last executing test programs: 1m33.705345705s ago: executing program 1 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x13562, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa94, 0x3}, 0x0, 0x10000, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1, @loopback, 0x10}, {0xa, 0x4e1e, 0x800000d, @mcast1, 0x1}, r2, 0x5}}, 0x48) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000006dc0)=@newchain={0xe88, 0x64, 0x300, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x5, 0x10}, {0xf, 0x2}}, [@f_rsvp={{0x9}, {0xe58, 0x2, [@TCA_RSVP_ACT={0xe54, 0x6, [@m_pedit={0xe50, 0x3, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x7, 0x7, 0x9, 0x1}, 0xf1, 0x2}, [{0x2, 0xffffffff, 0x752b, 0x9, 0x5, 0x2}, {0x6507b03b, 0x1, 0x7, 0xfffffffe, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x8a, 0x6, 0x2}, {0x7, 0x1200000, 0x88d, 0x2, 0x4, 0x2}, {0xffff5cff, 0x4, 0x0, 0x1, 0x40, 0x8001}, {0x6, 0x9, 0x400003, 0x0, 0x8, 0xf}, {0x5, 0x6, 0x2, 0x2, 0x3, 0x3}, {0x9, 0x7fffffff, 0x39cbefbf, 0x3, 0x3, 0x8}, {0x6, 0x0, 0xf, 0x1, 0x9, 0x1000}, {0x80000000, 0xffff, 0x4, 0x4, 0x80}, {0x3ff, 0x4, 0x3a14, 0x56d5, 0x2, 0x2}, {0x2, 0x2, 0x8, 0x7, 0xffffff81}, {0x3, 0xc9d, 0x3, 0x13ee, 0x4, 0x6}, {0x7fffffff, 0x1, 0x8, 0x4e80000, 0xf950, 0x9873}, {0x3772, 0x1182, 0x7, 0x6ae9, 0x79, 0xfb28}, {0x8, 0x6962, 0x0, 0x6, 0x4, 0x157}, {0x12968238, 0x0, 0xffffffff, 0x101, 0x0, 0x6}, {0x8, 0x9, 0xa68c, 0x2, 0x1, 0x80000000}, {0x1, 0x80000001, 0x8, 0x1000, 0x7, 0xa}, {0x6, 0x7, 0x9, 0x7fff, 0x6ffb, 0x7}, {0x2, 0x7bb, 0x10, 0xb70, 0x9, 0x9}, {0x6, 0x5, 0x80000000, 0x5, 0x40}, {0xfffff2e7, 0x7, 0x3, 0x7, 0xa2, 0xfffffff9}, {0x7, 0x2, 0xd, 0x5, 0x6, 0x7fffffff}, {0xb30, 0xfffffff8, 0xc767, 0x2, 0x3, 0x805a0}, {0xffff3594, 0x7, 0x8, 0x2, 0xfffff1f2, 0x4}, {0x4, 0x1, 0x3, 0x1ff, 0x3, 0x3ff}, {0xa0d0, 0xffffff30, 0x0, 0x1, 0x5, 0x5}, {0x0, 0x8, 0x3d, 0x4, 0xfffffffd, 0xde0}, {0x6, 0x8, 0xfffffffc, 0x4, 0x80009, 0x10000}, {0x0, 0x80000000, 0x20000085, 0x9, 0x30ba, 0xfc}, {0x6, 0xffffffff, 0xf, 0x7, 0x7f, 0x1efb}, {0xfffffbff, 0x0, 0x3, 0xe8f6, 0x4, 0x98d}, {0x8, 0x7cd, 0x8, 0xff, 0x7, 0x1}, {0x5, 0x3, 0x7ff, 0x0, 0x2, 0x613}, {0x4, 0xfff, 0x4c3c, 0x5, 0x2, 0x2}, {0x8, 0x2, 0x0, 0xfffffffd, 0xdb1c, 0x3ff}, {0x5, 0xfffffffd, 0x8001, 0x81, 0x9, 0x1}, {0x3, 0x4175, 0x0, 0x2, 0x9, 0x5}, {0x1, 0x3, 0x4, 0x9, 0x100, 0x2}, {0x7, 0x10, 0x0, 0x9, 0xdc}, {0xfffffffb, 0x8, 0xff, 0x6, 0x3, 0x8}, {0x5, 0xff, 0x401, 0x6, 0x7, 0x3}, {0x18, 0x1, 0x4, 0xfff, 0xa, 0x2}, {0x6, 0x9, 0xfffd, 0x3f, 0xab9, 0xfffffff5}, {0x7fffffff, 0x2, 0x94c, 0x9dee, 0xffff1483, 0x8}, {0x6fce8c73, 0x81, 0x7, 0x3ff, 0x0, 0x1}, {0x7fff, 0xad, 0x4, 0x0, 0x4, 0x7ff}, {0x1, 0xe364, 0x100, 0x9, 0x3, 0x2}, {0x5, 0x4, 0x80000000, 0x6, 0xb, 0x8}, {0xb95c, 0x80000001, 0x9, 0x6, 0xc, 0xb}, {0x3, 0x3, 0xc1, 0x0, 0x7f7, 0xfffff530}, {0x1, 0x0, 0x40, 0x2, 0x5}, {0x0, 0x3, 0x7, 0x82b, 0x0, 0x5}, {0xfff, 0x98, 0x6a4c, 0x101, 0x9, 0x40}, {0xffff, 0x7, 0x38, 0xb, 0x8, 0x8000}, {0x1, 0x0, 0x0, 0x6, 0x5, 0xf8}, {0x1, 0x6, 0xef0, 0x0, 0x101, 0x2}, {0x8, 0x7, 0x6f, 0x7, 0x6, 0x3}, {0x3f, 0x5, 0x3, 0x8, 0x9, 0x1}, {0x80000001, 0xfffffff9, 0x5, 0x800, 0x543, 0x1}, {0x22a, 0x201, 0x3, 0x0, 0x4, 0x7}, {0xad, 0x7, 0xfffffffa, 0x7b9, 0x164, 0x9}, {0x4, 0x7, 0x9, 0x7, 0x5, 0xc66}, {0x9, 0x3, 0x5, 0x3, 0x54, 0x6}, {0xf, 0x5, 0x9, 0x9, 0xe, 0x7}, {0x2a0d, 0x5, 0x4, 0x7, 0x9, 0x4}, {0x17, 0x200, 0xffff8001, 0x6, 0x62a, 0x4}, {0xc, 0x24000, 0x7f, 0x6b, 0x4, 0xd}, {0x7329e723, 0x4, 0x2, 0x1, 0x2, 0x5}, {0x10000, 0x80, 0x5821, 0x0, 0x5, 0x4}, {0x6, 0x3, 0x2, 0x7, 0x3, 0xcb14}, {0x7, 0x25b, 0x2, 0x6, 0x4, 0x9}, {0x8, 0x7, 0x4, 0xfffffffe, 0x7, 0x9}, {0x7, 0x4, 0x0, 0x648, 0x5, 0x100}, {0x1, 0x0, 0x59a0, 0x1, 0x7, 0x401}, {0x10000, 0x7ff, 0xfffffcca, 0xff, 0x8, 0x3}, {0x1, 0x4, 0x5, 0x7, 0x5}, {0x4, 0x2, 0x6, 0xd, 0x7, 0xb152}, {0x47, 0x9, 0x5, 0xfffffff9, 0x7fffffff, 0xa00000}, {0x4, 0x26c, 0x9, 0x8bab, 0xbc5d}, {0x1, 0x7, 0x5, 0x7, 0x8000, 0x40009}, {0x5f, 0x8, 0x5, 0x200, 0x8, 0x10001}, {0x8, 0x2, 0x80000000, 0x6, 0x101, 0x8}, {0x80000003, 0xfff, 0x10, 0xfffffff3, 0x8, 0x4}, {0x800, 0xffff, 0x5, 0x7, 0x344, 0x2b25}, {0x8, 0x7, 0x6, 0x1, 0x3, 0x8e02}, {0x1, 0x9e6, 0x8, 0x400, 0x6, 0x3}, {0x8, 0x0, 0x1, 0x7, 0x1, 0x3}, {0x9, 0x2, 0x2, 0x8, 0x3, 0x4}, {0x6, 0xfffffec4, 0x200, 0x8, 0x8, 0x9}, {0x1, 0x8, 0x500, 0x400, 0xc52b, 0x4}, {0x9, 0x1, 0x100, 0xb6a, 0x9, 0x32b5}, {0x8, 0x1, 0x4, 0x0, 0xd73, 0x870}, {0xe08c, 0x7ff, 0x2, 0x6, 0x40, 0x9}, {0xffff, 0x4428, 0x3, 0x6, 0x8, 0x9}, {0x1000, 0x10001, 0x5, 0x4, 0x3, 0xb}, {0xfffff0aa, 0x9, 0xfffffffa, 0x5, 0x2, 0x4}, {0xd, 0xfffffff0, 0x4, 0x0, 0x8, 0x101}, {0xd, 0x3, 0x686, 0xfffffffa, 0x4, 0x4}, {0x7fff, 0x6, 0x200, 0x6, 0x4, 0x8}, {0x96, 0x6, 0x7, 0x7, 0x226, 0x8}, {0x6, 0x3, 0x5, 0x6, 0x7, 0xfff}, {0x3, 0xffffffff, 0x2, 0x568, 0x4, 0xffffffeb}, {0x2, 0x200, 0x2, 0x7, 0x6, 0x6}, {0x4, 0x566, 0x10001, 0xb, 0x4, 0x5594fdf3}, {0x423303a3, 0x9, 0x6, 0x3, 0x6, 0x3}, {0x100, 0x3, 0x0, 0x9, 0x8, 0x25}, {0x8, 0xd47, 0x0, 0x0, 0x6, 0x8f6d}, {0xff, 0x0, 0x0, 0x1, 0x7, 0xe}, {0xce1, 0x9, 0x0, 0x4, 0xffffffff, 0x200}, {0x4, 0xe, 0x3, 0x5e0, 0x8, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x4, 0x3}, {0x4f75, 0x8, 0x3c, 0xb, 0x4, 0x5}, {0x3, 0xd64, 0x1, 0x6, 0x8, 0x6}, {0x5, 0x401, 0x6, 0x4, 0x80, 0x640a525a}, {0x5, 0x0, 0x8, 0xfffffffe, 0xe, 0x6cd4}, {0x9, 0x0, 0x8, 0xa9ba, 0x100, 0x5}, {0x15, 0xfffffeff, 0x2, 0x5, 0x5fc0, 0xfffffff1}, {0x39d, 0x9, 0x1, 0x0, 0xfc, 0x7}, {0x6, 0xe69, 0xe, 0xffffff81, 0xbe7e, 0x401}, {0xfffffffa, 0x4, 0x0, 0x0, 0x6, 0xfffff001}, {0xcf2d, 0x8, 0x9176, 0x0, 0x4f, 0x1}, {0x0, 0x9, 0x5, 0xfff, 0x9030}, {0x4, 0x4, 0x800, 0x41e, 0x8000}, {0x6, 0xfffffffa, 0x0, 0x9a, 0x6, 0x8}, {0x3, 0xb, 0xf079, 0x7fffffff, 0x200, 0x1000407}, {0x65f, 0x100, 0x8, 0x1, 0x400, 0x2}], [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {0x5, 0x649fb4c58d4cf3cc}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x3}, {0x1}, {0x2, 0xd2cd4f2f2bcaea07}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x8dafc58315d2bbb3}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5}, {0x3}, {0x4, 0x9889dd74d1bcf2ee}, {0x1, 0x1}, {}, {0x3}, {}, {}, {0x3}, {0x3}, {0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xe88}, 0x1, 0x0, 0x0, 0x810}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xffffffff}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) setsockopt$inet6_tcp_int(r4, 0x6, 0x17, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0x99, &(0x7f0000000780), 0x0, 0x10, &(0x7f00000001c0), &(0x7f00000002c0), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioprio_set$pid(0x1, 0x0, 0x2007) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="8c0100002100080029bd7000ffdbdf25ac1e000100000000000000000000000000000000000000000000ffffe00000014e2400074e2400050200008032000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x248c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) close(r0) 1m33.260506739s ago: executing program 3 (id=435): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f00000002c0)={0xa, 0x4e24, 0x14, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005e40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)='z=', 0x2}], 0x1, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES8], 0x58}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="e6", 0x1}], 0x1, &(0x7f0000000f80)=ANY=[], 0x18}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)="1230", 0x2}], 0x1}}], 0x4, 0x2400c444) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 1m33.169467284s ago: executing program 3 (id=437): r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ipv6_route\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@newae={0x5c, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in6=@mcast1, 0x4d6, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x273cc2d5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd28, 0x70bd28, 0x70bd27, 0x70bd29, 0x26c4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x4814) pread64(r0, &(0x7f00000000c0)=""/102379, 0x18feb, 0x94d) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078400000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) 1m33.13714391s ago: executing program 3 (id=440): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x7}, 0x100, 0xa88, 0xae, 0x5, 0x0, 0x7ffc, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setreuid(0x0, 0xee00) 1m32.907583738s ago: executing program 1 (id=445): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x404008, &(0x7f0000000240)={[{@prjquota}]}, 0x1, 0x51b, &(0x7f0000001340)="$eJzs3V1rHGsdAPD/TLI5aZtzskdF6gHPOXgqbdHuJo1to0hbQfSqoNb7GpNNCNlkQ3ZTm1A0xQ8giKjgB/BG8AMI0o8gQkHvRUURbfXCC+3I7k40L7vJkpdu3fx+8GSeZ97+zzNkZuflYSaAM+v9iLgbEUMRcTUixvPxaZ5iq52a8714/ni2mZLIsvt/TSLJx22vq1kejogL+WKjEfG1L0d8M9kft76xuTRTrVbW8nK5sbxarm9sXltcnlmoLFRWpqYmb07fmr4xPZHljtXOYkTc/uIff/i9n37p9i8//a3fPfjzlW83q/X5j7brHRGzxwrQRXvdhda22NbcRmunEaxPmu0pDPW7FgAA9KJ5jv+hiPhE6/x/PIZaZ3MAAADAIMnujMW/kogMAAAAGFhpRIxFkpbyvgBjkaalUrsP70fifFqt1Rufmq+tr8w1p0UUo5DOL1YrE3lf4WIUkmZ5Mu9ju12+vqc8FRFvR8QPxs+1yqXZWnWu3zc/AAAA4Iy48N7u6/9/jKetPAAAADBgil0LAAAAwKBwyQ8AAACDz/U/AAAADLSv3LvXTNn2d7znHm6sL9UeXpur1JdKy+uzpdna2mppoVZbaL2zb/mw9VVrtdXPxMr6o3KjUm+U6xubD5Zr6yuNB4u7PoENAAAAvEJvv/f0t0lEbH3uXCtF/h5AgF3+0O8KACdpqN8VAPpmuN8VAPqmcOgcjhAw6JJDpu/vvNO+Vxi/Op36AAAAJ+/yx/Y//x/Jpx1+bwD4f6avDwCcPZ7uwdlVOGoPwIsnXROgX95qD97YOe6fO/JdX97Rw/P/9j2GLDty5QAAgBMx1kpJWsrP08ciTUuliDdbnwUoJPOL1cpEfn3wm/HCG83yZGvJ5NA+wwAAAAAAAAAAAAAAAAAAAAAAAABAW5YlkQEAAAADLSL9U9J6m3/E5fFLY7vvDuz56tdP7v/o0UyjsTYZMZL8bbw5aiQiGj/Ox1/PfBIAAAAAXgPt6/R8ONnv2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwaF48fzy7nV5l3L98ISKKneIPx2hrOBqFiDj/9ySGdyyXRMTQCcTfehIRFzvFT+JllmXFvBad4p875fjF1qbpHD+NiAsnEB/OsqfN48/dTvtfGu+3hp33v+E8HVf341/63+PfUJfjz5t7yt288+zn5a7xn0S8M9z5+LMdP2nH3xWiWfigxzZ+4+ubmx0n7Fhlp/g7Y5Uby6vl+sbmtcXlmYXKQmVlamry5vSt6RvTE+X5xWol/9sxzPc//ouXB7X/fJf4xd3t37f9L/XU+iz+/ezR8w+3C4VO8a980Pn392KX+Gn+2/fJPN+cfnk7v9XO7/Tuz3797kHtn+vS/tFD2n+lp/bHZ69+9bu/7zhl39YAAF6F+sbm0ky1Wlk7IDPawzxHy7wVEUda/M7p1KePmXg9qtGvTPad9v/j8dZzzMX3ZbLjLD4cJ1CNkX376VAcdYVJxFb0vMf18aAEAACciv+d9B/0BAkAAAAAAAAAAAAAAAAAAAA4TUd8LdloRPQ8896YW/1pKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAgf4TAAD///j+0K8=") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) fallocate(r3, 0x28, 0x8, 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}, {&(0x7f0000000200)=""/115, 0x73}, {&(0x7f00000000c0)=""/177, 0xb1}], 0x3}, 0x10100) 1m31.971614264s ago: executing program 3 (id=447): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x170, 0x1a, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x20, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x70bd28, 0x7, [0x2]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f00000005c0), 0x1, 0x461, &(0x7f0000000600)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x90, 0x7) mkdir(&(0x7f0000000080)='./file0\x00', 0x74) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1m31.019279323s ago: executing program 3 (id=455): setresgid(0x0, 0xee00, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800008, 0x0) r0 = syz_clone(0x108500, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='stack\x00') pread64(r1, &(0x7f0000000500)=""/31, 0x1f, 0x6677) syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x3200) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8201, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) lsm_list_modules(0x0, 0x0, 0x0) setuid(0xee01) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x48000, 0x91) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x3, 0x2000001, 0x2000}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fcdbdf2502000000", @ANYRES32=r4, @ANYBLOB="1000a206080001000000000008000f0005"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x0) lseek(r5, 0x7ffffffffffffffe, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000080)=""/209, 0xd1}], 0x1) socket$packet(0x11, 0x3, 0x300) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) 1m30.98109219s ago: executing program 1 (id=457): socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000006850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0xffffffffffffffe2, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x3c}}, 0x0) 1m30.225655396s ago: executing program 3 (id=460): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m30.145413729s ago: executing program 32 (id=460): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1m29.90264446s ago: executing program 1 (id=465): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10084, &(0x7f0000000e00)={[{@minixdf}, {@i_version}, {@usrquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@nomblk_io_submit}, {@lazytime}, {@jqfmt_vfsold}, {@grpquota}]}, 0x1, 0x401, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@grpjquota}, {@noblock_validity}]}, 0x1, 0x44c, &(0x7f0000000900)="$eJzs3MtvG0UYAPDPdpxH25BQyqOhhUBBRDySJn3QA5cikDiAhASHIk4hSavQtEFNkGgVQeAQjqgSd8QRib+AC+WCgBMSV7gjpAjlQuFktPZu6ia2cRKnLvHvJ207szPWzLe748zO2g6gYw0n/+QiDkTErxExUMneXmG48t/NtaWpv9eWpnJRKr3xZ65c76+1pamsava6/ZVMqdSg3ZW3Iybn5maupPmxxUvvjS1cvfbc7KXJCzMXZi5PnDlz8sTR7tMTp1oSZ3/S16EP548cfuWt669Nnbv+zo9fJ/09kJZXx9Eqw5WjW9OTrW6szfqr0rmuNnaELSlERHK6iuXxPxCF6FsvG4iXP2lr54BdVSrlSz31i5dLwB6WTNSBTpT9oU/uf7PtDk097gqrZ2N9HeNmulVKuiKf1imm90i7YTgizi3/80WyxS6tQwAAVLtxNiKerTX/y8cDVfXuSZ8NDUbEvRFxMCLui4hDEXF/RLnugxHx0Bbb3/iEZPP8pzSwrcCalMz/Xkifbd0+/8tmfzFYSHP95fiLufOzczPH02MyEsWeJD/eoI3vXvrls3pl1fO/ZEvaz+aCaT/+6NqwQDc9uTi5k5irrX4cMdRVK/7c+pw3mR8fjoihbbYx+/RXR+qV/Xf8DbRgUl76MuKpyvlfjg3xZ3J1n0+OP3964tRYb8zNHB/LrorNfvp55fV67e8o/hZYvVGKfTWv//X4B3O9EQtXr10sP69d2HobK799WveeZrvXf3fuzXK6O933weTi4pXxiO7cq5v3T9x6bZbP6ifX/8ix2uP/YNw6Eg9HRHIRH42IRyLi0bTvj0XE4xFxrEH8P7z4xLtbj7/BqnwLrWZjqNH5j+rzv/VE4eL339Rrv7nzf7KcGkn3NPP+12wHt3vcAAAA4P8kX/4MfC4/up7O50dHK5/hPxT7epN7/2fOz79/ebryWfnBKOazla6BqvXQ8XRtOMtPbMifSNeNPy/0lfOjU/Nz0+0OHjrc/jrjP/F7od29A3ad72tB5zL+oXMZ/9C5jH/oXMY/dK5a4/+jNvQDuPOqxn9fjeJa+4A9wvwfOpfxD53L+IeOVPe78fkdfeVfok2Jb7t39lsNzScif5eEvGcSxahZ1NX0j1lsM9FTs6jd70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACt8W8AAAD//2+J34o=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x1200021, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x10000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7d1e0300231a05001c0012800900010069706974000000000c000280084002007f0000012e9ce8f5f164f7b82ae375a5b36cdff3c8789a5665f13c4702bbaa7534cd4abea959df38c12a6842432fe893b5568b05a4ba56fd0a133bb57f8b4506bdc8970097357e7f7cd25724e92a9104a380714c0d22a91e686178"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@ipv6_deladdrlabel={0x38, 0x49, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, r2, 0xfffffff9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b '], 0xa) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$peeksig(0x4212, r6, &(0x7f0000000140), &(0x7f0000000000)) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) socket$netlink(0x10, 0x3, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r8, 0xec, &(0x7f0000000300)=""/190) 1m28.724316547s ago: executing program 1 (id=468): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x6}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000014c0)='tasks\x00', 0x2, 0x0) syz_clone(0x4000, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000080)=0xc, 0x6, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES64, @ANYBLOB="f4c3d97780d6ae73b6c85ac2c3742ac6f54653567a6ac9d85a78b091ffbbeacdd900e434c2eaa85708fb11876a97b3bc83e3aadb495d4c866a3519ee2ec3ca94e962f34594898b9376fe9e44a50c7cfb86186ff0565d1659d3473a718372e609ba9b262e23171bf662802ba372f0cca94f60e700842871fe27f7c2c7a4123c878d656d77"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) capset(0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KIOCSOUND(r2, 0x4b2f, 0xb00000000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2) getgroups(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x4}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0]}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={r5, 0x5}, &(0x7f0000000300)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x50) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd61b341af00180000fe8800c2caf8731889cc00ff0700000000000000000101fc000000000000000000000000000001ff020708000000000000000000"], 0x0) 1m26.557302598s ago: executing program 1 (id=481): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x7}, 0x100, 0xa88, 0xae, 0x5, 0x0, 0x7ffc, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setreuid(0x0, 0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 1m26.557048139s ago: executing program 33 (id=481): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x7}, 0x100, 0xa88, 0xae, 0x5, 0x0, 0x7ffc, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d4, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x6}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setreuid(0x0, 0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) 49.7136619s ago: executing program 4 (id=877): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}], 0x2) 47.298384103s ago: executing program 4 (id=907): syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x24020400) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x12000021) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r6) sendmmsg$inet(r6, &(0x7f000000a3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r0) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r7, 0x400, 0x1) r8 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0xfffffff7, 0x4, 0x7, 0xfffffe01, 0x81, 0x3, 0x8}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x3, 0x9, 0xb, 0x4, 0xfffffffb, 0xfffffffc, 0xa, r1}, &(0x7f0000000080)=0x20) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r2, 0x8, 0x9}, 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x60842, 0x1) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000640)='.