last executing test programs: 7m37.107347637s ago: executing program 32 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100080", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="240003"], 0x10e0}}, 0x0) 5m36.588583853s ago: executing program 33 (id=3234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000003a7333cb61217ed04a9067870c5b1c1224e414c888cbaf976dbc2817b8ce546f1570dabc7f3dc296c379242a192d32b434ddc0fba4f1", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000080001000200000008000200020000001c000480050003000200000005000300010000000500030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x8004) r3 = syz_open_procfs(0x0, &(0x7f0000004380)='smaps\x00') readv(r3, &(0x7f0000000840)=[{&(0x7f0000000280)=""/192, 0xc0}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/126, 0x96}, {&(0x7f00000005c0)=""/75, 0x4b}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000780)=""/150, 0xffffff69}], 0x7) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r6, 0x2, &(0x7f0000000040)=0x102) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x0, 0xed, 0x617}, {0x401, 0x3, 0x2, 0x9}]}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000140)={0x1, 0x4, {0x18be, @usage=0x1, 0x0, 0x4f6a8870, 0xb, 0x2, 0x9, 0x4, 0x20, @struct={0x6, 0xf06}, 0x4, 0x1, [0x4, 0x5, 0x6, 0xfffffffffffffffc, 0x80000001, 0x3ff]}, {0x7, @usage=0x1001, 0x0, 0x6, 0x80000001, 0x9, 0xffffffffffff0001, 0x8000, 0x400, @struct={0x2, 0x2}, 0xdb11, 0x4, [0x58b, 0x7, 0xfffffffffffffffb, 0x4, 0x4000000000000000, 0xa7a]}, {0x801, @struct={0x0, 0x5}, 0x0, 0xe, 0x1, 0xfffffffffffffff4, 0x5, 0x9, 0x82, @usage=0x8003, 0x7, 0x101, [0xf2d4, 0x5, 0x4, 0x480b, 0x2, 0x4]}, {0x9, 0x9, 0x5e}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000540)={r8, "9d4e25ab903dc19317ad7e6bd273b2e0"}) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(r7, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001740)=0x14) sendmmsg$inet6(r9, &(0x7f0000005100)=[{{&(0x7f0000001540)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000001780)=[@dstopts={{0x18, 0x29, 0x37, {0x23}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8c0}}], 0x30}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003580), 0x0, &(0x7f00000036c0)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000040)) 5m25.914778988s ago: executing program 34 (id=3463): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000005c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="02030003120000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a00ff8000000000000000000000000000000000000000010b0000000000000a02000100000000000000070c0000000005000500000000000a00000000000000fc0100000000000000f8ff00000000010700000000000000010014"], 0x90}, 0x1, 0x7}, 0x0) 5m1.422352252s ago: executing program 35 (id=3625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x1f00, 0x0, 0xa, 0x0, 0x0, 0x64}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x35}, {}, {0xfffffffffffffffd, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x70bd2a, 0x70bd28}}]}, 0x154}}, 0x0) 4m53.271505409s ago: executing program 36 (id=3962): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000ac0)="6cb76def", 0x4}], 0x1, 0x0, 0x12c}}], 0x2, 0x0) 4m32.059924802s ago: executing program 37 (id=4366): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4000, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 4m15.761346176s ago: executing program 38 (id=4700): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}}, 0x24004000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000280)={0x10000000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r4 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x12) ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000020feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0x1d4) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r7, &(0x7f0000000080)=@file={0x1}, 0x6e) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r8, &(0x7f0000000080), 0x8) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0xa00000, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=r9]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200"/14, @ANYRESHEX=r5, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x2, 0xc7, &(0x7f0000000340)=""/199}, 0x94) 3m27.547538288s ago: executing program 7 (id=5601): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xffffff7f00000000, 0x2) 3m27.058978727s ago: executing program 7 (id=5613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e00000000000000009dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x12f0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) (async) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @local, @remote}, {{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x40, 0x8, 0x0, 0x0, {[@exp_fastopen={0x1d, 0x5, 0xf989, 'P'}, @mptcp=@generic={0x0, 0x10, "5f71bf8a8088fc0d16907cbac1e5"}]}}}}}}}, 0x0) 3m26.903188636s ago: executing program 7 (id=5617): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x248}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3m26.901564657s ago: executing program 7 (id=5618): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3, &(0x7f0000000000), 0xbc, 0x55a, &(0x7f0000000900)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0x1b, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}}}, 0x38) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20841, 0x110) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x4, 0x4, 0x10, @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x13}, 0x700, 0x20, 0x6, 0x2}}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x8001) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x2, r7}) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) syz_init_net_socket$llc(0x1a, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@report={0x54, 0x20, 0x200, 0x70bd25, 0x25dfdbfd, {0x2b, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@broadcast, 0x4e21, 0x4, 0x4e20, 0x8, 0xa, 0xf0, 0x0, 0x32, r3, r4}}, [@proto={0x5, 0x19, 0x3c}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) creat(&(0x7f00000029c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 3m26.767295725s ago: executing program 7 (id=5620): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3m26.478758321s ago: executing program 7 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000024000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c0001"], 0xdc}}, 0x0) 3m26.383462397s ago: executing program 39 (id=5625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000024000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c0001"], 0xdc}}, 0x0) 3m17.855363266s ago: executing program 3 (id=5766): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x2400, 0x10000, 0xfffffffc, 0x5, 0x8, 0x20005, 0x20, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x14, r1, 0x5, 0x0, 0x0, {0x22}}, 0x14}}, 0x4000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)=ANY=[@ANYBLOB="d400000000020103000000000000000007000002900003801400018008000100ac1414aa08000200ac1414aa0c000280050001002f000000060003400001000006000340000100002c000180140003000000000000000000000000000000000014000400fc00000000000000000000000000000014000180080001007f00000108000200ac1414bb060003400004000014000180080001006401010108000200ffffffff0e0006007369702d3230303ef30000000e000600736e6d705f747261700000000e0006007369702d3230303030000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x1d) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x0) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000340), 0x4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f00000000c0)={0x80, 0x16, 0x4303, 0x0, 0x0, 0x6e7, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000906010200000000000000000200fffe0900020073797a31000000000500010007000000280007800c000180080001406c0101000500070084000000060004404e220000080006400000005b"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 3m17.61355344s ago: executing program 3 (id=5771): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd28, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}}, 0x44080) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000200"], 0x50}}, 0x4000850) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x4) 3m17.223492893s ago: executing program 3 (id=5776): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008040002000000000500000063110e000000000395"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) 3m17.205443334s ago: executing program 3 (id=5778): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f1f0000060001000000000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) r3 = epoll_create1(0x80000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000001bc0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv6={0x86dd, @udp={0x4, 0x6, "6598bc", 0x18, 0x11, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @empty, {[], {0x4e24, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x905}}}}}}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x15, r5, 0x2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x10000008}) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7000, 0x0, 0x3) 3m16.875523073s ago: executing program 3 (id=5783): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x4, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14305, 0x2e, 0xfffffc00, 0x3, 0x5, 0xfffffffd, 0xfffa, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) io_uring_setup(0xaae, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x6c, 0x1, [@m_sample={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x60000000, 0x2, 0x6, 0x9}}, @TCA_SAMPLE_RATE={0x5, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x80}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3m16.785809989s ago: executing program 3 (id=5786): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1000000000000, 0x4000000000000004}, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x29b, 0x3, 0x8000}) inotify_add_watch(r2, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') (async) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1000000000000, 0x4000000000000004}, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x29b, 0x3, 0x8000}) (async) inotify_add_watch(r2, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) (async) 