last executing test programs: 12m42.847717661s ago: executing program 0 (id=192): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12m42.607531738s ago: executing program 0 (id=195): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") unshare(0x18000380) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={&(0x7f0000000100), 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x72c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x324, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x2}, {0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x9}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa8cd, 0x0, 0x4, 0x4, 0x6, 0x100, 0x35a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x9, 0x2, 0x0, 0x200, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf0dc, 0x9, 0x7, 0x9, 0x4, 0x7fff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0xb, 0x4, 0x1, 0x16, 0x48, 0x29, 0x3, 0x6, 0x9, 0x48, 0x6, 0xc, 0x18, 0x1, 0x18, 0x1, 0x4, 0x9, 0x24, 0xb, 0x1b, 0x2, 0x24, 0x4, 0x6, 0x1, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xda8, 0x8, 0x80, 0xfff, 0x9, 0x84, 0x884f, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x9, 0x5, 0x8000, 0xd, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x1, 0x16, 0x6, 0x1, 0x12, 0x60, 0x2, 0x7e, 0x24]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x5, 0x0, 0x4, 0x2, 0xa187]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x5, 0x4, 0x12, 0x9, 0x30, 0x18, 0x24, 0x36, 0x36, 0x36, 0x39, 0x16, 0x6c, 0x1b, 0x36, 0x0, 0xc, 0x6, 0x1d, 0x2, 0x2, 0x0, 0xb, 0x3a, 0x1, 0x3, 0x2, 0x1, 0x3, 0x36, 0x1]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x3}, {0x5, 0x4}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x12, 0x4, 0xc, 0x60, 0x16, 0x12, 0x9, 0x48, 0x16, 0x16, 0xa, 0x16, 0xc, 0x12, 0xc, 0x24, 0x1b, 0x24, 0x6, 0x60, 0x4, 0x6c, 0x1, 0x1, 0xc, 0x1, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x18, 0xb, 0x36, 0x60, 0x30, 0x5, 0xf, 0x5, 0x6, 0x8f, 0x0, 0x6, 0x6, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x1, 0x80, 0x8001, 0xc24, 0x5, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xe, 0x0, 0xb4, 0x1, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf38b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff6ad}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x7ab, 0x5, 0x80, 0x4, 0x4, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x2, 0x60, 0x0, 0x71, 0x6c, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x7, 0x3, 0x6, 0x1000, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x8, 0x36, 0x30, 0x1b, 0x3, 0x30, 0x30, 0x12, 0x48, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xeb2c, 0xffff, 0x1ff, 0x2, 0xff82, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x18, 0x36, 0x6, 0x13, 0xb, 0xb, 0x30, 0x5, 0x60, 0x48, 0x6, 0x4, 0xb, 0x4, 0x60, 0x6, 0x2, 0x16, 0x48, 0x9, 0x60, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x5a, 0x18, 0x12, 0x30, 0xc, 0x6, 0x1, 0x0, 0x6c, 0x3f, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x40, 0x343, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x952, 0x3, 0x6, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd, 0xa, 0x7, 0x0, 0x8000, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0x0, 0xdb23, 0x8, 0x0, 0x27a, 0x7ff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x43c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x1b, 0x48, 0x48, 0xb, 0x4b, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x439, 0x8, 0x4, 0x0, 0x4, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x2, 0x8, 0x0, 0x8, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x9, 0x800, 0x401, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0xb2, 0x1, 0x0, 0x830, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2b0, 0x9, 0x3, 0x8, 0xffff, 0x696]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7120, 0x40, 0x4, 0x8000, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3}, {0x6, 0xa}, {0x1}, {0x1, 0x9}, {0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x8}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {}, {0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0xa}]}]}]}]}]}]}, 0x72c}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040000) r8 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r8, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) 12m41.717709876s ago: executing program 0 (id=199): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x13) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, 0x0, 0x24004091) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000400), 0x8) listen(r5, 0x0) r6 = dup(r5) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000480)={0x3fc, 0x0, 0x600, 0x70bd27, 0x25dfdbff, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x0, 0x4, 0x4}, {0x7, 0x1, 0x8, 0x80000001}, {0x89c, 0xbe, 0x80, 0x4}, {0x71, 0x8, 0x1, 0x5}, {0x1b8, 0x4, 0x40, 0x8}, {0x5, 0x40, 0x2, 0x7}, {0x1ff, 0x6, 0xf4, 0x8}]}}}]}}, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xcff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe70}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) bind$phonet(r6, &(0x7f0000000000)={0x23, 0x4, 0x9}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000180)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x548, &(0x7f00000011c0)="$eJzs3cFvI1cZAPBvvPEmu802KfQACOhSCgtarZN426jqhe0FhKpKiIoTh21I3CiKvY5ir2jMHrJH7pVYiRPwH3DjgNQTB27cQOLQSzkgLbACNUgcjGY8SbyJnbhN1k7i30+aeN6b2fnei/e9N/Mi+wUwtq5HxHZEXI6IdyNiJs9P8i3udLb0vE+ePFjeefJgOYl2+51/JtnxNC+6/k3qufyaUxHxw+9F/CQ5HLex1VpfqlYrm3l6rlnbmGtstW6tFfKc8uLC4vzrt18rn1pdX6r99vF319760e9/95WP/7T97Z+lxZr++bXsWHc99hVPHDPJrzPdlTcREW+d+Mpnx0T+/4fzJ21tn4uIl7P2PxOXsncTALjI2u2ZaM90pwGAiy59/p+OpFDK5wKmo1AolTpzeC/G1UK13mjenKnfv7cS2RzWbBQL761VK/P5XOFsFJM0vZDt76fLT6U/qNyOiBci4oPJK9nx0nK9ujLKGx8AGGPPHRj//zPZGf+7nfyvYADAmTM16gIAAEPXNf7PjrIcAMDweP4HgPHzKcZ/nw4EgAvC8z8AjB/jPwCMn2PH/4fDKQcAMBQ/ePvtdGvvdL7/evebum+tVBrrpdr95dJyfXOjtFqvr1YrpeV2+7jrVev1jYVX95KNrdbdWv3+vebdtdrSauVuxXcJAMDovfDSh39JB/3tN65kW3St5WCshoutMOoCACNzadQFAEbG53lgfA3wjG8aAC64Hkv0duQTBEm/Ex5Z/BXOqxtfNP8P4+ok8//mDuB8+2zz/9859XIAw2cMh/HVbifW/AeAMbM/xz/59I1B3z8IAhfNcc2971eEPBrg4nc+fXkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPJjOtqRQytYC305/FkqliGsRMRvF5L21amU+Ip6PiD9PFifT9MKoCw0AnFDh70m+/teNmVemDx69nPw3WxjwckT89Jfv/OL9pWZzcyHN/9defvNRmn+luVm+PIoKAADddtfd/Gg/Kxu/y/lr14P8J08eLO9uwyzi4zcjYupKFn8n3zpHJmIie52KYkRc/XeSpzvS+5VLpxB/+2FEfGG3/lPxfleE6WwOpLPy6cH4aexrpx6/+/d/MH7hqfoWsmPpazH7XXw+DhQOONaHb3b6ybztpU08b3+FuJ699m7/U1kPdXJp/5c2151D/V9hr/+7dCh+krX563vpo0vy+NU/fP9QZnumc+xhxJcmesVP9uInvfvf4isD1vGjL3/15X7H2r+KuNGz/rsrUteybnauWduYa2y1bq3VllYrq5V75fLiwuL867dfK89lc9Sdn3/sFeMfb9x8vl/8tP5X+8SfOrr+8Y0B6//r/737468dEf9bX+/9/r94RPx0TPzmgPGXrt7pu3x3Gn+lT/2Pef/j5oDxP/5ba2XAUwGAIWhstdaXqtXK5jE76b3mcefYGXwnfbY/A8XIdmI74rQumE1KRETPc9I76rNR5We1k7TSO+NRRP/NaV9w1D0T8KztN/r+5/x1mAUCAAAAAAAAAAAAAAAOaWy11id7f1rr1HZGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAurv8HAAD//yHZxLU=") 12m41.104207765s ago: executing program 0 (id=203): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(0xffffffffffffffff, 0x80) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000038c0)=[{&(0x7f0000001500)=""/4103, 0x1007}], 0x1) 12m40.93983681s ago: executing program 0 (id=205): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10e210, 0x10004, 0x20da, 0x2, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) unshare(0x6a040000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000080)='./file0\x00', 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd2012, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x5}, 0x200, 0x1fb, 0x0, 0x5, 0x80008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x7, 0x7fff0000}]}) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_READ(r4, 0x40187014, &(0x7f0000000040)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x8000, 0x8, 0x5e55b37311de6d89, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@generic={0x88, 0x2}]}}}}}) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 12m39.908040102s ago: executing program 0 (id=222): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) truncate(&(0x7f0000000940)='./file1\x00', 0x8da8) fallocate(r2, 0x20, 0x4000, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = inotify_init1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x85) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) recvmsg(r6, &(0x7f0000000640)={&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, 0x0}, 0x40000000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYBLOB="ef"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB], 0x19c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 12m24.872552448s ago: executing program 32 (id=222): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) truncate(&(0x7f0000000940)='./file1\x00', 0x8da8) fallocate(r2, 0x20, 0x4000, 0x8000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = inotify_init1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xf) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0x85) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r5, 0x5412, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}}, 0x0) recvmsg(r6, &(0x7f0000000640)={&(0x7f0000000240)=@rc={0x1f, @none}, 0x80, 0x0}, 0x40000000) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYBLOB="ef"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20044800) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB], 0x19c}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 4m41.329468489s ago: executing program 4 (id=4265): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") unshare(0x18000380) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={&(0x7f0000000100), 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x4e8, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf38b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff6ad}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x7ab, 0x5, 0x80, 0x4, 0x4, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x2, 0x60, 0x0, 0x71, 0x6c, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x7, 0x3, 0x6, 0x1000, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x8, 0x36, 0x30, 0x1b, 0x3, 0x30, 0x30, 0x12, 0x48, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xeb2c, 0xffff, 0x1ff, 0x2, 0xff82, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x18, 0x36, 0x6, 0x13, 0xb, 0xb, 0x30, 0x5, 0x60, 0x48, 0x6, 0x4, 0xb, 0x4, 0x60, 0x6, 0x2, 0x16, 0x48, 0x9, 0x12, 0x60, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x5a, 0x18, 0x12, 0x30, 0xc, 0x6, 0x1, 0x0, 0x6c, 0x3f, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x40, 0x343, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x952, 0x3, 0x6, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd, 0xa, 0x7, 0x0, 0x8000, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0x0, 0xdb23, 0x8, 0x0, 0x27a, 0x7ff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x43c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x1b, 0x48, 0x48, 0xb, 0x4b, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x439, 0x8, 0x4, 0x0, 0x4, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x2, 0x8, 0x0, 0x8, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x9, 0x800, 0x401, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0xb2, 0x1, 0x0, 0x830, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2b0, 0x9, 0x3, 0x8, 0xffff, 0x696]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7120, 0x40, 0x4, 0x8000, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3}, {0x6, 0xa}, {0x1}, {0x1, 0x9}, {0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x8}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {}, {0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0xa}]}]}]}]}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040000) r9 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) 4m40.592192392s ago: executing program 4 (id=4271): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) shutdown(r0, 0x1) 4m40.459935306s ago: executing program 4 (id=4273): getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2030, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e26}, 0x73) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 4m39.302120332s ago: executing program 4 (id=4279): socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) dup(0xffffffffffffffff) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r0, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 4m39.281044223s ago: executing program 4 (id=4280): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) 4m39.05246561s ago: executing program 4 (id=4282): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") unshare(0x18000380) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={&(0x7f0000000100), 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x4e8, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf38b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff6ad}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x7ab, 0x5, 0x80, 0x4, 0x4, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x2, 0x60, 0x0, 0x71, 0x6c, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x7, 0x3, 0x6, 0x1000, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x8, 0x36, 0x30, 0x1b, 0x3, 0x30, 0x30, 0x12, 0x48, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xeb2c, 0xffff, 0x1ff, 0x2, 0xff82, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x18, 0x36, 0x6, 0x13, 0xb, 0xb, 0x30, 0x5, 0x60, 0x48, 0x6, 0x4, 0xb, 0x4, 0x60, 0x6, 0x2, 0x16, 0x48, 0x9, 0x12, 0x60, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x5a, 0x18, 0x12, 0x30, 0xc, 0x6, 0x1, 0x0, 0x6c, 0x3f, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x40, 0x343, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x952, 0x3, 0x6, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd, 0xa, 0x7, 0x0, 0x8000, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0x0, 0xdb23, 0x8, 0x0, 0x27a, 0x7ff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x43c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x1b, 0x48, 0x48, 0xb, 0x4b, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x439, 0x8, 0x4, 0x0, 0x4, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x2, 0x8, 0x0, 0x8, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x9, 0x800, 0x401, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0xb2, 0x1, 0x0, 0x830, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2b0, 0x9, 0x3, 0x8, 0xffff, 0x696]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7120, 0x40, 0x4, 0x8000, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3}, {0x6, 0xa}, {0x1}, {0x1, 0x9}, {0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x8}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {}, {0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0xa}]}]}]}]}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040000) r9 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) 4m39.0518277s ago: executing program 33 (id=4282): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") unshare(0x18000380) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={&(0x7f0000000100), 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x4e8, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0xe0, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf38b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff6ad}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x7ab, 0x5, 0x80, 0x4, 0x4, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x2, 0x60, 0x0, 0x71, 0x6c, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x7, 0x3, 0x6, 0x1000, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x8, 0x36, 0x30, 0x1b, 0x3, 0x30, 0x30, 0x12, 0x48, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xeb2c, 0xffff, 0x1ff, 0x2, 0xff82, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x18, 0x36, 0x6, 0x13, 0xb, 0xb, 0x30, 0x5, 0x60, 0x48, 0x6, 0x4, 0xb, 0x4, 0x60, 0x6, 0x2, 0x16, 0x48, 0x9, 0x12, 0x60, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x5a, 0x18, 0x12, 0x30, 0xc, 0x6, 0x1, 0x0, 0x6c, 0x3f, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x40, 0x343, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x952, 0x3, 0x6, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd, 0xa, 0x7, 0x0, 0x8000, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0x0, 0xdb23, 0x8, 0x0, 0x27a, 0x7ff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x43c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x1b, 0x48, 0x48, 0xb, 0x4b, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x439, 0x8, 0x4, 0x0, 0x4, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x2, 0x8, 0x0, 0x8, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x9, 0x800, 0x401, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0xb2, 0x1, 0x0, 0x830, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2b0, 0x9, 0x3, 0x8, 0xffff, 0x696]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7120, 0x40, 0x4, 0x8000, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3}, {0x6, 0xa}, {0x1}, {0x1, 0x9}, {0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x8}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {}, {0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0xa}]}]}]}]}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040000) r9 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) 24.987888177s ago: executing program 3 (id=6172): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = io_uring_setup(0xbfa, &(0x7f0000000000)={0x0, 0xdc15, 0x40, 0x2, 0x2b4}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x25, &(0x7f0000000d40)="01", 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setresuid(0xee00, 0xee01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, r4, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6004804}, 0x80) setreuid(0xee00, 0x0) getpeername$packet(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0), 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023892) fchdir(0xffffffffffffffff) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="03032abd5d3e22efc63833"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8840) 24.982246987s ago: executing program 3 (id=6174): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000009000000000000000800000081117c000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r2, 0x40086e81, &(0x7f0000000100)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) unshare(0x4000400) perf_event_open(&(0x7f00000005c0)={0x4, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r4, 0x0, 0x94, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001340)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x3, 0x7, 0x6, 0x1}, 0x3, 0x1}, [{0xab8, 0x3, 0x3, 0x1ff, 0x2, 0x4}, {0x3, 0xff, 0x2, 0x401, 0x8, 0xe9d}, {0x3, 0x5, 0x6, 0xe5, 0xffffff0d, 0x6}, {0x0, 0x7, 0x10000, 0x9, 0x3, 0x1c000}, {0x9, 0x86, 0x3000000, 0x4, 0xd, 0xff}, {0x62b1, 0x1, 0x7f, 0xc, 0x101, 0xfffffffb}, {0x1, 0x6, 0xfffffffb, 0x4, 0x2, 0x2}, {0x0, 0x2, 0xd, 0x6, 0x2, 0x3}, {0x9, 0xfffffff8, 0x3, 0x4233, 0x3, 0x8}, {0x7, 0x7fff, 0x0, 0x80000001, 0x387, 0x7}, {0x0, 0x8, 0x7, 0x8, 0x4, 0xfffffff7}, {0x5, 0x4, 0x9, 0x9, 0x1000, 0xffff}, {0x7, 0xd8, 0x6, 0x0, 0x4, 0xacd1}, {0x7, 0x0, 0x2, 0x1, 0x200, 0x2c378a9f}, {0xffff, 0x7, 0x4, 0x6, 0xc0000000, 0x1}, {0x7fffffff, 0xad, 0x0, 0x4, 0x2}, {0x6, 0xfe, 0x8, 0x9, 0x9, 0x401}, {0x3, 0x4, 0x8, 0x40, 0x8}, {0x8, 0x8f, 0x8001, 0xc2e, 0xf52f, 0xffff3b50}, {0xffffff00, 0xffffffff, 0x8, 0x9, 0xff, 0xb1}, {0x8, 0x18000000, 0x2a, 0xc6f, 0x7, 0x6}, {0x0, 0x7, 0x7b, 0x4, 0x9, 0x8d}, {0x200, 0x1, 0x7, 0x1, 0x6, 0xfffffffa}, {0x0, 0x44, 0x6, 0x0, 0x9, 0x2}, {0xfffffff8, 0x8, 0x4, 0x3, 0x5, 0x7d}, {0x3ff, 0xffff091e, 0x8925, 0x33e8, 0x3, 0x4}, {0x7, 0xd1, 0x8, 0x1, 0xe, 0xcc}, {0x200, 0x1, 0x84e, 0x4, 0x3e6, 0x9}, {0x6, 0xeb09, 0x2a082b7e, 0x1, 0x9, 0x7}, {0x10000, 0xb8, 0x3, 0x9, 0x9, 0xe9d}, {0x3, 0x3, 0x6, 0x0, 0x3, 0x8333}, {0x8000, 0x2539, 0x5, 0x6, 0x4, 0x3}, {0x5, 0x2, 0x2, 0x1, 0x4, 0xc}, {0x5, 0x4, 0xffffffd0, 0x4, 0x12000000, 0x4}, {0x1812, 0x8, 0x9c, 0x2, 0xf, 0x101}, {0xffffff71, 0x9c7e, 0x0, 0x7, 0xa17a, 0xde}, {0x9, 0x3, 0xa3b, 0x7fff, 0x5, 0xffffff08}, {0x0, 0x7, 0x0, 0x7, 0x3ff}, {0xb47, 0x7, 0x9, 0x86f7, 0x9, 0x4}, {0x3, 0x7, 0x2, 0xe3, 0x7, 0x4}, {0xffffffff, 0x6, 0x1, 0x35d, 0x29200000, 0x6}, {0x0, 0xf11, 0x5, 0x6, 0x4, 0x3}, {0x4, 0x100, 0x0, 0x79f, 0xfffff1c8, 0x70}, {0x0, 0x400, 0x7, 0x9, 0x4, 0x10000}, {0x5, 0x1, 0x5, 0x9, 0x8000, 0xad934800}, {0x4b, 0xf2, 0x7, 0xe563, 0x4, 0x7}, {0x5, 0x6, 0x7fff, 0x9, 0x365, 0x2}, {0x5, 0x5, 0x2, 0x3, 0x43, 0x1}, {0x2, 0x6, 0x80, 0x3, 0x7fff, 0x7}, {0x3, 0xd734, 0xfffffff7, 0x9, 0x40, 0xf}, {0x5, 0x800, 0xb03c, 0xf, 0x8, 0x8}, {0x6, 0x2, 0x1, 0x8, 0x6, 0xa4}, {0x1, 0x4, 0x6, 0x4, 0x8001, 0x1}, {0x6, 0x40, 0xe4, 0x5e, 0x6, 0x754}, {0x2, 0x5, 0x8, 0x4, 0x0, 0xfffffffb}, {0xdb3, 0x9, 0x2, 0x5, 0xb, 0xff}, {0x9, 0xffffffff, 0xd7, 0x2, 0xfd5, 0xfbd}, {0x200, 0x8, 0x10000, 0x24, 0x101, 0x3}, {0x2000000, 0x7e99, 0x5, 0x7ff, 0x0, 0x6}, {0x100, 0x0, 0xa0, 0x8, 0x0, 0x7}, {0x3, 0x2, 0x5, 0x7, 0x10, 0x9}, {0x7, 0x9, 0x265d, 0x7, 0x3, 0x4}, {0x6, 0x1000, 0x6, 0x1, 0x5, 0x6}, {0x80, 0x7, 0x4, 0x9, 0xc2, 0x2}, {0x9, 0x1, 0x4, 0x80000000, 0xfffff238, 0xffff7c49}, {0xc, 0x10001, 0x6, 0x1000002, 0xfffff5a6, 0x8}, {0x8001, 0x81, 0x7, 0x6, 0x4, 0x4}, {0x2, 0x2, 0x39a3, 0x7, 0x5, 0x9}, {0xfffffff9, 0x5, 0x0, 0x1a, 0x200, 0x4}, {0x1, 0x9, 0xb0, 0x7, 0x400, 0x2}, {0x4, 0x7, 0x40, 0x905, 0x5, 0x4}, {0x61, 0x0, 0x4, 0x9, 0x2, 0x6}, {0xd0, 0x1, 0x2, 0x4, 0x9, 0x3}, {0x6, 0x80000000, 0xfff, 0x0, 0x43cd, 0x138a2e31}, {0x26, 0x3, 0x5, 0xd01, 0x9, 0xe7}, {0x7, 0x2, 0xed0e, 0x6, 0x2000, 0x800}, {0x400, 0xff, 0x1a6d, 0x64, 0x2, 0x7}, {0x239, 0x71, 0x5, 0x8, 0x9, 0x3}, {0x101, 0xfffffff8, 0xf4, 0x5, 0xe, 0x1000}, {0xfffffff8, 0x1000, 0x0, 0xff, 0x2, 0xfffffffa}, {0x80000000, 0x10000, 0x1, 0xe51e, 0x8, 0xfffffffd}, {0x0, 0x1, 0x1, 0x29, 0x5, 0x200}, {0x3, 0x400, 0x0, 0x3, 0x9, 