\x00', 0x82000000) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) read(r3, &(0x7f0000000080)=""/36, 0x24) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r1, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x10002, @loopback}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r6 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r5, &(0x7f0000000200)}, 0x20) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc0100000000000000000000000000fe000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000004d46c000000fc010000000000000000000000000001fe000000000000009201000000000010a39b000000000800ffff0000000000001c250800000000000500000000000000fcffffffffffffff0400000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff40000000f9030000000000007e00000005350000020001002000000000000000480003006465666c61744b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0002000000"], 0x140}}, 0x844) 46.099391393s ago: executing program 4 (id=915): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) poll(0x0, 0x0, 0x9) (async, rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @mcast1}, r6, 0x4040099d}}, 0x48) (async, rerun: 32) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000200), r5}}, 0x18) (async, rerun: 32) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r7 = epoll_create1(0x80000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x158) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0xe000001a}) (async, rerun: 32) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) io_setup(0x8, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x581, &(0x7f0000001440)="$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") 45.988851192s ago: executing program 4 (id=917): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000180)=0x80000004, 0x4) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0xe21, @rand_addr=0x64010101}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) 45.920295913s ago: executing program 4 (id=919): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000002080)=""/4080, 0xff0}], 0x1, 0x806, 0x3) close(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2d, 'cpuset'}, {0x2b, 'io'}]}, 0x12) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000, 0x1}, {0x9}, {0x0, 0x0, 0x2}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {0xd5a0, 0x9}, {}, {0x0, 0x8}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) socket$netlink(0x10, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 39.757161142s ago: executing program 6 (id=968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x80, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x3}]}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 39.723729078s ago: executing program 6 (id=969): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3f, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x374}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) io_uring_enter(r2, 0x8a7, 0x77ae, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) r6 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020058"], 0x0) syz_emit_ethernet(0x3f, &(0x7f0000001380)=ANY=[@ANYBLOB="e727dc07001faaaaaaaaaabb86dd609907a600092c03cb697a653e336f000000500000000000ff020000000000000000000000000001f00040"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r9, r8, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3fffffffb}, 0xc0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0xb) syslog(0x4, 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@empty}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 39.640601841s ago: executing program 6 (id=971): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@data_err_ignore}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$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") sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x801) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000210) rmdir(&(0x7f0000000040)='./bus\x00') r1 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) 39.52836402s ago: executing program 6 (id=974): r0 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)=""/7, 0x7) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_print_times', 0x60883, 0x0) io_submit(r1, 0x2, &(0x7f0000001440)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x3, 0x800d, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x101, r2, 0x0, 0x0, 0x245, 0x0, 0x2, r2}]) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x1}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 38.588709917s ago: executing program 6 (id=979): socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000006850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0xffffffffffffffe2, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x3c}}, 0x0) 37.895832173s ago: executing program 6 (id=988): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20565, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x100904, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800454e0014006700000272907800000000ffffffff"], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000680), 0x1, 0x592, &(0x7f0000002380)="$eJzs3d9rW1UcAPDvTZv91nYwhopIwQcnc+na+mOCD/NZhwN9n6HNymi6jCYdax1se3DPMnxQHIiPgvjs4/Af8MG/YaDCkFH0wZfITW+ytE3adOvSbvl84JZz7rnpOSf3npPvzUlIAANrLP2Ti3g5Ir5KIkYiIsnKhiMrHFs9buXh9el0S6Je//TvpHFcmm/+r+bjDmeZlyLi1y8jTuY21ltdWp4rlsulhSw/Xpu/Ml5dWj51ab44W5otXZ6cmjrzztTk+++9u2N9ffP8v99+cm8oyx29k8TZOJLl2vuxuaObFd5sz4zFWPac5OPsugMnem30MyLpuPfnvreD7RnKxnk+0jlgJIayUQ88/25ERB0YUMm2x//v+afTEqC/mnFA895+6/vgH/sQlfTPgw9Xb4A29n949b2ROBD5+CYOrSRr7ozS+93RHag/reOXP+/eSbfY1vsQAE/m5q2IOD08vHH+S7L57/Gd7uGY9XWY/6B/7qXxz1tZ/LPmTfxcK/5JrY9/DncYu49j6/GfG9qBarpK478POsa/rUWr0aEs90Ij5ssnFy+VS+nc9mJEnIj8/jS/2XrOmZX79W5l7fFfuqX1N2PBrB1/De9f+5iZYq34JH1u9+BWxCsd49+kdf6TDuc/fT7O91jH8dLd17qVbd3/p6v+Q8QbHc//o8GQbL4+Od64HsabV8VG/9w+/lu3+ne7/+n5P7R5/0eT9vXa6vbr+P7Af6VorSevdaO9/9H79b8v+ayR3pftu1as1RYmIvYlH7f255r7Jx89tplvHp/2/8Trncf/Ztf/wYj4vMf+3z7206vdyvbC+Z/peP5bd7frzn/XRPOC2VB0/6MvvsvK6usnwt7mv7cbqRPZnl7mvw4NTDp14omePAAAAAAAANhjchFxJJJcoZXO5QqF1c93HItDuXKlWjt5sbJ4eSYa35UdjXyuudI90vZ5iIlsxbCZn1yXn8q+Ofv10MFGvjBdKc/sducBAAAAAAAAAAAAAAAAAABgjzjc5fv/qT+GVn8XGHiO+clvGFxbjv+d+KUnYE/y+g+Dy/iHQTW83fGfPK2WAP3n9R8Gl/EPg6vL+B/pdzuA/msb/3O72Q6g/8T/AAAAAAAAAAAAAAAAAAAAAAAAAAAAsKPOnzuXbvWVh9en0/zM1aXFucrVUzOl6lxhfnG6MF1ZuFKYrVRmy6XCdGV+q/9XrlSuTEzG4rXxWqlaG68uLV+Yryxerl24NF+cLV0o5fvSKwAAAAAAAAAAAAAAAAAAAHi2VJeW54rlcmlBQuKxEsN7oxk9JSIX0bZn/263Zy8ndntmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/g8AAP//27MrXA==") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, @perf_config_ext={0xdfc, 0x7}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x3}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) waitid(0x1, r1, &(0x7f00000000c0), 0x20000000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000000000000000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 37.886688754s ago: executing program 34 (id=988): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20565, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x4}, 0x100904, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800454e0014006700000272907800000000ffffffff"], 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000680), 0x1, 0x592, &(0x7f0000002380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0, @perf_config_ext={0xdfc, 0x7}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204000, &(0x7f0000000040)={[{@grpquota}, {@barrier_val={'barrier', 0x3d, 0x857}}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000480)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x3, 0x0, 0x0, 0x0, 0x8000000000000000, 0xfffffffffffffffc, 0x0, 0x3}) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0xf, 0x6000, @fd_index=0x1, 0x3, 0x1, 0x8001, 0x13, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) waitid(0x1, r1, &(0x7f00000000c0), 0x20000000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000000000000000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) 30.770618062s ago: executing program 35 (id=919): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r1, &(0x7f00000012c0)=[{&(0x7f0000002080)=""/4080, 0xff0}], 0x1, 0x806, 0x3) close(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2d, 'pids'}, {0x2d, 'cpuset'}, {0x2b, 'io'}]}, 0x12) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x400000, 0x1}, {0x9}, {0x0, 0x0, 0x2}, {}, {0x7}, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x400000}, {}, {}, {0xd5a0, 0x9}, {}, {0x0, 0x8}, {}, {}, {}, {0x4, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3d1, 0xfffffffffffffffb}, 0x4, 0x9, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) socket$netlink(0x10, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xe, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 2.339855159s ago: executing program 8 (id=1453): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.280426609s ago: executing program 8 (id=1455): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf3, 0x0, 0x0, 0x0, 0x18980}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0xb, 0xfa, &(0x7f00000009c0)=""/250, 0x41100, 0x0, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000b00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x4, 0x0, 0xfbd5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, r0], 0x0, 0x10, 0x10001}, 0x94) 2.21781628s ago: executing program 8 (id=1458): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000029003b1500000000ffdbdf250000", @ANYRES32=0x0, @ANYBLOB="41000000121c03001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x40}}, 0x0) 2.123683546s ago: executing program 8 (id=1462): socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x28}}, 0x0) fchmodat(0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x150) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r3, 0x1, 0x70bd2c, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'nq\x00', 0x21, 0x660f537f, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x2b, @dev={0xac, 0x14, 0x14, 0x35}, 0x4f29, 0xffffffff, 'nq\x00', 0x39, 0xc, 0x6b}, {@loopback, 0x4e26, 0x1, 0x1, 0x1}}, 0x44) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x2c, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [@routing={0x2f, 0x10, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast2, @empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.939890906s ago: executing program 2 (id=1468): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r8, &(0x7f0000000d40)=""/43, 0x2b) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) getpgrp(r10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x161c2, 0x0) accept$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) 1.783473502s ago: executing program 7 (id=1473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4814) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b00000000000119078400000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1d19cb307b3472ab9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) 1.68007066s ago: executing program 7 (id=1475): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x2, 0x27c, [0x2000000001c0, 0x0, 0x0, 0x2000000001f0, 0x20000000040c], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x63, 0x6004, 'geneve1\x00', 'sit0\x00', 'veth1_vlan\x00', 'vlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, [0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x9e, 0xd6, 0x10e, [@pkttype={{'pkttype\x00', 0x0, 0x8}, {{0x6, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@multicast, 0xfffffffffffffffc}}}}, {0xc, 0x40, 0x6004, 'vlan0\x00', 'virt_wifi0\x00', 'netdevsim0\x00', 'veth1_to_batadv\x00', @empty, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2f4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f00000008c0)={0x3ff, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/234, 0xea}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000600)=""/191, 0xbf}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000780)=""/90, 0x5a}], &(0x7f0000000880)=[0x8, 0x4], 0x5}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000050) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1.67942819s ago: executing program 7 (id=1476): syz_clone(0xa0020011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000003000/0x1000)=nil) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 1.627103168s ago: executing program 7 (id=1478): r0 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x8}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000020000000000000100000d0000"], 0x0, 0x3a, 0x0, 0xa}, 0x28) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x4, 0x0) 1.151881608s ago: executing program 0 (id=1486): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$kcm(0x11, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xa7, 0x807, 0x2, 0x72b0, 0x600, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a7800000006"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r5, 0x2e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000940)='2', 0x1}], 0x1}, 0x4) (async) r7 = socket$kcm(0x11, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xb}, {0x8, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x64008062}, 0x4890) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) (async) io_uring_setup(0x5395, &(0x7f0000000280)={0x0, 0x7730, 0x4000, 0xa, 0x20002f7}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x802) (async) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/131, 0x83}, {&(0x7f00000001c0)}], 0x2) 1.084621089s ago: executing program 0 (id=1487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r2, 0x1, 0x3d, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f00000020c0)=[{{&(0x7f0000000500)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@txtime={{0x14, 0x1, 0x3d, 0x1000000000002}}], 0x14}}, {{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x2, 0x8845) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, @perf_config_ext={0xfd9, 0x922}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000100000000040012"], 0x30}}, 0x0) poll(&(0x7f0000000140)=[{r0, 0x400}, {r3, 0x1}, {r0, 0x201}, {r0, 0x8480}, {r3, 0x4000}, {r3, 0x20}, {r1, 0x2000}], 0x7, 0x101) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") r5 = socket$igmp6(0xa, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) fsopen(0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000ac0)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f0000001ac0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001002cbd7000000000000a0000008b0000000000000008001e0000060000140005"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4000050) r6 = socket$qrtr(0x2a, 0x2, 0x0) tee(r6, r0, 0x1, 0x0) 1.01588508s ago: executing program 5 (id=1489): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_context(r0, 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x6b, 0x2, 0x80000001, 0x2, @private2, @private1, 0x20, 0x78a7, 0x6, 0x7}}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000400)={@mcast1}, &(0x7f00000004c0)=0x14) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000500)={@private, @dev}, &(0x7f0000000540)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f0000000080)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x80000000}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], &(0x7f0000000140)='syzkaller\x00', 0xc57, 0x98, &(0x7f0000000200)=""/152, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0x653, 0x2}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)=[{0x1, 0x1, 0xe, 0x5}, {0x2, 0x3, 0x6, 0x4}, {0x2, 0x1, 0x6, 0x3}, {0x2, 0x4, 0x1, 0x6}, {0x3, 0x2, 0x1, 0x5}, {0x0, 0x4, 0x0, 0x4}, {0x2, 0x1, 0x10, 0x6}, {0x1, 0x3, 0xb, 0xb}, {0x3, 0x4, 0x1, 0x3}, {0x5, 0x4, 0xd, 0x5cc7a446473a554c}], 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab040001"], 0x20}], 0x1}, 0x0) 992.471254ms ago: executing program 2 (id=1490): r0 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)=""/7, 0x7) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x90}, 0x1c) 936.094874ms ago: executing program 5 (id=1491): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@inlinecrypt}, {@nombcache}, {@nodiscard}, {@quota}]}, 0xff, 0x450, &(0x7f0000000240)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) unshare(0x2a060400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 3) connect$unix(r0, 0x0, 0x0) 872.538894ms ago: executing program 5 (id=1492): socket$nl_generic(0x10, 0x3, 0x10) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x79, 0x2}, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = creat(0x0, 0xd931d3864d39dcdb) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x3c}}, 0x0) 788.954998ms ago: executing program 2 (id=1493): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x26) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') readlinkat(r2, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000140)=""/78, 0x4e) linkat(r1, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000100)='\x00', 0x400) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) 712.453701ms ago: executing program 2 (id=1494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000200)={{r1}, r2, 0x8, @unused=[0x9, 0x7352, 0x5, 0x7fffffff], @subvolid=0x10001}) 561.868996ms ago: executing program 7 (id=1495): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000029003b1500000000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="41000000121c03001800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x40}}, 0x0) 523.274623ms ago: executing program 2 (id=1496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000dc0)="d8000000180081084e81f783db4cb9040a10080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb800189b316277ce06bbaceac3c2fb14c2ee5a7cef4090f00201f373f7b9555da25364c3b10b7b91b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e003640fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1, 