3m16.706925363s ago: executing program 40 (id=5786): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1000000000000, 0x4000000000000004}, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x29b, 0x3, 0x8000}) inotify_add_watch(r2, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x101800, 0x0) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') (async) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x12, 0x2, 0x6, 0x9, 0x40, 0x8000}, 0x0, &(0x7f0000000240)={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x1000000000000, 0x4000000000000004}, 0x0, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000040)={r0, 0x29b, 0x3, 0x8000}) (async) inotify_add_watch(r2, &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) (async) 1m18.359057782s ago: executing program 2 (id=8666): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="050027009c00000008008500", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=0x0, @ANYBLOB="e8001a8048000a80140007"], 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m18.345206263s ago: executing program 2 (id=8667): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000000)=ANY=[], 0x40, 0x321, &(0x7f00000024c0)="$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") ptrace$pokeuser(0x6, r1, 0xfffffffffffffffc, 0x81) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000080)={0x3, 0x6, 0x0, 0x6, 0x4}) wait4(r2, 0x0, 0x8, 0x0) wait4(r0, &(0x7f0000000000), 0x0, 0x0) 1m18.152506115s ago: executing program 2 (id=8672): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2, 0x0, 0x0, 0x600}, 0x0) 1m12.776686309s ago: executing program 2 (id=8676): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)={[{@acl}, {@nolazytime}, {@orlov}, {@i_version}, {@lazytime}, {@nodiscard}, {@grpjquota}, {@block_validity}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000000b00)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000"], 0xd0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x0, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x4}]) socket(0x1, 0x5, 0x10001) socket$inet_sctp(0x2, 0x5, 0x84) 1m12.517075754s ago: executing program 2 (id=8747): openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') (async) syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x34) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRES8=r0], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x6, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) 1m12.383552172s ago: executing program 2 (id=8749): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 57.359287842s ago: executing program 41 (id=8749): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00'}, 0x94) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 54.344598518s ago: executing program 6 (id=9023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x4, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4", 0x20}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 54.131349321s ago: executing program 6 (id=9027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000900)="bada30fbc99b5400040000ea0756", 0xe, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 54.064630075s ago: executing program 6 (id=9029): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r0, &(0x7f0000000e80)=ANY=[@ANYBLOB="41003084"], 0x5c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRESHEX=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 53.179311626s ago: executing program 6 (id=9037): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1200000, &(0x7f0000006940)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00', @ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES16], 0x1, 0x15e, &(0x7f00000003c0)="$eJzs27/K01AYB+C39q+6dBaHgItTUa9AkQpiQFE66KRQXVop2CU69VK8QUE6dTtSI62WOvSjacrX51nywo8czjskJyck7+9+noxn80+zV8voNRrRehxZrBrRjxvRjNIiAIDrZJVS/Ewppe4ibn6PlFLdMwIAqnbF9b9b+cQAgMrY/wPA5bH+A8DlefP23YsneT58nWW9iB+LYlSMymOZP3ueDx9kv/W3Zy2LYtTc5A/LPPs3b8etP/mjvXkn7t8r83X29GW+k9+OcfXtAwAAwEUYZBt79/eDwf/ysvrr/cDO/r0Vd1onawMAOMD867fJh+n04xfFEYt2HGnA9UNY/e2cqojjjBP9iHNo56CiE2cxjW1R950JqNrmok8+/QMAAAAAAAAAAAAAgHN1it+J6u4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdv0KAAD//zVIUEo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x22, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x7}, 0xec25, 0x4085, 0xb, 0x4, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x4, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0xa920, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) 52.78134797s ago: executing program 6 (id=9047): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x15, 0x6, 0x7) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r0, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) sendmsg$kcm(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{0x10, 0x0, 0xc}, {0x10, 0x110, 0xa}], 0x20}, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="020300020c000000fd060000fedbdf25030006000000007f000001000000000000000002000100000000000000020d000000400300050001000000000000000002000800080000002100000000000000"], 0x60}, 0x1, 0x7}, 0x0) 52.519460015s ago: executing program 6 (id=9053): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000003d000/0x4000)=nil, 0x4000, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 52.519293745s ago: executing program 42 (id=9053): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f000003d000/0x4000)=nil, 0x4000, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 32.847419867s ago: executing program 8 (id=9383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000090601010000000000000000050000000900020073797a3100000000050001000700000038000780060004404e20000005000700ff0000000c00018008000140ac1414aa1800148014000240"], 0xb8}, 0x1, 0x8000000, 0x0, 0x10004893}, 0x80) 32.815791699s ago: executing program 8 (id=9385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a6f000210000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x82, &(0x7f0000000300)={0x0, 0xb}, 0x8) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x101202, 0x0) preadv2(r6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/245, 0xf5}], 0x1, 0x647a, 0x7c, 0x0) openat$cgroup_ro(r6, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4100, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r7, 0x89f2, &(0x7f0000000080)={0xdf, 0x0, 0xdffffff9, 0x40, 0x0, "bb40af00008000000000000800"}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007e657468000000000400028008000300000000000500110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) close(r2) 32.774303402s ago: executing program 8 (id=9387): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079af480000000000790018000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) 32.707285395s ago: executing program 8 (id=9388): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x5) r1 = memfd_secret(0x80000) unshare(0xc000400) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f0000000380)=ANY=[], 0x1, 0x2b4, &(0x7f00000000c0)="$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") open$dir(&(0x7f00000004c0)='./bus\x00', 0x400800, 0x0) openat(0xffffffffffffffff, &(0x7f0000000780)='./bus\x00', 0x2c0541, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000540)=0x8001, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000006c0)}, 0x0, 0x1000c, 0x7, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x2, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x11, r3, 0x2000) lsm_get_self_attr(0x66, 0x0, &(0x7f00000012c0), 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000706010100000000000000000a000000080006400000000405000108000640000000050900020073797a30000000000900020073797a310000000005000100070000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) r4 = socket(0x28, 0x5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xf0, 0x4, 0x40, 0x7, 0x0, 0x4000010000, 0xc4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000005c0), 0x8}, 0x100a03, 0x0, 0x6, 0x3, 0xb, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xe, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5, 0x22, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x8}, 0x900, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0xffffffff, 0x79e}, 0x8) sendmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="1bcb1058", 0x4}], 0x1}}], 0x1, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@ifindex, 0x37, 0x0, 0xd9, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)}, 0x40) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002f80), 0x400004, 0x0) ioctl$TCFLSH(r6, 0x540b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES64=r5, @ANYBLOB="350b047d89db5f492f000000", @ANYRES32=r1, @ANYBLOB, @ANYRES8=0x0], 0x20) recvmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000140)=""/171, 0xab}, 0x400181c2) 32.686373806s ago: executing program 8 (id=9389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x4, 0x3, 0x3a}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee", 0x13}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) 31.561521802s ago: executing program 8 (id=9406): syz_emit_ethernet(0x4a6, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x470, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}, {0x3, 0x15, "7acb78ae32770c55a66897dbf5a4d58256ef720acf69f1055ab0cfa9f00ddd900ed8f451d984c99122d6f9daa4fa4a7095da700ecc5b577be64e4ad981d221ac10a925435a015e2e43604223cbad87d3386de356b7aa17431232493635698ef62b39c56c79ab4fd0036eb66073a68d9d3b1385636432c2a0c930ef213d2ba291f7bfbf082f96e67f6d1d6ad00a9d79be13a341af4c54c56c77315225dfd1d90891d78ee5223b"}]}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) fsmount(r0, 0x0, 0x4) 31.536927894s ago: executing program 43 (id=9406): syz_emit_ethernet(0x4a6, &(0x7f0000000000)={@multicast, @random="777de85bf4dd", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x470, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46c56aa00148c356de6b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x18, 0x7, "b8a3e10000a3e1100000006f00ff12164039d0ebab140888c235c0fffe00000000600000ff0bc0fe0000000000000000fe20e23f6541c3"}, {0x0, 0x22, "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"}, {0x3, 