0x7f}, {0x3, 0x0, 0x0, 0x9, 0x9, 0x4}, {0x10, 0x0, 0x7, 0x2, 0x8, 0x4}, {0x3, 0x40, 0x7fff, 0x46, 0x5, 0x7ea}, {0x5, 0x86d6, 0x3, 0xf, 0x401, 0x3ff}, {0x7, 0x0, 0x8, 0x1000, 0x3, 0x9}, {0x8, 0x9, 0x155a, 0x4, 0x3, 0x5}, {0x2, 0x7, 0x9, 0xffffffff, 0x6bd, 0x800}, {0x3d13, 0x5, 0x118, 0xfff, 0xff, 0x1}, {0x28, 0x4, 0x0, 0x7, 0x7, 0xad}, {0x8, 0x0, 0x5, 0x0, 0x8, 0x800}, {0x1, 0x400, 0x7, 0x4, 0x1, 0x8}, {0xfffffd18, 0x9, 0x401, 0x4, 0x4, 0x14}, {0x800, 0xa8f, 0x2, 0xfff, 0x2, 0x3}, {0x3, 0xff, 0x2, 0x7, 0xfffffffa, 0x9}, {0x401, 0x0, 0x5, 0x4, 0x7ff, 0x10000001}, {0x4, 0xffff8001, 0x3, 0x9, 0x3, 0xb}, {0x1, 0x1, 0x3bbb, 0x0, 0x9, 0x83}, {0x8, 0x2, 0x6, 0x8001, 0x40, 0x5}, {0x5, 0x7, 0x1000, 0x8, 0x3, 0x7}, {0x40000000, 0x1, 0x2, 0x4, 0x7, 0x4}, {0x7fffffff, 0x3, 0xfffffffc, 0x3, 0x0, 0xe}, {0x3, 0x515, 0x1, 0x23b2, 0xf0, 0x9}, {0x17, 0xfffffffb, 0x10000, 0x1ff, 0x10, 0x8000}, {0x8e, 0x8, 0xcc, 0x0, 0x7, 0x4}, {0x2, 0x6, 0xbbe, 0x9, 0xffff7fff, 0x8000}, {0x9, 0xfffffff0, 0x0, 0x7f, 0x3444bb35}, {0x9, 0x1ff, 0x3, 0x4544, 0x1, 0x1}, {0x385, 0x5, 0x9, 0xefffffff, 0x1000, 0x6}, {0xccef, 0x6, 0x8, 0x8001, 0x4}, {0x180000, 0x8ae1, 0x7, 0x6, 0xff, 0xfff}, {0x400, 0x1, 0x400, 0xc, 0x1, 0x8}, {0x30, 0x6, 0xfffffffa, 0x400, 0x401, 0xbd65}, {0x1, 0x0, 0xd031, 0x4, 0x6, 0x1000}, {0x8b, 0x10000, 0x0, 0x2, 0x8, 0x9}, {0x5, 0xfffffff9, 0xd, 0x10, 0x37e8, 0x4}, {0xffff5bb1, 0x36ec, 0x7d, 0x8, 0x2, 0x7fff}, {0x7, 0x1, 0x5, 0x4, 0x3, 0x1}, {0x80, 0x2, 0x7, 0x6, 0x5, 0x81}, {0x2, 0x3, 0x8, 0x4, 0x1, 0x1000}, {0x10000, 0x3ff, 0x4, 0x101, 0xfff, 0xc5}, {0x10001, 0x7, 0x10000, 0x8, 0x8d4, 0x2618}, {0x6, 0x2, 0x0, 0x7f, 0x8, 0x1}, {0xd3a1, 0x9, 0x7, 0x80000000, 0x8, 0x80000000}, {0x9, 0x200, 0xdfca, 0x5, 0x94d, 0xa}, {0x35f, 0xaa, 0x9, 0x40, 0x66c, 0x9}], [{0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0xbf717c5836561369}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x78c0603c8fa1a1b4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x7a479a5d4662f5b3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x6}, {0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) ioctl$FIONCLEX(r7, 0x5450) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010140009800800014000000003080001400100600014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008801}, 0x24000034) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x80000000}, 0x8) 24.055713806s ago: executing program 3 (id=6178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd00}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ffffff}, {0x3, 0x3, 0x3, 0xa, 0x6}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x2}, {0x7, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x7}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.61477722s ago: executing program 3 (id=6192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1, 0x801) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x4, 0x8, 0x0, 0xd, 0x2b, 0x4, &(0x7f00000001c0)="b1093cab36a42a5f5345a3dc790299b2d168d9bdc7e58118025e69a23e72ced2febb611e0bf558a92e8cba"}) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x4, 0x8, 0x0, 0xd, 0x2b, 0x4, &(0x7f00000001c0)="b1093cab36a42a5f5345a3dc790299b2d168d9bdc7e58118025e69a23e72ced2febb611e0bf558a92e8cba"}) write$selinux_access(0xffffffffffffffff, &(0x7f0000000080)={'system_u:object_r:setrans_exec_t:s0', 0x20, 'unconfined', 0x20, 0x6}, 0x44) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) (async) lsetxattr$security_selinux(&(0x7f00000012c0)='.\x00', &(0x7f0000001280), &(0x7f0000001240)='system_u:object_r:fsadm_exec_t:s0\x00', 0x15, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x5, 0x7ff, 0xadb, 0x50683, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x2}, 0x50) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) ioctl$INOTIFY_IOC_SETNEXTWD(r10, 0x40106614, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x1c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0xb, 0x1, 0x6, 0x8, 0x10001}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x6d, 0xa, 0x2, 0x0, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x3, 0x75, &(0x7f0000000680)=""/117, 0x41000, 0x6b, '\x00', r4, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r7, r8, r9, r10], &(0x7f0000000900)=[{0x3, 0x4, 0x3, 0x3}, {0x0, 0x1, 0x7, 0x9}, {0x5, 0x1, 0x9, 0x6}]}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800) timer_create(0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0x2d, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000390003e4fae58c613b342900cbc856c07b7b790b8183dff1e0d1f60cc8ff93e1f47346a4602de68c", @ANYRES32=0x0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 21.97124836s ago: executing program 3 (id=6200): socket$kcm(0x11, 0x2, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @auto=[0x33, 0x39, 0x62, 0x64, 0x39, 0x64, 0x33, 0x32, 0x35, 0x64, 0x63, 0x31, 0x61, 0x39, 0x34, 0x30]}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r0, 0xa018) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@empty, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @private=0xa010102, @empty}, {0x0, 0xfffe, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="0100", 0x2}], 0x1}, 0x240408c1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @loopback, @loopback, [], "9d0bc89d05100000"}}}}}}}, 0x0) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000040) r5 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0xffe, 0x20da, 0x0, 0xa, 0x120005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r7, 0x0) 21.878996463s ago: executing program 3 (id=6202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2d, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x400004db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="18"], 0x1e0}}], 0x2, 0x2004c040) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) close_range(r2, 0xffffffffffffffff, 0x2) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) fallocate(r2, 0x10, 0x6, 0x8010001) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/61) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000000)={'pim6reg\x00', 0x800}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x26, 0x7, 0x5, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x20, 0x40, 0x9, 0x80}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2d, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x400004db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="18"], 0x1e0}}], 0x2, 0x2004c040) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) (async) close_range(r2, 0xffffffffffffffff, 0x2) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) (async) fallocate(r2, 0x10, 0x6, 0x8010001) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/61) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) (async) ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000000)={'pim6reg\x00', 0x800}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x26, 0x7, 0x5, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x20, 0x40, 0x9, 0x80}}) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) 21.831393424s ago: executing program 34 (id=6202): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2d, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x400004db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="18"], 0x1e0}}], 0x2, 0x2004c040) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) close_range(r2, 0xffffffffffffffff, 0x2) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) fallocate(r2, 0x10, 0x6, 0x8010001) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/61) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000000)={'pim6reg\x00', 0x800}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x26, 0x7, 0x5, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x20, 0x40, 0x9, 0x80}}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x2d, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x400004db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="18"], 0x1e0}}], 0x2, 0x2004c040) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) (async) close_range(r2, 0xffffffffffffffff, 0x2) (async) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f00000001c0)=0x14) (async) fallocate(r2, 0x10, 0x6, 0x8010001) (async) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000100)=""/61) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) (async) ioctl$TUNSETIFF(r3, 0x5452, &(0x7f0000000000)={'pim6reg\x00', 0x800}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x26, 0x7, 0x5, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x20, 0x40, 0x9, 0x80}}) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) (async) 7.13030781s ago: executing program 2 (id=6348): r0 = socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3b, &(0x7f0000000100), 0x5042) 7.027140183s ago: executing program 2 (id=6349): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sync() 6.825050199s ago: executing program 2 (id=6351): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) dup3(r1, r0, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000830800000400000000080000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001000000030000001a010000b8f3e9959b2f4284d79d618992ccd6aef1759d3c8e87c93039370db6a50704f492ee85b1fb4de7f5464ceef6b185920881452f280dc3ca09e440a9cf645df079"], 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x4090) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x2c, 0xa, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) msgget$private(0x0, 0xf) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x89}, {0x40, 0x1, 0x0, 0x101}, {0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d4, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0xfffffffc}}, 0xe8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0xc, @ipv4={'\x00', '\xff\xff', @empty}, 0xc6e}, 0x1c) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {0x0, r5}}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) open(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f00000002c0)={0x8}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 6.748972951s ago: executing program 2 (id=6353): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) getdents(r1, &(0x7f00000001c0)=""/147, 0x93) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x2001) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3d) r7 = fcntl$dupfd(r6, 0x0, r6) readv(r7, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) remap_file_pages(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x2, 0x800) (fail_nth: 1) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r9, 0x0, 0x0, 0x120, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @mcast1, 0x8}, 0x1c) 6.551856018s ago: executing program 2 (id=6354): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60000600) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r1, 0x7040, 0x6) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6.030554464s ago: executing program 2 (id=6358): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) getdents(r1, &(0x7f00000001c0)=""/147, 0x93) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, 0x0) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r3, 0x0}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x2001) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3d) r7 = fcntl$dupfd(r6, 0x0, r6) readv(r7, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) remap_file_pages(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x2, 0x800) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvfrom$inet6(r9, 0x0, 0x0, 0x120, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @mcast1, 0x8}, 0x1c) 3.5709985s ago: executing program 1 (id=6370): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x2, 0x9, 0xffffff00, 0x80000000, 0x9, "92f600190c00000000000093da2480b304eb4b", 0x2, 0x1c680}) syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x58, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, r2, 0xa) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@getae={0x4c, 0x1f, 0x1, 0x70bd26, 0x25dfdbfd, {{@in=@rand_addr=0x64010101, 0x4d6, 0x2, 0xb9}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x1, 0x3502}, [@mark={0xc, 0x15, {0x35075d, 0x45e9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0x6883, 0x7, 0x1) (fail_nth: 4) get_mempolicy(0x0, 0x0, 0x9b, &(0x7f0000ffc000/0x1000)=nil, 0x3) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) 3.340794217s ago: executing program 5 (id=6373): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r1 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xff, 0x78, 0xa0, 0x23e, 0x2, 0x3e, 0xd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x0, 0xd, 0x6b4, 0x400}}, 0x40) r2 = socket(0x5, 0x3, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async, rerun: 64) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (rerun: 64) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000000}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x300) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3.23937179s ago: executing program 1 (id=6374): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sync() 3.180095532s ago: executing program 1 (id=6375): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gadgetfs\x06', &(0x7f0000000200)='({^)\x18\x00', 0x0) 3.152542043s ago: executing program 7 (id=6376): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) open(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000002c0)={0x8}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a182"], 0x50}}, 0x0) 3.099700235s ago: executing program 1 (id=6377): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000100000004"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x548, &(0x7f0000001300)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) keyctl$invalidate(0x15, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r3) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @private1}]}, 0x38}}, 0x20000000) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xac}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) listen(r7, 0x2) r8 = gettid() socketpair(0xf, 0x80000, 0xffffff01, &(0x7f00000000c0)) process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/245, 0xf5}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) 3.066118956s ago: executing program 7 (id=6378): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x200002, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xee00, 0xee01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xd, 0xc}, {0x5, 0xe}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x4, 0x7, 0x45, 0x10, 0xff, 0x1d, 0x9, 0x8, 0xc, 0x5, 0xf, 0xd, 0x2, 0x6, 0xc, 0xd], 0x1, [0x200, 0xc, 0x101, 0x7, 0x486, 0x40, 0x8, 0x5, 0x8, 0x2a, 0x9, 0x134e, 0xfffc, 0x6, 0x8, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xc5d4, 0x3, 0x3, 0x48aa, 0xffff, 0x7, 0x5, 0x4, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0xc00, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 2.891663251s ago: executing program 7 (id=6380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x3, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f5, &(0x7f0000000000)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, {0xf, 0x10}, {0x1, 0xfff1}, {0xffe0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x3204c8a0}, 0x840) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="09000000050000000202000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@generic={&(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x18}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0xffff, 0xc80, 0x800, 0xa, 0xf, 0xffffffffffffffff}) sched_setscheduler(r7, 0x0, &(0x7f0000000480)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000540)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r5, @ANYBLOB="2300c0a606de693e80e2ec615b45c0ecae1f61851a98b7270f85c76ff50693138b1648b24db67bc33907d28c144157ffbe2434da96d3", @ANYRESHEX=r2, @ANYRES16=0x0, @ANYRESOCT=r8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa9, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r12, 0x4b48, 0x0) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000080906030000ddffffffffffff040006000580010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.891011091s ago: executing program 6 (id=6381): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x60000600) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r1, 0x7040, 0x6) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x4e, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 2.821246613s ago: executing program 5 (id=6382): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2.789566214s ago: executing program 5 (id=6383): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") unshare(0x18000380) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={&(0x7f0000000100), 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x31c, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2fc, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x2}, {0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x9}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa8cd, 0x0, 0x4, 0x4, 0x6, 0x100, 0x35a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x9, 0x2, 0x0, 0x200, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf0dc, 0x9, 0x7, 0x9, 0x4, 0x7fff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0xb, 0x4, 0x1, 0x16, 0x48, 0x29, 0x3, 0x6, 0x9, 0x48, 0x6, 0xc, 0x18, 0x1, 0x18, 0x1, 0x4, 0x9, 0x24, 0xb, 0x1b, 0x2, 0x24, 0x4, 0x6, 0x1, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xda8, 0x8, 0x80, 0xfff, 0x9, 0x84, 0x884f, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x9, 0x5, 0x8000, 0xd, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x1, 0x16, 0x6, 0x1, 0x12, 0x60, 0x2, 0x7e, 0x24]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x5, 0x0, 0x4, 0x2, 0xa187]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x5, 0x4, 0x12, 0x9, 0x30, 0x18, 0x24, 0x36, 0x36, 0x36, 0x39, 0x16, 0x6c, 0x1b, 0x36, 0x0, 0xc, 0x6, 0x1d, 0x2, 0x2, 0x0, 0xb, 0x3a, 0x1, 0x3, 0x2, 0x1, 0x3, 0x36, 0x1]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x3}, {0x5, 0x4}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x12, 0x4, 0xc, 0x60, 0x16, 0x12, 0x9, 0x48, 0x16, 0x16, 0xa, 0x16, 0xc, 0x12, 0xc, 0x24, 0x1b, 0x24, 0x6, 0x60, 0x4, 0x6c, 0x1, 0x1, 0xc, 0x1, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x48, 0x18, 0xb, 0x36, 0x60, 0x30, 0x5, 0xf, 0x5, 0x6, 0x8f, 0x0, 0x6, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x1, 0x80, 0x8001, 0xc24, 0x5, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xe, 0x0, 0xb4, 0x1, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x4}, {0x4}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x31c}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040000) r8 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r8, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) 2.485791683s ago: executing program 5 (id=6384): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x7, 0x5, 0x0, 0xf, 0x10, 0x4a, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2.339890808s ago: executing program 7 (id=6385): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sync() 2.246892071s ago: executing program 7 (id=6386): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x24000000000, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x42}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000180)="ce010c4aa321b67bc7f67a42da27eefd212290941c1821b84a90ae6bfd6950", 0x1}, {&(0x7f0000000140)="f2", 0xfecc}, {&(0x7f0000002e40)="d4", 0xfffffeee}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4040084) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.087739056s ago: executing program 5 (id=6387): r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) open(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_config_ext={0x4b, 0x4168}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r1, 0x43403d05, &(0x7f00000002c0)={0x8}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a182"], 0x50}}, 0x0) 2.039978128s ago: executing program 6 (id=6388): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400000ff, 0x0, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x40000, 0x0, 0x2, 0x0, 0x3fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x2000000, 0xfffffffffffffff8) 1.97087847s ago: executing program 5 (id=6389): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x4, 0xaea}, 0x10005, 0x3, 0xfffffbff, 0x3, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x2}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xee01, 0xee01) keyctl$setperm(0x5, r1, 0x4183208) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8e, 0x80000000000000}, 0x106200, 0x10004, 0x30da, 0x6, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ecff80", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x4e22, 0x48, 0x0, @wg=@cookie={0x4, 0x0, "7d91b3ccaf4c63521df8f969a9a3ef8377d86e2c440fb055", "8fc99fa615e832d5f00ce4a5807ebb53fbfc8fbe4761a7cfe44dcf957dbdc946"}}}}}}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xfff1, 0xf}, {}, {0xc, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x44, 0x2, [@TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x30000005, 0xbf0a, 0x4, 0x4, {0x9, 0x1, 0x5, 0x10, 0x3, 0x8}, {0x4f, 0x1, 0x401, 0xfffa, 0x4, 0x32c}, 0x0, 0x5, 0x6}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0xc, 0x28, 0xfa}) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300800c, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xec776000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x82) lsetxattr(&(0x7f0000000180)='./file2\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', &(0x7f0000000300)='\'.