0x0, 0x0, 0x4788}, 0x8004) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="3cbeb44c", @ANYRESDEC=r0, @ANYBLOB="000498020000fedbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x184, 0x0, 0x50c, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff03}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff37}}]}, 0x184}, 0x1, 0x0, 0x0, 0x881}, 0x20000040) setpriority(0x2, 0x0, 0x8) 455.521194ms ago: executing program 7 (id=1497): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@nobh}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r0 = open(&(0x7f00000001c0)='./file1\x00', 0x169a7e, 0x68) unshare(0x2a020400) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$eJzs3ctrXGUbAPDnTJKmTft9iSBouzEgaKA0sTW2CgoVFyJYKOjadkimoWaSCZlJaUJAiwhuBBUXgm66cuGl7tx6ATfqf+FCLFXTYsWFjJzJTDNpZtLJbSaa3w9O8r7nMs/7zLm9M+dwJoA9azD9k4k4HBHvJBH91fFJRPRUSt0Rp5fnu720OJYOSZTLL/2WVOa5tbQ4FnXLpA5WKw9GxDdvRhzNrI1bnF+YzObzudlqfaQ0NTNSnF84dnEqO5GbyE2fPD46euLUE6dObl+uf/y4cOj6u88/+vnpv9544Nrb3yZxOg5Vp9XnsWnPrK4OxmD1PelJ38JVnttysN0l6XQD2JR01+xa3svjcPRHV6UEAPyXvRYRZQBgj0mc/wFgj6l9D3BraXGsNnT2G4n2uvFsROxfzr92fXN5Snf1mt3+ynXQvlvJqisjSUQMbEP8wYj46MtXPk2H2K7rkAAteP1KRJwfGFx7/E/W3LOwUY+tM21f9f/gXePT+K5AQ3t8lfZ/nmzU/8vc6f9Eg/5Pb4N9dzMa7f+rRhzYhiDruPFxxNN197bdrsu/ohwDXdXa/yp9vp7kwsV8Lj22/T8ihqKnN60fXyfG0M2/bzabVt//+/29Vz9J46f/V+bI/NLdu3qZ8Wwpu7WsV9y4EnGku1H+yZ31nzTp/55tMcYLT731YbNpaf5pvrVhbf5RvTtpZ5SvRjzScP2v3NGWrHt/4khlcxipbRQNfPHTB33N4tev/3RI49c+C7RDuv771s9/IKm/X7O48Rg/XO3/utm0e+ffePvfl7xcKdf6EZezpdLs8Yh9yYtrx59YWfZy9qFqaXn+NP+hhxvv/+tt/+lnwvMt5t99/dfPNp//zkrzH9/Q+t944drtya5m8Vtb/6OV0lB1TCvHv1YbuJX3DgAAAAAAAAAAAAAAAAAAAAAAAABalYmIQ5Fkhu+UM5nh4eXf8L4/+jL5QrF09EJhbno8Kr+VPRA9mdqjLvvTem9EVJ9/OlD3fNQTdfX0dR+PiPsi4v3eA0ntOYrjHc4dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGoONvn9/9TPvZ1uHQCwY/Z3ugEAQNs5/wPA3uP8DwB7T2vn/64dbwcA0D4+/wPA3uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwA47e+ZMOpT/XFocS+vjl+bnJguXjo3nipPDU3Njw2OF2ZnhiUJhIp8bHitM3ev18oXCzGhMz10eKeWKpZHi/MK5qcLcdOncxansRO5crqctWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxhTnFyaz+XxuVmEThfLuaEbnC13VzWm3tKethWRri898/92RXZDF3YUOH5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/iX+CQAA///iziCi") renameat2(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f00000045c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}, 0x8}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='L', 0x1}], 0x1}}], 0x1, 0x24044849) shutdown(r1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) io_submit(r3, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xfe, 0x1, 0x0, r2, 0x0, 0x0, 0x600}]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x9, @private1, 0x7177}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffffffc, 0x0, 0x0, 0x7}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}, @TCA_NETEM_DELAY_DIST={0x6, 0x2, "fc3d"}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x44085}, 0x8080) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000340)={r5, 0x3, 0x1, 0x15, 0x3, 0x7}, &(0x7f00000042c0)=0x14) fallocate(r0, 0x0, 0x9b1, 0x1001ed) openat$zero(0xffffffffffffff9c, 0x0, 0xa4d00, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=ANY=[@ANYBLOB="b121c656f9c5d28dcb9f262792e3183e031911f30eb43ad1", @ANYRES16], 0x381, 0x0) 352.515761ms ago: executing program 2 (id=1498): sync() (async) sync() sync() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3059, 0x6d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x49010) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7fffffff) (async) sendfile(r8, r7, 0x0, 0x7fffffff) 352.120621ms ago: executing program 8 (id=1499): r0 = socket(0xa, 0x3, 0x87) sendmsg$unix(r0, &(0x7f0000001600)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001400)=[{&(0x7f0000000140)="71137354", 0x4}, {0x0}], 0x2, 0x0, 0x0, 0x20000800}, 0x4010) 308.404078ms ago: executing program 5 (id=1500): syz_clone(0xa0020011, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000003000/0x1000)=nil) readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 307.975279ms ago: executing program 8 (id=1501): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x4}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r8, &(0x7f0000000d40)=""/43, 0x2b) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$netlink(0x10, 0x3, 0x0) preadv(r7, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) getpgrp(r10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'ip6gre0\x00', @random}) accept$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) 278.475413ms ago: executing program 0 (id=1502): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000000)=0x1, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)={0xf0, 0x0, 0x200, 0x70bd2d, 0x25dfcbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2a}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x2a}, {0x6, 0x11, 0xe2fe}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x6}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4015}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x138, 0x10, 0x713, 0x3, 0x0, {{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x4000000000}, {0x0, 0x80000000000, 0xfffffffffffffffd, 0x3}, {0x0, 0x0, 0x80000000}, 0x70bd2a, 0x1000, 0xa, 0x5}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}]}, 0x138}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1d0, &(0x7f00000000c0)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r6, r7, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r8, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) r9 = fsmount(r4, 0x0, 0x0) fchownat(r9, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a00000000001ecc4218ffff7f40000265000000000008000000000000000001010603000000008d299c46beba7b250e443c168b836837543d79da588b0d4b630c7c04285c950ffdd6ca88ddef85211a4397af6fe4238c09c08b0eb8cda428bfddc0fa73ca51231b5da22838df72cf0f0f4e2506b8e81fcb88a0ec613f72dfbffc4171bb564283c1d11143"], 0xb8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000286dd6018232500088800fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000010100000008"], 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r11, 0xffffffffffffffff, 0x0, 0x1) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000c00)) 260.144167ms ago: executing program 5 (id=1503): r0 = memfd_create(0x0, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000040), 0x0, 0x4000000) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x1) (async) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) 72.497178ms ago: executing program 5 (id=1504): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/19, 0x13}, 0x4}], 0x1, 0x4000002b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 72.061468ms ago: executing program 0 (id=1505): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) setpriority(0x0, r1, 0xd) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x9}, 0x1c) 49.628902ms ago: executing program 0 (id=1506): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004500000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f00000036c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000340)='v', 0x1}], 0x1}}, {{&(0x7f0000000780)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f00000007c0)="4867ca4ed54e9e757bd0f8f04a0ff6c9a0b50c4e042a5b52dd784aa62336483d4511091725c80f50", 0x28}, {0x0}], 0x2, &(0x7f0000000940)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr=0x64010100}}}], 0x38}}], 0x3, 0x48000) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f0000000000)={0x54, 0x2}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70, 0x6007}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 0s ago: executing program 0 (id=1507): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x5, 0x4080) r2 = fcntl$dupfd(r1, 0x406, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="0000680ad33a", 0x0, 0x400000, 0x10011, 0xfffbffff, 0x0}) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) readv(r2, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000180)=""/135, 0x87}], 0x2) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=""/19, 0x13}, 0x4}], 0x1, 0x4000002b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x20, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @remote}, 0x22) kernel console output (not intermixed with test programs): 0x7fed6224c819 [ 118.031817][ T5540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.031838][ T5540] RSP: 002b:00007fed60ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.031853][ T5540] RAX: ffffffffffffffda RBX: 00007fed624c5fa0 RCX: 00007fed6224c819 [ 118.031909][ T5540] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 118.031970][ T5540] RBP: 00007fed60ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.031979][ T5540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 118.031989][ T5540] R13: 00007fed624c6038 R14: 00007fed624c5fa0 R15: 00007ffd78c5c718 [ 118.032003][ T5540] [ 118.352583][ T28] kauditd_printk_skb: 488 callbacks suppressed [ 118.352597][ T28] audit: type=1326 audit(1775955083.118:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.387052][ T28] audit: type=1326 audit(1775955083.148:4023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.415377][ T28] audit: type=1326 audit(1775955083.148:4024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.455396][ T5557] loop6: detected capacity change from 0 to 512 [ 118.470463][ T28] audit: type=1326 audit(1775955083.148:4025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.499604][ T28] audit: type=1326 audit(1775955083.148:4026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.501306][ T5557] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.524189][ T28] audit: type=1326 audit(1775955083.148:4027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9f1ecd04e code=0x7ffc0000 [ 118.546359][ T5555] loop4: detected capacity change from 0 to 136 [ 118.560794][ T5557] EXT4-fs (loop6): filesystem is read-only [ 118.578976][ T5557] EXT4-fs (loop6): failed to initialize system zone (-117) [ 118.586421][ T5555] Attempt to read inode for relocated directory [ 118.596475][ T28] audit: type=1326 audit(1775955083.148:4028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.603363][ T5557] EXT4-fs (loop6): mount failed [ 118.635581][ T28] audit: type=1326 audit(1775955083.148:4029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.669536][ T28] audit: type=1326 audit(1775955083.148:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.693741][ T28] audit: type=1326 audit(1775955083.148:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5546 comm="syz.2.507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 118.967911][ T5572] loop6: detected capacity change from 0 to 764 [ 119.121417][ T5572] iso9660: Unknown parameter 'batadv_slave_0' [ 119.337545][ T5584] loop6: detected capacity change from 0 to 128 [ 119.374937][ T5584] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.437340][ T5584] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.492941][ T5554] syz.4.509 (5554) used greatest stack depth: 8552 bytes left [ 119.569170][ T5292] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 119.615825][ T5593] netlink: 'syz.4.521': attribute type 3 has an invalid length. [ 119.639638][ T5595] loop6: detected capacity change from 0 to 512 [ 119.707724][ T5595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.742836][ T5595] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.827412][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.875217][ T5614] loop6: detected capacity change from 0 to 764 [ 119.897612][ T5614] rock: directory entry would overflow storage [ 119.911965][ T5614] rock: sig=0x4654, size=5, remaining=4 [ 119.982374][ T5621] netlink: 76 bytes leftover after parsing attributes in process `syz.0.530'. [ 119.992162][ T5620] loop4: detected capacity change from 0 to 2048 [ 120.022552][ T5620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.074452][ T5620] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.131813][ T5620] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.531: bg 0: block 345: padding at end of block bitmap is not set [ 120.257882][ T5631] xt_hashlimit: size too large, truncated to 1048576 [ 120.273051][ T5620] EXT4-fs (loop4): Remounting filesystem read-only [ 120.410662][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.531938][ T5642] Restarting kernel threads ... [ 120.537050][ T5642] Done restarting kernel threads. [ 121.429957][ T5674] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'. [ 121.458248][ T5677] netlink: 76 bytes leftover after parsing attributes in process `syz.0.544'. [ 121.532239][ T5679] xt_hashlimit: size too large, truncated to 1048576 [ 121.572717][ T5680] loop4: detected capacity change from 0 to 256 [ 121.583932][ T5680] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 121.681723][ T5686] SET target dimension over the limit! [ 121.687586][ T5686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 121.699043][ T5686] ip6gre0: entered promiscuous mode [ 122.023698][ T5701] loop6: detected capacity change from 0 to 764 [ 122.043611][ T5701] rock: directory entry would overflow storage [ 122.055074][ T5701] rock: sig=0x4654, size=5, remaining=4 [ 122.154821][ T5704] netlink: 10 bytes leftover after parsing attributes in process `syz.2.555'. [ 122.316203][ T30] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 122.332796][ T30] FAT-fs (loop4): Filesystem has been set read-only [ 122.346047][ T30] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 122.360826][ T5732] loop6: detected capacity change from 0 to 1024 [ 122.386241][ T5731] xt_hashlimit: size too large, truncated to 1048576 [ 122.528403][ T5732] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.689536][ T5732] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.6.558: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 122.751175][ T5732] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 122.761908][ T5741] Restarting kernel threads ... [ 122.766919][ T5741] Done restarting kernel threads. [ 122.852613][ T5743] EXT4-fs error (device loop6): __ext4_new_inode:1079: comm syz.6.558: reserved inode found cleared - inode=2 [ 123.091525][ T5743] netlink: 76 bytes leftover after parsing attributes in process `syz.6.558'. [ 123.484048][ T5757] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 123.520409][ T5757] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.631920][ T28] kauditd_printk_skb: 244 callbacks suppressed [ 123.631935][ T28] audit: type=1326 audit(1775955088.398:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.451090][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.533928][ T28] audit: type=1326 audit(1775955088.398:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.639144][ T5173] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.657125][ T28] audit: type=1326 audit(1775955088.398:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.680565][ T28] audit: type=1326 audit(1775955088.398:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.704089][ T28] audit: type=1326 audit(1775955088.398:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb5b3ed04e code=0x7ffc0000 [ 124.731065][ T5785] veth1_macvtap: left promiscuous mode [ 124.749150][ T28] audit: type=1326 audit(1775955088.398:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.795218][ T28] audit: type=1326 audit(1775955088.398:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.818940][ T5786] netlink: 40 bytes leftover after parsing attributes in process `syz.5.572'. [ 124.835184][ T5785] netlink: 40 bytes leftover after parsing attributes in process `syz.5.572'. [ 124.854418][ T28] audit: type=1326 audit(1775955088.398:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.877688][ T28] audit: type=1326 audit(1775955088.408:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.901164][ T28] audit: type=1326 audit(1775955088.408:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.0.568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 124.928136][ T5785] netlink: 32 bytes leftover after parsing attributes in process `syz.5.572'. [ 124.974773][ T5784] netlink: 32 bytes leftover after parsing attributes in process `syz.5.572'. [ 125.311104][ T5815] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20000 [ 125.704000][ T5831] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 127.066420][ T5883] __nla_validate_parse: 1 callbacks suppressed [ 127.066437][ T5883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 127.082865][ T5893] set_capacity_and_notify: 1 callbacks suppressed [ 127.082879][ T5893] loop6: detected capacity change from 0 to 512 [ 127.169351][ T5893] ------------[ cut here ]------------ [ 127.174961][ T5893] EA inode 11 i_nlink=2 [ 127.174985][ T5893] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.6.583/5893 [ 127.189884][ T5893] Modules linked in: [ 127.193847][ T5893] CPU: 0 UID: 0 PID: 5893 Comm: syz.6.583 Not tainted syzkaller #0 PREEMPT(full) [ 127.203092][ T5893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 127.213280][ T5893] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 127.220087][ T5893] Code: 84 2f 99 ff 4c 8d 2d 3d a2 5d 05 49 8d 7e 40 e8 f4 c8 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 c4 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 3f f4 dd 03 66 66 66 66 66 66 2e [ 127.239748][ T5893] RSP: 0018:ffffc90002097778 EFLAGS: 00010246 [ 127.245938][ T5893] RAX: ffff888104cc4dc8 RBX: ffff8881079ce908 RCX: ffffffff81c02b58 [ 127.254051][ T5893] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871dcd80 [ 127.262099][ T5893] RBP: 000000000000000b R08: 00018881079ce8bb R09: 0000000000000000 [ 127.262641][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.4.587'. [ 