0x15, "7acb78ae32770c55a66897dbf5a4d58256ef720acf69f1055ab0cfa9f00ddd900ed8f451d984c99122d6f9daa4fa4a7095da700ecc5b577be64e4ad981d221ac10a925435a015e2e43604223cbad87d3386de356b7aa17431232493635698ef62b39c56c79ab4fd0036eb66073a68d9d3b1385636432c2a0c930ef213d2ba291f7bfbf082f96e67f6d1d6ad00a9d79be13a341af4c54c56c77315225dfd1d90891d78ee5223b"}]}}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb) fsmount(r0, 0x0, 0x4) 2.966198726s ago: executing program 0 (id=9878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf15}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x109, &(0x7f0000000100)={@remote, @link_local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc={0x4, {@snap={0x155, 0x1, "7801", "2625ea", 0x7, "10e00a7bd9dc4786a4a8b10a19018bb005a4a51b3552bb7e5caa26fe8f7b662603549afbc961c38ea455fe6f9a51bd98a8487bb3e466b6c7542d42e7ed3851b3756018c33b0e580f6b4a7d16f7f601fa4b4023f0b333aaae2ac923a86bc6df235005a0e368348c1cf9be5c1f15657d7bc5d08cf2d0149f1cbda3207c58b3662d9e011d43f7461a1ad2afc11dab382f99a3d3b0d1367b92666a8172076efca6b776589da15cf170323d7807b8b41afe6a652187b24c3a22801441bc330f138a4ab15bf0df89625af776e4f9036ab5b3c54e4b7d22af897ed3f3a138eba9e0886dc90402ed3e715d02f79220b669d4"}}}}}, 0x0) 2.830462495s ago: executing program 0 (id=9880): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @mss={0x2, 0x768b112a}, @window={0x3, 0xff}, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) r2 = fsopen(&(0x7f0000000500)='udf\x00', 0x0) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x600, 0x30, 0x2}, 0x18) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000c7d42d39a43a110422942522a847f84fef324749af", @ANYRES16=r4, @ANYBLOB="040026bd7000fddbdf25050000000c009900060000004c000000"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4048850) readlinkat(r1, 0x0, &(0x7f0000000080)=""/13, 0xd) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x11) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x24008804) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.590203319s ago: executing program 9 (id=9886): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800460000206cde5ac579ab1e416401010008"], 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c7, &(0x7f0000000000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b000000080043"], 0x28}}, 0x50) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001540)=ANY=[@ANYBLOB="300000004a000b0000000000000000000a0080009067d9f4c546d621d2396229c5e164bebd8151c98d90893ab68e43f1f2e910ad1382cb3f35b3c2fc05f3421f8ed23a56d2a58748f16f0a4ed57651d5465577678736c4c921374670086b73435d3d866032aad53887d84494174d89f502e2e0538e1b7b5dd32aebbb0a7cea7616d45e09d1894a03b2dd68ed2615f468ea49173cc9247b6ab9bc50ec000fd7b3cdfa3bc19305265463c0d3fc", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff020000000000000000000000000001"], 0x30}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000001640), r1) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000001c0)) ioctl$SG_IO(r3, 0x2285, &(0x7f00000014c0)={0x53, 0xfffffffffffffffe, 0xe4, 0x3, @scatter={0x5, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/87, 0x57}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/129, 0x81}]}, &(0x7f00000013c0)="f7b4929ea5fafaa2126fa32fd0b72f93420941753fc954d42566a33ed7b82239e0735bd1c767ff359cbef053c61ab80ecd2951dd3f95c331a9c6092c4655b88051242a55cb784edb82fad705e3876bdab88b4583602c545a5dd07029258b956ca0b75db2adacf7c8d294e98dc118778edce00b7b1caeada1a172310ac0d004561e8a5a527b91769b1ca6b583cc8ea0bd70af2d859176dd7c51e1cfcd992f435cad91f538f6ff002f4a29e2a4b217fe9c6038b2b71db44ca720b519e8da295a3dc3fb8fd9ea7d062a215ab2ce05436fc410627dae73b1e6a5423e68953aa9cf8bd2c9782f", &(0x7f0000000300)=""/28, 0x2, 0x0, 0x3, &(0x7f0000000340)}) socket$nl_xfrm(0x10, 0x3, 0x6) 1.971411245s ago: executing program 4 (id=9891): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/183, 0xb7}], 0x1) 1.810378654s ago: executing program 0 (id=9894): pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0xfe80, 0x24040051}, 0x4000000) 1.679085362s ago: executing program 0 (id=9896): unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c00fc72000000000000000000000000000000008800000000000000000004"], &(0x7f0000000040)=0x2c) 1.310247354s ago: executing program 9 (id=9898): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYBLOB="30000000200001000000000000000000020000000000ffffffff00000c00144000000000000000000500130001"], 0x30}}, 0x4000) 1.155454093s ago: executing program 9 (id=9899): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000080900010073797a31000000005800048054000180090001006d6e74610000000044000280080001400000000c080003400000000008000340000000170800014000000003080002400000002308000140000000120800024000000018080002"], 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x44000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x6400, 0x0, 0x20000844}, 0x0) 1.150425963s ago: executing program 9 (id=9900): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x2010896, &(0x7f0000000040)={[{@i_version}, {@usrquota}, {@barrier}]}, 0x1, 0x535, &(0x7f00000011c0)="$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") 1.087884137s ago: executing program 4 (id=9902): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x1000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x10290, 0x600, 0x1, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x808000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 959.055714ms ago: executing program 0 (id=9903): r0 = syz_io_uring_setup(0x58f7, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) unshare(0x20040600) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x1d, 0x0, @fd_index=0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x1e}) io_uring_enter(r0, 0x1f82, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r3) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x1ff) socketpair(0x8, 0x1, 0x3ff, &(0x7f0000000300)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a04, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x82f45c4102430fbc, @perf_config_ext={0xec3}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0xe, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r8, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x14046, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 942.723006ms ago: executing program 9 (id=9904): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r2, &(0x7f00000001c0)="bc", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) recvfrom$inet(r2, 0x0, 0x17, 0x10042, 0x0, 0xfffffffffffffcdf) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xe27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x5, 0xf}}, [@TCA_RATE={0x5, 0x5, {0x9, 0x7}}, @filter_kind_options=@f_cgroup={{0xb}, {0x50, 0x2, [@TCA_CGROUP_ACT={0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0x81, 0x8, 0xfff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}}, 0x20040054) syz_emit_ethernet(0x4e, &(0x7f0000001100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500180601fe8000000000000000000000000000aafe80004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e042ce5"], 0x0) 897.336338ms ago: executing program 5 (id=9905): socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) syz_clone(0x49000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000706030000000000000000000000000a0900020073797a300000007208000100070000000900020073797a3100000000e3ff0000070000000800064000000006"], 0x44}}, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x48043) syz_emit_ethernet(0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/320], 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)={'#! ', '', [{0x20, '-.#%'}, {0x20, 'msdos\x00'}]}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x28011, r6, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x8, r5, 0x0, r6}, 0x10) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x0, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x100000, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f0000000280), 0x0) pipe2$9p(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x60}]}) 784.501944ms ago: executing program 4 (id=9906): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x2c, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, r0}, 0xd5) 783.393374ms ago: executing program 4 (id=9908): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$sock(r3, &(0x7f0000000300)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x80, 0x0}, 0x4008000) close(0x3) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = socket(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x300000, &(0x7f0000000080)=ANY=[@ANYBLOB="c64c821ffa82012bf8355817d57472", @ANYRES8=r5, @ANYBLOB='.wfdno=', @ANYRESHEX=r5, @ANYRES32=r4, @ANYRES32=r2]) getsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), &(0x7f0000000180)=0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x108000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x13008, 0x0, 0x800101, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0xa3c0dda19233b004, 0x0, 0x9}) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) sendmsg$sock(r3, &(0x7f0000000300)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41, 0x3}}}, 0x80, 0x0}, 0x4008000) (async) close(0x3) (async) socket$kcm(0x21, 0x2, 0x2) (async) socket(0x1, 0x5, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x300000, &(0x7f0000000080)=ANY=[@ANYBLOB="c64c821ffa82012bf8355817d57472", @ANYRES8=r5, @ANYBLOB='.wfdno=', @ANYRESHEX=r5, @ANYRES32=r4, @ANYRES32=r2]) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040), &(0x7f0000000180)=0x4) (async) 735.001687ms ago: executing program 4 (id=9909): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x801) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20048800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0xffffffffffffffff, 0x100}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0xe4ffffff}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 640.250793ms ago: executing program 5 (id=9910): bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x60060200) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000180)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x130, 0x11, 0x148, 0x130, 0x0, 0x208, 0x2a8, 0x2a8, 0x208, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x0, 0x18}}}, @common=@unspec=@limit={{0x48}, {0x5, 0x5, 0x4, 0x3, 0x9, 0x3, 