\x00', 0x3, 0x1) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00'}) 1.96593263s ago: executing program 6 (id=6390): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0x2, 0x9, 0xffffff00, 0x80000000, 0x9, "92f600190c00000000000093da2480b304eb4b", 0x2, 0x1c680}) r1 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x581d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81}, 0x0, 0xe, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) r4 = socket(0x10, 0x803, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000967000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r5, 0x74721000) pipe2(&(0x7f0000000100), 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001400b59500000000000002000a402200", @ANYRES32=r7, @ANYBLOB="1400020010000000ffff00000000"], 0x2c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff0000000008000900aa976635"], 0x34}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x58, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, r3, 0xa) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r9) symlinkat(&(0x7f0000000280)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c038e34", @ANYRES16=r10, @ANYBLOB="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"], 0x36c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) 1.200448283s ago: executing program 1 (id=6391): r0 = getpgid(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x80c42, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, 0x0) close(0xffffffffffffffff) listns(&(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0) timerfd_create(0x7, 0x80000) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f0000000080), 0x10100) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@mcast2, 0x52, r2}) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") perf_event_open(0x0, r0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @private=0xa010103}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000003c0)={0x8, {{0x2, 0x4e21, @multicast2}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e25, @empty}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2b0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0xa81eb313d007ac2b, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x20, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 955.402081ms ago: executing program 6 (id=6392): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf, 0x85480, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106010, 0x10004, 0xd7d, 0x5, 0xa, 0xe9, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@private}}, &(0x7f00000004c0)=0xe8) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, r3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000740)=0xe8) stat(&(0x7f0000008ac0)='./file0\x00', &(0x7f0000008b00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee01, 0x0, r5) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000017c0)={0x0, 0x48, &(0x7f0000001740)=[@in6={0xa, 0x4e23, 0x3, @empty}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x9, @remote, 0x3}]}, &(0x7f0000001800)=0x10) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x74}}, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r11 = getpid() sched_setscheduler(r11, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) stat(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r12, &(0x7f0000007500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=r13, @ANYRES32=r11, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r12, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r9, @ANYRES32=0x0, @ANYBLOB], 0xb8, 0x24}}, {{0x0, 0x0, &(0x7f0000006100)=[{&(0x7f0000003dc0)="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", 0xf7f}, {&(0x7f0000004dc0)="11342766a329bc26e49117a6d5578631a622dcd97eb6ab98f06d20a73238c53e6b9d3426f223975d04067962e70f9b885bca2cf3589c0d08ebe7d7356f97dea410e09eaed9201d3d3e8a11d4adde694c9136a985a002299ce66c1415", 0x5c}, {0x0}, {&(0x7f0000005e40)="382224e85b8987a175e27274420b0fb553590f37442fd3ff5c2e1fdc5cc72c356e4237995ef1d90bea1aa38c6e8c9da8b44cd8329e4d96b44e4f0890f36d5d6d394b4581e44572c3baef86b3061fa2848c357fe36594ff0e01559ba273d254e94e1aec14a1b35c3c346094972cb89867412a5c82c6d46b9b41b1a95f2c", 0x7d}, {0x0}, {&(0x7f0000005f80)="ce9ced968c61a226fda7f4f1724fd252e236547c0aca56b6e4a3b5318579f77e4ad8e0c8a9adbeba41df", 0x2a}, {&(0x7f00000001c0)}, {&(0x7f0000006080)="5af3f2340c079cb5cb7089a03cb22106e462", 0x12}, {&(0x7f00000060c0)="c89fdcc89fea", 0x6}], 0x9, 0x0, 0xd8, 0x4014}}], 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r15 = getgid() statx(0xffffffffffffffff, &(0x7f00000008c0)='./file0\x00', 0x2000, 0x10, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000001840)=ANY=[@ANYBLOB="020000000100010000000002000500cee7de769c0a175076a09f9940eeb11aef64b81fe2ec01a3ad3196e89b03236ba6fbb65e0e9e21025159488575e630dadd2497ff39ac9ebbef034c4d70825fe5271d94f08b5005de982aabfa99cbf3ab34bca78635709a89f933250f62e28b0000000000000000867067148138e547", @ANYRES32=r0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="040002000000000008000700", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB="08000200", @ANYRES32=r15, @ANYBLOB="08000600", @ANYRES32=r16, @ANYBLOB="10000000000000002000010000000000"], 0x7c, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x80036, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x4010, 0x2, 0x0, 0x3, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r17 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r17, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0xc10, 0x948, 0x168, 0x10, 0x948, 0xb, 0xb40, 0x250, 0x250, 0xb40, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x8e0, 0x948, 0x0, {0x0, 0x28e}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10000, 0x3}, {0x412, 0x1}, {0xe, 0x3}, {0x7fff}, {0x3, 0x2}, {0x7, 0x2}, {0x9, 0x1}, {0x8, 0x1}, {0x6021, 0x3}, {0x2, 0x464ed55f53542fa}, {0x3, 0x3}], [{0xff, 0x1}, {0x6, 0x6}, {0x41d, 0x4}, {0x758, 0x7fff}, {0x4, 0x5}, {0x6}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x8000}, {0xfffffffe, 0x1b}], 0x6, 0x9}, {[{0x7, 0x3}, {0x60923fda, 0x1}, {0x7779}, {0x7fffffff}, {0x8, 0x2}, {0x7, 0x3}, {0x6}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0xfff, 0x2}], [{0xffffff5e, 0x5}, {0x10, 0xc}, {0x662eafc6, 0xa698}, {0x8c5, 0x4d}, {0xb1, 0x29dd}, {0x1, 0x1}, {0x80, 0xffff74c0}, {0xcbc}, {0x7, 0x9}, {0x7}, {0x1, 0x8}], 0x2, 0x2}, {[{0x10}, {0x3}, {0xf855, 0x1}, {0xdf, 0x2}, {0x9, 0x1}, {0x8, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x3, 0x2}, {0x7, 0x2}, {0x9, 0x3}], [{0x670, 0x5}, {0x5, 0x20000001}, {0x5, 0xfffffe8b}, {0xffffffb1, 0xa7c}, {0xfff, 0x400}, {0x2}, {0x401, 0xd}, {0xd, 0x2}, {0x3, 0x6}, {0x4, 0x57b7}, {0x1, 0x1}], 0xb, 0x5}, {[{0x7}, {0x52b, 0x1}, {0x2, 0x2}, {0xffff6f44}, {0x27b42d8d}, {0x6, 0x1}, {0xb6e, 0x1}, {0x0, 0x2}, {0x40000000, 0x1}, {0x1, 0x1}, {0x8, 0x3}], [{0x4, 0x80000000}, {0x0, 0x2e8}, {0xb, 0x101}, {0x8, 0xffffffff}, {0x6, 0xa3ed}, {0x6b, 0x100}, {0x3, 0x3}, {0xfffffffc, 0x401}, {0x7, 0x7}, {0x8}, {0x9, 0x1}], 0x6, 0x5}, {[{0x8, 0x1}, {0xc8, 0x2}, {0x590, 0x2}, {0x7, 0x2}, {0xb04, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x1, 0x1}, {0x8, 0x2}, {0x40}, {0x10, 0x3}], [{0x0, 0x3}, {0x9, 0x4}, {0x62, 0x8}, {0x2, 0x401}, {0x3, 0x4}, {0x382}, {0x2, 0x2}, {0x776, 0x4d46}, {0x9, 0xfffff800}, {0xfffffffe, 0x5}, {0x7, 0xbd}], 0x1, 0x2}, {[{0x10, 0x3}, {0x7fffffff, 0x2}, {0x0, 0x3}, {0xd, 0x2}, {0x81}, {0xe39}, {0x5}, {0x8d, 0x1}, {0x1, 0x2}, {0x80000003, 0x1}, {0x4, 0x2}], [{0xffff, 0x7}, {0x3, 0x3}, {0x9, 0x1}, {0x4, 0x3}, {0x5, 0x3}, {0x9, 0x10000}, {0x8, 0x6}, {0x1000, 0x5}, {0x6, 0xff}, {0xffffffff}, {0x6, 0x8}], 0x9, 0x4}, {[{0x3, 0x2}, {0xf58, 0x1}, {0x2, 0x2}, {0x401, 0x3}, {0x8}, {0xfffffff9, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x1}], [{0x7f, 0x80000000}, {0x2, 0xd}, {0xa}, {0x8, 0x4}, {0x2, 0xfffffff7}, {0x2, 0x1}, {0x6, 0x9}, {0x6, 0x1}, {0xfffffffe, 0xd}, {0xf, 0xffffffff}, {0x8, 0x40000}], 0x9, 0x7}, {[{0x101, 0x3}, {0x10, 0x3}, {0x9, 0x1}, {0x7f}, {0x9, 0x1}, {0xffffffff}, {0x6, 0x2}, {0x1, 0x3}, {0xb, 0x2}, {0x8, 0x2}, {0x30000000}], [{0x40, 0xfffffe32}, {0x3, 0x1}, {0x7, 0x805a}, {0x7, 0x8}, {0x9, 0x80000000}, {0x800, 0xfffffffa}, {0xb, 0xc}, {0x9f89, 0x6}, {0x5, 0x8}, {0x80, 0x1}, {0x7, 0x55dd844b}], 0x5, 0x9}, {[{0xa, 0x2}, {0x5, 0x2}, {0x8, 0x2}, {0x8, 0x1}, {0x401}, {0xa5, 0x3}, {0x6}, {0x7}, {0x7, 0x3}, {0x7, 0x1}, {0x2cd1, 0x2}], [{0x3}, {0x9}, {0xfffffff0, 0x7}, {0x0, 0x1}, {0x3, 0x9}, {0x6, 0xd2b}, {0x2, 0x6}, {0xe39, 0x8000}, {0x5b}, {0x800, 0x8}, {0x5, 0x1}], 0x1, 0xa}, {[{0xe, 0x1}, {0xffffff80, 0x3}, {}, {0x4, 0x2}, {0x6, 0x3}, {0x40, 0x1}, {0x6, 0x1}, {0x7fff, 0x1}, {0x16a, 0x1}, {0x5, 0x3}, {0x4}], [{0x3, 0x2}, {0xbc6f3d9b, 0x828}, {0x8000, 0x8}, {0x5, 0x2}, {0x0, 0x45d0}, {0x8, 0x9}, {0x5, 0x31}, {0x1, 0x670f}, {0xdc03, 0x3}, {0x100, 0x9}, {0xfffffffc, 0xff0}], 0x8, 0xfe}, {[{0x7fff}, {0x9}, {0x0, 0x1}, {0x6, 0x3}, {0x4, 0x3}, {0xffff}, {0x9}, {0x1}, {0x367d, 0x3}, {0x3, 0x2}, {0x0, 0x1}], [{0x59000000, 0x8}, {0x1, 0x9}, {0x7fff8, 0x1b0d}, {0xfffff371, 0x4}, {0x8, 0x2}, {0x7ff, 0x2}, {0x8, 0x7}, {0x44, 0xb}, {0x1, 0x6}, {0x400, 0x7}, {0x2, 0x5369}], 0xa, 0xa}], 0xff}}, @common=@inet=@hashlimit1={{0x58}, {'netdevsim0\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0x10000, 0x80000401, 0x80}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x4, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x1f8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xc70) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=G']) 552.878364ms ago: executing program 6 (id=6393): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) unshare(0x28020500) close(0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="fe2d3f13ba", 0x5}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048842}, 0x4000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYBLOB="0000000000000000b7080000061000007b8af8ff00000000bfa200000000000007020000f8ffffffdfc0000008000000b70400000080000000000000df8500000082000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000e30722875f9db989edacf6dfcd300000bc59252a201d6f2e08f447442d51735aa4d0c60f53"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000100000005000100070008000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000"], 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'dvmrp1\x00'}) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, &(0x7f0000000000)={0x4, 0x6, 0x1, 0x4}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file2\x00', 0x100041c, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYBLOB="c28b18c29967acada94bce98ed9d1f5ad98bc079eac4200fd47cc37d25baedc6118b2d101cb7755706918533588d3ad1395a36e057f990063f5532164c82a15f2bb2", @ANYRES8], 0x1, 0x800, &(0x7f0000001540)="$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") file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000001600)={0x2000, 0x1, 0x4, 0x269, 0x3}, 0x76, 0x1000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e20, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@loopback, 0x4e20, 0x10000, 0x2, 0x2}}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ptrace(0x10, 0x0) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x3, &(0x7f0000000ac0)='gid', 0x0, 0x0) setresuid(0x0, 0xee01, 0xffffffffffffffff) 304.119481ms ago: executing program 7 (id=6394): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$eJzs3d9rZFcdAPDvvckk2d3UmapILViLrewW3ZlNY9sgovVFnwpqfV9jMhvCzmSWzKRuQnGz+B+IoOCTT74I/gGC9ME/QAoFfREfREUR3dYHQeyVuXOHzc6PJNokk818PnAy55w7937PuUNO7r1zcm8AU+vZiHg1ImYi4oWIKBf1aZFiv5e673v3wZtr3ZRElr3+9ySSoq6/rbmImI2IK8VqCxHxja9GfDsZjtve3bu92mjUt4tyrdO8U2vv7l3fbK5u1DfqW8vLSy+vvLLy0sqNrPCB+lnpZ376lS/+8rPf+cPNv177brdZX/hYlGKgHyep1/VSvi/6uvto+zSCTcBM0Z/SpBsCAMCxdI/xPxwRn8qP/8sxkx/NDZiZRMsAAACAk5J9aTHLsnt5FgAAALiY0ohYjCStFnMBFiNN54prAx+Ny2mj1e585lZrZ2u9uyyiEqX01majfqOYK1yJUtItLxVzbPvlFwfKyxHxZET8oHwpL1fXWo31yV76AAAAgKlxZeD8/5/lNM8fbcT/CQAAAADnV2Wg4NQeAAAALp7KpBsAAAAAnLrB83/3+wcAAIAL5WuvvdZNWf/51+tv7O7cbr1xfb3evl1t7qxV11rbd6obrdZGfs++5lHba7Radz4XWzt3a516u1Nr7+7dbLZ2tjo3Nx95BDYAAABwhp785Fu/TSJi//OX8hTFfQABHvGnoZpLE2kHcCJM9YPp5VZfML1Kk24AMHHJEctN3gEAgMff1Y8Pf//ff/6/awNwsZnrAwDTx/f/ML1KZgDC1JotrgF8qFecH/e+sd////q4kbIs4u3ywRrXFwEA4Gwt5ilJq8V5wGKkabUa8UREWolScmuzUb9RnB/8plya75aX8jWTI+cMAwAAAAAAAAAAAAAAAAAAAAAAAAA9WZZEBgAAAFxoEelfkvxu/hFXy88vDl4fmEv+VY4/F4Ufv/7Du6udzvZSt/4f+bO85iKi86Oi/sWxjw8DAAAATlqyP3ZR7zy9eF0601YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAXeffDmWj+dZdy/fTkiKqPiz8ZC/roQpYi4/F4SswfWSyJi5gTi79+PiKdGxU/i/Sy7F0UrRsW/dELxL4/c/0l3t0RlTPw0Iq6cQHyYZm91x59XR/3+pfFs/jr692+2SB/U+PEvLSI/lY9zl9+bHxp/nhjaWnNkjKff+XmtlysNx78f8fTs6PGnP/4mY8a/54a29u8sy4bjf+ube3uDdffneq/ZTyKujhn/DsaqdZp3au3dveubzdWN+kZ9a3l56eWVV1ZeWrlRu7XZqBc/R/b/+5/4xfsjFxT9HzX+/v53vfH3sP4/P26jA/7zzt0HH+llhz6Abvxrz438+7sQY+Knxd++Txf57vKr/fx+L3/QMz97+5nD+r8+Zv8f9flfO2b/X/j69/54zLcCAGegvbt3e7XRqG8fklk4xnsex8yvFs5FM/7HTHav98mdl/b8v5nu0erDmn6vzkHDDmSy09jylYh4pGY+P54/7upzZ9T3iQ5LAADAKXh40D/plgAAAAAAAAAAAAAAAAAAAMD0evj///NxWrcTG4y5P5muAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//z9a2gA=") unshare(0x18000380) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x362, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x5}, 0x10c0e8, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x3000000, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0xfffffff6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x10002}], 0x3, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x0, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x40000000, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x0, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1324f499ce9a99e8}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0xfffff156}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x105080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000002100)={&(0x7f0000000100), 0xc, &(0x7f00000020c0)={&(0x7f0000001980)={0x724, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x31c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xea}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x18, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, {0x278, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x2}, {0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x7}, {0x4, 0x4}, {0x7, 0x9}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x7}, {0x1, 0x9}, {0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa8cd, 0x0, 0x4, 0x4, 0x6, 0x100, 0x35a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x9, 0x2, 0x0, 0x200, 0x3ff, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xf0dc, 0x9, 0x7, 0x9, 0x4, 0x7fff, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0xb, 0x4, 0x1, 0x16, 0x48, 0x29, 0x3, 0x6, 0x9, 0x48, 0x6, 0xc, 0x18, 0x1, 0x18, 0x1, 0x4, 0x9, 0x24, 0xb, 0x1b, 0x2, 0x24, 0x4, 0x6, 0x1, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xda8, 0x8, 0x80, 0xfff, 0x9, 0x84, 0x884f, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x4, 0x9, 0x5, 0x8000, 0xd, 0x3, 0x9]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x1, 0x16, 0x6, 0x1, 0x12, 0x60, 0x2, 0x7e, 0x24]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xffff, 0x5, 0x0, 0x4, 0x2, 0xa187]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x5, 0x4, 0x12, 0x9, 0x30, 0x18, 0x24, 0x36, 0x36, 0x36, 0x39, 0x16, 0x6c, 0x1b, 0x36, 0x0, 0xc, 0x6, 0x1d, 0x2, 0x2, 0x0, 0xb, 0x3a, 0x1, 0x3, 0x2, 0x1, 0x3, 0x36, 0x1]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x3}, {0x5, 0x4}, {0x3, 0x7}, {0x5, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x4}, {0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x3}, {0x3}, {0x5, 0x7}, {0x1, 0x1}, {0x5, 0x9}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x5}, {0x3, 0x6}, {0x6}, {0x7, 0x9}, {0x3, 0x9}, {0x4, 0x2}, {0x2, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x0, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x3, 0x2}, {0x1, 0x2}, {0x2, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x3, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x4}, {0x4}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x6}, {0x1, 0x6}, {0x7, 0x3}, {0x5, 0x7}, {0x6, 0x6}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x12, 0x4, 0xc, 0x60, 0x16, 0x12, 0x9, 0x48, 0x16, 0x16, 0xa, 0x16, 0xc, 0x12, 0xc, 0x24, 0x1b, 0x24, 0x6, 0x60, 0x4, 0x6c, 0x1, 0x1, 0xc, 0x1, 0x4]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x18, 0xb, 0x36, 0x60, 0x30, 0x5, 0xf, 0x5, 0x6, 0x8f, 0x0, 0x6, 0x6, 0x1, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x1, 0x80, 0x8001, 0xc24, 0x5, 0xfffa]}}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xe, 0x0, 0xb4, 0x1, 0x6, 0x5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf38b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}]}, @NL80211_ATTR_TID_CONFIG={0x3ec, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffff6ad}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x194, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1e}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1a8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x7ab, 0x5, 0x80, 0x4, 0x4, 0x8001]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x0, 0x5, 0x2, 0x60, 0x0, 0x71, 0x6c, 0x60, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x6, 0x7, 0x3, 0x6, 0x1000, 0x10]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x8, 0x36, 0x30, 0x1b, 0x3, 0x30, 0x30, 0x12, 0x48, 0x2, 0x12, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xeb2c, 0xffff, 0x1ff, 0x2, 0xff82, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x18, 0x36, 0x6, 0x13, 0xb, 0xb, 0x30, 0x5, 0x60, 0x48, 0x6, 0x4, 0xb, 0x4, 0x60, 0x6, 0x2, 0x16, 0x48, 0x9, 0x12, 0x60, 0x4]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x5a, 0x18, 0x12, 0x30, 0xc, 0x6, 0x1, 0x0, 0x6c, 0x3f, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x40, 0x343, 0x2, 0x6, 0x7]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0x952, 0x3, 0x6, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x3}, {0x3, 0xa}, {0x2, 0xa}, {0x4, 0x4}, {0x1, 0x5}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0x2}, {0x2, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x9}, {0x5, 0x6}, {0x1}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x1}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x7}, {0x3, 0xa}, {0x5, 0x8}, {0x6, 0x4}, {0x1, 0x5}, {0x6, 0x8}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0xd, 0xa, 0x7, 0x0, 0x8000, 0x3, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x401, 0x0, 0xdb23, 0x8, 0x0, 0x27a, 0x7ff]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1}, {0x4}, {0x1, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x2}, {0x4, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x71}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x6a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x43c}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x138, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x1b, 0x48, 0x48, 0xb, 0x4b, 0x6c, 0xb]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x439, 0x8, 0x4, 0x0, 0x4, 0x6, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x6, 0x2, 0x8, 0x0, 0x8, 0x1, 0x5]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x5, 0x9, 0x800, 0x401, 0x7, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x6, 0xb2, 0x1, 0x0, 0x830, 0x0, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x2b0, 0x9, 0x3, 0x8, 0xffff, 0x696]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7120, 0x40, 0x4, 0x8000, 0x0, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x3}, {0x6, 0xa}, {0x1}, {0x1, 0x9}, {0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x2}, {0x1}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x1}, {0x6, 0x6}, {0x6, 0x1}, {0x2, 0x2}, {0x0, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x9}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x3, 0x4}, {0x5, 0xa}]}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{0x2, 0x1}, {0x0, 0x9}, {0x1, 0xa}, {0x3}, {0x5, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x0, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x2}, {0x7, 0x7}, {0x0, 0xa}, {0x0, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x2, 0x3}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x1, 0x8}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x9}, {0x7, 0x2}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x7}, {0x3, 0x6}, {0x5, 0x8}, {}, {0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x3}, {0x1, 0xa}, {0x6, 0x8}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0x1}, {0x2, 0x3}, {}, {0x5}, {0x0, 0x8}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0x7, 0x5}, {0x7}, {0x7, 0x3}, {0x1, 0x7}, {0x6, 0xa}, {0x4, 0x5}, {0x7, 0x6}, {0x3, 0xa}]}]}]}]}]}]}, 0x724}, 0x1, 0x0, 0x0, 0x400d1}, 0x20040000) r9 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r9, 0xffffffffffffffff, 0x80000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x0) 244.740043ms ago: executing program 6 (id=6395): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sync() 0s ago: executing program 1 (id=6396): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x7, 0x5, 0x0, 0xf, 0x10, 0x4a, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) kernel console output (not intermixed with test programs): dv: batadv0: Removing interface: batadv_slave_0 [ 720.754297][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.762779][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.773847][ T40] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 720.781436][ T40] batman_adv: batadv0: Removing interface: ipvlan2 [ 720.799766][ T40] veth1_macvtap: left promiscuous mode [ 720.809439][ T40] veth0_macvtap: left promiscuous mode [ 720.816167][ T40] veth1_vlan: left promiscuous mode [ 720.823110][ T28] audit: type=1400 audit(1781397618.002:2179): avc: denied { write } for pid=23362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 720.852633][ T40] veth0_vlan: left promiscuous mode [ 720.927710][T23389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5695'. [ 720.980061][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5695'. [ 720.995256][ T28] audit: type=1400 audit(1781397618.182:2180): avc: denied { write } for pid=23391 