127.270123][ T5893] R10: ffffffff893d6a68 R11: ffff88810048ef70 R12: ffff8881079ce8b8 [ 127.270156][ T5893] R13: ffffffff871dcd80 R14: ffff8881079ce870 R15: 0000000000000001 [ 127.270171][ T5893] FS: 00007fed60c656c0(0000) GS:ffff8882ae8d7000(0000) knlGS:0000000000000000 [ 127.270186][ T5893] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 127.270198][ T5893] CR2: 00007ffcfd14e398 CR3: 000000012820e000 CR4: 00000000003506f0 [ 127.270212][ T5893] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 127.326967][ T5893] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 127.335022][ T5893] Call Trace: [ 127.338427][ T5893] [ 127.341395][ T5893] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 127.347313][ T5893] ? errseq_check+0x2c/0x50 [ 127.351932][ T5893] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 127.357427][ T5893] ? ext4_truncate+0x92b/0xb00 [ 127.362280][ T5893] ext4_evict_inode+0xac1/0xe40 [ 127.367173][ T5893] ? __pfx_ext4_evict_inode+0x10/0x10 [ 127.372608][ T5893] evict+0x2af/0x510 [ 127.376538][ T5893] ? __dquot_initialize+0x146/0x7c0 [ 127.381813][ T5893] iput+0x41a/0x580 [ 127.385654][ T5893] ext4_process_orphan+0x1a9/0x1c0 [ 127.390832][ T5893] ext4_orphan_cleanup+0x6a8/0xa00 [ 127.395988][ T5893] ext4_fill_super+0x3414/0x37c0 [ 127.401066][ T5893] ? set_blocksize+0x14c/0x270 [ 127.405871][ T5893] ? setup_bdev_super+0x30e/0x370 [ 127.410931][ T5893] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.416291][ T5893] get_tree_bdev_flags+0x291/0x300 [ 127.421521][ T5893] ? __pfx_ext4_fill_super+0x10/0x10 [ 127.426987][ T5893] get_tree_bdev+0x1f/0x30 [ 127.431434][ T5893] ext4_get_tree+0x1c/0x30 [ 127.435875][ T5893] vfs_get_tree+0x57/0x1d0 [ 127.440360][ T5893] do_new_mount+0x288/0x8d0 [ 127.444970][ T5893] path_mount+0x4d0/0xbc0 [ 127.449382][ T5893] __se_sys_mount+0x28c/0x2e0 [ 127.454140][ T5893] __x64_sys_mount+0x67/0x80 [ 127.458783][ T5893] x64_sys_call+0x2d61/0x3020 [ 127.463537][ T5893] do_syscall_64+0x12c/0x370 [ 127.468161][ T5893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.474145][ T5893] RIP: 0033:0x7fed6224da8a [ 127.478660][ T5893] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.498410][ T5893] RSP: 002b:00007fed60c64e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 127.506942][ T5893] RAX: ffffffffffffffda RBX: 00007fed60c64ee0 RCX: 00007fed6224da8a [ 127.514958][ T5893] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fed60c64ea0 [ 127.522990][ T5893] RBP: 00002000000009c0 R08: 00007fed60c64ee0 R09: 0000000000800718 [ 127.531063][ T5893] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 127.539243][ T5893] R13: 00007fed60c64ea0 R14: 000000000000048d R15: 0000200000000200 [ 127.547475][ T5893] [ 127.550522][ T5893] ---[ end trace 0000000000000000 ]--- [ 127.556911][ T5893] EXT4-fs (loop6): 1 orphan inode deleted [ 127.563230][ T5893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.585767][ T5880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5880 comm=syz.6.583 [ 127.745479][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'. [ 127.806634][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.4.596'. [ 127.839163][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.136672][ T5985] IPv6: sit1: Disabled Multicast RS [ 128.166465][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.188478][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.201268][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.611'. [ 128.265490][ T5995] loop5: detected capacity change from 0 to 128 [ 128.305613][ T5995] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.351691][ T5995] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.439935][ T5415] IPVS: starting estimator thread 0... [ 128.511939][ T5173] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.560864][ T6015] IPVS: using max 2688 ests per chain, 134400 per kthread [ 128.669168][ T28] kauditd_printk_skb: 709 callbacks suppressed [ 128.669184][ T28] audit: type=1326 audit(1775955093.428:4995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6026 comm="syz.0.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 128.730319][ T6012] syz.4.615 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 128.773196][ T6012] CPU: 0 UID: 0 PID: 6012 Comm: syz.4.615 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.773293][ T6012] Tainted: [W]=WARN [ 128.773299][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.773310][ T6012] Call Trace: [ 128.773315][ T6012] [ 128.773321][ T6012] __dump_stack+0x1d/0x30 [ 128.773386][ T6012] dump_stack_lvl+0x95/0xd0 [ 128.773411][ T6012] dump_stack+0x15/0x1b [ 128.773430][ T6012] dump_header+0x80/0x240 [ 128.773450][ T6012] oom_kill_process+0x295/0x350 [ 128.773528][ T6012] out_of_memory+0x97d/0xb80 [ 128.773556][ T6012] try_charge_memcg+0x62e/0xa10 [ 128.773647][ T6012] obj_cgroup_charge_pages+0x23/0xc0 [ 128.773676][ T6012] __memcg_kmem_charge_page+0x9e/0x170 [ 128.773730][ T6012] __alloc_frozen_pages_noprof+0x18a/0x360 [ 128.773848][ T6012] alloc_pages_mpol+0xb3/0x260 [ 128.773884][ T6012] alloc_pages_noprof+0x8f/0x140 [ 128.773919][ T6012] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 128.774047][ T6012] __kvmalloc_node_noprof+0x3d4/0x650 [ 128.774078][ T6012] ? futex_hash_allocate+0x190/0x9d0 [ 128.774112][ T6012] ? futex_hash_allocate+0x190/0x9d0 [ 128.774205][ T6012] futex_hash_allocate+0x190/0x9d0 [ 128.774237][ T6012] ? cap_task_prctl+0x13f/0x6e0 [ 128.774338][ T6012] futex_hash_prctl+0xd8/0xf0 [ 128.774367][ T6012] __se_sys_prctl+0x4f4/0x1400 [ 128.774395][ T6012] __x64_sys_prctl+0x67/0x80 [ 128.774426][ T6012] x64_sys_call+0x2533/0x3020 [ 128.774535][ T6012] do_syscall_64+0x12c/0x370 [ 128.774568][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.774592][ T6012] RIP: 0033:0x7ff46518c819 [ 128.774607][ T6012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.774648][ T6012] RSP: 002b:00007ff463bdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 128.774669][ T6012] RAX: ffffffffffffffda RBX: 00007ff465405fa0 RCX: 00007ff46518c819 [ 128.774684][ T6012] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 128.774697][ T6012] RBP: 00007ff465222c91 R08: 0000000000000000 R09: 0000000000000000 [ 128.774711][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.774724][ T6012] R13: 00007ff465406038 R14: 00007ff465405fa0 R15: 00007ffc0d6387e8 [ 128.774771][ T6012] [ 128.774778][ T6012] memory: usage 268976kB, limit 307200kB, failcnt 241 [ 129.000952][ T28] audit: type=1326 audit(1775955093.508:4996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 129.020788][ T6012] memory+swap: usage 251208kB, limit 9007199254740988kB, failcnt 0 [ 129.052570][ T28] audit: type=1326 audit(1775955093.508:4997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9f1f0c582 code=0x7ffc0000 [ 129.100237][ T6012] kmem: usage 200160kB, limit 9007199254740988kB, failcnt 0 [ 129.103364][ T28] audit: type=1326 audit(1775955093.508:4998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe9f1f0c617 code=0x7ffc0000 [ 129.136912][ T28] audit: type=1326 audit(1775955093.508:4999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe9f1ec9511 code=0x7ffc0000 [ 129.142933][ T6012] Memory cgroup stats for [ 129.160873][ T28] audit: type=1326 audit(1775955093.508:5000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe9f1f0d609 code=0x7ffc0000 [ 129.190433][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 129.207470][ T28] audit: type=1326 audit(1775955093.508:5001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe9f1ec957b code=0x7ffc0000 [ 129.235125][ T6012] /syz4: [ 129.235371][ T6012] cache 335872 [ 129.238540][ T28] audit: type=1326 audit(1775955093.508:5002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 129.251441][ T6012] rss 40960 [ 129.279976][ T6012] shmem 0 [ 129.289526][ T6012] mapped_file 40960 [ 129.308537][ T28] audit: type=1326 audit(1775955093.508:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 129.348766][ T6012] dirty 8192 [ 129.360923][ T6012] writeback 0 [ 129.366195][ T28] audit: type=1326 audit(1775955093.508:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.2.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe9f1ec8c6c code=0x7ffc0000 [ 129.370803][ T6012] workingset_refault_anon 62 [ 129.431229][ T6012] workingset_refault_file 640 [ 129.436092][ T6012] swap 90112 [ 129.439355][ T6012] swapcached 425984 [ 129.443321][ T6012] pgpgin 101141 [ 129.446827][ T6012] pgpgout 101048 [ 129.450414][ T6012] pgfault 91679 [ 129.453971][ T6012] pgmajfault 77 [ 129.457490][ T6012] inactive_anon 16384 [ 129.461539][ T6012] active_anon 24576 [ 129.475472][ T6012] inactive_file 303104 [ 129.484926][ T6012] active_file 32768 [ 129.488760][ T6012] unevictable 0 [ 129.493933][ T6012] hierarchical_memory_limit 314572800 [ 129.499997][ T6012] hierarchical_memsw_limit 9223372036854771712 [ 129.506254][ T6012] total_cache 335872 [ 129.516336][ T6012] total_rss 40960 [ 129.520071][ T6012] total_shmem 0 [ 129.527526][ T6012] total_mapped_file 40960 [ 129.542957][ T6012] total_dirty 8192 [ 129.546840][ T6012] total_writeback 0 [ 129.550801][ T6012] total_workingset_refault_anon 62 [ 129.555950][ T6012] total_workingset_refault_file 640 [ 129.561308][ T6012] total_swap 90112 [ 129.565405][ T6012] total_swapcached 425984 [ 129.569838][ T6012] total_pgpgin 101141 [ 129.580306][ T6012] total_pgpgout 101048 [ 129.585176][ T6012] total_pgfault 91679 [ 129.594761][ T6068] bond1: entered allmulticast mode [ 129.600417][ T6012] total_pgmajfault 77 [ 129.604611][ T6012] total_inactive_anon 16384 [ 129.606162][ T6068] bridge4: entered promiscuous mode [ 129.609121][ T6012] total_active_anon 24576 [ 129.609131][ T6012] total_inactive_file 303104 [ 129.609140][ T6012] total_active_file 32768 [ 129.618960][ T6068] bridge4: entered allmulticast mode [ 129.623338][ T6012] total_unevictable 0 [ 129.623349][ T6012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4 [ 129.636576][ T6068] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 129.637264][ T6012] ,task_memcg=/syz4,task=syz.4.615,pid=6011,uid=0 [ 129.671844][ T6012] Memory cgroup out of memory: Killed process 6012 (syz.4.615) total-vm:90456kB, anon-rss:1272kB, file-rss:21644kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:0 [ 130.150182][ T6101] netlink: 68 bytes leftover after parsing attributes in process `syz.2.645'. [ 130.202697][ T6107] xt_hashlimit: size too large, truncated to 1048576 [ 130.368748][ T6116] loop6: detected capacity change from 0 to 1024 [ 130.410283][ T6116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.441007][ T6116] EXT4-fs error (device loop6): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.6.650: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 130.493383][ T6112] xt_hashlimit: size too large, truncated to 1048576 [ 130.501649][ T6116] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1705: Corrupt filesystem [ 130.539332][ T6123] EXT4-fs error (device loop6): __ext4_new_inode:1079: comm syz.6.650: reserved inode found cleared - inode=2 [ 130.551676][ T6125] netlink: 76 bytes leftover after parsing attributes in process `syz.5.651'. [ 130.626675][ T6123] netlink: 76 bytes leftover after parsing attributes in process `syz.6.650'. [ 130.734039][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.013317][ T6143] netlink: 68 bytes leftover after parsing attributes in process `syz.4.656'. [ 131.425704][ T6158] xt_hashlimit: size too large, truncated to 1048576 [ 132.128163][ T6184] xt_hashlimit: size too large, truncated to 1048576 [ 132.154475][ T6190] vlan2: entered promiscuous mode [ 132.175211][ T6190] bridge0: entered promiscuous mode [ 132.181242][ T6191] FAULT_INJECTION: forcing a failure. [ 132.181242][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 132.236649][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.6.672 Tainted: G W syzkaller #0 PREEMPT(full) [ 132.236740][ T6191] Tainted: [W]=WARN [ 132.236746][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 132.236758][ T6191] Call Trace: [ 132.236763][ T6191] [ 132.236769][ T6191] __dump_stack+0x1d/0x30 [ 132.236829][ T6191] dump_stack_lvl+0x95/0xd0 [ 132.236850][ T6191] dump_stack+0x15/0x1b [ 132.236869][ T6191] should_fail_ex+0x263/0x280 [ 132.236900][ T6191] should_failslab+0x8c/0xb0 [ 132.236922][ T6191] __kmalloc_noprof+0xb8/0x4e0 [ 132.236947][ T6191] ? nla_strdup+0x78/0xc0 [ 132.237053][ T6191] nla_strdup+0x78/0xc0 [ 132.237085][ T6191] nf_tables_newflowtable+0x649/0x13c0 [ 132.237115][ T6191] nfnetlink_rcv+0xc1e/0x1720 [ 132.237171][ T6191] netlink_unicast+0x5c0/0x690 [ 132.237253][ T6191] netlink_sendmsg+0x5c8/0x6f0 [ 132.237278][ T6191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.237300][ T6191] ____sys_sendmsg+0x563/0x5b0 [ 132.237322][ T6191] ___sys_sendmsg+0x195/0x1e0 [ 132.237474][ T6191] __x64_sys_sendmsg+0xd4/0x160 [ 132.237493][ T6191] x64_sys_call+0x194c/0x3020 [ 132.237515][ T6191] do_syscall_64+0x12c/0x370 [ 132.237563][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.237587][ T6191] RIP: 0033:0x7fed6224c819 [ 132.237600][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.237616][ T6191] RSP: 002b:00007fed60ca7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.237666][ T6191] RAX: ffffffffffffffda RBX: 00007fed624c5fa0 RCX: 00007fed6224c819 [ 132.237681][ T6191] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 132.237695][ T6191] RBP: 00007fed60ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 132.237708][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.237783][ T6191] R13: 00007fed624c6038 R14: 00007fed624c5fa0 R15: 00007ffd78c5c718 [ 132.237801][ T6191] [ 132.238064][ T6198] __nla_validate_parse: 6 callbacks suppressed [ 132.238075][ T6198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 132.558737][ T6211] netlink: 'syz.4.681': attribute type 3 has an invalid length. [ 132.587850][ T35] hid (null): unknown global tag 0xc [ 132.601554][ T35] hid-generic 0901:0006:FFFFFFF5.0001: unknown global tag 0xc [ 132.609995][ T35] hid-generic 0901:0006:FFFFFFF5.0001: item 0 1 1 12 parsing failed [ 132.632338][ T35] hid-generic 0901:0006:FFFFFFF5.0001: probe with driver hid-generic failed with error -22 [ 132.838399][ T6230] xt_hashlimit: size too large, truncated to 1048576 [ 132.899959][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 132.981767][ T6237] capability: warning: `syz.0.689' uses 32-bit capabilities (legacy support in use) [ 133.014751][ T6237] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1866 sclass=netlink_route_socket pid=6237 comm=syz.0.689 [ 133.968454][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 134.032682][ T6247] netlink: 'syz.5.692': attribute type 3 has an invalid length. [ 134.077429][ T6254] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 134.109502][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz.5.694'. [ 134.191729][ T6254] xt_hashlimit: size too large, truncated to 1048576 [ 134.230789][ T28] kauditd_printk_skb: 478 callbacks suppressed [ 134.230865][ T28] audit: type=1326 audit(1775955098.948:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.307326][ T28] audit: type=1326 audit(1775955098.948:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.347091][ T6263] xt_hashlimit: max too large, truncated to 1048576 [ 134.413404][ T28] audit: type=1326 audit(1775955098.948:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.489234][ T28] audit: type=1326 audit(1775955098.948:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.599957][ T6270] netlink: 48 bytes leftover after parsing attributes in process `syz.2.698'. [ 134.624772][ T28] audit: type=1326 audit(1775955098.948:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.657159][ T28] audit: type=1326 audit(1775955098.948:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.681665][ T28] audit: type=1326 audit(1775955098.948:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.707538][ T28] audit: type=1326 audit(1775955098.948:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.734358][ T28] audit: type=1326 audit(1775955098.948:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.773866][ T28] audit: type=1326 audit(1775955098.948:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6253 comm="syz.0.