0xfffffffffffffff8}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {0xff}}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x342199ddedfbc7b6, 0xde, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000580)=@o_path={&(0x7f0000000040)='./mnt\x00', r2, 0x4000, r1}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x68, 0xc9, &(0x7f0000000200)="13aa5a15def4504bbc940e6a7ea9d0b14dd65fe1444ccf0090f5261222f38f9fd595caf59a9bdbdc4dcf21ece038eadd85791e89b7420b85742edecbe08fef3b8a00d4113cf457dd14e50323530ca998bdd7da3badee0f7d503934f01177db421a6491c2ef022bea", &(0x7f00000002c0)=""/201, 0x2, 0x0, 0x87, 0xf6, &(0x7f00000003c0)="440ed154fe4d507155ed7fa1cf33ca65ff517e5138082eeec82374c4d1ef39dc97a2fc28bf72cc153bd37cdde731a18596cf6821372fef474e79ccb3d9ad81d42a04d6b4e8746afc1a3432601501ba58e05b3778cad6ab524988c93f6f902cc086885603f25a853b7f26b950bf2385f1f02931acabda7cbbede799f2f84191b8712da7cd85a8ca", &(0x7f0000000600)="140e5000b4fe20c32a0d9d7da5569e8a02de5ae71113312a4788fc1d16cd7498927ed54e8be202b0cefa2e8f195dcf46cecc5929b6468c5159d6f793c9b149485bffb6e02db5d033e0dd3dd7aeeceb4c88264750521e4646f3a76dabde8c872bc2d4848c6e62635093c26db731b01c3f78665be0e1670f98a0e797f1866a183de5b2d1f485b249ea1c2ca50d89336be93a183efba5d1d735ba8a447abeb067a53ebdd3f928ce21a22449a9713de98c06b06b94a524b8a5d5f918dbd10833a1f482ec9048091a3beba182bf54bb997c22bdb271ea43a1da70236b35d129a8ad73570106b9adca0081b93538cced8e5e81b576cb72788d", 0x1, 0x0, 0x5}, 0x50) (async) r5 = socket(0x2, 0x80805, 0x0) perf_event_open(&(0x7f0000000680)={0x4, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x8, 0x1}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x2, 0xb, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xfffffffffbffffff, 0xffffffffffffffff, 0x9) sendmmsg$inet(r5, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) unshare(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c040) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$KDENABIO(r1, 0x4b36) (async) unlinkat(r6, &(0x7f00000000c0)='./mnt\x00', 0x0) r7 = socket(0x1, 0x3, 0xc0) accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x800) (async) r8 = socket(0x10, 0x3, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r7, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001f80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf251300000008000300", @ANYBLOB="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", @ANYBLOB="0c0099000000000005000000050a1d6814000000"], 0x30}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @empty, @rand_addr=0x3}}}}) 528.471379ms ago: executing program 4 (id=9912): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x1, 0x2002) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x8, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000001580)=""/183, 0xb7}], 0x1) 515.81292ms ago: executing program 1 (id=9913): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x2}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = accept4$tipc(r2, &(0x7f0000000280)=@name, &(0x7f0000000340)=0x10, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000440)) r4 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000000206050000000000000000000700000014000780050014000a000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r4], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x30, &(0x7f00000000c0)=""/48, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x43}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f00000009c0)="4cc7ad24fa536b59fc630b11022ae7ab05a2415af8e2ef0fbf53ea39945af7889d4c18e404b29b0a79d3fca56f113c525bc958f8fcdb536ecbe540103b40a66fe9e9f1562fada4ab82c0580b86d65d9222a998f23a7c68de475aeeea1045128158ffd93c5a2a3109442193df434cc5b89f0f202a912cb2603f8627a6176815a6cc6d695f5d9115e1588dede0740c9a8ff090e3a4489505ecf906417e9a908b5cb8ade9bd06021ab7e513947b0fe06411fcbaca34bf286b", &(0x7f0000000100)=""/49, 0x4}, 0x20) open_by_handle_at(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r7], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 318.055522ms ago: executing program 5 (id=9914): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0xa772da54, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4000000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c000280", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x1000000}, 0x0) 235.524127ms ago: executing program 1 (id=9915): syz_emit_ethernet(0x93, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60ab0001005d0600fef900000000000000000000000300bbfe"], 0x0) 233.769117ms ago: executing program 1 (id=9916): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x4040) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0xffffffff}, 0x6025, 0x4005, 0xb, 0x6, 0xc2d, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000001100000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 178.27094ms ago: executing program 5 (id=9917): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a9014000000000500000000080017004e204ea414000200fc0000000000000000000000000000041400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x40, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x40, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 173.94258ms ago: executing program 1 (id=9918): sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x50, 0x0, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd31, 0x4, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xfff2}, {0x4, 0xfff1}}}, 0x24}}, 0x20000000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x70, 0x30, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{0x5c, 0x1, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x2, 0xc3f7, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@getchain={0x6c, 0x66, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x6, 0x9}, {0xf, 0xf}, {0xe, 0xb}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0xb8}, {0x8, 0xb, 0x65}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0xffffffff}, {0x8, 0xb, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x340048c0}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002dbd7040fcdbdf251b00000008009a0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000580)={0x0, 0x81, 0x30, 0x80, 0x7fffffff}, &(0x7f00000005c0)=0x18) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000600)={r7, 0x2, 0x4, [0x0, 0x0, 0x3ff, 0xc3]}, &(0x7f0000000640)=0x10) r8 = socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) close(r8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4004000}], 0x1, 0x8000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000540)={r10, @in6={{0xa, 0x4e21, 0x1, @local, 0xfffffff8}}}, &(0x7f0000000480)=0x84) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000540)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x34, r5, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1000, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044050}, 0x20000000) 107.463854ms ago: executing program 5 (id=9919): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000040000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 106.979534ms ago: executing program 0 (id=9920): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xa, @empty, @remote, @empty, @multicast2}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700037500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250}, 0x94) 106.645994ms ago: executing program 5 (id=9921): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000040), 0x6, 0x50c, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f000009ddc0), 0x20100) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f000009de00)={{0x3, 0x80}, {0x0, 0x2}, 0x40000bde, 0x5, 0x4}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfe, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}]}, 0x50}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x104080000}, 0xc, &(0x7f0000000380)={&(0x7f00000012c0)={0x1cc, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb05}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff238c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffff14}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd36}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a37}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb22}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1bbc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdc3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4041}, 0x1) sendto$inet6(r0, &(0x7f0000000640)="58104053af", 0x5, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000000)="2f7a61f9b0") syz_io_uring_setup(0x3092, &(0x7f0000000180)={0x0, 0x2d23, 0x8000, 0x2, 0x37d}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x29c, &(0x7f00000002c0)=0x6, 0x0, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 104.167384ms ago: executing program 1 (id=9922): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180600000000000000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095a5bae8dcd49c1f9095316a3bfaad34ebf989230843955cbd16f01a1ba86ab3d63d9530a67c66abd66fe3c1f7a5ecb19dfe0408418569", @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES8, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407d0}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x6, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) io_uring_setup(0x68ac, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) (async) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) (async) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xd1, 0x428a, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x8}, 0x120, 0x10003, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, r3, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = gettid() (rerun: 32) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x1ff}, 0x100006, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, r3, 0x2) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f08f110000000040000a118000200e01d000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x24048890) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000340)={0x8, 0x9, 0x208, 0xe0000000, 0x2, 0x9, 0x6, 0x2}, &(0x7f00000005c0)=0x20) accept4$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000300)=0x1c, 