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.028154][T23392] netlink: 748 bytes leftover after parsing attributes in process `syz.6.5698'. [ 721.363106][ T40] team0 (unregistering): Port device team_slave_1 removed [ 721.377667][ T40] team0 (unregistering): Port device team_slave_0 removed [ 721.410576][ T40] team0 (unregistering): Port device dummy0 removed [ 721.702973][ T28] audit: type=1400 audit(1781397618.872:2181): avc: denied { write } for pid=23414 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.913353][ T28] audit: type=1400 audit(1781397619.102:2182): avc: denied { write } for pid=23427 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.969916][T23255] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 721.999285][T23255] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 722.049275][T23255] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.115523][T23255] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 722.158375][T23255] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.197203][T23255] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 722.225078][T23255] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.289705][T23255] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.339520][ T28] audit: type=1400 audit(1781397619.522:2183): avc: denied { write } for pid=23431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.409039][ T28] audit: type=1400 audit(1781397619.592:2184): avc: denied { write } for pid=23443 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.480184][T23255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.494155][T23255] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.504924][T10022] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.512023][T10022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.524934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.532113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.551066][T23255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 722.563687][T23255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 722.676701][T23255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.746744][ T40] IPVS: stop unused estimator thread 0... [ 722.758047][T23255] veth0_vlan: entered promiscuous mode [ 722.768652][T23255] veth1_vlan: entered promiscuous mode [ 722.793239][T23255] veth0_macvtap: entered promiscuous mode [ 722.800322][T23255] veth1_macvtap: entered promiscuous mode [ 722.811452][T23255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.825646][T23255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 722.837706][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.847349][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.862819][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 722.874677][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.142918][T23485] netlink: 748 bytes leftover after parsing attributes in process `syz.3.5710'. [ 723.284554][T23492] ./file0: Can't lookup blockdev [ 723.358941][T23495] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 723.415286][T23498] tipc: Enabling of bearer rejected, failed to enable media [ 723.449240][ T28] audit: type=1400 audit(1781397620.612:2185): avc: denied { connect } for pid=23493 comm="syz.1.5712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 723.614650][ T28] audit: type=1400 audit(1781397620.802:2186): avc: denied { setopt } for pid=23493 comm="syz.1.5712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 723.634462][T23495] loop1: detected capacity change from 0 to 512 [ 723.652267][T23495] FAT-fs (loop1): Directory bread(block 199916) failed [ 723.668365][T23495] FAT-fs (loop1): Directory bread(block 199917) failed [ 723.690018][T23495] FAT-fs (loop1): Directory bread(block 199918) failed [ 723.707497][T23495] FAT-fs (loop1): Directory bread(block 199919) failed [ 723.714510][T23495] FAT-fs (loop1): Directory bread(block 199920) failed [ 723.721439][T23495] FAT-fs (loop1): Directory bread(block 199921) failed [ 723.729510][T23495] FAT-fs (loop1): Directory bread(block 199922) failed [ 723.737380][T23495] FAT-fs (loop1): Directory bread(block 199923) failed [ 724.320005][T23536] dns_resolver: Unsupported server list version (0) [ 726.078466][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5728'. [ 726.185480][T23557] C: renamed from veth1_to_team (while UP) [ 726.194428][T23557] netlink: 'syz.5.5728': attribute type 3 has an invalid length. [ 726.202384][T23557] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5728'. [ 727.091207][T23550] FAULT_INJECTION: forcing a failure. [ 727.091207][T23550] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.104465][T23550] CPU: 0 UID: 0 PID: 23550 Comm: syz.1.5729 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 727.104502][T23550] Tainted: [W]=WARN [ 727.104511][T23550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 727.104592][T23550] Call Trace: [ 727.104600][T23550] [ 727.104609][T23550] __dump_stack+0x1d/0x30 [ 727.104633][T23550] dump_stack_lvl+0x95/0xd0 [ 727.104664][T23550] dump_stack+0x15/0x1b [ 727.104733][T23550] should_fail_ex+0x25e/0x270 [ 727.104838][T23550] should_fail+0xb/0x20 [ 727.104866][T23550] should_fail_usercopy+0x1a/0x20 [ 727.104890][T23550] _copy_from_iter+0xcc/0xe70 [ 727.104915][T23550] ? __alloc_skb+0x4f6/0x690 [ 727.104937][T23550] ? __alloc_skb+0x200/0x690 [ 727.105024][T23550] netlink_sendmsg+0x4a4/0x6f0 [ 727.105059][T23550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.105088][T23550] ____sys_sendmsg+0x532/0x580 [ 727.105117][T23550] ___sys_sendmsg+0x195/0x1e0 [ 727.105206][T23550] __x64_sys_sendmsg+0xd4/0x160 [ 727.105247][T23550] x64_sys_call+0x194c/0x3020 [ 727.105274][T23550] do_syscall_64+0x136/0x3c0 [ 727.105372][T23550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.105397][T23550] RIP: 0033:0x7f97755fce59 [ 727.105441][T23550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.105476][T23550] RSP: 002b:00007f977404f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.105498][T23550] RAX: ffffffffffffffda RBX: 00007f9775875fa0 RCX: 00007f97755fce59 [ 727.105512][T23550] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 727.105525][T23550] RBP: 00007f977404f090 R08: 0000000000000000 R09: 0000000000000000 [ 727.105538][T23550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.105550][T23550] R13: 00007f9775876038 R14: 00007f9775875fa0 R15: 00007fff4f109728 [ 727.105607][T23550] [ 727.414675][ T28] audit: type=1400 audit(1781397624.562:2187): avc: denied { listen } for pid=23579 comm="syz.3.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 728.740798][T23595] loop1: detected capacity change from 0 to 4096 [ 728.749686][T23595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 730.146651][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.234203][T23615] IPVS: Error connecting to the multicast addr [ 730.275806][T23615] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.332656][T23625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5749'. [ 730.341686][T23625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5749'. [ 730.437853][T23627] loop1: detected capacity change from 0 to 512 [ 730.465751][T23627] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 730.500325][T23627] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 730.516182][T23627] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5750: bg 0: block 248: padding at end of block bitmap is not set [ 730.531320][T23627] loop1: lost filesystem error report for type 5 error -117 [ 730.531821][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 730.545958][ C1] EXT4-fs (loop1): last error at time 1781397627: ext4_validate_block_bitmap:441 [ 730.559802][T23627] Quota error (device loop1): write_blk: dquota write failed [ 730.567681][T23627] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 730.578509][T23627] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.5750: Failed to acquire dquot type 1 [ 730.593049][T23627] loop1: lost filesystem error report for type 5 error -28 [ 730.596072][T23627] EXT4-fs (loop1): 1 truncate cleaned up [ 730.612571][T23627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 730.642287][ T28] audit: type=1400 audit(1781397627.822:2188): avc: denied { write } for pid=23626 comm="syz.1.5750" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 731.181320][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 731.202280][ T12] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 731.220409][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 731.252017][ T12] loop1: lost filesystem error report for type 5 error -117 [ 732.318497][T23661] loop1: detected capacity change from 0 to 512 [ 732.455775][T23661] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 732.467264][T23661] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 732.477328][T23661] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.5751: Corrupt directory, running e2fsck is recommended [ 732.729301][T23661] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 732.864696][T23661] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.5751: corrupted in-inode xattr: e_name out of bounds [ 733.302991][T23661] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 733.311793][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 733.327417][ C0] EXT4-fs (loop1): initial error at time 1781397630: ext4_iget_extra_inode:5128: inode 15 [ 733.337389][ C0] EXT4-fs (loop1): last error at time 1781397630: ext4_iget_extra_inode:5128: inode 15 [ 733.465784][T23661] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5751: couldn't read orphan inode 15 (err -117) [ 733.573925][T23661] loop1: lost filesystem error report for type 5 error -117 [ 733.648254][T23661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.720646][T23731] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5774'. [ 734.063594][T23762] tipc: Enabling of bearer rejected, failed to enable media [ 734.260731][T23776] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5784'. [ 734.679905][T23782] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5786'. [ 735.362425][T23631] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 735.802516][T23714] bridge_slave_1: left allmulticast mode [ 735.830196][T23714] bridge_slave_1: left promiscuous mode [ 735.897860][T23714] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.025356][T23714] bridge_slave_0: left allmulticast mode [ 736.074091][T23714] bridge_slave_0: left promiscuous mode [ 736.130362][T23714] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.674371][T23714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.696876][T23714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.718652][T23714] bond0 (unregistering): Released all slaves [ 736.780123][T23827] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5798'. [ 736.824347][T23829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5799'. [ 736.834268][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.902653][T23835] loop1: detected capacity change from 0 to 2048 [ 736.928502][T23835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 737.182770][T23714] tipc: Left network mode [ 737.196439][T23714] hsr_slave_0: left promiscuous mode [ 737.243270][T23714] hsr_slave_1: left promiscuous mode [ 737.274294][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.298321][T23714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.335256][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.365638][T23714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.426756][T23714] veth1_macvtap: left promiscuous mode [ 737.441255][T23714] veth0_macvtap: left promiscuous mode [ 737.461755][T23714] veth1_vlan: left promiscuous mode [ 737.485403][T23714] veth0_vlan: left promiscuous mode [ 738.046084][T23714] team0 (unregistering): Port device team_slave_1 removed [ 738.068665][T23862] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5810'. [ 738.086048][T23714] team0 (unregistering): Port device team_slave_0 removed [ 738.232113][T23839] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 738.275258][T23853] netlink: 'syz.6.5806': attribute type 13 has an invalid length. [ 738.318799][T23869] netlink: 'syz.6.5812': attribute type 15 has an invalid length. [ 738.615833][T23714] IPVS: stop unused estimator thread 0... [ 738.696834][T23883] IPVS: Error connecting to the multicast addr [ 738.771445][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.832471][T23883] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.945698][T23900] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5821'. [ 739.592899][ T28] audit: type=1400 audit(1781397636.782:2189): avc: denied { setattr } for pid=23928 comm="syz.6.5832" name="NETLINK" dev="sockfs" ino=72129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 739.702054][T23938] loop1: detected capacity change from 0 to 512 [ 739.722261][T23938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 739.742230][T23938] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 739.775436][ T28] audit: type=1400 audit(1781397636.962:2190): avc: denied { write } for pid=23937 comm="syz.1.5836" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 739.857533][ T28] audit: type=1400 audit(1781397636.982:2191): avc: denied { write } for pid=23937 comm="syz.1.5836" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 743.594095][T23967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=23967 comm=syz.3.5844 [ 743.640495][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.677113][T23969] loop1: detected capacity change from 0 to 128 [ 743.714294][T23969] FAT-fs (loop1): Directory bread(block 32) failed [ 743.720855][T23969] FAT-fs (loop1): Directory bread(block 33) failed [ 743.727459][T23969] FAT-fs (loop1): Directory bread(block 34) failed [ 743.734127][T23969] FAT-fs (loop1): Directory bread(block 35) failed [ 743.740667][T23969] FAT-fs (loop1): Directory bread(block 36) failed [ 743.747198][T23969] FAT-fs (loop1): Directory bread(block 37) failed [ 743.753746][T23969] FAT-fs (loop1): Directory bread(block 38) failed [ 743.760332][T23969] FAT-fs (loop1): Directory bread(block 39) failed [ 743.766873][T23969] FAT-fs (loop1): Directory bread(block 40) failed [ 743.773483][T23969] FAT-fs (loop1): Directory bread(block 41) failed [ 743.805160][T23969] bio_check_eod: 200 callbacks suppressed [ 743.805177][T23969] syz.1.5845: attempt to access beyond end of device [ 743.805177][T23969] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 743.954906][T23976] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 744.387877][T23996] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 744.394325][T23996] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 744.732891][T24003] loop1: detected capacity change from 0 to 512 [ 744.746584][T23999] syz.6.5852 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 744.760480][T23999] CPU: 1 UID: 0 PID: 23999 Comm: syz.6.5852 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 744.760516][T23999] Tainted: [W]=WARN [ 744.760524][T23999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 744.760577][T23999] Call Trace: [ 744.760585][T23999] [ 744.760593][T23999] __dump_stack+0x1d/0x30 [ 744.760681][T23999] dump_stack_lvl+0x95/0xd0 [ 744.760703][T23999] dump_stack+0x15/0x1b [ 744.760790][T23999] dump_header+0x80/0x240 [ 744.760814][T23999] oom_kill_process+0x295/0x350 [ 744.760849][T23999] out_of_memory+0x981/0xbc0 [ 744.760921][T23999] try_charge_memcg+0x621/0xa00 [ 744.760956][T23999] __memcg_kmem_charge_page+0x199/0x3a0 [ 744.760982][T23999] __alloc_frozen_pages_noprof+0x18a/0x350 [ 744.761039][T23999] alloc_pages_mpol+0xa9/0x1d0 [ 744.761066][T23999] alloc_pages_noprof+0x8f/0x140 [ 744.761091][T23999] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 744.761124][T23999] __kvmalloc_node_noprof+0x3d4/0x640 [ 744.761167][T23999] ? futex_hash_allocate+0x18d/0x960 [ 744.761202][T23999] ? futex_hash_allocate+0x18d/0x960 [ 744.761266][T23999] ? ioctl_has_perm+0x273/0x2c0 [ 744.761293][T23999] futex_hash_allocate+0x18d/0x960 [ 744.761330][T23999] ? cap_task_prctl+0x13f/0x6b0 [ 744.761374][T23999] futex_hash_prctl+0xd8/0xf0 [ 744.761462][T23999] __se_sys_prctl+0x4f4/0x1400 [ 744.761568][T23999] __x64_sys_prctl+0x67/0x80 [ 744.761594][T23999] x64_sys_call+0x2533/0x3020 [ 744.761620][T23999] do_syscall_64+0x136/0x3c0 [ 744.761658][T23999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.761685][T23999] RIP: 0033:0x7f761ffcce59 [ 744.761729][T23999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.761748][T23999] RSP: 002b:00007f761ea1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 744.761852][T23999] RAX: ffffffffffffffda RBX: 00007f7620245fa0 RCX: 00007f761ffcce59 [ 744.761871][T23999] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 744.761939][T23999] RBP: 00007f7620062d6f R08: 0000000000000000 R09: 0000000000000000 [ 744.761952][T23999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.761966][T23999] R13: 00007f7620246038 R14: 00007f7620245fa0 R15: 00007fff7e1808e8 [ 744.761986][T23999] [ 744.761993][T23999] memory: usage 307200kB, limit 307200kB, failcnt 605 [ 744.868955][T24003] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 744.938254][T23999] memory+swap: usage 258032kB, limit 9007199254740988kB, failcnt 0 [ 744.949090][T24003] EXT4-fs (loop1): orphan cleanup on readonly fs [ 744.974445][T23999] kmem: usage 239456kB, limit 9007199254740988kB, failcnt 0 [ 744.996680][T24003] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 745.035176][T24003] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 745.049733][T24003] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 745.058586][T24003] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5853: bg 0: block 64: padding at end of block bitmap is not set [ 745.072847][T24003] loop1: lost filesystem error report for type 5 error -117 [ 745.073207][T24003] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 745.089291][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 745.089328][ C0] EXT4-fs (loop1): initial error at time 1781397642: ext4_validate_block_bitmap:441 [ 745.089349][ C0] EXT4-fs (loop1): last error at time 1781397642: ext4_validate_block_bitmap:441 [ 745.117277][T24003] loop1: lost filesystem error report for type 5 error -117 [ 745.117622][T24003] EXT4-fs (loop1): 1 truncate cleaned up [ 745.131066][T24003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 745.152816][T23999] Memory cgroup stats for /syz6: [ 745.153074][T23999] cache 0 [ 745.162047][T24009] 9p: Bad value for 'rfdno' [ 745.167449][T24009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5855'. [ 745.179535][T23999] rss 12288 [ 745.183088][T23999] shmem 0 [ 745.189174][T23999] mapped_file 0 [ 745.196003][T23999] dirty 0 [ 745.200873][T23999] writeback 0 [ 745.223432][T23999] workingset_refault_anon 79 [ 745.234628][T23999] workingset_refault_file 0 [ 745.383745][T23999] swap 1556480 [ 745.387283][T23999] swapcached 3436544 [ 745.391242][T23999] pgpgin 245286 [ 745.397188][T23999] pgpgout 245281 [ 745.400858][T23999] pgfault 283609 [ 745.425511][T24012] xt_connbytes: Forcing CT accounting to be enabled [ 745.436742][T23999] pgmajfault 37 [ 745.446318][T23999] inactive_anon 0 [ 745.460892][T23999] active_anon 16384 [ 745.484169][T23999] inactive_file 0 [ 745.503932][T23999] active_file 0 [ 745.526438][T23999] unevictable 0 [ 745.555624][T23999] hierarchical_memory_limit 314572800 [ 745.602813][T23999] hierarchical_memsw_limit 9223372036854771712 [ 745.652421][T23999] total_cache 0 [ 745.719162][T23999] total_rss 12288 [ 745.757004][T23999] total_shmem 0 [ 745.777138][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.792603][T23999] total_mapped_file 0 [ 745.805072][T23999] total_dirty 0 [ 745.817372][T23999] total_writeback 0 [ 745.829075][T23999] total_workingset_refault_anon 79 [ 745.841119][T23999] total_workingset_refault_file 0 [ 745.846330][T23999] total_swap 1556480 [ 745.850457][T23999] total_swapcached 3436544 [ 745.931515][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 745.941027][T23999] total_pgpgin 245286 [ 745.946793][T23999] total_pgpgout 245281 [ 745.951404][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 745.960600][T23999] total_pgfault 283609 [ 745.965857][T23999] total_pgmajfault 37 [ 745.970298][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 745.979917][T23999] total_inactive_anon 0 [ 745.984428][T23999] total_active_anon 16384 [ 745.989427][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 746.000430][T23999] total_inactive_file 0 [ 746.004807][T23999] total_active_file 0 [ 746.008847][T23999] total_unevictable 0 [ 746.015433][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 746.024926][T23999] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4313,pid=18590,uid=0 [ 746.040618][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 746.049914][T23999] Memory cgroup out of memory: Killed process 18590 (syz.6.4313) total-vm:93964kB, anon-rss:1244kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 746.071130][T24021] netlink: 'syz.1.5856': attribute type 14 has an invalid length. [ 746.082425][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 746.127551][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 746.153297][T24019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'. [ 747.966686][ T28] audit: type=1400 audit(1781397645.152:2192): avc: denied { getopt } for pid=24037 comm="syz.1.5861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.190372][T24053] tipc: Enabling of bearer rejected, failed to enable media [ 748.336261][T24063] loop1: detected capacity change from 0 to 2048 [ 748.450727][T24063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 748.465900][T24072] xt_hashlimit: size too large, truncated to 1048576 [ 750.565406][ T28] audit: type=1400 