkaller #0 PREEMPT(full) [ 405.042502][T17638] Tainted: [W]=WARN [ 405.042513][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.042531][T17638] Call Trace: [ 405.042542][T17638] [ 405.042576][T17638] __dump_stack+0x1d/0x30 [ 405.042615][T17638] dump_stack_lvl+0x95/0xd0 [ 405.042654][T17638] dump_stack+0x15/0x1b [ 405.042681][T17638] dump_header+0x80/0x240 [ 405.042713][T17638] oom_kill_process+0x295/0x350 [ 405.042785][T17638] out_of_memory+0x97d/0xb80 [ 405.042818][T17638] try_charge_memcg+0x62e/0xa10 [ 405.042869][T17638] obj_cgroup_charge_pages+0x23/0xc0 [ 405.042899][T17638] __memcg_kmem_charge_page+0x9e/0x170 [ 405.043025][T17638] __alloc_frozen_pages_noprof+0x18a/0x360 [ 405.043066][T17638] alloc_pages_mpol+0xb3/0x260 [ 405.043104][T17638] alloc_pages_noprof+0x8f/0x130 [ 405.043184][T17638] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 405.043236][T17638] __kvmalloc_node_noprof+0x3d4/0x650 [ 405.043274][T17638] ? ip_set_alloc+0x24/0x30 [ 405.043438][T17638] ? ip_set_alloc+0x24/0x30 [ 405.043473][T17638] ? __kmalloc_cache_noprof+0x18a/0x410 [ 405.043509][T17638] ip_set_alloc+0x24/0x30 [ 405.043548][T17638] hash_netiface_create+0x282/0x740 [ 405.043634][T17638] ? __pfx_hash_netiface_create+0x10/0x10 [ 405.043732][T17638] ip_set_create+0x3cf/0x970 [ 405.043785][T17638] ? __nla_parse+0x40/0x60 [ 405.043818][T17638] nfnetlink_rcv_msg+0x509/0x5d0 [ 405.043900][T17638] netlink_rcv_skb+0x123/0x220 [ 405.043934][T17638] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 405.043995][T17638] nfnetlink_rcv+0x167/0x1720 [ 405.044032][T17638] ? page_counter_charge+0x207/0x230 [ 405.044068][T17638] ? __rcu_read_unlock+0x4e/0x70 [ 405.044097][T17638] ? obj_cgroup_charge_pages+0x74/0xc0 [ 405.044170][T17638] ? __rcu_read_unlock+0x4e/0x70 [ 405.044199][T17638] ? __memcg_kmem_charge_page+0xd0/0x170 [ 405.044232][T17638] ? __alloc_frozen_pages_noprof+0x18a/0x360 [ 405.044313][T17638] ? mas_next_slot+0x69b/0x6f0 [ 405.044349][T17638] ? __rcu_read_unlock+0x4e/0x70 [ 405.044389][T17638] ? mt_find+0x291/0x3d0 [ 405.044415][T17638] ? _raw_spin_lock_bh+0x56/0xb0 [ 405.044451][T17638] ? _raw_spin_unlock_bh+0x18/0x20 [ 405.044529][T17638] ? selinux_nlmsg_lookup+0x99/0x890 [ 405.044580][T17638] ? __rcu_read_unlock+0x33/0x70 [ 405.044620][T17638] ? __netlink_lookup+0x276/0x2b0 [ 405.044714][T17638] netlink_unicast+0x5c0/0x690 [ 405.044748][T17638] netlink_sendmsg+0x5c8/0x6f0 [ 405.044868][T17638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 405.044914][T17638] ____sys_sendmsg+0x563/0x5b0 [ 405.045002][T17638] ___sys_sendmsg+0x195/0x1e0 [ 405.045122][T17638] __x64_sys_sendmsg+0xd4/0x160 [ 405.045159][T17638] x64_sys_call+0x194c/0x3020 [ 405.045214][T17638] do_syscall_64+0x12c/0x370 [ 405.045250][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.045280][T17638] RIP: 0033:0x7fa9d87bc799 [ 405.045302][T17638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.045328][T17638] RSP: 002b:00007fa9d7217028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.045494][T17638] RAX: ffffffffffffffda RBX: 00007fa9d8a35fa0 RCX: 00007fa9d87bc799 [ 405.045576][T17638] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 405.045593][T17638] RBP: 00007fa9d8852c99 R08: 0000000000000000 R09: 0000000000000000 [ 405.045610][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.045627][T17638] R13: 00007fa9d8a36038 R14: 00007fa9d8a35fa0 R15: 00007ffd824eda98 [ 405.045656][T17638] [ 405.045667][T17638] memory: usage 307200kB, limit 307200kB, failcnt 1001 [ 405.410622][T17638] memory+swap: usage 159328kB, limit 9007199254740988kB, failcnt 0 [ 405.425619][T17638] kmem: usage 157972kB, limit 9007199254740988kB, failcnt 0 [ 405.433172][T17638] Memory cgroup stats for /syz3: [ 405.433479][T17638] cache 1048576 [ 405.443566][T17638] rss 98304 [ 405.446763][T17638] shmem 0 [ 405.449765][T17638] mapped_file 69632 [ 405.492744][T17638] dirty 4096 [ 405.496201][T17638] writeback 0 [ 405.499670][T17638] workingset_refault_anon 70 [ 405.504334][T17638] workingset_refault_file 1573 [ 405.509523][T17638] swap 86016 [ 405.512766][T17638] swapcached 21540864 [ 405.516919][T17638] pgpgin 191923 [ 405.520571][T17638] pgpgout 191638 [ 405.658974][T17638] pgfault 205750 [ 405.697099][T17638] pgmajfault 58 [ 405.732225][T17668] loop1: detected capacity change from 0 to 2048 [ 405.744107][T17638] inactive_anon 40960 [ 405.763779][T17638] active_anon 69632 [ 405.792055][T17638] inactive_file 12288 [ 405.803340][T17668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.821737][T17638] active_file 1044480 [ 405.825927][T17638] unevictable 0 [ 405.829500][T17638] hierarchical_memory_limit 314572800 [ 405.850299][T17638] hierarchical_memsw_limit 9223372036854771712 [ 405.876542][T17638] total_cache 1048576 [ 405.886520][T17638] total_rss 98304 [ 405.898466][T17638] total_shmem 0 [ 405.907498][T17638] total_mapped_file 69632 [ 405.917698][T17638] total_dirty 4096 [ 405.921513][T17638] total_writeback 