0x800) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000440)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@max_dir_size_kb}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@prjquota}, {@usrquota}, {@oldalloc}, {@errors_continue}]}, 0x3, 0x45d, &(0x7f0000000ac0)="$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") (rerun: 32) 7.99969ms ago: executing program 1 (id=9923): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfff, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x6000000}, 0x4) 0s ago: executing program 9 (id=9924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0xa00, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): ed allmulticast mode [ 487.473110][T12769] team_slave_0: entered allmulticast mode [ 487.478909][T12769] team_slave_1: entered allmulticast mode [ 487.484867][T12769] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 487.506173][T12783] netlink: 'syz.5.9244': attribute type 10 has an invalid length. [ 487.592716][T12796] syzkaller0: entered promiscuous mode [ 487.599155][T12796] syzkaller0: entered allmulticast mode [ 487.698397][ T29] kauditd_printk_skb: 386 callbacks suppressed [ 487.698415][ T29] audit: type=1326 audit(2000000218.200:21262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.729239][ T29] audit: type=1326 audit(2000000218.200:21263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.752984][ T29] audit: type=1326 audit(2000000218.200:21264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.776845][ T29] audit: type=1326 audit(2000000218.200:21265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.801353][ T29] audit: type=1326 audit(2000000218.200:21266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.825128][ T29] audit: type=1326 audit(2000000218.200:21267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.849514][ T29] audit: type=1326 audit(2000000218.200:21268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.873233][ T29] audit: type=1326 audit(2000000218.200:21269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12816 comm="syz.1.9253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 487.929645][T12824] loop1: detected capacity change from 0 to 1024 [ 487.942958][T12824] /dev/loop1: Can't open blockdev [ 488.049746][T12843] loop5: detected capacity change from 0 to 512 [ 488.086134][T12843] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.147534][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.167370][T12857] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.221001][T12857] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.234670][T12873] syzkaller0: entered promiscuous mode [ 488.240310][T12873] syzkaller0: entered allmulticast mode [ 488.295169][T12888] tmpfs: Bad value for 'mpol' [ 488.302625][ T29] audit: type=1400 audit(2000000218.800:21270): avc: denied { view } for pid=12890 comm="syz.1.9267" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 488.363146][T12857] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.410655][T12904] bond1: entered promiscuous mode [ 488.420636][T12942] loop5: detected capacity change from 0 to 1024 [ 488.429539][T12857] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.482890][ T3574] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.541599][ T3574] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.560386][T12956] syzkaller0: entered promiscuous mode [ 488.565943][T12956] syzkaller0: entered allmulticast mode [ 488.589718][ T3574] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.650663][T12942] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: comm syz.5.9268: inode #4: comm syz.5.9268: iget: illegal inode # [ 488.758793][T12942] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.9268: error while reading EA inode 4 err=-117 [ 488.794354][T12988] loop1: detected capacity change from 0 to 256 [ 488.810396][T12981] bridge0: port 3(macvtap1) entered blocking state [ 488.817079][T12981] bridge0: port 3(macvtap1) entered disabled state [ 488.836155][T12981] macvtap1: entered allmulticast mode [ 488.841599][T12981] bridge0: entered allmulticast mode [ 488.868765][T12981] macvtap1: left allmulticast mode [ 488.874040][T12981] bridge0: left allmulticast mode [ 488.903480][T12987] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 488.912292][T12987] FAT-fs (loop1): Filesystem has been set read-only [ 488.938058][T12987] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 488.955691][T12987] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 489.186854][T20165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 489.278885][T13014] __nla_validate_parse: 10 callbacks suppressed [ 489.278902][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9280'. [ 489.513954][T13020] loop5: detected capacity change from 0 to 8192 [ 489.585776][T10961] loop5: p4 < > [ 489.597457][T13020] loop5: p4 < > [ 489.666443][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9282'. [ 489.710141][T13031] netlink: 'syz.9.9282': attribute type 21 has an invalid length. [ 489.738240][T10961] udevd[10961]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 489.748580][T13031] netlink: 132 bytes leftover after parsing attributes in process `syz.9.9282'. [ 489.777907][T10961] udevd[10961]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 489.892475][T13054] syzkaller0: entered promiscuous mode [ 489.898423][T13054] syzkaller0: entered allmulticast mode [ 489.919801][T13059] loop9: detected capacity change from 0 to 1024 [ 490.012525][ T29] audit: type=1400 audit(2000000220.510:21271): avc: denied { write } for pid=13073 comm="syz.0.9291" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 490.056247][ T3574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.088549][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.098512][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.108272][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.117505][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.126935][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.136541][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.138670][T13091] tipc: Enabled bearer , priority 0 [ 490.152667][T13089] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9293'. [ 490.226418][T20165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.244079][T13102] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 490.263675][T13103] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=21245 sclass=netlink_xfrm_socket pid=13103 comm=syz.0.9297 [ 490.297822][T13102] EXT4-fs mount: 8 callbacks suppressed [ 490.297844][T13102] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.340736][T13102] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 490.357635][T12856] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.433240][T12856] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.497749][T13128] syzkaller0: entered promiscuous mode [ 490.503332][T13128] syzkaller0: entered allmulticast mode [ 490.569667][T12856] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.611719][T13135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.625130][T13147] FAULT_INJECTION: forcing a failure. [ 490.625130][T13147] name failslab, interval 1, probability 0, space 0, times 0 [ 490.637929][T13147] CPU: 0 UID: 0 PID: 13147 Comm: syz.1.9305 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 490.637981][T13147] Tainted: [W]=WARN [ 490.637988][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 490.638055][T13147] Call Trace: [ 490.638063][T13147] [ 490.638071][T13147] __dump_stack+0x1d/0x30 [ 490.638097][T13147] dump_stack_lvl+0x95/0xd0 [ 490.638119][T13147] dump_stack+0x15/0x1b [ 490.638195][T13147] should_fail_ex+0x263/0x280 [ 490.638222][T13147] should_failslab+0x8c/0xb0 [ 490.638251][T13147] __kmalloc_cache_noprof+0x64/0x4a0 [ 490.638288][T13147] ? nft_trans_rule_add+0x39/0x1b0 [ 490.638331][T13147] nft_trans_rule_add+0x39/0x1b0 [ 490.638373][T13147] nf_tables_newrule+0x10e5/0x16e0 [ 490.638443][T13147] nfnetlink_rcv+0xc1e/0x1720 [ 490.638493][T13147] netlink_unicast+0x5c0/0x690 [ 490.638546][T13147] netlink_sendmsg+0x5c8/0x6f0 [ 490.638585][T13147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.638664][T13147] __sock_sendmsg+0x145/0x170 [ 490.638757][T13147] ____sys_sendmsg+0x31e/0x4a0 [ 490.638846][T13147] ___sys_sendmsg+0x195/0x1e0 [ 490.638973][T13147] __x64_sys_sendmsg+0xd4/0x160 [ 490.639066][T13147] x64_sys_call+0x17ba/0x3000 [ 490.639162][T13147] do_syscall_64+0xc0/0x2a0 [ 490.639193][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.639242][T13147] RIP: 0033:0x7f679cf0acb9 [ 490.639258][T13147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.639279][T13147] RSP: 002b:00007f679b967028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.639300][T13147] RAX: ffffffffffffffda RBX: 00007f679d185fa0 RCX: 00007f679cf0acb9 [ 490.639322][T13147] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000013 [ 490.639387][T13147] RBP: 00007f679b967090 R08: 0000000000000000 R09: 0000000000000000 [ 490.639401][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 490.639414][T13147] R13: 00007f679d186038 R14: 00007f679d185fa0 R15: 00007ffe87802bb8 [ 490.639436][T13147] [ 490.642562][T13135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13135 comm=syz.0.9304 [ 490.804255][T13154] vlan2: entered allmulticast mode [ 490.876592][T13154] bridge0: port 3(vlan2) entered blocking state [ 490.882958][T13154] bridge0: port 3(vlan2) entered disabled state [ 490.925122][T13154] vlan2: entered promiscuous mode [ 490.987884][T13166] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 491.004525][T13166] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.049098][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.085991][T32126] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.105685][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.237026][T13190] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 491.245948][T13190] FAT-fs (loop1): Filesystem has been set read-only [ 491.255772][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.282371][T13190] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 491.301298][T13190] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 491.312906][T13206] EXT4-fs: inline encryption not supported [ 491.329105][T13206] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 