audit(1781397647.712:2193): avc: denied { create } for pid=24079 comm="syz.3.5869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 750.791838][T24069] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 751.640992][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.696724][T24106] loop1: detected capacity change from 0 to 128 [ 751.713204][T24106] EXT4-fs: Ignoring removed nobh option [ 751.747096][T24106] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 751.760770][T24106] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 751.784894][ T28] audit: type=1400 audit(1781397648.972:2194): avc: denied { write } for pid=24103 comm="syz.1.5874" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 751.835049][T24106] syzkaller0: entered promiscuous mode [ 751.845956][T24116] netlink: 'syz.6.5879': attribute type 10 has an invalid length. [ 751.859606][T24106] syzkaller0: entered allmulticast mode [ 751.877867][ T28] audit: type=1400 audit(1781397649.002:2195): avc: denied { map } for pid=24103 comm="syz.1.5874" path="pipe:[70064]" dev="pipefs" ino=70064 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 751.945960][T24116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.949562][ T28] audit: type=1400 audit(1781397649.102:2196): avc: denied { write } for pid=24115 comm="syz.6.5879" name="file0" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 751.999030][ T28] audit: type=1400 audit(1781397649.102:2197): avc: denied { open } for pid=24115 comm="syz.6.5879" path="/337/file0" dev="tmpfs" ino=1754 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 752.023737][T24116] team0: Port device bond0 added [ 752.035649][ T28] audit: type=1400 audit(1781397649.102:2198): avc: denied { ioctl } for pid=24115 comm="syz.6.5879" path="/337/file0" dev="tmpfs" ino=1754 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 752.115293][ T28] audit: type=1400 audit(1781397649.112:2199): avc: denied { setattr } for pid=24103 comm="syz.1.5874" name="file1" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 752.244164][T23255] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 752.464980][T24091] syz.5.5872 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 752.478933][T24091] CPU: 1 UID: 0 PID: 24091 Comm: syz.5.5872 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 752.478982][T24091] Tainted: [W]=WARN [ 752.478990][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 752.479005][T24091] Call Trace: [ 752.479013][T24091] [ 752.479024][T24091] __dump_stack+0x1d/0x30 [ 752.479109][T24091] dump_stack_lvl+0x95/0xd0 [ 752.479134][T24091] dump_stack+0x15/0x1b [ 752.479225][T24091] dump_header+0x80/0x240 [ 752.479251][T24091] oom_kill_process+0x295/0x350 [ 752.479324][T24091] out_of_memory+0x981/0xbc0 [ 752.479362][T24091] try_charge_memcg+0x621/0xa00 [ 752.479403][T24091] __memcg_kmem_charge_page+0x199/0x3a0 [ 752.479433][T24091] __alloc_frozen_pages_noprof+0x18a/0x350 [ 752.479464][T24091] alloc_pages_mpol+0xa9/0x1d0 [ 752.479537][T24091] alloc_pages_noprof+0x8f/0x140 [ 752.479573][T24091] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 752.479610][T24091] __kvmalloc_node_noprof+0x3d4/0x640 [ 752.479699][T24091] ? futex_hash_allocate+0x18d/0x960 [ 752.479736][T24091] ? futex_hash_allocate+0x18d/0x960 [ 752.479834][T24091] ? ioctl_has_perm+0x273/0x2c0 [ 752.479866][T24091] futex_hash_allocate+0x18d/0x960 [ 752.479901][T24091] ? cap_task_prctl+0x13f/0x6b0 [ 752.479942][T24091] futex_hash_prctl+0xd8/0xf0 [ 752.479982][T24091] __se_sys_prctl+0x4f4/0x1400 [ 752.480011][T24091] __x64_sys_prctl+0x67/0x80 [ 752.480041][T24091] x64_sys_call+0x2533/0x3020 [ 752.480092][T24091] do_syscall_64+0x136/0x3c0 [ 752.480124][T24091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.480150][T24091] RIP: 0033:0x7f0a3150ce59 [ 752.480170][T24091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.480198][T24091] RSP: 002b:00007f0a2ff67028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 752.480223][T24091] RAX: ffffffffffffffda RBX: 00007f0a31785fa0 RCX: 00007f0a3150ce59 [ 752.480238][T24091] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 752.480254][T24091] RBP: 00007f0a315a2d6f R08: 0000000000000000 R09: 0000000000000000 [ 752.480290][T24091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 752.480305][T24091] R13: 00007f0a31786038 R14: 00007f0a31785fa0 R15: 00007ffdfd6fbfd8 [ 752.480329][T24091] [ 752.480354][T24091] memory: usage 307200kB, limit 307200kB, failcnt 449 [ 752.705936][T24151] tipc: Enabling of bearer rejected, failed to enable media [ 752.775006][T24091] memory+swap: usage 243352kB, limit 9007199254740988kB, failcnt 0 [ 752.876713][T24091] kmem: usage 111352kB, limit 9007199254740988kB, failcnt 0 [ 752.885716][T24091] Memory cgroup stats for /syz5: [ 752.885899][T24091] cache 0 [ 752.894115][T24091] rss 0 [ 752.896911][T24091] shmem 0 [ 752.899871][T24091] mapped_file 0 [ 752.904232][T24091] dirty 0 [ 752.907220][T24091] writeback 0 [ 752.910573][T24091] workingset_refault_anon 101 [ 752.915479][T24091] workingset_refault_file 0 [ 752.920083][T24091] swap 3043328 [ 752.923616][T24091] swapcached 9715712 [ 752.928014][T24091] pgpgin 598665 [ 752.931510][T24091] pgpgout 598664 [ 752.935978][T24091] pgfault 689844 [ 752.939697][T24091] pgmajfault 163 [ 752.943466][T24091] inactive_anon 0 [ 752.947156][T24091] active_anon 4096 [ 752.951156][T24091] inactive_file 0 [ 752.956059][T24091] active_file 0 [ 752.959571][T24091] unevictable 0 [ 752.969306][T24091] hierarchical_memory_limit 314572800 [ 752.975124][T24091] hierarchical_memsw_limit 9223372036854771712 [ 752.981407][T24091] total_cache 0 [ 752.986449][T24091] total_rss 0 [ 752.989980][T24091] total_shmem 0 [ 753.295834][T24091] total_mapped_file 0 [ 753.305974][T24091] total_dirty 0 [ 753.316218][T24091] total_writeback 0 [ 753.334241][T24091] total_workingset_refault_anon 101 [ 753.365328][T24091] total_workingset_refault_file 0 [ 753.414099][T24091] total_swap 3043328 [ 753.577297][T24091] total_swapcached 9715712 [ 753.955259][T24091] total_pgpgin 598665 [ 753.960894][T24091] total_pgpgout 598664 [ 753.974295][T24091] total_pgfault 689844 [ 753.983254][T24091] total_pgmajfault 163 [ 754.369487][T24091] total_inactive_anon 0 [ 754.386512][T24091] total_active_anon 4096 [ 754.405397][T24091] total_inactive_file 0 [ 754.939920][T24091] total_active_file 0 [ 754.958279][T24091] total_unevictable 0 [ 754.973473][T24091] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.5872,pid=24090,uid=0 [ 755.371311][ T28] audit: type=1400 audit(1781397652.532:2200): avc: denied { write } for pid=24169 comm="syz.2.5893" path="socket:[72561]" dev="sockfs" ino=72561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 755.405711][T24091] Memory cgroup out of memory: Killed process 24090 (syz.5.5872) total-vm:98536kB, anon-rss:1228kB, file-rss:26256kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:0 [ 755.437866][T24172] loop1: detected capacity change from 0 to 8192 [ 755.532387][T24172] vfat: Unknown parameter '˜¡' [ 756.231561][ T28] audit: type=1400 audit(1781397653.412:2201): avc: denied { setopt } for pid=24195 comm="syz.1.5898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 756.278092][ T28] audit: type=1326 audit(1781397653.442:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.338560][ T28] audit: type=1326 audit(1781397653.442:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.366526][ T28] audit: type=1326 audit(1781397653.442:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.393036][ T28] audit: type=1326 audit(1781397653.442:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.418717][ T28] audit: type=1326 audit(1781397653.442:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.510256][T23714] bridge_slave_1: left allmulticast mode [ 756.513351][ T28] audit: type=1326 audit(1781397653.442:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.518779][T24208] loop1: detected capacity change from 0 to 4096 [ 756.548506][T23714] bridge_slave_1: left promiscuous mode [ 756.560489][T23714] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.575333][ T28] audit: type=1326 audit(1781397653.442:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.621548][T23714] bridge_slave_0: left allmulticast mode [ 756.627676][T23714] bridge_slave_0: left promiscuous mode [ 756.634386][T23714] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.641913][T24208] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 756.672363][ T28] audit: type=1326 audit(1781397653.442:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.722600][ T28] audit: type=1326 audit(1781397653.442:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24195 comm="syz.1.5898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f97755fce59 code=0x7ffc0000 [ 756.758166][T24221] __nla_validate_parse: 46 callbacks suppressed [ 756.758196][T24221] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5906'. [ 756.852319][T23714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 756.862359][T23714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 756.872421][T23714] bond0 (unregistering): Released all slaves [ 756.951224][T23714] tipc: Left network mode [ 756.964531][T23714] hsr_slave_0: left promiscuous mode [ 756.969039][T24227] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5908'. [ 756.979437][T23714] hsr_slave_1: left promiscuous mode [ 756.985239][T23714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.992706][T23714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 757.074001][T23714] team0 (unregistering): Port device team_slave_1 removed [ 757.095356][T23714] team0 (unregistering): Port device team_slave_0 removed [ 757.456252][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.774612][T24342] loop1: detected capacity change from 0 to 512 [ 758.827966][T24342] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 758.897561][T24342] EXT4-fs (loop1): orphan cleanup on readonly fs [ 758.929785][T24342] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 758.951325][T24342] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 758.958679][T24342] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5923: bg 0: block 64: padding at end of block bitmap is not set [ 758.975662][T24342] loop1: lost filesystem error report for type 5 error -117 [ 758.975814][T24342] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 758.983132][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 758.983149][ C0] EXT4-fs (loop1): initial error at time 1781397656: ext4_validate_block_bitmap:441 [ 758.983198][ C0] EXT4-fs (loop1): last error at time 1781397656: ext4_validate_block_bitmap:441 [ 759.019576][T24342] loop1: lost filesystem error report for type 5 error -117 [ 759.020015][T24342] EXT4-fs (loop1): 1 truncate cleaned up [ 759.033696][T24342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 759.428746][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.471665][T24369] loop1: detected capacity change from 0 to 512 [ 759.514903][T24369] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 759.523138][T24369] EXT4-fs (loop1): orphan cleanup on readonly fs [ 759.535716][T24369] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 759.559207][T24369] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 759.566301][T24369] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5927: bg 0: block 64: padding at end of block bitmap is not set [ 759.581936][T24369] loop1: lost filesystem error report for type 5 error -117 [ 759.583553][T24369] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 759.599625][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 759.599643][ C1] EXT4-fs (loop1): initial error at time 1781397656: ext4_validate_block_bitmap:441 [ 759.599664][ C1] EXT4-fs (loop1): last error at time 1781397656: ext4_validate_block_bitmap:441 [ 759.735940][T24369] loop1: lost filesystem error report for type 5 error -117 [ 759.737052][T24369] EXT4-fs (loop1): 1 truncate cleaned up [ 759.886267][T24369] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 760.632524][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.719722][T24394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5933'. [ 760.746993][T24393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5934'. [ 760.756201][T24394] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5933'. [ 760.964742][T24401] loop1: detected capacity change from 0 to 128 [ 761.065502][T24405] syz.1.5936: attempt to access beyond end of device [ 761.065502][T24405] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 761.106566][T24405] syz.1.5936: attempt to access beyond end of device [ 761.106566][T24405] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 761.173081][T24405] syz.1.5936: attempt to access beyond end of device [ 761.173081][T24405] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 761.216009][T24405] syz.1.5936: attempt to access beyond end of device [ 761.216009][T24405] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 763.417303][T24428] loop1: detected capacity change from 0 to 512 [ 763.463450][T24428] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 763.473312][T24428] EXT4-fs (loop1): orphan cleanup on readonly fs [ 763.500076][T24428] __quota_error: 70 callbacks suppressed [ 763.500090][T24428] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 763.550711][T24428] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 763.578195][T24428] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 763.589361][T24428] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5943: bg 0: block 64: padding at end of block bitmap is not set [ 763.605523][T24428] loop1: lost filesystem error report for type 5 error -117 [ 763.606934][T24428] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 763.614331][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 763.614351][ C0] EXT4-fs (loop1): initial error at time 1781397660: ext4_validate_block_bitmap:441 [ 763.614380][ C0] EXT4-fs (loop1): last error at time 1781397660: ext4_validate_block_bitmap:441 [ 763.648459][T24428] loop1: lost filesystem error report for type 5 error -117 [ 763.651443][T24428] EXT4-fs (loop1): 1 truncate cleaned up [ 763.665227][T24428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 764.002722][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.252621][T24460] netlink: 124 bytes leftover after parsing attributes in process `syz.5.5951'. [ 767.087585][T24474] sctp: [Deprecated]: syz.5.5954 (pid 24474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 767.087585][T24474] Use struct sctp_sack_info instead [ 767.735621][T24484] netdevsim0: renamed from gre0 (while UP) [ 767.907093][T24484] netdevsim0: entered allmulticast mode [ 767.936519][T24484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 767.958716][ T28] audit: type=1400 audit(1781397665.122:2279): avc: denied { mount } for pid=24485 comm="syz.5.5958" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 768.057561][T24494] tipc: Enabling of bearer rejected, failed to enable media [ 768.218097][ T28] audit: type=1400 audit(1781397665.402:2280): avc: denied { shutdown } for pid=24508 comm="syz.6.5964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 768.797758][T24523] tipc: Enabling of bearer rejected, failed to enable media [ 769.889801][T24540] xt_hashlimit: max too large, truncated to 1048576 [ 769.917359][T24540] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 770.182535][T24546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5970'. [ 770.567125][T24551] tipc: Enabling of bearer rejected, failed to enable media [ 771.365477][T24566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5978'. [ 771.512193][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 771.752623][T24566] netlink: 'syz.1.5978': attribute type 34 has an invalid length. [ 771.873748][T24571] loop1: detected capacity change from 0 to 128 [ 772.673568][T24588] loop1: detected capacity change from 0 to 1024 [ 772.680278][T24588] EXT4-fs: Ignoring removed orlov option [ 772.685911][T24588] EXT4-fs: Ignoring removed orlov option [ 772.691619][T24588] EXT4-fs: inline encryption not supported [ 773.016741][T24588] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.5982: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 65535(4), depth 65535(65535) [ 773.121963][T24588] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 773.123311][T24588] EXT4-fs (loop1): get root inode failed [ 773.132515][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 773.132548][ C1] EXT4-fs (loop1): initial error at time 1781397670: ext4_ext_check_inode:521: inode 2 [ 773.132615][ C1] EXT4-fs (loop1): last error at time 1781397670: ext4_ext_check_inode:521: inode 2 [ 773.169382][T24588] EXT4-fs (loop1): mount failed [ 773.319821][T24588] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 773.337424][T24588] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 773.349605][ T28] audit: type=1400 audit(1781397670.522:2281): avc: denied { relabelto } for pid=24585 comm="syz.1.5982" name="39" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 773.391248][T24601] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5982'. [ 773.434281][T24601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.483714][T24601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.514936][ T28] audit: type=1400 audit(1781397670.522:2282): avc: denied { associate } for pid=24585 comm="syz.1.5982" name="39" dev="tmpfs" ino=235 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 773.546480][ T28] audit: type=1400 audit(1781397670.522:2283): avc: denied { write } for pid=24585 comm="syz.1.5982" name="39" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 774.460064][T24601] bond0 (unregistering): Released all slaves [ 774.467039][ T28] audit: type=1400 audit(1781397670.522:2284): avc: denied { add_name } for pid=24585 comm="syz.1.5982" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 774.913422][T24632] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 775.001399][ T28] audit: type=1400 audit(1781397670.522:2285): avc: denied { write } for pid=24585 comm="syz.1.5982" name="39" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 775.027939][ T28] audit: type=1400 audit(1781397672.182:2286): avc: denied { create } for pid=24631 comm="syz.3.5995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 776.384625][ T28] audit: type=1400 audit(1781397673.032:2287): avc: denied { write } for pid=23255 comm="syz-executor" name="39" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 776.519910][ T28] audit: type=1400 audit(1781397673.032:2288): avc: denied { remove_name } for pid=23255 comm="syz-executor" name="file0" dev="tmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 776.561987][ T28] audit: type=1400 audit(1781397673.032:2289): avc: denied { write } for pid=23255 comm="syz-executor" name="39" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 776.631312][ T28] audit: type=1400 audit(1781397673.032:2290): avc: denied { unlink } for pid=23255 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 777.570789][T24677] loop1: detected capacity change from 0 to 128 [ 777.584731][T24677] FAT-fs (loop1): Directory bread(block 32) failed [ 777.591272][T24677] FAT-fs (loop1): Directory bread(block 33) failed [ 777.597787][T24677] FAT-fs (loop1): Directory bread(block 34) failed [ 777.604298][T24677] FAT-fs (loop1): Directory bread(block 35) failed [ 777.640777][T24677] FAT-fs (loop1): Directory bread(block 36) failed [ 777.654875][T24677] FAT-fs (loop1): Directory bread(block 37) failed [ 777.679053][T24677] FAT-fs (loop1): Directory bread(block 38) failed [ 777.704542][T24677] FAT-fs (loop1): Directory bread(block 39) failed [ 777.711136][T24677] FAT-fs (loop1): Directory bread(block 40) failed [ 777.717852][T24677] FAT-fs (loop1): Directory bread(block 41) failed [ 777.806042][T24685] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 777.822249][T24677] syz.1.6005: attempt to access beyond end of device [ 777.822249][T24677] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 778.121023][T24697] loop1: detected capacity change from 0 to 512 [ 778.395085][T24697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.166383][T24697] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 779.202219][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.836390][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 781.836406][ T28] audit: type=1400 audit(1781397679.022:2300): avc: denied { setattr } for pid=24742 comm="syz.2.6023" name="SCTP" dev="sockfs" ino=73696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 782.096136][T24748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6024'. [ 782.117550][T24748] netlink: 'syz.2.6024': attribute type 34 has an invalid length. [ 786.411498][T24789] loop1: detected capacity change from 0 to 512 [ 786.905017][T24789] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 786.924829][T24789] EXT4-fs (loop1): orphan cleanup on readonly fs [ 786.936520][T24789] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 786.973271][T24789] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 786.996886][T24789] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 787.004604][T24789] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6037: bg 0: block 64: padding at end of block bitmap is not set [ 787.018954][T24789] loop1: lost filesystem error report for type 5 error -117 [ 787.021787][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 787.035636][ C0] EXT4-fs (loop1): initial error at time 1781397684: ext4_validate_block_bitmap:441 [ 787.045039][ C0] EXT4-fs (loop1): last error at time 1781397684: ext4_validate_block_bitmap:441 [ 787.057122][T24789] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 787.065972][T24789] loop1: lost