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 134.930891][ T6285] netlink: 'syz.5.703': attribute type 6 has an invalid length. [ 134.939567][ T6287] netlink: 'syz.0.704': attribute type 3 has an invalid length. [ 135.323474][ T6314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 135.376106][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 135.385173][ T6318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.714'. [ 135.464354][ T6323] loop6: detected capacity change from 0 to 512 [ 135.481854][ T6323] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 135.492879][ T6323] EXT4-fs error (device loop6): ext4_get_journal_inode:5888: comm syz.6.715: inode #1792: comm syz.6.715: iget: illegal inode # [ 135.507925][ T6323] loop6: lost filesystem error report for type 5 error -117 [ 135.508904][ T6323] EXT4-fs (loop6): Remounting filesystem read-only [ 135.516654][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 135.516682][ C1] EXT4-fs (loop6): initial error at time 1775955100: ext4_get_journal_inode:5888 [ 135.516741][ C1] EXT4-fs (loop6): last error at time 1775955100: ext4_get_journal_inode:5888 [ 135.551749][ T6323] EXT4-fs (loop6): no journal found [ 135.557378][ T6323] EXT4-fs (loop6): can't get journal size [ 135.565430][ T6323] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 135.576221][ T6323] EXT4-fs (loop6): Errors on filesystem, clearing orphan list. [ 135.585603][ T6333] netlink: 168 bytes leftover after parsing attributes in process `syz.2.719'. [ 135.590626][ T6323] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.648523][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.817704][ T6346] netlink: 28 bytes leftover after parsing attributes in process `syz.6.724'. [ 135.906465][ T6350] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6350 comm=syz.0.725 [ 135.952104][ T6362] netlink: 'syz.2.730': attribute type 3 has an invalid length. [ 135.990970][ T6367] FAULT_INJECTION: forcing a failure. [ 135.990970][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 136.008630][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.6.733 Tainted: G W syzkaller #0 PREEMPT(full) [ 136.008664][ T6367] Tainted: [W]=WARN [ 136.008673][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.008702][ T6367] Call Trace: [ 136.008709][ T6367] [ 136.008717][ T6367] __dump_stack+0x1d/0x30 [ 136.008747][ T6367] dump_stack_lvl+0x95/0xd0 [ 136.008773][ T6367] dump_stack+0x15/0x1b [ 136.008842][ T6367] should_fail_ex+0x263/0x280 [ 136.008873][ T6367] should_failslab+0x8c/0xb0 [ 136.008897][ T6367] __kmalloc_cache_node_noprof+0x6b/0x480 [ 136.008926][ T6367] ? css_rstat_updated+0xbb/0x280 [ 136.009022][ T6367] ? __get_vm_area_node+0x106/0x1d0 [ 136.009052][ T6367] __get_vm_area_node+0x106/0x1d0 [ 136.009191][ T6367] __vmalloc_node_range_noprof+0x291/0x12b0 [ 136.009230][ T6367] ? copy_process+0x37e/0x20b0 [ 136.009260][ T6367] ? __rcu_read_unlock+0x4e/0x70 [ 136.009353][ T6367] ? __memcg_slab_post_alloc_hook+0x458/0x540 [ 136.009391][ T6367] __vmalloc_node_noprof+0x89/0xc0 [ 136.009471][ T6367] ? copy_process+0x37e/0x20b0 [ 136.009511][ T6367] ? copy_process+0x37e/0x20b0 [ 136.009537][ T6367] dup_task_struct+0x219/0x950 [ 136.009562][ T6367] ? copy_process+0x36d/0x20b0 [ 136.009588][ T6367] copy_process+0x37e/0x20b0 [ 136.009627][ T6367] ? kstrtouint+0x76/0xc0 [ 136.009654][ T6367] ? kstrtouint_from_user+0xa8/0xf0 [ 136.009687][ T6367] kernel_clone+0x16b/0x5d0 [ 136.009714][ T6367] ? vfs_write+0x86e/0x9f0 [ 136.009796][ T6367] __x64_sys_clone+0x143/0x180 [ 136.009830][ T6367] x64_sys_call+0x1222/0x3020 [ 136.009887][ T6367] do_syscall_64+0x12c/0x370 [ 136.009918][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.009942][ T6367] RIP: 0033:0x7fed6224c819 [ 136.009958][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.009979][ T6367] RSP: 002b:00007fed60ca6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 136.010056][ T6367] RAX: ffffffffffffffda RBX: 00007fed624c5fa0 RCX: 00007fed6224c819 [ 136.010072][ T6367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 136.010085][ T6367] RBP: 00007fed60ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.010099][ T6367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 136.010112][ T6367] R13: 00007fed624c6038 R14: 00007fed624c5fa0 R15: 00007ffd78c5c718 [ 136.010203][ T6367] [ 136.010219][ T6367] syz.6.733: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 136.264953][ T6367] CPU: 1 UID: 0 PID: 6367 Comm: syz.6.733 Tainted: G W syzkaller #0 PREEMPT(full) [ 136.264983][ T6367] Tainted: [W]=WARN [ 136.264989][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 136.265002][ T6367] Call Trace: [ 136.265009][ T6367] [ 136.265090][ T6367] __dump_stack+0x1d/0x30 [ 136.265122][ T6367] dump_stack_lvl+0x95/0xd0 [ 136.265142][ T6367] dump_stack+0x15/0x1b [ 136.265167][ T6367] warn_alloc+0x145/0x1c0 [ 136.265245][ T6367] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 136.265328][ T6367] ? __rcu_read_unlock+0x4e/0x70 [ 136.265347][ T6367] ? __memcg_slab_post_alloc_hook+0x458/0x540 [ 136.265381][ T6367] __vmalloc_node_noprof+0x89/0xc0 [ 136.265439][ T6367] ? copy_process+0x37e/0x20b0 [ 136.265459][ T6367] ? copy_process+0x37e/0x20b0 [ 136.265478][ T6367] dup_task_struct+0x219/0x950 [ 136.265564][ T6367] ? copy_process+0x36d/0x20b0 [ 136.265583][ T6367] copy_process+0x37e/0x20b0 [ 136.265602][ T6367] ? kstrtouint+0x76/0xc0 [ 136.265639][ T6367] ? kstrtouint_from_user+0xa8/0xf0 [ 136.265684][ T6367] kernel_clone+0x16b/0x5d0 [ 136.265707][ T6367] ? vfs_write+0x86e/0x9f0 [ 136.265724][ T6367] __x64_sys_clone+0x143/0x180 [ 136.265755][ T6367] x64_sys_call+0x1222/0x3020 [ 136.265843][ T6367] do_syscall_64+0x12c/0x370 [ 136.265872][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.265913][ T6367] RIP: 0033:0x7fed6224c819 [ 136.265926][ T6367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.265944][ T6367] RSP: 002b:00007fed60ca6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 136.265966][ T6367] RAX: ffffffffffffffda RBX: 00007fed624c5fa0 RCX: 00007fed6224c819 [ 136.265982][ T6367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000630c1000 [ 136.266064][ T6367] RBP: 00007fed60ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.266111][ T6367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 136.266122][ T6367] R13: 00007fed624c6038 R14: 00007fed624c5fa0 R15: 00007ffd78c5c718 [ 136.266139][ T6367] [ 136.266154][ T6367] Mem-Info: [ 136.482919][ T6367] active_anon:28194 inactive_anon:0 isolated_anon:0 [ 136.482919][ T6367] active_file:21660 inactive_file:5419 isolated_file:0 [ 136.482919][ T6367] unevictable:1 dirty:245 writeback:0 [ 136.482919][ T6367] slab_reclaimable:3553 slab_unreclaimable:17269 [ 136.482919][ T6367] mapped:32343 shmem:20141 pagetables:1375 [ 136.482919][ T6367] sec_pagetables:0 bounce:0 [ 136.482919][ T6367] kernel_misc_reclaimable:0 [ 136.482919][ T6367] free:1853293 free_pcp:13386 free_cma:0 [ 136.552542][ T6367] Node 0 active_anon:112660kB inactive_anon:0kB active_file:86640kB inactive_file:21676kB unevictable:4kB isolated(anon):0kB isolated(file):0kB mapped:130880kB dirty:980kB writeback:0kB shmem:80564kB kernel_stack:3872kB pagetables:5616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 136.583543][ T6367] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 136.827831][ T6385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.009303][ T6367] lowmem_reserve[]: 0 2879 7857 7857 [ 137.014685][ T6367] Node 0 DMA32 free:2944596kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948120kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 137.045838][ T6367] lowmem_reserve[]: 0 0 4978 4978 [ 137.050960][ T6367] Node 0 Normal free:4462884kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:110804kB inactive_anon:0kB active_file:86640kB inactive_file:21676kB unevictable:4kB writepending:980kB zspages:0kB present:5242880kB managed:5098240kB mlocked:4kB bounce:0kB free_pcp:40272kB local_pcp:26376kB free_cma:0kB [ 137.088125][ T6367] lowmem_reserve[]: 0 0 0 0 [ 137.093512][ T6367] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.106636][ T6367] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944596kB [ 137.128532][ T6367] Node 0 Normal: 1102*4kB (UME) 794*8kB (UM) 372*16kB (UME) 368*32kB (UME) 297*64kB (UME) 198*128kB (UME) 117*256kB (UME) 100*512kB (UME) 90*1024kB (UME) 44*2048kB (UM) 1008*4096kB (UM) = 4465032kB [ 137.148664][ T6367] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 137.272550][ T6367] 48232 total pagecache pages [ 137.288681][ T6367] 2 pages in swap cache [ 137.293279][ T6367] Free swap = 124984kB [ 137.297465][ T6367] Total swap = 124996kB [ 137.425479][ T6367] 2097051 pages RAM [ 137.459244][ T6367] 0 pages HighMem/MovableOnly [ 137.501382][ T6367] 81621 pages reserved [ 137.556124][ T6397] xt_hashlimit: size too large, truncated to 1048576 [ 138.927985][ T6424] __nla_validate_parse: 3 callbacks suppressed [ 138.928004][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.749'. [ 138.932200][ T6421] loop6: detected capacity change from 0 to 512 [ 138.992216][ T6421] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.747: inode has both inline data and extents flags [ 139.016151][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 139.108527][ T6421] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.120709][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 139.136313][ C0] EXT4-fs (loop6): initial error at time 139: ext4_orphan_get:1397: inode 15 [ 139.145127][ C0] EXT4-fs (loop6): last error at time 139: ext4_orphan_get:1397: inode 15 [ 139.174063][ T6421] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.747: couldn't read orphan inode 15 (err -117) [ 139.225434][ T6421] loop6: lost filesystem error report for type 5 error -117 [ 139.226025][ T6421] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.293528][ T6421] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.543625][ T28] kauditd_printk_skb: 264 callbacks suppressed [ 139.543639][ T28] audit: type=1400 audit(139.514:5757): avc: denied { unlink } for pid=3320 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 139.686092][ T28] audit: type=1326 audit(139.654:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 139.745077][ T6459] xt_hashlimit: size too large, truncated to 1048576 [ 139.795811][ T28] audit: type=1326 audit(139.674:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 139.907179][ T28] audit: type=1326 audit(139.674:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 139.964594][ T28] audit: type=1326 audit(139.674:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 140.024869][ T28] audit: type=1326 audit(139.674:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 140.055915][ T28] audit: type=1326 audit(139.684:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 140.079163][ T28] audit: type=1326 audit(139.684:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 140.102737][ T6482] netlink: 'syz.4.769': attribute type 3 has an invalid length. [ 140.102986][ T28] audit: type=1326 audit(139.684:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 140.145054][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.5.770'. [ 140.154215][ T6486] 8021q: VLANs not supported on ip6gre0 [ 140.181150][ T28] audit: type=1326 audit(139.684:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6457 comm="syz.2.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 140.333075][ T6493] capability: warning: `syz.4.774' uses deprecated v2 capabilities in a way that may be insecure [ 140.840597][ T6516] netlink: 'syz.6.781': attribute type 3 has an invalid length. [ 141.029499][ T6523] netlink: 168 bytes leftover after parsing attributes in process `syz.4.783'. [ 141.301313][ T6535] netlink: 'syz.5.789': attribute type 7 has an invalid length. [ 141.332730][ T6535] batadv0: entered promiscuous mode [ 141.354792][ T6535] bond0: entered promiscuous mode [ 141.376072][ T6535] bond_slave_0: entered promiscuous mode [ 141.387492][ T6535] bond_slave_1: entered promiscuous mode [ 141.401711][ T6535] hsr1: entered allmulticast mode [ 141.413610][ T6535] batadv0: entered allmulticast mode [ 141.424682][ T6535] bond0: entered allmulticast mode [ 141.447072][ T6535] bond_slave_0: entered allmulticast mode [ 141.468504][ T6535] bond_slave_1: entered allmulticast mode [ 141.481369][ T6535] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 141.521026][ T6546] netlink: 168 bytes leftover after parsing attributes in process `syz.4.791'. [ 141.645110][ T6539] loop6: detected capacity change from 0 to 512 [ 141.678255][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.4.795'. [ 141.700418][ T6539] EXT4-fs: Ignoring removed i_version option [ 141.728554][ T6539] EXT4-fs: dax option not supported [ 141.925489][ T6561] netlink: 212 bytes leftover after parsing attributes in process `syz.6.797'. [ 141.963493][ T6561] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.971631][ T6561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6561 comm=syz.6.797 [ 142.072228][ T6572] netlink: 'syz.6.800': attribute type 3 has an invalid length. [ 142.688299][ T6592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.808'. [ 142.739566][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 142.902754][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 142.911908][ T6606] 8021q: VLANs not supported on ip6tnl0 [ 142.993664][ T6610] loop6: detected capacity change from 0 to 164 [ 143.109428][ T6621] xt_limit: Overflow, try lower: 0/0 [ 143.234437][ T6627] batman_adv: batadv0: Adding interface: dummy0 [ 143.245319][ T6627] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.273814][ T6627] batman_adv: batadv0: Interface activated: dummy0 [ 143.296848][ T6632] process 'syz.6.821' launched 'batadv' with NULL argv: empty string added [ 143.330670][ T6631] batadv0: mtu less than device minimum [ 143.374400][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.385359][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.396276][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.407041][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.417916][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.428893][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.439791][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.450744][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.461609][ T6631] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.129186][ T6648] __nla_validate_parse: 1 callbacks suppressed [ 144.129201][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 144.146369][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.828'. [ 144.196729][ T6648] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 144.215540][ T6648] bond1 (unregistering): Released all slaves [ 144.583371][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 144.805118][ T28] kauditd_printk_skb: 686 callbacks suppressed [ 144.805133][ T28] audit: type=1326 audit(144.774:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 144.819784][ T6677] xt_hashlimit: size too large, truncated to 1048576 [ 144.906074][ T28] audit: type=1326 audit(144.774:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 144.969340][ T28] audit: type=1326 audit(144.774:6455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.148984][ T28] audit: type=1326 audit(144.774:6456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.201308][ T6697] netlink: 'syz.4.845': attribute type 1 has an invalid length. [ 145.210344][ T28] audit: type=1326 audit(144.774:6457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.325552][ T28] audit: type=1326 audit(144.774:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.370821][ T28] audit: type=1326 audit(144.774:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.413844][ T28] audit: type=1326 audit(144.774:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.490754][ T28] audit: type=1326 audit(144.774:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.543590][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 145.574253][ T28] audit: type=1326 audit(144.774:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6676 comm="syz.5.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 145.589271][ T6720] 8021q: VLANs not supported on ip6gre0 [ 145.713547][ T6729] netlink: 24 bytes leftover after parsing attributes in process `syz.6.860'. [ 147.123042][ T6788] xt_hashlimit: size too large, truncated to 1048576 [ 147.287873][ T6799] netlink: 5 bytes leftover after parsing attributes in process `syz.0.885'. [ 147.375974][ T6797] SELinux: Context system_u:object_r:v4l_device_t:s0 is not valid (left unmapped). [ 147.400823][ T6799] 0ªX¹¦D: renamed from gretap0 [ 147.407193][ T6799] 0ªX¹¦D: entered allmulticast mode [ 149.143444][ T6840] netlink: 68 bytes leftover after parsing attributes in process `syz.5.899'. [ 149.166906][ T6836] netlink: 36 bytes leftover after parsing attributes in process `syz.2.898'. [ 149.268163][ T6845] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.316128][ T6856] netlink: 108 bytes leftover after parsing attributes in process `syz.6.900'. [ 149.344632][ T6845] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.357088][ T6853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6853 comm=syz.2.902 [ 149.402803][ T6862] netlink: 'syz.2.905': attribute type 4 has an invalid length. [ 149.410545][ T6862] netlink: 'syz.2.905': attribute type 17 has an invalid length. [ 149.418596][ T6862] netlink: 32 bytes leftover after parsing attributes in process `syz.2.905'. [ 149.455865][ T6845] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.483400][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=6871 comm=syz.2.908 [ 149.511841][ T6871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'. [ 149.523745][ T6845] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.626494][ T50] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.644734][ T50] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.653452][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.662019][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.722390][ T6882] netlink: 16 bytes leftover after parsing attributes in process `syz.6.913'. [ 149.854961][ T6885] xt_hashlimit: size too large, truncated to 1048576 [ 150.014025][ T6887] loop6: detected capacity change from 0 to 8192 [ 150.071104][ T3309] loop6: p1 < > p2 p4 < p5 > [ 150.075939][ T3309] loop6: partition table partially beyond EOD, truncated [ 150.092868][ T3309] loop6: p1 start 134217728 is beyond EOD, truncated [ 150.117190][ T3309] loop6: p2 size 591360 extends beyond EOD, truncated [ 150.165312][ T28] kauditd_printk_skb: 121 callbacks suppressed [ 150.165404][ T28] audit: type=1326 audit(150.134:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 150.207293][ T6884] xt_hashlimit: size too large, truncated to 1048576 [ 150.254112][ T3309] loop6: p5 size 591360 extends beyond EOD, truncated [ 150.474733][ T28] audit: type=1326 audit(150.164:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 150.534617][ T6891] netlink: 36 bytes leftover after parsing attributes in process `syz.4.914'. [ 150.554008][ T28] audit: type=1326 audit(150.164:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 150.628412][ T28] audit: type=1326 audit(150.164:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 150.729784][ T6887] loop6: p1 < > p2 p4 < p5 > [ 150.736773][ T6904] audit: audit_backlog=65 > audit_backlog_limit=64 [ 150.743538][ T6904] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 150.755784][ T28] audit: type=1326 audit(150.164:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 150.782431][ T6887] loop6: partition table partially beyond EOD, truncated [ 150.789700][ T6904] audit: backlog limit exceeded [ 150.796715][ T6887] loop6: p1 start 134217728 is beyond EOD, truncated [ 150.805816][ T6887] loop6: p2 size 591360 extends beyond EOD, truncated [ 150.813011][ T28] audit: type=1326 audit(150.164:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 150.837259][ T6887] loop6: p5 size 591360 extends beyond EOD, truncated [ 150.882857][ T28] audit: type=1326 audit(150.164:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6881 comm="syz.6.