491.401943][T13196] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 491.434146][T13196] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 491.458590][T13196] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 491.547565][T13223] syzkaller0: entered promiscuous mode [ 491.553150][T13223] syzkaller0: entered allmulticast mode [ 491.564777][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 491.681005][T13240] set_capacity_and_notify: 7 callbacks suppressed [ 491.681023][T13240] loop0: detected capacity change from 0 to 512 [ 491.697770][T13240] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 491.706985][T13240] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 491.717206][T13240] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 491.727997][T13240] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 491.745447][T13240] System zones: 0-2, 18-18, 34-35 [ 491.752123][T13240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.772057][T13240] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9323: bg 0: block 353: padding at end of block bitmap is not set [ 491.832080][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.955383][T13268] netlink: 'syz.9.9329': attribute type 32 has an invalid length. [ 491.994179][T13268] bond2: Setting coupled_control to off (0) [ 492.068010][T13312] loop0: detected capacity change from 0 to 512 [ 492.108345][T13312] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 492.144797][T13312] EXT4-fs (loop0): mount failed [ 492.176632][T13324] loop9: detected capacity change from 0 to 4096 [ 492.194070][T13324] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 492.206386][T13324] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 492.269839][ T3641] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.298536][ T3641] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.307382][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.335063][ T3641] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.335948][T13324] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 492.352369][ T3641] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.399031][T13348] loop8: detected capacity change from 0 to 128 [ 492.418459][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.617238][ T3577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.628201][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 492.708847][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 492.708864][ T29] audit: type=1326 audit(2000000223.210:21296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.786910][ T29] audit: type=1326 audit(2000000223.210:21297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.810827][ T29] audit: type=1326 audit(2000000223.210:21298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.834553][ T29] audit: type=1326 audit(2000000223.210:21299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.858259][ T29] audit: type=1326 audit(2000000223.210:21300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.882081][ T29] audit: type=1326 audit(2000000223.210:21301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.888853][T13376] loop8: detected capacity change from 0 to 256 [ 492.905781][ T29] audit: type=1326 audit(2000000223.210:21302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.905818][ T29] audit: type=1326 audit(2000000223.210:21303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.905892][ T29] audit: type=1326 audit(2000000223.210:21304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 492.905926][ T29] audit: type=1326 audit(2000000223.210:21305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13360 comm="syz.9.9340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 493.211710][T13403] xt_nat: multiple ranges no longer supported [ 493.346485][ T7168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.367862][T13425] loop8: detected capacity change from 0 to 512 [ 493.392609][T13425] EXT4-fs: dax option not supported [ 493.402531][T13430] loop9: detected capacity change from 0 to 256 [ 493.480298][T13427] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 493.489170][T13427] FAT-fs (loop9): Filesystem has been set read-only [ 493.566880][T13427] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 493.658652][T13427] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 493.716373][T13453] loop1: detected capacity change from 0 to 128 [ 493.731657][T13454] loop5: detected capacity change from 0 to 512 [ 493.755956][T13454] EXT4-fs: Ignoring removed nomblk_io_submit option [ 493.773155][T13454] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.9361: corrupted in-inode xattr: bad e_name length [ 493.806168][T13454] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.9361: couldn't read orphan inode 15 (err -117) [ 493.836627][T13454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.880872][T13461] loop8: detected capacity change from 0 to 512 [ 493.912154][ T8949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.952843][T13461] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.982897][T13474] netlink: 'syz.5.9364': attribute type 9 has an invalid length. [ 493.983908][T13461] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.000102][T13474] netlink: 'syz.5.9364': attribute type 13 has an invalid length. [ 494.051226][T10338] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.358676][T13499] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 494.378122][ T7168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.392356][T13499] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.9369: Invalid block bitmap block 0 in block_group 0 [ 494.409134][T13499] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9369: Failed to acquire dquot type 0 [ 494.423112][T13499] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.9369: Freeing blocks not in datazone - block = 0, count = 4096 [ 494.443189][T13499] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.9369: Invalid inode bitmap blk 0 in block_group 0 [ 494.457598][ T3577] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0 [ 494.481072][T13499] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 494.510118][T13499] EXT4-fs (loop8): 1 orphan inode deleted [ 494.567901][T13538] __nla_validate_parse: 23 callbacks suppressed [ 494.567921][T13538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9374'. [ 494.655273][T13538] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 494.675593][T13499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.683456][T13538] EXT4-fs (loop0): orphan cleanup on readonly fs [ 494.696742][T13538] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9374: corrupted inode contents [ 494.709215][T13538] EXT4-fs (loop0): Remounting filesystem read-only [ 494.716044][T13538] EXT4-fs (loop0): 1 truncate cleaned up [ 494.721975][ T3571] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 494.732677][ T3571] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 494.743356][ T3571] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 494.767441][T13538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 494.781488][T13538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9374'. [ 494.812972][T13499] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.826747][T13557] syzkaller0: entered promiscuous mode [ 494.832252][T13557] syzkaller0: entered allmulticast mode [ 494.922520][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.057376][T13603] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9379'. [ 495.162501][T13621] netlink: 88 bytes leftover after parsing attributes in process `syz.8.9383'. [ 495.344439][T10338] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000001) [ 495.352416][T10338] FAT-fs (loop8): Filesystem has been set read-only [ 495.359763][T10338] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000007) [ 495.370148][T10338] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000007) [ 495.444819][T20165] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.825364][ T3589] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 495.938317][T13694] netlink: 'syz.9.9393': attribute type 58 has an invalid length. [ 495.946276][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9393'. [ 495.970535][T13698] netlink: 56 bytes leftover after parsing attributes in process `syz.5.9394'. [ 496.019398][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9396'. [ 496.028410][T13711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9396'. [ 496.044165][T13705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.061544][T13705] ext4 filesystem being mounted at /378/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.193025][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.315138][T13768] FAULT_INJECTION: forcing a failure. [ 496.315138][T13768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.328481][T13768] CPU: 0 UID: 0 PID: 13768 Comm: syz.9.9404 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 496.328523][T13768] Tainted: [W]=WARN [ 496.328532][T13768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 496.328677][T13768] Call Trace: [ 496.328686][T13768] [ 496.328695][T13768] __dump_stack+0x1d/0x30 [ 496.328736][T13768] dump_stack_lvl+0x95/0xd0 [ 496.328791][T13768] dump_stack+0x15/0x1b [ 496.328811][T13768] should_fail_ex+0x263/0x280 [ 496.328834][T13768] should_fail+0xb/0x20 [ 496.328872][T13768] should_fail_usercopy+0x1a/0x20 [ 496.328901][T13768] _copy_from_user+0x1c/0xb0 [ 496.328957][T13768] copy_from_bpfptr+0x5c/0x90 [ 496.328981][T13768] bpf_prog_load+0x73a/0x1140 [ 496.329093][T13768] ? security_bpf+0x2b/0x90 [ 496.329129][T13768] __sys_bpf+0x469/0x7b0 [ 496.329189][T13768] __x64_sys_bpf+0x41/0x50 [ 496.329227][T13768] x64_sys_call+0x28e1/0x3000 [ 496.329258][T13768] do_syscall_64+0xc0/0x2a0 [ 496.329311][T13768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.329333][T13768] RIP: 0033:0x7f047eacacb9 [ 496.329354][T13768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.329461][T13768] RSP: 002b:00007f047d527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 496.329488][T13768] RAX: ffffffffffffffda RBX: 00007f047ed45fa0 RCX: 00007f047eacacb9 [ 