filesystem error report for type 5 error -117 [ 787.066805][T24789] EXT4-fs (loop1): 1 truncate cleaned up [ 787.080887][T24789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 788.069894][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.184867][T24826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6046'. [ 788.516927][T24835] loop1: detected capacity change from 0 to 2048 [ 788.627484][T24835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.151853][T24838] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 790.371365][T24811] syz.6.6043 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 790.392147][T24811] CPU: 1 UID: 0 PID: 24811 Comm: syz.6.6043 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 790.392189][T24811] Tainted: [W]=WARN [ 790.392196][T24811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 790.392209][T24811] Call Trace: [ 790.392215][T24811] [ 790.392302][T24811] __dump_stack+0x1d/0x30 [ 790.392326][T24811] dump_stack_lvl+0x95/0xd0 [ 790.392346][T24811] dump_stack+0x15/0x1b [ 790.392370][T24811] dump_header+0x80/0x240 [ 790.392397][T24811] oom_kill_process+0x295/0x350 [ 790.392495][T24811] out_of_memory+0x981/0xbc0 [ 790.392532][T24811] try_charge_memcg+0x621/0xa00 [ 790.392568][T24811] __memcg_kmem_charge_page+0x199/0x3a0 [ 790.392638][T24811] __alloc_frozen_pages_noprof+0x18a/0x350 [ 790.392664][T24811] alloc_pages_mpol+0xa9/0x1d0 [ 790.392688][T24811] alloc_pages_noprof+0x8f/0x140 [ 790.392725][T24811] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 790.392759][T24811] __kvmalloc_node_noprof+0x3d4/0x640 [ 790.392780][T24811] ? futex_hash_allocate+0x18d/0x960 [ 790.392866][T24811] ? futex_hash_allocate+0x18d/0x960 [ 790.392899][T24811] ? ioctl_has_perm+0x273/0x2c0 [ 790.392926][T24811] futex_hash_allocate+0x18d/0x960 [ 790.393032][T24811] ? cap_task_prctl+0x13f/0x6b0 [ 790.393063][T24811] futex_hash_prctl+0xd8/0xf0 [ 790.393099][T24811] __se_sys_prctl+0x4f4/0x1400 [ 790.393161][T24811] __x64_sys_prctl+0x67/0x80 [ 790.393192][T24811] x64_sys_call+0x2533/0x3020 [ 790.393221][T24811] do_syscall_64+0x136/0x3c0 [ 790.393314][T24811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.393337][T24811] RIP: 0033:0x7f761ffcce59 [ 790.393355][T24811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.393376][T24811] RSP: 002b:00007f761ea1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 790.393457][T24811] RAX: ffffffffffffffda RBX: 00007f7620245fa0 RCX: 00007f761ffcce59 [ 790.393473][T24811] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 790.393488][T24811] RBP: 00007f7620062d6f R08: 0000000000000000 R09: 0000000000000000 [ 790.393505][T24811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.393521][T24811] R13: 00007f7620246038 R14: 00007f7620245fa0 R15: 00007fff7e1808e8 [ 790.393543][T24811] [ 790.393603][T24811] memory: usage 298356kB, limit 307200kB, failcnt 844 [ 790.405031][T24860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24860 comm=syz.2.6052 [ 790.408430][T24811] memory+swap: usage 299732kB, limit 9007199254740988kB, failcnt 0 [ 790.408449][T24811] kmem: usage 297900kB, limit 9007199254740988kB, failcnt 0 [ 790.438429][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.442039][T24811] Memory cgroup stats for /syz6: [ 790.442328][T24811] cache 4096 [ 790.691454][T24811] rss 4096 [ 790.698625][T24811] shmem 4096 [ 790.702068][T24811] mapped_file 4096 [ 790.713448][T24811] dirty 0 [ 790.724346][T24811] writeback 0 [ 790.734756][T24811] workingset_refault_anon 190 [ 790.752792][T24811] workingset_refault_file 0 [ 790.862514][T24811] swap 1404928 [ 790.867358][T24811] swapcached 3907584 [ 790.874899][T24811] pgpgin 282865 [ 790.892927][T24811] pgpgout 282860 [ 790.904317][T24811] pgfault 330078 [ 790.920856][T24811] pgmajfault 102 [ 790.931118][T24811] inactive_anon 0 [ 790.936504][T24811] active_anon 12288 [ 790.947467][T24811] inactive_file 0 [ 790.951757][T24811] active_file 0 [ 790.955456][T24811] unevictable 0 [ 790.987647][T24811] hierarchical_memory_limit 314572800 [ 791.000133][T24811] hierarchical_memsw_limit 9223372036854771712 [ 791.012369][T24811] total_cache 4096 [ 791.016174][T24811] total_rss 4096 [ 791.019919][T24811] total_shmem 4096 [ 791.026826][T24811] total_mapped_file 4096 [ 791.042774][T24811] total_dirty 0 [ 791.051486][T24811] total_writeback 0 [ 791.060813][T24811] total_workingset_refault_anon 190 [ 791.076712][T24811] total_workingset_refault_file 0 [ 791.106279][T24811] total_swap 1404928 [ 791.127066][T24811] total_swapcached 3907584 [ 791.145377][T24811] total_pgpgin 282865 [ 791.169209][T24811] total_pgpgout 282860 [ 791.178082][T24811] total_pgfault 330078 [ 791.214177][T24811] total_pgmajfault 102 [ 791.238620][T24811] total_inactive_anon 0 [ 791.256614][T24811] total_active_anon 12288 [ 791.268558][T24811] total_inactive_file 0 [ 791.281983][T24811] total_active_file 0 [ 791.297891][T24811] total_unevictable 0 [ 791.318495][T24811] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.6043,pid=24810,uid=0 [ 791.376687][T24811] Memory cgroup out of memory: Killed process 24811 (syz.6.6043) total-vm:166120kB, anon-rss:1380kB, file-rss:26684kB, shmem-rss:20kB, UID:0 pgtables:168kB oom_score_adj:0 [ 793.066778][T24935] netlink: 'syz.5.6073': attribute type 3 has an invalid length. [ 793.075010][T24935] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6073'. [ 793.871757][ T28] audit: type=1400 audit(1781397691.052:2301): avc: denied { connect } for pid=24966 comm="syz.5.6085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 793.873854][T24967] xt_socket: unknown flags 0x58 [ 794.581925][T24995] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 794.602352][T24995] bond2 (unregistering): Released all slaves [ 794.716346][T25006] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6096'. [ 794.740986][T25006] loop1: detected capacity change from 0 to 512 [ 794.779883][ T28] audit: type=1400 audit(1781397691.892:2302): avc: denied { getopt } for pid=25003 comm="syz.3.6097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 794.842454][T25006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.885465][T25006] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 795.082427][ T28] audit: type=1400 audit(1781397692.262:2303): avc: denied { write } for pid=25004 comm="syz.1.6096" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 795.225483][T25020] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6099'. [ 795.458996][T25021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6099'. [ 795.495439][T25021] 9p: Bad value for 'wfdno' [ 795.524388][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.568360][T25026] loop1: detected capacity change from 0 to 512 [ 795.671359][T25026] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 795.679737][T25026] EXT4-fs (loop1): orphan cleanup on readonly fs [ 795.686858][T25026] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 795.695826][T25026] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 795.710406][T25026] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 795.770613][T25026] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6103: bg 0: block 64: padding at end of block bitmap is not set [ 795.785945][T25026] loop1: lost filesystem error report for type 5 error -117 [ 795.786250][T25026] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 795.793581][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 795.793602][ C0] EXT4-fs (loop1): initial error at time 1781397692: ext4_validate_block_bitmap:441 [ 795.793626][ C0] EXT4-fs (loop1): last error at time 1781397692: ext4_validate_block_bitmap:441 [ 795.871169][T25026] loop1: lost filesystem error report for type 5 error -117 [ 795.871619][T25026] EXT4-fs (loop1): 1 truncate cleaned up [ 795.887682][T25026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 795.958697][T25045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25045 comm=syz.6.6110 [ 796.108787][ T28] audit: type=1400 audit(1781397693.282:2304): avc: denied { name_bind } for pid=25063 comm="syz.3.6115" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 796.130197][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.072090][T25098] loop1: detected capacity change from 0 to 512 [ 797.087264][T25098] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 797.095570][T25098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 797.108995][T25098] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 797.121832][T25098] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 797.136714][T25098] EXT4-fs (loop1): Cannot turn on quotas: error -5 [ 797.143780][T25098] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6127: bg 0: block 64: padding at end of block bitmap is not set [ 797.160803][T25098] loop1: lost filesystem error report for type 5 error -117 [ 797.160957][T25098] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 797.168292][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 797.168309][ C0] EXT4-fs (loop1): initial error at time 1781397694: ext4_validate_block_bitmap:441 [ 797.168333][ C0] EXT4-fs (loop1): last error at time 1781397694: ext4_validate_block_bitmap:441 [ 797.202483][T25098] loop1: lost filesystem error report for type 5 error -117 [ 797.202774][T25098] EXT4-fs (loop1): 1 truncate cleaned up [ 797.216656][T25098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 797.399664][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.402605][T25132] FAULT_INJECTION: forcing a failure. [ 798.402605][T25132] name failslab, interval 1, probability 0, space 0, times 0 [ 798.417386][T25132] CPU: 0 UID: 0 PID: 25132 Comm: syz.1.6135 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 798.417468][T25132] Tainted: [W]=WARN [ 798.417474][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 798.417486][T25132] Call Trace: [ 798.417492][T25132] [ 798.417498][T25132] __dump_stack+0x1d/0x30 [ 798.417521][T25132] dump_stack_lvl+0x95/0xd0 [ 798.417563][T25132] dump_stack+0x15/0x1b [ 798.417581][T25132] should_fail_ex+0x25e/0x270 [ 798.417629][T25132] should_failslab+0x8c/0xb0 [ 798.417677][T25132] kmem_cache_alloc_noprof+0x66/0x3f0 [ 798.417704][T25132] ? do_getname+0x2e/0x1c0 [ 798.417722][T25132] ? vfs_write+0x844/0x9b0 [ 798.417809][T25132] do_getname+0x2e/0x1c0 [ 798.417829][T25132] getname_flags+0x1d/0x30 [ 798.417845][T25132] do_sys_openat2+0x60/0x130 [ 798.417951][T25132] __x64_sys_openat+0xf2/0x120 [ 798.417975][T25132] x64_sys_call+0x1e39/0x3020 [ 798.418002][T25132] do_syscall_64+0x136/0x3c0 [ 798.418048][T25132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.418074][T25132] RIP: 0033:0x7f97755fce59 [ 798.418089][T25132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.418109][T25132] RSP: 002b:00007f977404f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 798.418128][T25132] RAX: ffffffffffffffda RBX: 00007f9775875fa0 RCX: 00007f97755fce59 [ 798.418251][T25132] RDX: 0000000000006000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 798.418266][T25132] RBP: 00007f977404f090 R08: 0000000000000000 R09: 0000000000000000 [ 798.418282][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.418297][T25132] R13: 00007f9775876038 R14: 00007f9775875fa0 R15: 00007fff4f109728 [ 798.418319][T25132] [ 799.039415][T25141] loop1: detected capacity change from 0 to 4096 [ 799.233156][T25141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.776787][ T28] audit: type=1400 audit(1781397696.472:2305): avc: denied { write } for pid=25140 comm="syz.1.6139" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 800.502183][T25175] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6148'. [ 800.523835][T25175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6148'. [ 800.556440][T25175] vlan0: entered promiscuous mode [ 800.572765][T25175] bridge2: entered promiscuous mode [ 800.589755][T25175] vlan0: entered allmulticast mode [ 800.595033][T25175] bridge2: entered allmulticast mode [ 800.701668][T25178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6145'. [ 800.711965][T25178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6145'. [ 800.733332][T25178] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6145'. [ 800.896688][ T28] audit: type=1400 audit(1781397698.082:2306): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 800.947201][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 800.956432][ T28] audit: type=1400 audit(1781397698.082:2307): avc: denied { write } for pid=23255 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.073308][ T28] audit: type=1400 audit(1781397698.082:2308): avc: denied { write } for pid=23255 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.139913][ T28] audit: type=1400 audit(1781397698.082:2309): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.206693][ T28] audit: type=1400 audit(1781397698.082:2310): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.304588][ T28] audit: type=1400 audit(1781397698.082:2311): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.359914][ T28] audit: type=1400 audit(1781397698.082:2312): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.412856][ T28] audit: type=1400 audit(1781397698.082:2313): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.455250][ T28] audit: type=1400 audit(1781397698.132:2314): avc: denied { write } for pid=23255 comm="syz-executor" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.703680][T25233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6163'. [ 802.283891][T25258] loop1: detected capacity change from 0 to 512 [ 802.512685][T25258] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 802.525314][T25258] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 802.536374][T25258] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6168: Corrupt directory, running e2fsck is recommended [ 802.561046][T25258] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 802.569365][T25258] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6168: corrupted in-inode xattr: e_name out of bounds [ 802.583199][T25258] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 802.583732][T25258] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6168: couldn't read orphan inode 15 (err -117) [ 802.604646][T25258] loop1: lost filesystem error report for type 5 error -117 [ 802.606758][T25258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.177957][T25271] xt_hashlimit: size too large, truncated to 1048576 [ 803.189500][T25274] netlink: 'syz.3.6174': attribute type 10 has an invalid length. [ 803.252761][T25274] bridge0: port 3(team0) entered disabled state [ 803.296536][T25274] team0 (unregistering): left allmulticast mode [ 803.319598][T25274] team_slave_0: left allmulticast mode [ 803.361965][T25274] team_slave_1: left allmulticast mode [ 803.404826][T25274] team0 (unregistering): left promiscuous mode [ 803.452503][T25274] team_slave_0: left promiscuous mode [ 803.490823][T25274] team_slave_1: left promiscuous mode [ 803.556006][T25274] bridge0: port 3(team0) entered disabled state [ 803.816790][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.916202][T25274] team0 (unregistering): Port device team_slave_0 removed [ 803.958545][T25274] team0 (unregistering): Port device team_slave_1 removed [ 803.982622][T25274] team0 (unregistering): Port device bridge1 removed [ 804.010305][T25277] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.029444][T25277] bridge_slave_0 (unregistering): left allmulticast mode [ 804.036692][T25277] bridge_slave_0 (unregistering): left promiscuous mode [ 804.046712][T25277] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.154438][T25290] syzkaller0: entered promiscuous mode [ 804.161238][T25290] syzkaller0: entered allmulticast mode [ 805.453612][ T28] audit: type=1400 audit(1781397702.642:2315): avc: denied { getopt } for pid=25340 comm="syz.2.6189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 805.547889][T25350] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 805.561304][ T28] audit: type=1400 audit(1781397702.742:2316): avc: denied { relabelto } for pid=25349 comm="syz.3.6192" name="462" dev="tmpfs" ino=2395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 805.587055][ T28] audit: type=1400 audit(1781397702.742:2317): avc: denied { associate } for pid=25349 comm="syz.3.6192" name="462" dev="tmpfs" ino=2395 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsa" [ 805.615322][ T28] audit: type=1400 audit(1781397702.742:2318): avc: denied { setattr } for pid=25349 comm="syz.3.6192" name="462" dev="tmpfs" ino=2395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 805.660744][T25350] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6192'. [ 806.068606][T25366] loop1: detected capacity change from 0 to 512 [ 806.085561][T25366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 806.108105][T25366] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 806.227106][T25377] batadv1: entered promiscuous mode [ 806.243505][T25377] batadv1: entered allmulticast mode [ 806.288545][ T28] audit: type=1400 audit(1781397703.472:2319): avc: denied { bind } for pid=25365 comm="syz.1.6198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 806.341843][T23714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.372960][ T28] audit: type=1400 audit(1781397703.562:2320): avc: denied { accept } for pid=25352 comm="syz.2.6193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 806.435269][T23714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.609489][T23714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.653415][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 806.797965][T25407] netlink: 'syz.1.6209': attribute type 1 has an invalid length. [ 806.817948][T23714] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.848175][T25407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.959632][T23714] bridge_slave_1: left promiscuous mode [ 806.965480][T23714] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.992310][T23714] bridge_slave_0: left allmulticast mode [ 807.005717][T23714] bridge_slave_0: left promiscuous mode [ 807.022003][T23714] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.079430][ T28] audit: type=1400 audit(1781397704.262:2321): avc: denied { write } for pid=25417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.131730][T23714] bond1 (unregistering): (slave geneve2): Releasing active interface [ 807.138732][ T28] audit: type=1400 audit(1781397704.322:2322): avc: denied { write } for pid=25428 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.279053][T23714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.289256][T23714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.302191][T23714] bond0 (unregistering): Released all slaves [ 807.315011][T23714] bond1 (unregistering): Released all slaves [ 807.354970][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 807.385226][T23714] tipc: Left network mode [ 807.406523][T23714] hsr_slave_0: left promiscuous mode [ 807.422866][T25440] x_tables: duplicate underflow at hook 1 [ 807.429863][T23714] hsr_slave_1: left promiscuous mode [ 807.435749][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.443366][T23714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.444743][T25443] loop1: detected capacity change from 0 to 128 [ 807.457962][T23714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.471561][T23714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.493469][T23714] veth1_macvtap: left promiscuous mode [ 807.498985][T23714] veth0_macvtap: left promiscuous mode [ 807.506227][T23714] veth1_vlan: left promiscuous mode [ 807.516205][T23714] veth0_vlan: left promiscuous mode [ 807.562922][ T28] audit: type=1400 audit(1781397704.752:2323): avc: denied { write } for pid=25438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.598041][T25456] syz.1.6214: attempt to access beyond end of device [ 807.598041][T25456] loop1: rw=3, sector=145, nr_sectors = 7 limit=128 [ 807.603134][ T28] audit: type=1400 audit(1781397704.772:2324): avc: denied { write } for pid=25457 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.633429][T25456] syz.1.6214: attempt to access beyond end of device [ 807.633429][T25456] loop1: rw=2051, sector=152, nr_sectors = 1 limit=128 [ 807.768338][T23709] kworker/u8:22: attempt to access beyond end of device [ 807.768338][T23709] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 807.782099][T23709] kworker/u8:22: attempt to access beyond end of device [ 807.782099][T23709] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 807.800123][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 807.809315][T23709] kworker/u8:22: attempt to access beyond end of device [ 807.809315][T23709] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 807.823136][T23709] kworker/u8:22: attempt to access beyond end of device [ 807.823136][T23709] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 807.856000][T25464] netlink: 'syz.6.6217': attribute type 1 has an invalid length. [ 807.864699][T25464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6217'. [ 807.868394][T23709] kworker/u8:22: attempt to access beyond end of device [ 807.868394][T23709] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 808.008773][T23709] kworker/u8:22: attempt to access beyond end of device [ 808.008773][T23709] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 808.022826][T23709] kworker/u8:22: attempt to access beyond end of device [ 808.022826][T23709] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 808.043102][T25464] lo: entered allmulticast mode [ 808.054340][T25384] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.061543][T25384] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.068949][T25384] bridge_slave_0: entered allmulticast mode [ 808.083384][T23709] kworker/u8:22: attempt to access beyond end