0 [ 405.932147][T11104] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.942537][T17638] total_workingset_refault_anon 70 [ 405.952218][T17638] total_workingset_refault_file 1573 [ 405.965451][T17638] total_swap 86016 [ 405.978471][T17638] total_swapcached 21540864 [ 405.988312][T17638] total_pgpgin 191923 [ 405.992330][T17638] total_pgpgout 191638 [ 406.033913][T17680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=17680 comm=syz.2.3268 [ 406.047505][T17587] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.075633][T17638] total_pgfault 205750 [ 406.080249][T17587] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.087685][T17638] total_pgmajfault 58 [ 406.097564][T17638] total_inactive_anon 40960 [ 406.107725][T17587] bridge_slave_0: entered allmulticast mode [ 406.114078][T17638] total_active_anon 69632 [ 406.123960][T17638] total_inactive_file 12288 [ 406.131903][T17587] bridge_slave_0: entered promiscuous mode [ 406.145397][T17638] total_active_file 1044480 [ 406.168663][T17682] lo speed is unknown, defaulting to 1000 [ 406.174542][T17587] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.182061][T17587] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.193439][T17638] total_unevictable 0 [ 406.197600][T17638] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3263,pid=17637,uid=0 [ 406.202745][T17587] bridge_slave_1: entered allmulticast mode [ 406.234147][T17587] bridge_slave_1: entered promiscuous mode [ 406.242280][T17638] Memory cgroup out of memory: Killed process 17638 (syz.3.3263) total-vm:94164kB, anon-rss:1336kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 406.251670][T17682] dummy0 speed is unknown, defaulting to 1000 [ 406.328034][T17587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.351223][T17696] erspan1: entered allmulticast mode [ 406.374891][T17587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.416322][T17706] loop3: detected capacity change from 0 to 2048 [ 406.449100][T17587] team0: Port device team_slave_0 added [ 406.466267][T17706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.492731][T17587] team0: Port device team_slave_1 added [ 406.567409][T12418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.618803][T17705] netlink: 'syz.2.3275': attribute type 27 has an invalid length. [ 406.628173][T17587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.653994][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.691762][T17587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.551709][T17705] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.559022][T17705] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.612739][T17743] ================================================================== [ 407.620904][T17743] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 407.630778][T17743] [ 407.633141][T17743] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 0: [ 407.641268][T17743] tick_do_update_jiffies64+0x113/0x1c0 [ 407.646876][T17743] tick_nohz_handler+0x8d/0x3d0 [ 407.651877][T17743] __hrtimer_run_queues+0x218/0x4f0 [ 407.657118][T17743] hrtimer_interrupt+0x269/0x810 [ 407.662084][T17743] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 407.668445][T17743] sysvec_apic_timer_interrupt+0x6f/0x80 [ 407.674102][T17743] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.680100][T17743] __sanitizer_cov_trace_pc+0x17/0x70 [ 407.685511][T17743] nf_ct_iterate_cleanup+0x23c/0x3d0 [ 407.690812][T17743] nf_ct_iterate_cleanup_net+0x8c/0xb0 [ 407.696356][T17743] iterate_cleanup_work+0x7b/0x170 [ 407.701496][T17743] process_scheduled_works+0x513/0xa10 [ 407.706980][T17743] worker_thread+0x58a/0x780 [ 407.711596][T17743] kthread+0x22a/0x280 [ 407.715793][T17743] ret_from_fork+0x150/0x360 [ 407.720411][T17743] ret_from_fork_asm+0x1a/0x30 [ 407.725310][T17743] [ 407.727646][T17743] read to 0xffffffff86c09a00 of 8 bytes by task 17743 on cpu 1: [ 407.735469][T17743] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 407.741828][T17743] count_shadow_nodes+0x6a/0x230 [ 407.746808][T17743] do_shrink_slab+0x63/0x6a0 [ 407.751439][T17743] shrink_slab+0x538/0x880 [ 407.755876][T17743] shrink_node+0x6bc/0x2130 [ 407.760491][T17743] do_try_to_free_pages+0x408/0xc80 [ 407.765744][T17743] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 407.771684][T17743] try_charge_memcg+0x37e/0xa10 [ 407.776846][T17743] obj_cgroup_charge_pages+0x23/0xc0 [ 407.782187][T17743] __memcg_kmem_charge_page+0x9e/0x170 [ 407.787664][T17743] __alloc_frozen_pages_noprof+0x18a/0x360 [ 407.793578][T17743] alloc_pages_mpol+0xb3/0x260 [ 407.798357][T17743] alloc_pages_noprof+0x8f/0x130 [ 407.803411][T17743] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 407.809418][T17743] __kvmalloc_node_noprof+0x3d4/0x650 [ 407.814804][T17743] ip_set_alloc+0x24/0x30 [ 407.819233][T17743] hash_netiface_create+0x282/0x740 [ 407.824465][T17743] ip_set_create+0x3cf/0x970 [ 407.829113][T17743] nfnetlink_rcv_msg+0x509/0x5d0 [ 407.834080][T17743] netlink_rcv_skb+0x123/0x220 [ 407.838877][T17743] nfnetlink_rcv+0x167/0x1720 [ 407.843648][T17743] netlink_unicast+0x5c0/0x690 [ 407.848465][T17743] netlink_sendmsg+0x5c8/0x6f0 [ 407.853318][T17743] ____sys_sendmsg+0x563/0x5b0 [ 407.858201][T17743] ___sys_sendmsg+0x195/0x1e0 [ 407.862903][T17743] __x64_sys_sendmsg+0xd4/0x160 [ 407.867785][T17743] x64_sys_call+0x194c/0x3020 [ 407.872494][T17743] do_syscall_64+0x12c/0x370 [ 407.877101][T17743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.883053][T17743] [ 407.885386][T17743] value changed: 0x0000000100002ef1 -> 0x0000000100002ef2 [ 407.892498][T17743] [ 407.894844][T17743] Reported by Kernel Concurrency Sanitizer on: [ 407.901025][T17743] CPU: 1 UID: 0 PID: 17743 Comm: syz.1.3283 Tainted: G W syzkaller #0 PREEMPT(full) [ 407.912003][T17743] Tainted: [W]=WARN [ 407.915824][T17743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.925922][T17743] ================================================================== [ 408.492924][T17705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.511416][T17705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.789086][T17721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.798642][T17721] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.809477][T17721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.829979][T17587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.839212][T17587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.866179][T17587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.881104][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3275'. [ 408.895598][T17738] syzkaller1: entered promiscuous mode [ 408.901178][T17738] syzkaller1: entered allmulticast mode [ 408.979539][T13211] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.989015][T13211] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.003910][T13211] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.014440][T13211] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.057478][T17587] hsr_slave_0: entered promiscuous mode [ 409.070598][T17587] hsr_slave_1: entered promiscuous mode [ 409.076735][T17587] debugfs: 'hsr0' already exists in 'hsr' [ 409.087106][T17587] Cannot create hsr debugfs directory [ 409.340050][T17587] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 409.349827][T17587] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.359743][T17587] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.369358][T17587] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 409.414155][T17587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.430953][T17587] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.442395][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.449527][T13210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.462834][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.470035][ T4987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.552554][T17587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.698109][T17587] veth0_vlan: entered promiscuous mode [ 409.707068][T17587] veth1_vlan: entered promiscuous mode [ 409.726410][T17587] veth0_macvtap: entered promiscuous mode [ 409.734941][T17587] veth1_macvtap: entered promiscuous mode [ 409.749967][T17587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.762001][T17587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.774704][T13208] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.784175][T13208] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.810041][T13208] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.824280][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 409.824302][ T28] audit: type=1400 audit(1773961330.070:7353): avc: denied { mounton } for pid=17587 comm="syz-executor" path="/root/syzkaller.QCPI1T/syz-tmp" dev="sda1" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 409.857738][T13208] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.867631][ T28] audit: type=1400 audit(1773961330.070:7354): avc: denied { mount } for pid=17587 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 409.892196][ T28] audit: type=1400 audit(1773961330.080:7355): avc: denied { mounton } for pid=17587 comm="syz-executor" path="/root/syzkaller.QCPI1T/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 409.924795][ T28] audit: type=1400 audit(1773961330.080:7356): avc: denied { mounton } for pid=17587 comm="syz-executor" path="/root/syzkaller.QCPI1T/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=53680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 409.953513][ T28] audit: type=1400 audit(1773961330.112:7357): avc: denied { mounton } for pid=17587 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 409.978544][ T28] audit: type=1400 audit(1773961330.112:7358): avc: denied { mount } for pid=17587 comm="syz-executor" name="/" dev="gadgetfs" ino=4536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1