496.329503][T13768] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 496.329517][T13768] RBP: 00007f047d527090 R08: 0000000000000000 R09: 0000000000000000 [ 496.329551][T13768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.329569][T13768] R13: 00007f047ed46038 R14: 00007f047ed45fa0 R15: 00007ffddd45f5d8 [ 496.329593][T13768] [ 496.330640][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9401'. [ 496.367130][T13753] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 496.530617][T13753] FAT-fs (loop0): Filesystem has been set read-only [ 496.537841][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 496.562086][T13779] EXT4-fs: Ignoring removed i_version option [ 496.572087][ T3577] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.582514][T13779] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 496.644250][T13753] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 496.667770][ T3577] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.694445][T13753] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 496.704952][T13791] set_capacity_and_notify: 7 callbacks suppressed [ 496.704972][T13791] loop1: detected capacity change from 0 to 2048 [ 496.767276][ T3577] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.789761][T13806] loop9: detected capacity change from 0 to 512 [ 496.821789][T13814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9413'. [ 496.832627][ T3577] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.857972][T13806] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.876756][T13806] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 496.971740][T13826] loop1: detected capacity change from 0 to 512 [ 496.995005][T13826] EXT4-fs: inline encryption not supported [ 497.007982][T13840] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #18: comm syz.9.9411: corrupted inode contents [ 497.020329][T13826] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 497.028779][T13826] EXT4-fs (loop1): orphan cleanup on readonly fs [ 497.042192][ T3577] bridge_slave_1: left allmulticast mode [ 497.043965][T13840] EXT4-fs (loop9): Remounting filesystem read-only [ 497.047963][ T3577] bridge_slave_1: left promiscuous mode [ 497.048237][ T3577] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.069294][ T3577] bridge_slave_0: left allmulticast mode [ 497.074981][ T3577] bridge_slave_0: left promiscuous mode [ 497.080715][ T3577] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.101592][T13826] EXT4-fs (loop1): 1 orphan inode deleted [ 497.107584][ T3571] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 1 [ 497.130377][T13840] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 497.173275][T13826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 497.200057][ T3577] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.209919][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.221787][ T3577] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.244124][ T3577] bond0 (unregistering): Released all slaves [ 497.314104][ T3577] hsr_slave_0: left promiscuous mode [ 497.320067][ T3577] hsr_slave_1: left promiscuous mode [ 497.329123][T13889] loop9: detected capacity change from 0 to 128 [ 497.336231][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.343635][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.361559][ T3577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.369075][ T3577] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.383072][T32126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.421223][ T3577] veth1_macvtap: left promiscuous mode [ 497.434783][ T3577] veth0_macvtap: left promiscuous mode [ 497.442486][ T3577] veth1_vlan: left promiscuous mode [ 497.448529][ T3577] veth0_vlan: left promiscuous mode [ 497.555004][ T3577] team0 (unregistering): Port device team_slave_1 removed [ 497.565337][ T3577] team0 (unregistering): Port device team_slave_0 removed [ 497.577150][ T3493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 497.751195][T13795] chnl_net:caif_netlink_parms(): no params data found [ 497.785199][T13968] loop1: detected capacity change from 0 to 128 [ 497.896782][T14010] loop9: detected capacity change from 0 to 512 [ 497.930977][T14010] EXT4-fs: Ignoring removed nobh option [ 497.944447][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.952393][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.965028][T13795] bridge_slave_0: entered allmulticast mode [ 497.971762][T13795] bridge_slave_0: entered promiscuous mode [ 497.978956][T14010] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 497.990205][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.997405][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.013123][T13795] bridge_slave_1: entered allmulticast mode [ 498.020808][T14010] EXT4-fs (loop9): 1 truncate cleaned up [ 498.037323][T13795] bridge_slave_1: entered promiscuous mode [ 498.051898][T14010] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.075069][T14051] loop5: detected capacity change from 0 to 512 [ 498.105978][T14051] EXT4-fs: test_dummy_encryption option not supported [ 498.112153][T13795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.182734][T13795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.198811][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.246701][T13795] team0: Port device team_slave_0 added [ 498.267664][T13795] team0: Port device team_slave_1 added [ 498.310404][T13795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.318561][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.344713][T13795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.365968][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 498.365983][ T29] audit: type=1326 audit(2000000228.870:21636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.382487][T13795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.403619][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.430605][T13795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.439693][ T29] audit: type=1326 audit(2000000228.900:21637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.442210][ T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.464768][ T29] audit: type=1326 audit(2000000228.900:21638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.499107][ T29] audit: type=1326 audit(2000000228.900:21639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.522980][ T29] audit: type=1326 audit(2000000228.900:21640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.546646][ T29] audit: type=1326 audit(2000000228.900:21641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.570268][ T29] audit: type=1326 audit(2000000228.900:21642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14093 comm="syz.9.9430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 498.615575][ T3493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.630463][T13795] hsr_slave_0: entered promiscuous mode [ 498.641242][T13795] hsr_slave_1: entered promiscuous mode [ 498.647515][T13795] debugfs: 'hsr0' already exists in 'hsr' [ 498.653283][T13795] Cannot create hsr debugfs directory [ 498.779502][T14178] loop9: detected capacity change from 0 to 1024 [ 498.796887][T14178] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 498.826282][T14178] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.930047][T14226] loop1: detected capacity change from 0 to 256 [ 498.996041][T14247] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9433: bg 0: block 112: padding at end of block bitmap is not set [ 499.038029][ T29] audit: type=1326 audit(2000000229.530:21643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.9434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 499.091857][T14263] ipt_ECN: cannot use operation on non-tcp rule [ 499.101090][ T29] audit: type=1326 audit(2000000229.540:21644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.9434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 499.124766][ T29] audit: type=1326 audit(2000000229.540:21645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14222 comm="syz.1.9434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f679cf0acb9 code=0x7ffc0000 [ 499.303699][T13795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 499.326856][T13795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 499.366724][T13795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.406947][T13795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.436892][T14308] syzkaller0: entered promiscuous mode [ 499.442493][T14308] syzkaller0: entered allmulticast mode [ 499.552536][T13795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.596075][T13795] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.631634][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.638764][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.656693][T20163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.667674][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 499.672838][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 499.701310][T14283] loop5: detected capacity change from 0 to 32768 [ 499.712379][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.719649][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.860273][T14347] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 499.895978][T14347] ext4 filesystem being mounted at /483/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 499.994317][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.013099][T32126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.088945][T14383] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 500.124767][T14395] syzkaller0: entered promiscuous mode [ 500.130334][T14395] syzkaller0: entered allmulticast mode [ 500.139877][T14383] EXT4-fs (loop5): mount failed [ 500.287507][T14423] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 500.320471][T14423] System zones: 0-7 [ 500.347267][T14423] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 500.398985][T14443] __nla_validate_parse: 10 callbacks suppressed [ 500.399008][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9455'. [ 500.414291][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9455'. [ 500.445252][T20163] IPVS: starting estimator