of device [ 808.083384][T23709] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 808.097687][T25384] bridge_slave_0: entered promiscuous mode [ 808.110020][T25463] lo: left allmulticast mode [ 808.126275][T25384] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.243950][T25384] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.251261][T25384] bridge_slave_1: entered allmulticast mode [ 808.257824][T25384] bridge_slave_1: entered promiscuous mode [ 808.275767][T25384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.286170][T25384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.310084][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 808.310207][T25493] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6218'. [ 808.749096][T25384] team0: Port device team_slave_0 added [ 808.758590][T25384] team0: Port device team_slave_1 added [ 808.894460][T25384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.904252][T25384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.242697][T25384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.253849][T25384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.260851][T25384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.286868][T25384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.373769][T25384] hsr_slave_0: entered promiscuous mode [ 809.404715][T25384] hsr_slave_1: entered promiscuous mode [ 809.425904][T25384] debugfs: 'hsr0' already exists in 'hsr' [ 809.444369][T25384] Cannot create hsr debugfs directory [ 809.682709][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 809.771314][T25384] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 809.803574][T25384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.833816][T25384] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 809.860232][T25384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 809.889133][T25384] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 809.997426][T25384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 810.023878][T25535] ±ÿ: renamed from lo (while UP) [ 810.050600][T25543] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6231'. [ 810.066425][T25384] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 810.081006][T25384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 810.180235][T25384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.202543][T25384] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.216347][T23719] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.223459][T23719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.241707][T23712] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.248808][T23712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.514488][T25384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.545591][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 810.545621][ T28] audit: type=1400 audit(1781397707.732:2331): avc: denied { read } for pid=25569 comm="syz.1.6233" path="socket:[76515]" dev="sockfs" ino=76515 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 810.718751][T25384] veth0_vlan: entered promiscuous mode [ 810.726756][T25384] veth1_vlan: entered promiscuous mode [ 810.743999][T25384] veth0_macvtap: entered promiscuous mode [ 810.751241][T25384] veth1_macvtap: entered promiscuous mode [ 810.762103][T25384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.770701][T25384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.784252][T23719] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.921142][T23719] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.936675][T23719] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.945466][T23719] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.888651][T25630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6247'. [ 812.461263][T25656] FAULT_INJECTION: forcing a failure. [ 812.461263][T25656] name failslab, interval 1, probability 0, space 0, times 0 [ 812.476239][T25656] CPU: 1 UID: 0 PID: 25656 Comm: syz.7.6254 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 812.476357][T25656] Tainted: [W]=WARN [ 812.476401][T25656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 812.476412][T25656] Call Trace: [ 812.476418][T25656] [ 812.476425][T25656] __dump_stack+0x1d/0x30 [ 812.476446][T25656] dump_stack_lvl+0x95/0xd0 [ 812.476466][T25656] dump_stack+0x15/0x1b [ 812.476520][T25656] should_fail_ex+0x25e/0x270 [ 812.476634][T25656] should_failslab+0x8c/0xb0 [ 812.476661][T25656] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 812.476729][T25656] ? __alloc_skb+0x2d6/0x690 [ 812.476748][T25656] __alloc_skb+0x2d6/0x690 [ 812.476767][T25656] ? __alloc_skb+0x200/0x690 [ 812.476787][T25656] alloc_skb_with_frags+0x7e/0x3d0 [ 812.476812][T25656] ? is_bpf_text_address+0x141/0x160 [ 812.476898][T25656] ? kernel_text_address+0x94/0xb0 [ 812.476924][T25656] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 812.477001][T25656] sock_alloc_send_pskb+0x44d/0x500 [ 812.477028][T25656] ? stack_depot_save_flags+0x327/0x8e0 [ 812.477109][T25656] __ip_append_data+0x185d/0x2390 [ 812.477137][T25656] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 812.477163][T25656] ? _raw_spin_unlock_bh+0x18/0x20 [ 812.477235][T25656] ? __rcu_read_unlock+0x4e/0x70 [ 812.477255][T25656] ? ipv4_mtu+0x205/0x230 [ 812.477283][T25656] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 812.477352][T25656] ip_make_skb+0x150/0x2d0 [ 812.477454][T25656] udp_sendmsg+0x1056/0x14e0 [ 812.477490][T25656] ? __pfx_udp_sendmsg+0x10/0x10 [ 812.477610][T25656] ? __pfx_inet_sendmsg+0x10/0x10 [ 812.477641][T25656] inet_sendmsg+0xac/0xd0 [ 812.477676][T25656] __sys_sendto+0x3db/0x490 [ 812.477705][T25656] __x64_sys_sendto+0x76/0x90 [ 812.477724][T25656] x64_sys_call+0x2d35/0x3020 [ 812.477760][T25656] do_syscall_64+0x136/0x3c0 [ 812.477788][T25656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.477810][T25656] RIP: 0033:0x7f4f3f64ce59 [ 812.477899][T25656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.477954][T25656] RSP: 002b:00007f4f3e07e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 812.477976][T25656] RAX: ffffffffffffffda RBX: 00007f4f3f8c6090 RCX: 00007f4f3f64ce59 [ 812.477992][T25656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 812.478008][T25656] RBP: 00007f4f3e07e090 R08: 0000200000000140 R09: 0000000000000010 [ 812.478076][T25656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.478091][T25656] R13: 00007f4f3f8c6128 R14: 00007f4f3f8c6090 R15: 00007ffc79ae21c8 [ 812.478113][T25656] [ 813.008754][T25666] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6259'. [ 813.374846][T25671] loop1: detected capacity change from 0 to 512 [ 813.681792][T25671] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 813.693369][T25671] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 813.703487][T25671] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6257: Corrupt directory, running e2fsck is recommended [ 813.718548][T25671] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 813.727420][T25671] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6257: corrupted in-inode xattr: e_name out of bounds [ 813.741354][T25671] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 813.741822][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 813.757389][ C1] EXT4-fs (loop1): initial error at time 1781397710: ext4_iget_extra_inode:5128: inode 15 [ 813.767332][ C1] EXT4-fs (loop1): last error at time 1781397710: ext4_iget_extra_inode:5128: inode 15 [ 813.793771][T25671] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6257: couldn't read orphan inode 15 (err -117) [ 813.805766][T25671] loop1: lost filesystem error report for type 5 error -117 [ 813.819520][T25671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.241987][T25689] loop7: detected capacity change from 0 to 512 [ 814.293295][T25689] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 814.313460][T25689] EXT4-fs (loop7): orphan cleanup on readonly fs [ 814.342123][T25689] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 814.373198][T25689] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 814.405085][T25689] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 814.418709][T25689] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6265: bg 0: block 64: padding at end of block bitmap is not set [ 814.436140][T25689] loop7: lost filesystem error report for type 5 error -117 [ 814.436680][T25689] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 814.444016][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 814.444031][ C1] EXT4-fs (loop7): initial error at time 1781397711: ext4_validate_block_bitmap:441 [ 814.444068][ C1] EXT4-fs (loop7): last error at time 1781397711: ext4_validate_block_bitmap:441 [ 814.478873][T25689] loop7: lost filesystem error report for type 5 error -117 [ 814.479866][T25689] EXT4-fs (loop7): 1 truncate cleaned up [ 814.497011][T25689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 814.647937][T25689] xt_connbytes: Forcing CT accounting to be enabled [ 814.777499][T25384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.991903][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.030426][T25710] FAULT_INJECTION: forcing a failure. [ 815.030426][T25710] name failslab, interval 1, probability 0, space 0, times 0 [ 815.053498][T25710] CPU: 1 UID: 0 PID: 25710 Comm: syz.1.6270 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 815.053538][T25710] Tainted: [W]=WARN [ 815.053546][T25710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.053561][T25710] Call Trace: [ 815.053568][T25710] [ 815.053577][T25710] __dump_stack+0x1d/0x30 [ 815.053626][T25710] dump_stack_lvl+0x95/0xd0 [ 815.053660][T25710] dump_stack+0x15/0x1b [ 815.053679][T25710] should_fail_ex+0x25e/0x270 [ 815.053717][T25710] ? nft_trans_rule_add+0x39/0x1b0 [ 815.053737][T25710] should_failslab+0x8c/0xb0 [ 815.053770][T25710] __kmalloc_cache_noprof+0x5f/0x400 [ 815.053860][T25710] nft_trans_rule_add+0x39/0x1b0 [ 815.053880][T25710] nf_tables_newrule+0x10e5/0x16d0 [ 815.053988][T25710] nfnetlink_rcv+0xbf7/0x1740 [ 815.054033][T25710] netlink_unicast+0x5a7/0x680 [ 815.054158][T25710] netlink_sendmsg+0x5be/0x6f0 [ 815.054203][T25710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.054226][T25710] ____sys_sendmsg+0x532/0x580 [ 815.054248][T25710] ___sys_sendmsg+0x195/0x1e0 [ 815.054317][T25710] __x64_sys_sendmsg+0xd4/0x160 [ 815.054340][T25710] x64_sys_call+0x194c/0x3020 [ 815.054391][T25710] do_syscall_64+0x136/0x3c0 [ 815.054427][T25710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.054451][T25710] RIP: 0033:0x7f97755fce59 [ 815.054477][T25710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.054527][T25710] RSP: 002b:00007f977404f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.054544][T25710] RAX: ffffffffffffffda RBX: 00007f9775875fa0 RCX: 00007f97755fce59 [ 815.054556][T25710] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 815.054568][T25710] RBP: 00007f977404f090 R08: 0000000000000000 R09: 0000000000000000 [ 815.054579][T25710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.054590][T25710] R13: 00007f9775876038 R14: 00007f9775875fa0 R15: 00007fff4f109728 [ 815.054606][T25710] [ 815.062788][T25716] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6272'. [ 815.366411][T25732] loop1: detected capacity change from 0 to 512 [ 815.374019][T25732] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 815.424317][T25732] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.6277: Allocating blocks 41-42 which overlap fs metadata [ 815.451814][T25732] loop1: lost filesystem error report for type 5 error -117 [ 815.455779][T25732] Quota error (device loop1): write_blk: dquota write failed [ 815.463211][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 815.463230][ C1] EXT4-fs (loop1): initial error at time 1781397712: ext4_mb_mark_diskspace_used:4222 [ 815.463273][ C1] EXT4-fs (loop1): last error at time 1781397712: ext4_mb_mark_diskspace_used:4222 [ 815.463545][T25743] loop7: detected capacity change from 0 to 512 [ 815.487180][T25732] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 815.523225][T25732] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.6277: Allocating blocks 41-42 which overlap fs metadata [ 815.541713][T25743] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 815.551732][T25743] EXT4-fs (loop7): orphan cleanup on readonly fs [ 815.559321][T25732] loop1: lost filesystem error report for type 5 error -117 [ 815.559580][T25743] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 815.561943][T25732] Quota error (device loop1): write_blk: dquota write failed [ 815.573306][T25743] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 815.575738][T25732] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 815.597376][T25743] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 815.597762][T25743] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6281: bg 0: block 64: padding at end of block bitmap is not set [ 815.607758][T25732] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.6277: Failed to acquire dquot type 1 [ 815.617420][T25743] loop7: lost filesystem error report for type 5 error -117 [ 815.628388][T25732] loop1: lost filesystem error report for type 5 error -117 [ 815.649300][T25732] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 815.668827][T25743] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 815.671465][T25732] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.6277: corrupted inode contents [ 815.679701][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 815.679734][ C0] EXT4-fs (loop7): initial error at time 1781397712: ext4_validate_block_bitmap:441 [ 815.679755][ C0] EXT4-fs (loop7): last error at time 1781397712: ext4_validate_block_bitmap:441 [ 815.705855][T25743] loop7: lost filesystem error report for type 5 error -117 [ 815.708202][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.727682][T25732] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #12: comm syz.1.6277: mark_inode_dirty error [ 815.737342][T25743] EXT4-fs (loop7): 1 truncate cleaned up [ 815.754092][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.756918][T25732] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.6277: corrupted inode contents [ 815.778293][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.778516][T25732] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #12: comm syz.1.6277: mark_inode_dirty error [ 815.789531][ T28] audit: type=1400 audit(1781397712.972:2332): avc: denied { map } for pid=25761 comm="syz.6.6287" path="socket:[77528]" dev="sockfs" ino=77528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 815.799104][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.823241][T25732] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.6277: corrupted inode contents [ 815.838355][T25743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 815.846185][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.858174][T25732] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 815.877482][T25732] loop1: lost filesystem error report for type 5 error -117 [ 815.877692][T25732] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #12: comm syz.1.6277: corrupted inode contents [ 815.886621][ T28] audit: type=1400 audit(1781397712.972:2333): avc: denied { accept } for pid=25761 comm="syz.6.6287" path="socket:[77528]" dev="sockfs" ino=77528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 815.900921][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.923110][T25732] EXT4-fs error (device loop1): ext4_truncate:4690: inode #12: comm syz.1.6277: mark_inode_dirty error [ 815.937975][T25762] team0: Port device bond0 removed [ 815.943810][T25732] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 815.948603][T25732] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 815.954576][T25762] bridge_slave_0: left allmulticast mode [ 815.958155][T25732] loop1: lost filesystem error report for type 5 error -117 [ 815.966591][T25762] bridge_slave_0: left promiscuous mode [ 815.972752][T25732] EXT4-fs (loop1): 1 truncate cleaned up [ 815.979601][T25762] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.987252][T25732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 816.019843][T25762] bridge_slave_1: left allmulticast mode [ 816.025674][T25762] bridge_slave_1: left promiscuous mode [ 816.031336][T25762] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.051514][T25762] bond0: (slave bond_slave_0): Releasing backup interface [ 816.070919][T25762] bond0: (slave bond_slave_1): Releasing backup interface [ 816.088783][T25762] team0: Port device team_slave_0 removed [ 816.097419][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.112166][T25762] team0: Port device team_slave_1 removed [ 816.119160][T25762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.126558][T25762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.144626][T25762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.152152][T25762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.162443][T25762] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 816.234492][T25384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.698869][T25811] loop1: detected capacity change from 0 to 512 [ 816.724247][T25811] EXT4-fs: Ignoring removed bh option [ 816.733193][T25811] EXT4-fs: inline encryption not supported [ 816.791992][T25811] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 816.833786][T25811] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 816.870277][T25811] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6298: bg 0: block 248: padding at end of block bitmap is not set [ 816.938710][T25811] Quota error (device loop1): write_blk: dquota write failed [ 816.946141][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 816.946164][ C1] EXT4-fs (loop1): last error at time 1781397714: ext4_validate_block_bitmap:441 [ 816.996370][T25811] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 817.012527][T25811] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.6298: Failed to acquire dquot type 1 [ 817.035828][T25811] EXT4-fs (loop1): 1 truncate cleaned up [ 817.047858][T25811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 817.349393][T25807] syz.1.6298 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 817.366297][T25807] CPU: 0 UID: 0 PID: 25807 Comm: syz.1.6298 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 817.366334][T25807] Tainted: [W]=WARN [ 817.366414][T25807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 817.366490][T25807] Call Trace: [ 817.366496][T25807] [ 817.366505][T25807] __dump_stack+0x1d/0x30 [ 817.366536][T25807] dump_stack_lvl+0x95/0xd0 [ 817.366581][T25807] dump_stack+0x15/0x1b [ 817.366603][T25807] dump_header+0x80/0x240 [ 817.366631][T25807] oom_kill_process+0x295/0x350 [ 817.366664][T25807] out_of_memory+0x981/0xbc0 [ 817.366771][T25807] try_charge_memcg+0x621/0xa00 [ 817.366802][T25807] ? submit_bio_noacct_nocheck+0x54f/0x620 [ 817.366843][T25807] charge_memcg+0x6d/0x120 [ 817.366885][T25807] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 817.366912][T25807] __swap_cache_prepare_and_add+0x69/0x490 [ 817.367006][T25807] ? alloc_pages_mpol+0xd9/0x1d0 [ 817.367031][T25807] swap_cache_alloc_folio+0xa2/0x120 [ 817.367059][T25807] swap_cluster_readahead+0x25f/0x3c0 [ 817.367087][T25807] swapin_readahead+0xde/0x840 [ 817.367141][T25807] ? _raw_spin_unlock+0x9/0x30 [ 817.367211][T25807] ? swap_put_entries_cluster+0x44a/0x470 [ 817.367310][T25807] ? __rcu_read_unlock+0x4e/0x70 [ 817.367352][T25807] ? swap_cache_get_folio+0x1e0/0x1f0 [ 817.367376][T25807] do_swap_page+0x34d/0x2150 [ 817.367399][T25807] ? __css_rstat_updated+0xbb/0x280 [ 817.367480][T25807] ? __rcu_read_lock+0x36/0x50 [ 817.367507][T25807] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 817.367533][T25807] handle_mm_fault+0xb3e/0x2da0 [ 817.367565][T25807] do_user_addr_fault+0x634/0x1060 [ 817.367591][T25807] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 817.367642][T25807] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 817.367665][T25807] ? trace_page_fault_user+0x1f/0xa0 [ 817.367744][T25807] exc_page_fault+0x62/0xa0 [ 817.367794][T25807] asm_exc_page_fault+0x26/0x30 [ 817.367817][T25807] RIP: 0033:0x7f97755b7fb8 [ 817.367835][T25807] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 817.367932][T25807] RSP: 002b:00007fff4f109810 EFLAGS: 00010246 [ 817.367948][T25807] RAX: 0000000000000000 RBX: 000055556033c500 RCX: 00007f97755bd68e [ 817.367961][T25807] RDX: 00007fff4f109860 RSI: 0000000000000000 RDI: 0000000000000000 [ 817.367976][T25807] RBP: 00007f9775877da0 R08: 0000000000000000 R09: 0000000000000000 [ 817.367990][T25807] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000c78ee [ 817.368004][T25807] R13: 00007f977587609c R14: 00000000000c7845 R15: 00007f9775876090 [ 817.368057][T25835] loop7: detected capacity change from 0 to 512 [ 817.368094][T25807] [ 817.368361][T25807] memory: usage 307200kB, limit 307200kB, failcnt 391 [ 817.418770][T25835] EXT4-fs: inline encryption not supported [ 817.424869][T25807] memory+swap: usage 308148kB, limit 9007199254740988kB, failcnt 0 [ 817.426487][T25835] ext4: Unknown parameter 'smackfsdef' [ 817.658705][T25807] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 817.666073][T25807] Memory cgroup stats for /syz1: [ 817.666665][T25807] cache 32768 [ 817.674918][T25807] rss 0 [ 817.677685][T25807] shmem 0 [ 817.680615][T25807] mapped_file 24576 [ 817.684445][T25807] dirty 0 [ 817.687381][T25807] writeback 4096 [ 817.690913][T25807] workingset_refault_anon 1340 [ 817.695851][T25807] workingset_refault_file 427 [ 817.700635][T25807] swap 970752 [ 817.704182][T25807] swapcached 7057408 [ 817.709749][T25807] pgpgin 656832 [ 817.714007][T25807] pgpgout 656821 [ 817.717609][T25807] pgfault 