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fed6224c819 code=0x7ffc0000 [ 151.369007][ T3000] loop6: p1 < > p2 p4 < p5 > [ 151.378070][ T3000] loop6: partition table partially beyond EOD, truncated [ 151.396079][ T3000] loop6: p1 start 134217728 is beyond EOD, truncated [ 151.416641][ T3000] loop6: p2 size 591360 extends beyond EOD, truncated [ 151.441880][ T3000] loop6: p5 size 591360 extends beyond EOD, truncated [ 151.515443][ T6926] netlink: 36 bytes leftover after parsing attributes in process `syz.6.925'. [ 151.555483][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 151.563686][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 151.576325][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 151.679548][ T6930] xt_hashlimit: size too large, truncated to 1048576 [ 151.858743][ T6933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.929'. [ 152.062440][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.930'. [ 153.489197][ T6964] loop6: detected capacity change from 0 to 256 [ 153.543584][ T6964] FAT-fs (loop6): Directory bread(block 64) failed [ 153.550229][ T6964] FAT-fs (loop6): Directory bread(block 65) failed [ 153.556864][ T6964] FAT-fs (loop6): Directory bread(block 66) failed [ 153.563471][ T6964] FAT-fs (loop6): Directory bread(block 67) failed [ 153.570036][ T6964] FAT-fs (loop6): Directory bread(block 68) failed [ 153.576654][ T6964] FAT-fs (loop6): Directory bread(block 69) failed [ 153.583385][ T6964] FAT-fs (loop6): Directory bread(block 70) failed [ 153.589931][ T6964] FAT-fs (loop6): Directory bread(block 71) failed [ 153.596518][ T6964] FAT-fs (loop6): Directory bread(block 72) failed [ 153.603149][ T6964] FAT-fs (loop6): Directory bread(block 73) failed [ 153.675910][ T6957] xt_hashlimit: size too large, truncated to 1048576 [ 154.247463][ T6987] xt_hashlimit: size too large, truncated to 1048576 [ 155.319259][ T7008] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 155.332138][ T7008] net_ratelimit: 11 callbacks suppressed [ 155.332152][ T7008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.375202][ T7010] __nla_validate_parse: 2 callbacks suppressed [ 155.375214][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.6.954'. [ 155.423849][ T7013] netlink: 20 bytes leftover after parsing attributes in process `syz.5.955'. [ 155.473494][ T7015] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 155.570968][ T28] kauditd_printk_skb: 243 callbacks suppressed [ 155.570986][ T28] audit: type=1326 audit(155.504:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 155.668291][ T28] audit: type=1326 audit(155.504:6835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.121459][ T28] audit: type=1326 audit(155.504:6836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.144372][ T28] audit: type=1326 audit(155.504:6837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.175027][ T28] audit: type=1326 audit(155.504:6838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.197918][ T28] audit: type=1326 audit(155.504:6839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.222374][ T28] audit: type=1326 audit(155.504:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.246546][ T28] audit: type=1326 audit(155.504:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.270062][ T28] audit: type=1326 audit(155.504:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.292866][ T28] audit: type=1326 audit(155.504:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7018 comm="syz.5.958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff79ba7c819 code=0x7ffc0000 [ 156.501251][ T7034] netlink: 'syz.5.963': attribute type 10 has an invalid length. [ 156.514033][ T7034] geneve1: entered promiscuous mode [ 156.538774][ T7034] geneve1: entered allmulticast mode [ 156.561236][ T7034] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 156.637147][ T7038] xt_hashlimit: size too large, truncated to 1048576 [ 157.077956][ T7056] loop6: detected capacity change from 0 to 1024 [ 157.103193][ T7056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.129808][ T5292] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.025197][ T7073] vti0: entered promiscuous mode [ 158.047403][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'. [ 158.430908][ T50] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.476970][ T7089] netlink: 204 bytes leftover after parsing attributes in process `syz.2.983'. [ 158.528038][ T7090] netlink: 84 bytes leftover after parsing attributes in process `syz.2.983'. [ 158.543270][ T50] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.554947][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 158.642087][ T50] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.711926][ T7092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.984'. [ 158.773028][ T50] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.777733][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.987'. [ 158.876187][ T50] bridge_slave_1: left allmulticast mode [ 158.887669][ T50] bridge_slave_1: left promiscuous mode [ 158.893737][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.918181][ T50] bridge_slave_0: left allmulticast mode [ 158.927980][ T50] bridge_slave_0: left promiscuous mode [ 158.935516][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.193781][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.205567][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.216547][ T50] bond0 (unregistering): Released all slaves [ 159.292083][ T50] hsr_slave_0: left promiscuous mode [ 159.300773][ T50] hsr_slave_1: left promiscuous mode [ 159.309718][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.324495][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.338342][ T7134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 159.347892][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.350571][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.991'. [ 159.364682][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.387697][ T50] veth1_macvtap: left promiscuous mode [ 159.393361][ T50] veth0_macvtap: left promiscuous mode [ 159.402069][ T50] veth1_vlan: left promiscuous mode [ 159.407332][ T50] veth0_vlan: left promiscuous mode [ 159.505857][ T50] team0 (unregistering): Port device team_slave_1 removed [ 159.515933][ T50] team0 (unregistering): Port device team_slave_0 removed [ 159.935210][ T7101] chnl_net:caif_netlink_parms(): no params data found [ 160.188982][ T7101] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.217998][ T7101] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.450305][ T7101] bridge_slave_0: entered allmulticast mode [ 160.471296][ T7101] bridge_slave_0: entered promiscuous mode [ 160.489891][ T7101] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.511318][ T7101] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.531104][ T7101] bridge_slave_1: entered allmulticast mode [ 160.551298][ T7101] bridge_slave_1: entered promiscuous mode [ 160.598818][ T7101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.633067][ T7101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.675110][ T7101] team0: Port device team_slave_0 added [ 160.691634][ T7101] team0: Port device team_slave_1 added [ 160.735426][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.751663][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.813948][ T7101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.836215][ T7101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.853410][ T7101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.907450][ T7101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.918194][ T7199] __nla_validate_parse: 2 callbacks suppressed [ 160.918209][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 160.950195][ T7101] hsr_slave_0: entered promiscuous mode [ 160.956418][ T7101] hsr_slave_1: entered promiscuous mode [ 160.964120][ T7101] debugfs: 'hsr0' already exists in 'hsr' [ 160.969947][ T7101] Cannot create hsr debugfs directory [ 160.975437][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 160.975450][ T28] audit: type=1400 audit(160.864:6958): avc: denied { bind } for pid=7196 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 161.124171][ T7101] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.136769][ T28] audit: type=1326 audit(161.104:6959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.160604][ T28] audit: type=1326 audit(161.104:6960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.162976][ T7101] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 161.197259][ T28] audit: type=1326 audit(161.104:6961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.264130][ T7101] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 161.288469][ T7101] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 161.312425][ T28] audit: type=1326 audit(161.104:6962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.344301][ T28] audit: type=1326 audit(161.104:6963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.433568][ T7101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.440228][ T28] audit: type=1326 audit(161.104:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.468708][ T7101] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.480936][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.488017][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.495907][ T28] audit: type=1326 audit(161.104:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.534541][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.541723][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.549779][ T28] audit: type=1326 audit(161.104:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.592419][ T28] audit: type=1326 audit(161.104:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7198 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 161.664277][ T7101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.863134][ T7101] veth0_vlan: entered promiscuous mode [ 161.871667][ T7101] veth1_vlan: entered promiscuous mode [ 161.889974][ T7101] veth0_macvtap: entered promiscuous mode [ 161.898279][ T7101] veth1_macvtap: entered promiscuous mode [ 161.938170][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.950333][ T7101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.966302][ T135] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.983054][ T135] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.003968][ T135] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.018690][ T135] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.055661][ T7278] loop7: detected capacity change from 0 to 512 [ 162.062938][ T7278] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 162.079198][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1016'. [ 162.092324][ T7278] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 162.100999][ T7278] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.989: bad orphan inode 4 [ 162.111195][ T7278] loop7: lost filesystem error report for type 5 error -117 [ 162.111339][ T7278] EXT4-fs (loop7): 1 orphan inode deleted [ 162.124401][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 162.124414][ C1] EXT4-fs (loop7): initial error at time 162: ext4_orphan_get:1423 [ 162.124458][ C1] EXT4-fs (loop7): last error at time 162: ext4_orphan_get:1423 [ 162.147259][ T7278] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.424426][ T7101] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.479630][ T7308] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1025'. [ 163.677853][ T7308] Cannot find del_set index 0 as target [ 164.923741][ T7356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 164.969158][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 165.557773][ T7375] netlink: 'syz.0.1049': attribute type 14 has an invalid length. [ 165.566296][ T7371] loop7: detected capacity change from 0 to 164 [ 165.603331][ T7371] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=164 [ 166.348910][ T28] kauditd_printk_skb: 233 callbacks suppressed [ 166.348926][ T28] audit: type=1326 audit(166.314:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.418426][ T28] audit: type=1326 audit(166.344:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.441407][ T28] audit: type=1326 audit(166.344:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.464883][ T28] audit: type=1326 audit(166.344:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.577681][ T28] audit: type=1326 audit(166.344:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.623324][ T28] audit: type=1326 audit(166.344:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.647093][ T28] audit: type=1326 audit(166.344:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.670239][ T28] audit: type=1326 audit(166.344:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.694517][ T7412] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1058'. [ 166.696664][ T7386] chnl_net:caif_netlink_parms(): no params data found [ 166.712043][ T28] audit: type=1326 audit(166.344:7209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.753735][ T28] audit: type=1326 audit(166.344:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7390 comm="syz.2.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 166.787404][ T7414] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1059'. [ 166.812335][ T7386] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.820144][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.827393][ T7386] bridge_slave_0: entered allmulticast mode [ 166.839515][ T7418] loop7: detected capacity change from 0 to 8192 [ 166.841889][ T7386] bridge_slave_0: entered promiscuous mode [ 166.862100][ T7386] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.869250][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.876464][ T7386] bridge_slave_1: entered allmulticast mode [ 166.883080][ T7386] bridge_slave_1: entered promiscuous mode [ 166.901085][ T7418] loop7: p1 < > p2 p4 < p5 > [ 166.905841][ T7418] loop7: partition table partially beyond EOD, truncated [ 166.916138][ T7418] loop7: p1 start 134217728 is beyond EOD, truncated [ 166.934302][ T7386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.944805][ T7386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.951460][ T7418] loop7: p2 size 591360 extends beyond EOD, truncated [ 166.968478][ T7386] team0: Port device team_slave_0 added [ 166.975068][ T7386] team0: Port device team_slave_1 added [ 166.981738][ T7418] loop7: p5 size 591360 extends beyond EOD, truncated [ 167.003143][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.012603][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.039100][ T7386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.071300][ T7386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.078377][ T7386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.140408][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 167.152292][ T7386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.186421][ T7426] »»»»»»: renamed from veth1_to_bond [ 167.259541][ T7386] hsr_slave_0: entered promiscuous mode [ 167.271167][ T7386] hsr_slave_1: entered promiscuous mode [ 167.283536][ T7386] debugfs: 'hsr0' already exists in 'hsr' [ 167.289310][ T7386] Cannot create hsr debugfs directory [ 167.360991][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 167.370004][ T7451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1071'. [ 167.494814][ T7455] hub 8-0:1.0: USB hub found [ 167.499800][ T7455] hub 8-0:1.0: 8 ports detected [ 167.759005][ T7386] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 167.772533][ T7462] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1072'. [ 167.786251][ T7386] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 167.800194][ T7386] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 167.811302][ T7386] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 167.882126][ T7386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.893652][ T7386] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.908415][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.915529][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.925174][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.932354][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.949681][ T7470] netlink: 'syz.0.1073': attribute type 21 has an invalid length. [ 167.960300][ T7470] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1073'. [ 168.049418][ T7386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.247867][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1076'. [ 168.326604][ T7386] veth0_vlan: entered promiscuous mode [ 168.334957][ T7386] veth1_vlan: entered promiscuous mode [ 168.365337][ T7386] veth0_macvtap: entered promiscuous mode [ 168.381943][ T7386] veth1_macvtap: entered promiscuous mode [ 168.395700][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.407953][ T7386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.420512][ T2274] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.445221][ T2274] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.460496][ T2274] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.510191][ T2274] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.839138][ T7527] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1082'. [ 169.143683][ T7539] IPVS: set_ctl: invalid protocol: 43 100.1.1.0:20265 [ 169.153031][ T7539] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 169.212028][ T5415] IPVS: starting estimator thread 0... [ 169.350762][ T7541] IPVS: using max 2688 ests per chain, 134400 per kthread [ 169.526888][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1093'. [ 170.010100][ T7569] can: request_module (can-proto-5) failed. [ 170.204822][ T7580] xt_hashlimit: size too large, truncated to 1048576 [ 170.271007][ T7585] tls_set_device_offload_rx: netdev not found [ 170.474580][ T7594] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 170.504918][ T7596] netlink: 'syz.2.1110': attribute type 18 has an invalid length. [ 170.755473][ T7611] loop8: detected capacity change from 0 to 8192 [ 170.792482][ T3309] loop8: p1 < > p2 p4 < p5 > [ 170.799818][ T3309] loop8: partition table partially beyond EOD, truncated [ 170.806736][ T7623] openvswitch: netlink: Message has 8 unknown bytes. [ 170.820261][ T3309] loop8: p1 start 134217728 is beyond EOD, truncated [ 170.827907][ T3309] loop8: p2 size 591360 extends beyond EOD, truncated [ 170.842750][ T3309] loop8: p5 size 591360 extends beyond EOD, truncated [ 170.863944][ T7611] loop8: p1 < > p2 p4 < p5 > [ 170.868792][ T7611] loop8: partition table partially beyond EOD, truncated [ 170.881375][ T7611] loop8: p1 start 134217728 is beyond EOD, truncated [ 170.889247][ T7611] loop8: p2 size 591360 extends beyond EOD, truncated [ 170.909500][ T7611] loop8: p5 size 591360 extends beyond EOD, truncated [ 170.926242][ T7629] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.032470][ T7629] bond1: (slave lo): Enslaving as an active interface with an up link [ 171.057050][ T7611] xt_hashlimit: size too large, truncated to 1048576 [ 171.081597][ T7629] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 171.288737][ T7644] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 171.350554][ T28] kauditd_printk_skb: 718 callbacks suppressed [ 171.350567][ T28] audit: type=1326 audit(171.324:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.420645][ T28] audit: type=1326 audit(171.354:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.459633][ T28] audit: type=1326 audit(171.354:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.492689][ T28] audit: type=1326 audit(171.354:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.530238][ T28] audit: type=1326 audit(171.354:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.568651][ T28] audit: type=1326 audit(171.354:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.631569][ T28] audit: type=1326 audit(171.354:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.654893][ T28] audit: type=1326 audit(171.364:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.677777][ T28] audit: type=1326 audit(171.364:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.701324][ T28] audit: type=1326 audit(171.364:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7608 comm="syz.8.1115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb6517cd04e code=0x7ffc0000 [ 171.793746][ T7670] __nla_validate_parse: 6 callbacks suppressed [ 171.793842][ T7670] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1136'. [ 172.428001][ T7681] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 172.465761][ T7681] netlink: 'syz.2.1140': attribute type 4 has an invalid length. [ 172.530374][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1144'. [ 173.172700][ T7719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 173.429368][ T7718] syz.8.1149 (7718) used greatest stack depth: 8328 bytes left [ 173.837693][ T7773] netlink: 'syz.2.1166': attribute type 21 has an invalid length. [ 173.857843][ T7773] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.874027][ T7773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.881349][ T7773] IPv6: NLM_F_CREATE should be set when creating new route [ 173.888564][ T7773] IPv6: NLM_F_CREATE should be set when creating new route [ 173.895798][ T7773] IPv6: NLM_F_CREATE should be set when creating new route [ 174.062404][ T7797] 9pnet_fd: Insufficient options for proto=fd [ 174.469387][ T7817] xt_hashlimit: max too large, truncated to 1048576 [ 174.523335][ T7774] syz.7.1167 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 174.583039][ T7774] CPU: 1 UID: 0 PID: 7774 Comm: syz.7.1167 Tainted: G W syzkaller #0 PREEMPT(full) [ 174.583140][ T7774] Tainted: [W]=WARN [ 174.583148][ T7774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.583162][ T7774] Call Trace: [ 174.583209][ T7774] [ 174.583217][ T7774] __dump_stack+0x1d/0x30 [ 174.583246][ T7774] dump_stack_lvl+0x95/0xd0 [ 174.583273][ T7774] dump_stack+0x15/0x1b [ 174.583298][ T7774] dump_header+0x80/0x240 [ 174.583323][ T7774] oom_kill_process+0x295/0x350 [ 174.583406][ T7774] out_of_memory+0x97d/0xb80 [ 174.583427][ T7774] try_charge_memcg+0x62e/0xa10 [ 174.583468][ T7774] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 174.583618][ T7774] __swap_cache_prepare_and_add+0x67/0x460 [ 174.583649][ T7774] ? alloc_pages_mpol+0x217/0x260 [ 174.583730][ T7774] swap_cache_alloc_folio+0xa2/0x120 [ 174.583839][ T7774] swap_cluster_readahead+0x26e/0x3d0 [ 174.583955][ T7774] swapin_readahead+0xde/0x840 [ 174.584061][ T7774] ? _raw_spin_unlock+0x9/0x30 [ 174.584089][ T7774] ? swap_put_entries_cluster+0x385/0x3a0 [ 174.584141][ T7774] ? swap_put_entries_cluster+0x121/0x3a0 [ 174.584173][ T7774] ? __rcu_read_unlock+0x4e/0x70 [ 174.584213][ T7774] ? swap_cache_get_folio+0x26f/0x280 [ 174.584244][ T7774] do_swap_page+0x2fe/0x21e0 [ 174.584299][ T7774] ? __rcu_read_lock+0x36/0x50 [ 174.584315][ T7774] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 174.584341][ T7774] handle_mm_fault+0xb46/0x3020 [ 174.584370][ T7774] ? vma_start_read+0x1c7/0x2c0 [ 174.584446][ T7774] do_user_addr_fault+0x62f/0x1050 [ 174.584611][ T7774] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 174.584635][ T7774] ? trace_page_fault_user+0x1f/0xe0 [ 174.584671][ T7774] exc_page_fault+0x62/0xa0 [ 174.584694][ T7774] asm_exc_page_fault+0x26/0x30 [ 174.584830][ T7774] RIP: 0033:0x7fd9e32cd020 [ 174.584843][ T7774] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 174.584893][ T7774] RSP: 002b:00007ffdd92592c8 EFLAGS: 00010246 [ 174.584907][ T7774] RAX: 0000000000000000 RBX: 000055557d92b500 RCX: 0000000000000000 [ 174.584918][ T7774] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 000055557d92b808 [ 174.584928][ T7774] RBP: 00007fd9e3587da0 R08: 00007ffdd9259320 R09: 0000000000000000 [ 174.584939][ T7774] R10: 0000000000000000 R11: 000055557d92b808 R12: 000000000002aa98 [ 174.584951][ T7774] R13: 00007fd9e358609c R14: 000000000002b7ec R15: 00007fd9e3586090 [ 174.584974][ T7774] [ 174.838689][ T7774] memory: usage 280164kB, limit 307200kB, failcnt 260 [ 174.876923][ T7774] memory+swap: usage 230452kB, limit 9007199254740988kB, failcnt 0 [ 174.900425][ T7774] kmem: usage 202412kB, limit 9007199254740988kB, failcnt 0 [ 174.928231][ T7774] Memory cgroup stats for /syz7: [ 174.928470][ T7774] cache 0 [ 174.946641][ T7774] rss 12288 [ 174.950030][ T7774] shmem 0 [ 174.956802][ T7774] mapped_file 0 [ 174.962961][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.970156][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.987504][ T7774] dirty 0 [ 174.992230][ T7774] writeback 4096 [ 174.997661][ T7774] workingset_refault_anon 25 [ 175.010631][ T7774] workingset_refault_file 0 [ 175.020434][ T7774] swap 204800 [ 175.041223][ T7774] swapcached 327680 [ 175.060437][ T7774] pgpgin 25240 [ 175.070772][ T7774] pgpgout 25235 [ 175.087252][ T7774] pgfault 28367 [ 175.093992][ T7774] pgmajfault 13 [ 175.119239][ T7774] inactive_anon 4096 [ 175.139492][ T7774] active_anon 12288 [ 175.152821][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.160754][ T7774] inactive_file 0 [ 175.164408][ T7774] active_file 0 [ 175.167895][ T7774] unevictable 0 [ 175.197770][ T7774] hierarchical_memory_limit 314572800 [ 175.205412][ T7800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.222004][ T7774] hierarchical_memsw_limit 9223372036854771712 [ 175.250292][ T7774] total_cache 0 [ 175.260484][ T7774] total_rss 12288 [ 175.264144][ T7774] total_shmem 0 [ 175.290817][ T7800] hsr1: left allmulticast mode [ 175.296825][ T7800] batadv0: left allmulticast mode [ 175.302182][ T7800] bond0: left allmulticast mode [ 175.307192][ T7800] bond_slave_0: left allmulticast mode [ 175.310323][ T7774] total_mapped_file 0 [ 175.313809][ T7800] bond_slave_1: left allmulticast mode [ 175.323523][ T7800] geneve1: left allmulticast mode [ 175.328610][ T7774] total_dirty 0 [ 175.357124][ T7774] total_writeback 4096 [ 175.390322][ T7774] total_workingset_refault_anon 25 [ 175.395560][ T7774] total_workingset_refault_file 0 [ 175.411007][ T7846] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1175'. [ 175.420039][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1175'. [ 175.429186][ T7774] total_swap 204800 [ 175.444533][ T7774] total_swapcached 327680 [ 175.444832][ T2274] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.448873][ T7774] total_pgpgin 25240 [ 175.448883][ T7774] total_pgpgout 25235 [ 175.448890][ T7774] total_pgfault 28367 [ 175.448896][ T7774] total_pgmajfault 13 [ 175.448902][ T7774] total_inactive_anon 4096 [ 175.448909][ T7774] total_active_anon 12288 [ 175.448915][ T7774] total_inactive_file 0 [ 175.486784][ T2274] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.503180][ T2274] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.510362][ T7774] total_active_file 0 [ 175.516403][ T7774] total_unevictable 0 [ 175.520607][ T2274] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.521117][ T7774] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.1167,pid=7774,uid=0 [ 175.546429][ T7774] Memory cgroup out of memory: Killed process 7774 (syz.7.1167) total-vm:159832kB, anon-rss:1248kB, file-rss:22368kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 175.669054][ T7858] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1181'. [ 175.696235][ T7854] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1179'. [ 175.920314][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1187'. [ 175.975157][ T7877] loop8: detected capacity change from 0 to 2048 [ 176.024230][ T7877] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.166705][ T7889] ext4: Unknown parameter '@' [ 176.194438][ T7889] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1189: bg 0: block 345: padding at end of block bitmap is not set [ 176.267904][ T7889] EXT4-fs (loop8): Remounting filesystem read-only [ 176.280423][ T135] EXT4-fs warning (device loop8): ext4_convert_unwritten_extents:5066: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 176.310288][ T7877] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #15: comm syz.8.1189: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 176.310288][ T7877] [ 176.360266][ T7877] EXT4-fs warning (device loop8): ext4_es_cache_extent:1082: inode #15: comm syz.8.1189: ES cache extent failed: add [0,16,112,0x1] conflict with existing [1,15,113,0x12] [ 176.360266][ T7877] [ 176.402184][ T28] kauditd_printk_skb: 135 callbacks suppressed [ 176.402196][ T28] audit: type=1400 audit(176.374:8074): avc: denied { write } for pid=7902 comm="syz.5.1195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 176.486938][ T28] audit: type=1400 audit(176.454:8075): avc: denied { getopt } for pid=7905 comm="syz.7.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 176.593639][ T7386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.635997][ T7917] loop8: detected capacity change from 0 to 1024 [ 176.703973][ T7918] netlink: 'syz.7.1196': attribute type 21 has an invalid length. [ 176.712007][ T7918] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1196'. [ 176.874264][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1203'. [ 177.095867][ T7917] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.401698][ T7954] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1215'. [ 177.534281][ T28] audit: type=1400 audit(177.504:8076): avc: denied { ioctl } for pid=7916 comm="syz.8.1198" path="/11/file1/file1" dev="loop8" ino=15 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 177.571596][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1219'. [ 177.954593][ T28] audit: type=1400 audit(177.794:8077): avc: denied { mounton } for pid=7969 comm="syz.7.1222" path="/file0" dev="autofs" ino=20677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 178.055040][ T7386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.234046][ T7986] loop8: detected capacity change from 0 to 128 [ 178.324084][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1226'. [ 178.651563][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1228'. [ 179.190210][ T8004] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1232'. [ 179.267670][ T8008] loop8: detected capacity change from 0 to 128 [ 179.308371][ T8008] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.497732][ T28] audit: type=1400 audit(179.454:8078): avc: denied { ioctl } for pid=8007 comm="syz.8.1234" path="/15/file1/file1" dev="loop8" ino=12 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 179.527154][ T7386] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.561090][ T8026] netlink: 'syz.8.1236': attribute type 21 has an invalid length. [ 179.576550][ T8026] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.625826][ T8026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 179.633057][ T8026] IPv6: NLM_F_CREATE should be set when creating new route [ 179.640325][ T8026] IPv6: NLM_F_CREATE should be set when creating new route [ 179.647543][ T8026] IPv6: NLM_F_CREATE should be set when creating new route [ 179.861075][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1245'. [ 180.057322][ T28] audit: type=1400 audit(180.024:8079): avc: denied { setattr } for pid=8051 comm="syz.7.1247" name="" dev="pipefs" ino=20805 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 180.189112][ T8057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1248'. [ 180.238721][ T8063] syz.8.1250 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 180.309932][ T8063] loop8: detected capacity change from 0 to 512 [ 180.367090][ T8063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.472454][ T8080] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1256'. [ 180.498069][ T28] audit: type=1400 audit(180.464:8080): avc: denied { setopt } for pid=8061 comm="syz.8.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 180.550109][ T7386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.623751][ T8086] xt_hashlimit: size too large, truncated to 1048576 [ 180.665247][ T8088] IPv6: Can't replace route, no match found [ 180.751704][ T28] audit: type=1400 audit(180.724:8081): avc: denied { tracepoint } for pid=8091 comm="syz.2.