752157 [ 817.721261][T25807] pgmajfault 118 [ 817.724838][T25807] inactive_anon 12288 [ 817.728891][T25807] active_anon 0 [ 817.732406][T25807] inactive_file 24576 [ 817.736613][T25807] active_file 8192 [ 817.740332][T25807] unevictable 0 [ 817.743818][T25807] hierarchical_memory_limit 314572800 [ 817.749176][T25807] hierarchical_memsw_limit 9223372036854771712 [ 817.755461][T25807] total_cache 32768 [ 817.775228][T25807] total_rss 0 [ 817.780043][T25807] total_shmem 0 [ 817.785892][T25807] total_mapped_file 24576 [ 817.790316][T25807] total_dirty 0 [ 817.794033][T25807] total_writeback 4096 [ 817.798206][T25807] total_workingset_refault_anon 1340 [ 817.803941][T25807] total_workingset_refault_file 427 [ 817.809235][T25807] total_swap 970752 [ 817.813397][T25807] total_swapcached 7057408 [ 817.818054][T25807] total_pgpgin 656832 [ 817.822286][T25807] total_pgpgout 656821 [ 817.826513][T25807] total_pgfault 752157 [ 817.830637][T25807] total_pgmajfault 118 [ 817.834988][T25807] total_inactive_anon 12288 [ 817.839826][T25807] total_active_anon 0 [ 817.843909][T25807] total_inactive_file 24576 [ 817.848446][T25807] total_active_file 8192 [ 817.856650][T25807] total_unevictable 0 [ 817.860957][T25807] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6298,pid=25807,uid=0 [ 817.882774][T25807] Memory cgroup out of memory: Killed process 25807 (syz.1.6298) total-vm:161884kB, anon-rss:1228kB, file-rss:22708kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 818.063299][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 818.242559][T25876] syzkaller0: entered promiscuous mode [ 818.248113][T25876] syzkaller0: entered allmulticast mode [ 818.257586][T25876] tipc: Enabling of bearer rejected, failed to enable media [ 818.579512][T25905] netdevsim0: renamed from gre0 (while UP) [ 818.588246][T25905] netdevsim0: entered allmulticast mode [ 818.600235][T25905] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 819.328054][T25913] syzkaller0: entered promiscuous mode [ 819.344958][T25913] syzkaller0: entered allmulticast mode [ 819.366679][T25915] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 819.407613][T25913] tipc: Enabling of bearer rejected, failed to enable media [ 820.104372][T25924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.113304][T25924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.122301][T25924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.129689][T25924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.445827][T25949] loop1: detected capacity change from 0 to 4096 [ 820.460918][ T28] audit: type=1400 audit(1781397717.642:2334): avc: denied { write } for pid=25942 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.492380][T25968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25968 comm=syz.5.6342 [ 820.513128][T25949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.522031][ T28] audit: type=1400 audit(1781397717.692:2335): avc: denied { write } for pid=25965 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.632236][ T28] audit: type=1400 audit(1781397717.722:2336): avc: denied { write } for pid=25947 comm="syz.1.6341" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 820.739077][ T28] audit: type=1400 audit(1781397717.922:2337): avc: denied { write } for pid=25976 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.781899][ T28] audit: type=1400 audit(1781397717.962:2338): avc: denied { write } for pid=25990 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 820.807200][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.895243][T26000] loop7: detected capacity change from 0 to 512 [ 820.975888][ T28] audit: type=1400 audit(1781397718.162:2339): avc: denied { write } for pid=25996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.018334][ T28] audit: type=1400 audit(1781397718.202:2340): avc: denied { write } for pid=26014 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.081911][T26000] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 821.094833][T26000] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 821.105326][T26000] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.6339: Corrupt directory, running e2fsck is recommended [ 821.118981][T26000] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 821.127518][T26000] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.6339: corrupted in-inode xattr: e_name out of bounds [ 821.142060][T26000] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.142287][T26000] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6339: couldn't read orphan inode 15 (err -117) [ 821.163252][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 821.163271][ C0] EXT4-fs (loop7): initial error at time 1781397718: ext4_iget_extra_inode:5128: inode 15 [ 821.163298][ C0] EXT4-fs (loop7): last error at time 1781397718: ext4_iget_extra_inode:5128: inode 15 [ 821.189836][T26000] fserror_report: 2 callbacks suppressed [ 821.189850][T26000] loop7: lost filesystem error report for type 5 error -117 [ 821.196347][T26000] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.286692][ T28] audit: type=1400 audit(1781397718.472:2341): avc: denied { write } for pid=26024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.340258][ T28] audit: type=1400 audit(1781397718.522:2342): avc: denied { write } for pid=26035 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 821.905765][T26056] 9p: Bad value for 'rfdno' [ 822.005894][ T28] audit: type=1400 audit(1781397719.182:2343): avc: denied { create } for pid=26054 comm="syz.5.6355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 822.423018][T26074] loop1: detected capacity change from 0 to 512 [ 822.495466][ T3380] IPVS: starting estimator thread 0... [ 822.501551][T26074] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 822.513243][T26074] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 822.523398][T26074] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.6359: Corrupt directory, running e2fsck is recommended [ 822.538627][T26074] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 822.546846][T26074] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6359: corrupted in-inode xattr: e_name out of bounds [ 822.560817][T26074] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 822.561792][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 822.577362][ C1] EXT4-fs (loop1): initial error at time 1781397719: ext4_iget_extra_inode:5128: inode 15 [ 822.587294][ C1] EXT4-fs (loop1): last error at time 1781397719: ext4_iget_extra_inode:5128: inode 15 [ 822.601885][T26074] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6359: couldn't read orphan inode 15 (err -117) [ 822.613872][T26074] loop1: lost filesystem error report for type 5 error -117 [ 822.626289][T26074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.661721][T26076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6360'. [ 822.763823][T26078] IPVS: using max 2400 ests per chain, 120000 per kthread [ 824.012130][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.182975][T26108] 9pnet_fd: p9_fd_create_tcp (26108): problem connecting socket to 127.0.0.1 [ 824.195107][ T28] audit: type=1400 audit(1781397721.372:2344): avc: denied { mounton } for pid=26107 comm="syz.1.6366" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 824.236427][T26109] 9pnet_fd: p9_fd_create_tcp (26109): problem connecting socket to 127.0.0.1 [ 824.326820][T26116] loop1: detected capacity change from 0 to 512 [ 824.348008][T23712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.359339][T26118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2303 sclass=netlink_route_socket pid=26118 comm=syz.6.6367 [ 824.378672][T26116] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 824.414644][T26116] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 824.447771][T23712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.464676][T26116] EXT4-fs (loop1): failed to open journal device unknown-block(0,3) -6 [ 824.544418][T23712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.589809][T26125] FAULT_INJECTION: forcing a failure. [ 824.589809][T26125] name failslab, interval 1, probability 0, space 0, times 0 [ 824.609203][T26125] CPU: 0 UID: 0 PID: 26125 Comm: syz.1.6370 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 824.609237][T26125] Tainted: [W]=WARN [ 824.609245][T26125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 824.609259][T26125] Call Trace: [ 824.609266][T26125] [ 824.609273][T26125] __dump_stack+0x1d/0x30 [ 824.609298][T26125] dump_stack_lvl+0x95/0xd0 [ 824.609320][T26125] dump_stack+0x15/0x1b [ 824.609340][T26125] should_fail_ex+0x25e/0x270 [ 824.609375][T26125] should_failslab+0x8c/0xb0 [ 824.609405][T26125] kmem_cache_alloc_noprof+0x66/0x3f0 [ 824.609437][T26125] ? mas_alloc_nodes+0x1a2/0x210 [ 824.609468][T26125] mas_alloc_nodes+0x1a2/0x210 [ 824.609505][T26125] mas_preallocate+0x2ca/0x500 [ 824.609537][T26125] __split_vma+0x240/0x640 [ 824.609566][T26125] ? lapic_next_event+0x11/0x20 [ 824.609589][T26125] ? tick_program_event+0x79/0xc0 [ 824.609617][T26125] vma_modify+0xb29/0xc80 [ 824.609645][T26125] vma_modify_policy+0x177/0x1b0 [ 824.609675][T26125] mbind_range+0x1bb/0x430 [ 824.609699][T26125] __se_sys_mbind+0x8b5/0xdd0 [ 824.609721][T26125] __x64_sys_mbind+0x78/0x90 [ 824.609739][T26125] x64_sys_call+0x2b72/0x3020 [ 824.609758][T26125] do_syscall_64+0x136/0x3c0 [ 824.609789][T26125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.609811][T26125] RIP: 0033:0x7f97755fce59 [ 824.609828][T26125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.609848][T26125] RSP: 002b:00007f977404f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 824.609869][T26125] RAX: ffffffffffffffda RBX: 00007f9775875fa0 RCX: 00007f97755fce59 [ 824.609884][T26125] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 824.609899][T26125] RBP: 00007f977404f090 R08: 0000000000000007 R09: 0000000000000001 [ 824.609913][T26125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.609927][T26125] R13: 00007f9775876038 R14: 00007f9775875fa0 R15: 00007fff4f109728 [ 824.609946][T26125] [ 824.826095][ T28] audit: type=1400 audit(1781397722.012:2345): avc: denied { create } for pid=26135 comm="syz.5.6373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 824.848818][T23712] netdevsim netdevsim2 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.871961][T26020] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 824.905714][T26095] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.912871][T26095] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.924681][T26095] bridge_slave_0: entered allmulticast mode [ 824.933972][T26095] bridge_slave_0: entered promiscuous mode [ 824.973659][T26095] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.980892][T26095] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.988221][T26095] bridge_slave_1: entered allmulticast mode [ 824.994703][T26095] bridge_slave_1: entered promiscuous mode [ 825.020976][T25384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.081868][T23712] bridge_slave_1: left allmulticast mode [ 825.092309][T23712] bridge_slave_1: left promiscuous mode [ 825.099431][T26154] loop7: detected capacity change from 0 to 512 [ 825.103950][T23712] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.129060][T26154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.164358][T26162] loop1: detected capacity change from 0 to 512 [ 825.175201][T26162] EXT4-fs: Ignoring removed bh option [ 825.180616][T26162] EXT4-fs: inline encryption not supported [ 825.198581][T26162] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 825.238217][T25384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.311354][T26162] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 825.446583][T26162] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6377: bg 0: block 248: padding at end of block bitmap is not set [ 825.483268][T26162] loop1: lost filesystem error report for type 5 error -117 [ 825.488226][T26162] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.6377: Failed to acquire dquot type 1 [ 825.489272][T26189] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6380'. [ 825.495579][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 825.495618][ C1] EXT4-fs (loop1): last error at time 1781397722: ext4_validate_block_bitmap:441 [ 825.538011][T23712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.552037][T23712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.575300][T26162] loop1: lost filesystem error report for type 5 error -28 [ 825.575743][T23712] bond0 (unregistering): Released all slaves [ 825.577288][T26162] EXT4-fs (loop1): 1 truncate cleaned up [ 825.605555][T26095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 825.615281][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 825.618265][T26162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 825.634812][T26177] veth0: entered promiscuous mode [ 825.689086][T26095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.729375][T23712] tipc: Disabling bearer [ 825.743260][T23712] tipc: Left network mode [ 825.755135][T26095] team0: Port device team_slave_0 added [ 825.762004][T26095] team0: Port device team_slave_1 added [ 825.778005][T23712] IPVS: stopping backup sync thread 20520 ... [ 825.803151][T26095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.810223][T26095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.837566][T26095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.850737][T26095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.858036][T26095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.884519][T26095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.033236][T26200] tipc: Enabling of bearer rejected, failed to enable media [ 826.051632][T23712] hsr_slave_0: left promiscuous mode [ 826.060704][T23712] hsr_slave_1: left promiscuous mode [ 826.068640][T23712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.082860][T23712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.118731][T23712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.129060][T23712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.166953][T23712] veth1_macvtap: left promiscuous mode [ 826.172602][T23712] veth0_macvtap: left promiscuous mode [ 826.296307][T26215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6390'. [ 826.394812][T23712] pim6reg (unregistering): left allmulticast mode [ 826.589985][T23712] team0 (unregistering): Port device team_slave_1 removed [ 826.627055][T23712] team0 (unregistering): Port device team_slave_0 removed [ 826.663194][T26162] syz.1.6377 (26162) used greatest stack depth: 7776 bytes left [ 826.965656][T23255] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 827.256299][T26095] hsr_slave_0: entered promiscuous mode [ 827.327201][T26095] hsr_slave_1: entered promiscuous mode [ 827.370446][T26222] loop1: detected capacity change from 0 to 164 [ 827.405515][T26095] debugfs: 'hsr0' already exists in 'hsr' [ 827.461651][T26095] Cannot create hsr debugfs directory [ 827.474159][T26222] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 827.583391][T26222] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 827.625546][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 827.625567][ T28] audit: type=1400 audit(1781397724.812:2348): avc: denied { write } for pid=26219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.772624][ T28] audit: type=1400 audit(1781397724.932:2349): avc: denied { write } for pid=26240 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 827.819297][T26236] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6393'. [ 827.872060][T26222] bond1 (unregistering): Released all slaves [ 827.873775][T26244] loop7: detected capacity change from 0 to 512 [ 827.921092][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 827.966213][T26244] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 827.977946][T26244] EXT4-fs (loop7): orphan cleanup on readonly fs [ 827.987447][T26244] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 828.003283][T26244] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 828.029437][T26244] EXT4-fs (loop7): Cannot turn on quotas: error -5 [ 828.051599][T26244] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6394: bg 0: block 64: padding at end of block bitmap is not set [ 828.087851][T26244] loop7: lost filesystem error report for type 5 error -117 [ 828.088008][T26244] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 828.095384][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 828.095403][ C0] EXT4-fs (loop7): initial error at time 1781397725: ext4_validate_block_bitmap:441 [ 828.095423][ C0] EXT4-fs (loop7): last error at time 1781397725: ext4_validate_block_bitmap:441 [ 828.130811][T26244] loop7: lost filesystem error report for type 5 error -117 [ 828.131270][T26244] EXT4-fs (loop7): 1 truncate cleaned up [ 828.147131][ T28] audit: type=1400 audit(1781397725.332:2350): avc: denied { write } for pid=26252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.156282][T26244] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 828.192058][ T2981] ================================================================== [ 828.200153][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 828.208133][ T2981] [ 828.210441][ T2981] write to 0xffff888107dff7b0 of 8 bytes by task 23334 on cpu 0: [ 828.218138][ T2981] dentry_unlink_inode+0x65/0x280 [ 828.223154][ T2981] d_delete+0xc8/0xe0 [ 828.227127][ T2981] d_delete_notify+0x32/0x100 [ 828.231797][ T2981] vfs_unlink+0x285/0x490 [ 828.236120][ T2981] filename_unlinkat+0x1dc/0x410 [ 828.241053][ T2981] __se_sys_unlink+0x2b/0xe0 [ 828.245711][ T2981] __x64_sys_unlink+0x1f/0x30 [ 828.250393][ T2981] x64_sys_call+0x2eb6/0x3020 [ 828.255058][ T2981] do_syscall_64+0x136/0x3c0 [ 828.259644][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.265527][ T2981] [ 828.267832][ T2981] read to 0xffff888107dff7b0 of 8 bytes by task 2981 on cpu 1: [ 828.275357][ T2981] step_into_slowpath+0x12c/0x4c0 [ 828.280369][ T2981] path_lookupat+0x2eb/0x4c0 [ 828.284946][ T2981] filename_lookup+0x18f/0x390 [ 828.289696][ T2981] do_readlinkat+0x74/0x2f0 [ 828.294188][ T2981] __x64_sys_readlink+0x47/0x60 [ 828.299024][ T2981] x64_sys_call+0x2b51/0x3020 [ 828.303716][ T2981] do_syscall_64+0x136/0x3c0 [ 828.308305][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.314197][ T2981] [ 828.316503][ T2981] value changed: 0xffff888119e7a618 -> 0x0000000000000000 [ 828.323601][ T2981] [ 828.325913][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 828.332137][ T2981] CPU: 1 UID: 0 PID: 2981 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 828.342539][ T2981] Tainted: [W]=WARN [ 828.346324][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 828.356361][ T2981] ================================================================== [ 828.370276][ T28] audit: type=1400 audit(1781397725.552:2351): avc: denied { write } for pid=26263 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.449762][T26267] syzkaller0: entered promiscuous mode [ 828.455313][T26267] syzkaller0: entered allmulticast mode [ 828.475432][T26267] tipc: Enabling of bearer rejected, failed to enable media [ 828.545027][T25384] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.559648][ T28] audit: type=1400 audit(1781397725.742:2352): avc: denied { write } for pid=26270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.601834][ T28] audit: type=1400 audit(1781397725.782:2353): avc: denied { write } for pid=26284 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.606078][T26095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 828.640225][T26095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.648020][T26095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 828.656916][T26095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.664986][T26095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 828.674045][T26095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.681724][T26095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 828.690678][T26095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.720745][ T28] audit: type=1400 audit(1781397725.902:2354): avc: denied { write } for pid=26286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.749295][ T28] audit: type=1400 audit(1781397725.902:2355): avc: denied { write } for pid=26303 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.750455][T26095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.783281][T26095] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.792136][T23719] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.799207][T23719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.810328][T23713] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.817436][T23713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.837836][ T28] audit: type=1400 audit(1781397726.022:2356): avc: denied { write } for pid=26305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 828.843741][T26095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 828.942844][T26095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.995847][T26095] veth0_vlan: entered promiscuous mode [ 829.003388][T26095] veth1_vlan: entered promiscuous mode [ 829.016996][T26095] veth0_macvtap: entered promiscuous mode [ 829.024204][T26095] veth1_macvtap: entered promiscuous mode [ 829.033907][T26095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.044849][T26095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.055503][T23713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.064615][T23713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.073840][T23713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.082688][T23713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0