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 180.878383][ T8097] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1262'. [ 181.684873][ T28] audit: type=1326 audit(181.564:8082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.758297][ T28] audit: type=1326 audit(181.564:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.781198][ T28] audit: type=1326 audit(181.574:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.803888][ T28] audit: type=1326 audit(181.574:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.827023][ T28] audit: type=1326 audit(181.574:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.857808][ T28] audit: type=1326 audit(181.574:8087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.886638][ T28] audit: type=1326 audit(181.574:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.917692][ T28] audit: type=1326 audit(181.584:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 181.940925][ T28] audit: type=1326 audit(181.584:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 182.004100][ T28] audit: type=1326 audit(181.584:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8155 comm="syz.7.1288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e330c819 code=0x7ffc0000 [ 182.404836][ T8190] __nla_validate_parse: 1 callbacks suppressed [ 182.404856][ T8190] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1300'. [ 183.586027][ T8228] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1303'. [ 183.636326][ T8235] FAULT_INJECTION: forcing a failure. [ 183.636326][ T8235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.685856][ T8235] CPU: 1 UID: 0 PID: 8235 Comm: syz.8.1314 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.685919][ T8235] Tainted: [W]=WARN [ 183.685928][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.685949][ T8235] Call Trace: [ 183.685957][ T8235] [ 183.685965][ T8235] __dump_stack+0x1d/0x30 [ 183.686066][ T8235] dump_stack_lvl+0x95/0xd0 [ 183.686092][ T8235] dump_stack+0x15/0x1b [ 183.686131][ T8235] should_fail_ex+0x263/0x280 [ 183.686163][ T8235] should_fail+0xb/0x20 [ 183.686190][ T8235] should_fail_usercopy+0x1a/0x20 [ 183.686268][ T8235] _copy_to_user+0x20/0xa0 [ 183.686297][ T8235] simple_read_from_buffer+0xb5/0x130 [ 183.686318][ T8235] proc_fail_nth_read+0x10e/0x150 [ 183.686347][ T8235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.686397][ T8235] vfs_read+0x1ab/0x7f0 [ 183.686415][ T8235] ? __rcu_read_unlock+0x4e/0x70 [ 183.686444][ T8235] ? __fget_files+0x184/0x1c0 [ 183.686473][ T8235] ? mutex_lock+0x57/0x90 [ 183.686502][ T8235] ksys_read+0xdc/0x1a0 [ 183.686522][ T8235] __x64_sys_read+0x40/0x50 [ 183.686541][ T8235] x64_sys_call+0x2886/0x3020 [ 183.686597][ T8235] do_syscall_64+0x12c/0x370 [ 183.686627][ T8235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.686706][ T8235] RIP: 0033:0x7fb6517cd04e [ 183.686723][ T8235] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.686743][ T8235] RSP: 002b:00007fb650266fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 183.686765][ T8235] RAX: ffffffffffffffda RBX: 00007fb6502676c0 RCX: 00007fb6517cd04e [ 183.686779][ T8235] RDX: 000000000000000f RSI: 00007fb6502670a0 RDI: 0000000000000005 [ 183.686848][ T8235] RBP: 00007fb650267090 R08: 0000000000000000 R09: 0000000000000000 [ 183.686861][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.686877][ T8235] R13: 00007fb651a86038 R14: 00007fb651a85fa0 R15: 00007ffef72ed578 [ 183.686898][ T8235] [ 183.689560][ T8244] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1318'. [ 183.738312][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 183.852305][ T8251] FAULT_INJECTION: forcing a failure. [ 183.852305][ T8251] name failslab, interval 1, probability 0, space 0, times 0 [ 183.926785][ T8251] CPU: 1 UID: 0 PID: 8251 Comm: syz.8.1319 Tainted: G W syzkaller #0 PREEMPT(full) [ 183.926819][ T8251] Tainted: [W]=WARN [ 183.926827][ T8251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 183.926842][ T8251] Call Trace: [ 183.926848][ T8251] [ 183.926856][ T8251] __dump_stack+0x1d/0x30 [ 183.926966][ T8251] dump_stack_lvl+0x95/0xd0 [ 183.926994][ T8251] dump_stack+0x15/0x1b [ 183.927020][ T8251] should_fail_ex+0x263/0x280 [ 183.927048][ T8251] should_failslab+0x8c/0xb0 [ 183.927161][ T8251] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 183.927190][ T8251] ? dup_task_struct+0x5b/0x950 [ 183.927292][ T8251] dup_task_struct+0x5b/0x950 [ 183.927338][ T8251] ? copy_process+0x36d/0x20b0 [ 183.927366][ T8251] copy_process+0x37e/0x20b0 [ 183.927392][ T8251] ? kstrtouint+0x76/0xc0 [ 183.927424][ T8251] ? kstrtouint_from_user+0xa8/0xf0 [ 183.927513][ T8251] kernel_clone+0x16b/0x5d0 [ 183.927539][ T8251] ? vfs_write+0x86e/0x9f0 [ 183.927558][ T8251] __x64_sys_clone+0x143/0x180 [ 183.927595][ T8251] x64_sys_call+0x1222/0x3020 [ 183.927661][ T8251] do_syscall_64+0x12c/0x370 [ 183.927710][ T8251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.927781][ T8251] RIP: 0033:0x7fb65180c819 [ 183.927799][ T8251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.927820][ T8251] RSP: 002b:00007fb650245fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 183.927871][ T8251] RAX: ffffffffffffffda RBX: 00007fb651a86090 RCX: 00007fb65180c819 [ 183.927887][ T8251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022023400 [ 183.927901][ T8251] RBP: 00007fb650246090 R08: 0000000000000000 R09: 0000000000000000 [ 183.927990][ T8251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 183.928004][ T8251] R13: 00007fb651a86128 R14: 00007fb651a86090 R15: 00007ffef72ed578 [ 183.928027][ T8251] [ 184.151390][ T3481] IPVS: starting estimator thread 0... [ 184.240088][ T8255] IPVS: using max 2640 ests per chain, 132000 per kthread [ 184.355358][ T8277] loop8: detected capacity change from 0 to 2048 [ 184.373002][ T8277] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.387690][ T8277] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1329: bg 0: block 345: padding at end of block bitmap is not set [ 184.402284][ T8277] EXT4-fs (loop8): Remounting filesystem read-only [ 184.426743][ T7386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.467867][ T8294] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1333'. [ 184.517206][ T8294] loop8: detected capacity change from 0 to 1024 [ 184.532877][ T8294] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 184.543904][ T8294] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 184.573324][ T8294] EXT4-fs (loop8): invalid journal inode [ 184.579083][ T8294] EXT4-fs (loop8): can't get journal size [ 184.589199][ T8294] EXT4-fs error (device loop8): ext4_protect_reserved_inode:182: inode #2: comm syz.8.1333: blocks 3-3 from inode overlap system zone [ 184.603175][ T8294] loop8: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 184.605934][ T8294] EXT4-fs (loop8): failed to initialize system zone (-117) [ 184.615009][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 184.615029][ C1] EXT4-fs (loop8): initial error at time 184: ext4_protect_reserved_inode:182: inode 2 [ 184.615061][ C1] EXT4-fs (loop8): last error at time 184: ext4_protect_reserved_inode:182: inode 2 [ 184.647844][ T8294] EXT4-fs (loop8): mount failed [ 184.657687][ T8295] xt_hashlimit: size too large, truncated to 1048576 [ 184.735353][ T8294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.956796][ T8301] xt_hashlimit: size too large, truncated to 1048576 [ 185.376773][ T8332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1344'. [ 185.607043][ T8338] netlink: 'syz.0.1346': attribute type 21 has an invalid length. [ 185.614973][ T8338] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.623135][ T8338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.630369][ T8338] IPv6: NLM_F_CREATE should be set when creating new route [ 185.637625][ T8338] IPv6: NLM_F_CREATE should be set when creating new route [ 185.644916][ T8338] IPv6: NLM_F_CREATE should be set when creating new route [ 185.868059][ T8368] netlink: 'syz.7.1357': attribute type 21 has an invalid length. [ 185.876837][ T8368] IPv6: NLM_F_CREATE should be specified when creating new route [ 185.884943][ T8368] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.886387][ T8362] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1355'. [ 185.892271][ T8368] IPv6: NLM_F_CREATE should be set when creating new route [ 185.892286][ T8368] IPv6: NLM_F_CREATE should be set when creating new route [ 185.892297][ T8368] IPv6: NLM_F_CREATE should be set when creating new route [ 185.949885][ T8372] loop8: detected capacity change from 0 to 512 [ 185.974072][ T8372] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 185.987308][ T8372] EXT4-fs (loop8): 1 orphan inode deleted [ 185.993312][ T8372] EXT4-fs (loop8): 1 truncate cleaned up [ 185.999814][ T8372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.017273][ T8372] EXT4-fs error (device loop8): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.8.1358: path /48/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 186.059298][ T8372] EXT4-fs (loop8): Remounting filesystem read-only [ 186.083799][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1358'. [ 186.130213][ T7386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.193195][ T8394] loop8: detected capacity change from 0 to 764 [ 186.277820][ T8402] netlink: 'syz.8.1370': attribute type 21 has an invalid length. [ 186.293309][ T8402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 186.758725][ T8436] geneve2: entered promiscuous mode [ 187.606358][ T56] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.621269][ T2274] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.637441][ T2274] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 187.653141][ T2274] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 190.589550][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 190.589568][ T28] audit: type=1400 audit(190.464:8151): avc: denied { read } for pid=8458 comm="syz.2.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 190.734789][ T8471] xt_hashlimit: size too large, truncated to 1048576 [ 190.749929][ T28] audit: type=1400 audit(190.714:8152): avc: denied { nlmsg_read } for pid=8472 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 190.839652][ T28] audit: type=1400 audit(190.804:8153): avc: denied { override_creds } for pid=8472 comm="syz.5.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 191.105899][ T28] audit: type=1400 audit(191.074:8154): avc: denied { accept } for pid=8482 comm="syz.0.1394" lport=57110 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.174050][ T28] audit: type=1400 audit(191.094:8155): avc: denied { setopt } for pid=8482 comm="syz.0.1394" lport=57110 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.245700][ T28] audit: type=1400 audit(191.174:8156): avc: denied { getopt } for pid=8482 comm="syz.0.1394" lport=57110 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.318375][ T28] audit: type=1400 audit(191.174:8157): avc: denied { ioctl } for pid=8482 comm="syz.0.1394" path="socket:[21895]" dev="sockfs" ino=21895 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 191.385790][ T28] audit: type=1400 audit(191.174:8158): avc: denied { ioctl } for pid=8482 comm="syz.0.1394" path="socket:[21893]" dev="sockfs" ino=21893 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.411146][ T28] audit: type=1400 audit(191.174:8159): avc: denied { connect } for pid=8482 comm="syz.0.1394" lport=57110 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 191.606826][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1399'. [ 191.738273][ T8511] netlink: 'syz.2.1404': attribute type 21 has an invalid length. [ 191.746272][ T8511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.961253][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1406'. [ 192.065844][ T8533] xt_hashlimit: size too large, truncated to 1048576 [ 192.099471][ T28] audit: type=1326 audit(192.024:8160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8517 comm="syz.2.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f1f0c819 code=0x7ffc0000 [ 192.220452][ T8545] netlink: 'syz.0.1416': attribute type 21 has an invalid length. [ 192.228452][ T8545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.408355][ T8562] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1422'. [ 192.759527][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 192.780549][ T8578] netlink: 'syz.5.1428': attribute type 21 has an invalid length. [ 192.788408][ T8578] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.841279][ T8580] loop8: detected capacity change from 0 to 128 [ 192.849492][ T8578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.856741][ T8578] IPv6: NLM_F_CREATE should be set when creating new route [ 192.863977][ T8578] IPv6: NLM_F_CREATE should be set when creating new route [ 192.871250][ T8578] IPv6: NLM_F_CREATE should be set when creating new route [ 193.032560][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1433'. [ 193.051356][ T8576] xt_hashlimit: size too large, truncated to 1048576 [ 193.253459][ T8606] loop8: detected capacity change from 0 to 2048 [ 193.438629][ T8606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.512365][ T8606] syzkaller0: entered promiscuous mode [ 193.564336][ T8606] syzkaller0: entered allmulticast mode [ 193.909354][ T7386] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.014122][ T8633] netlink: 'syz.2.1444': attribute type 21 has an invalid length. [ 194.022195][ T8633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.049721][ T8637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1446'. [ 194.083067][ T8643] FAULT_INJECTION: forcing a failure. [ 194.083067][ T8643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.084320][ T8641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1448'. [ 194.096706][ T8643] CPU: 1 UID: 0 PID: 8643 Comm: syz.8.1449 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.096790][ T8643] Tainted: [W]=WARN [ 194.096809][ T8643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 194.096845][ T8643] Call Trace: [ 194.096862][ T8643] [ 194.096882][ T8643] __dump_stack+0x1d/0x30 [ 194.096964][ T8643] dump_stack_lvl+0x95/0xd0 [ 194.097033][ T8643] dump_stack+0x15/0x1b [ 194.097095][ T8643] should_fail_ex+0x263/0x280 [ 194.097225][ T8643] should_fail+0xb/0x20 [ 194.097284][ T8643] should_fail_usercopy+0x1a/0x20 [ 194.097368][ T8643] _copy_from_user+0x1c/0xb0 [ 194.097526][ T8643] generic_map_update_batch+0x4a9/0x680 [ 194.097625][ T8643] ? __pfx_generic_map_update_batch+0x10/0x10 [ 194.097756][ T8643] bpf_map_do_batch+0x25c/0x380 [ 194.097840][ T8643] __sys_bpf+0x6a2/0x7e0 [ 194.097928][ T8643] __x64_sys_bpf+0x41/0x50 [ 194.097973][ T8643] x64_sys_call+0x10cb/0x3020 [ 194.098052][ T8643] do_syscall_64+0x12c/0x370 [ 194.098142][ T8643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.098194][ T8643] RIP: 0033:0x7fb65180c819 [ 194.098239][ T8643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.098321][ T8643] RSP: 002b:00007fb650267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.098420][ T8643] RAX: ffffffffffffffda RBX: 00007fb651a85fa0 RCX: 00007fb65180c819 [ 194.098470][ T8643] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 194.098506][ T8643] RBP: 00007fb650267090 R08: 0000000000000000 R09: 0000000000000000 [ 194.098536][ T8643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.098578][ T8643] R13: 00007fb651a86038 R14: 00007fb651a85fa0 R15: 00007ffef72ed578 [ 194.098702][ T8643] [ 194.424280][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1454'. [ 194.478738][ T8641] xt_hashlimit: size too large, truncated to 1048576 [ 194.508382][ T8665] netlink: 'syz.5.1457': attribute type 21 has an invalid length. [ 194.516475][ T8665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.525919][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1458'. [ 194.717400][ T8659] xt_hashlimit: size too large, truncated to 1048576 [ 194.834296][ T8694] netlink: 'syz.5.1471': attribute type 21 has an invalid length. [ 194.861119][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1472'. [ 194.899700][ T8694] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.474387][ T8733] netlink: 'syz.0.1484': attribute type 21 has an invalid length. [ 195.482649][ T8733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.731325][ T8748] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 195.760548][ T28] kauditd_printk_skb: 738 callbacks suppressed [ 195.760559][ T28] audit: type=1326 audit(195.734:8899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 195.804831][ T8741] xt_hashlimit: size too large, truncated to 1048576 [ 195.831845][ T28] audit: type=1326 audit(195.764:8900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 195.880862][ T28] audit: type=1326 audit(195.764:8901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 195.959613][ T28] audit: type=1326 audit(195.764:8902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.001989][ T8672] IPVS: set_ctl: invalid protocol: 43 172.20.20.53:20265 [ 196.021406][ T3481] IPVS: starting estimator thread 0... [ 196.037023][ T8672] IPVS: nq: FWM 3 0x00000003 - no destination available [ 196.044903][ T28] audit: type=1326 audit(195.764:8903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.068031][ T28] audit: type=1326 audit(195.764:8904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.100673][ T28] audit: type=1326 audit(195.764:8905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.111331][ T8759] IPVS: using max 2640 ests per chain, 132000 per kthread [ 196.135837][ T28] audit: type=1326 audit(195.764:8906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.180579][ T28] audit: type=1326 audit(195.764:8907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.204422][ T8764] netlink: 'syz.2.1496': attribute type 21 has an invalid length. [ 196.231544][ T8764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.271909][ T28] audit: type=1326 audit(195.764:8908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.0.1487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb5b42c819 code=0x7ffc0000 [ 196.761692][ T8770] ================================================================== [ 196.769825][ T8770] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 196.777976][ T8770] [ 196.780313][ T8770] write to 0xffff88811b5fea68 of 8 bytes by task 8773 on cpu 0: [ 196.787963][ T8770] filemap_splice_read+0x523/0x780 [ 196.793087][ T8770] splice_direct_to_actor+0x26e/0x670 [ 196.798475][ T8770] do_splice_direct+0x119/0x1a0 [ 196.803350][ T8770] do_sendfile+0x382/0x650 [ 196.807805][ T8770] __x64_sys_sendfile64+0x105/0x150 [ 196.813025][ T8770] x64_sys_call+0x2dc4/0x3020 [ 196.817739][ T8770] do_syscall_64+0x12c/0x370 [ 196.822353][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.828264][ T8770] [ 196.830608][ T8770] write to 0xffff88811b5fea68 of 8 bytes by task 8770 on cpu 1: [ 196.838250][ T8770] filemap_splice_read+0x523/0x780 [ 196.843384][ T8770] splice_direct_to_actor+0x26e/0x670 [ 196.848766][ T8770] do_splice_direct+0x119/0x1a0 [ 196.853643][ T8770] do_sendfile+0x382/0x650 [ 196.858075][ T8770] __x64_sys_sendfile64+0x105/0x150 [ 196.863293][ T8770] x64_sys_call+0x2dc4/0x3020 [ 196.868034][ T8770] do_syscall_64+0x12c/0x370 [ 196.872646][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.878554][ T8770] [ 196.880885][ T8770] value changed: 0x0000000000003eef -> 0x0000000000003ef7 [ 196.888023][ T8770] [ 196.890355][ T8770] Reported by Kernel Concurrency Sanitizer on: [ 196.896560][ T8770] CPU: 1 UID: 0 PID: 8770 Comm: syz.2.1498 Tainted: G W syzkaller #0 PREEMPT(full) [ 196.907429][ T8770] Tainted: [W]=WARN [ 196.911240][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.921307][ T8770] ==================================================================