thread 0... [ 500.451275][T14423] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 500.497274][T14437] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 500.506139][T14437] FAT-fs (loop1): Filesystem has been set read-only [ 500.513327][ T8949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.528513][T14443] wireguard0: entered promiscuous mode [ 500.534158][T14443] wireguard0: entered allmulticast mode [ 500.544347][T14437] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 500.545726][T14448] IPVS: using max 2256 ests per chain, 112800 per kthread [ 500.563897][T13795] veth0_vlan: entered promiscuous mode [ 500.572900][T13795] veth1_vlan: entered promiscuous mode [ 500.588587][T14437] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 500.608916][T13795] veth0_macvtap: entered promiscuous mode [ 500.616928][T10961] udevd[10961]: Failed to create symlink /run/udev/watch/8005: File exists [ 500.618853][T13795] veth1_macvtap: entered promiscuous mode [ 500.641428][T13795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.651580][T14461] iso9660: Bad value for 'map' [ 500.661636][T13795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.729499][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.767060][T14473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.781632][T14460] bond1 (unregistering): Released all slaves [ 500.786579][T14473] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 500.827984][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.854691][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.876397][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.885286][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.936788][ T3641] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.993752][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9459'. [ 501.002774][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9459'. [ 501.055232][T14567] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.9457: corrupted inode contents [ 501.083832][T14567] EXT4-fs (loop0): Remounting filesystem read-only [ 501.129398][T14567] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 501.313972][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.470047][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9470'. [ 501.548125][ T6935] IPVS: starting estimator thread 0... [ 501.635557][T14634] IPVS: using max 2304 ests per chain, 115200 per kthread [ 501.735940][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 501.863250][T14674] set_capacity_and_notify: 6 callbacks suppressed [ 501.863280][T14674] loop9: detected capacity change from 0 to 512 [ 501.934875][T14674] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.995641][T14674] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 502.191303][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.265039][T14714] loop0: detected capacity change from 0 to 128 [ 502.323708][T14714] forcing mempool usage for bio_alloc_bioset+0x448/0xa50 [ 502.334847][T14711] loop9: detected capacity change from 0 to 4096 [ 502.390526][T14711] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 502.438440][T14711] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.509888][T14711] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 502.557999][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.743281][T14744] loop4: detected capacity change from 0 to 4096 [ 502.775964][ T3582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 502.789814][T14744] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 502.827102][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.001188][T14784] tmpfs: Bad value for 'mpol' [ 503.044978][T14787] erspan0: entered promiscuous mode [ 503.056322][T14787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9495'. [ 503.160306][T14798] loop4: detected capacity change from 0 to 512 [ 503.207923][T14802] ip6erspan0: entered promiscuous mode [ 503.221429][T14798] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 503.249705][T14809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14809 comm=syz.9.9498 [ 503.261530][T14798] EXT4-fs (loop4): orphan cleanup on readonly fs [ 503.276477][T14798] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.9497: Block bitmap for bg 0 marked uninitialized [ 503.320885][T14798] EXT4-fs (loop4): Remounting filesystem read-only [ 503.356826][T14798] EXT4-fs (loop4): 1 orphan inode deleted [ 503.375230][T14822] netlink: 'syz.1.9501': attribute type 1 has an invalid length. [ 503.404977][T14798] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 503.511844][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 503.511884][ T29] audit: type=1326 audit(2000000234.010:21774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.553571][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.616689][ T29] audit: type=1326 audit(2000000234.090:21775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.640432][ T29] audit: type=1326 audit(2000000234.090:21776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.664176][ T29] audit: type=1326 audit(2000000234.090:21777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.687799][ T29] audit: type=1326 audit(2000000234.090:21778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.711470][ T29] audit: type=1326 audit(2000000234.110:21779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.735102][ T29] audit: type=1326 audit(2000000234.110:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.759051][ T29] audit: type=1326 audit(2000000234.110:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.782651][ T29] audit: type=1326 audit(2000000234.110:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.806294][ T29] audit: type=1326 audit(2000000234.110:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14675 comm="syz.5.9481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2637dfacb9 code=0x7ffc0000 [ 503.810262][T14876] loop9: detected capacity change from 0 to 512 [ 503.890199][T14885] syzkaller1: entered promiscuous mode [ 503.895835][T14885] syzkaller1: entered allmulticast mode [ 503.926201][T14876] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 503.966776][T14865] bond1: (slave gretap1): making interface the new active one [ 503.999242][T14865] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 504.008441][T14885] loop4: detected capacity change from 0 to 164 [ 504.009312][T14876] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.028389][T14876] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 504.047915][T14876] FAULT_INJECTION: forcing a failure. [ 504.047915][T14876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.061212][T14876] CPU: 0 UID: 0 PID: 14876 Comm: syz.9.9507 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.061295][T14876] Tainted: [W]=WARN [ 504.061304][T14876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.061322][T14876] Call Trace: [ 504.061331][T14876] [ 504.061342][T14876] __dump_stack+0x1d/0x30 [ 504.061376][T14876] dump_stack_lvl+0x95/0xd0 [ 504.061406][T14876] dump_stack+0x15/0x1b [ 504.061457][T14876] should_fail_ex+0x263/0x280 [ 504.061480][T14876] should_fail+0xb/0x20 [ 504.061504][T14876] should_fail_usercopy+0x1a/0x20 [ 504.061541][T14876] strncpy_from_user+0x27/0x250 [ 504.061623][T14876] getname_flags+0xad/0x3b0 [ 504.061656][T14876] __se_sys_quotactl+0x16a/0x670 [ 504.061683][T14876] ? fput+0x8f/0xc0 [ 504.061755][T14876] __x64_sys_quotactl+0x55/0x70 [ 504.061832][T14876] x64_sys_call+0x19a4/0x3000 [ 504.061866][T14876] do_syscall_64+0xc0/0x2a0 [ 504.061917][T14876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.061947][T14876] RIP: 0033:0x7f047eacacb9 [ 504.062027][T14876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.062052][T14876] RSP: 002b:00007f047d527028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 504.062078][T14876] RAX: ffffffffffffffda RBX: 00007f047ed45fa0 RCX: 00007f047eacacb9 [ 504.062096][T14876] RDX: 000000000000ee00 RSI: 0000200000000140 RDI: ffffffff80000302 [ 504.062188][T14876] RBP: 00007f047d527090 R08: 0000000000000000 R09: 0000000000000000 [ 504.062203][T14876] R10: 8cffffff00000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.062217][T14876] R13: 00007f047ed46038 R14: 00007f047ed45fa0 R15: 00007ffddd45f5d8 [ 504.062237][T14876] [ 504.250052][ T564] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.302763][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.318942][T14918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9509'. [ 504.357435][T14925] loop9: detected capacity change from 0 to 128 [ 504.577401][T14958] loop4: detected capacity change from 0 to 736 [ 504.637342][T14967] FAULT_INJECTION: forcing a failure. [ 504.637342][T14967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.650695][T14967] CPU: 1 UID: 0 PID: 14967 Comm: syz.9.9519 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 504.650809][T14967] Tainted: [W]=WARN [ 504.650818][T14967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 504.650834][T14967] Call Trace: [ 504.650842][T14967] [ 504.650852][T14967] __dump_stack+0x1d/0x30 [ 504.650882][T14967] dump_stack_lvl+0x95/0xd0 [ 504.650989][T14967] dump_stack+0x15/0x1b [ 504.651014][T14967] should_fail_ex+0x263/0x280 [ 504.651078][T14967] should_fail+0xb/0x20 [ 504.651099][T14967] should_fail_usercopy+0x1a/0x20 [ 504.651134][T14967] _copy_from_user+0x1c/0xb0 [ 504.651165][T14967] ___sys_sendmsg+0xc1/0x1e0 [ 504.651214][T14967] __x64_sys_sendmsg+0xd4/0x160 [ 504.651393][T14967] x64_sys_call+0x17ba/0x3000 [ 504.651421][T14967] do_syscall_64+0xc0/0x2a0 [ 504.651475][T14967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.651506][T14967] RIP: 0033:0x7f047eacacb9 [ 504.651527][T14967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.651552][T14967] RSP: 002b:00007f047d527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.651630][T14967] RAX: ffffffffffffffda RBX: 00007f047ed45fa0 RCX: 00007f047eacacb9 [ 504.651648][T14967] RDX: 0000000004008040 RSI: 0000200000000080 RDI: 0000000000000004 [ 504.651667][T14967] RBP: 00007f047d527090 R08: 0000000000000000 R09: 0000000000000000 [ 504.651730][T14967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.651744][T14967] R13: 00007f047ed46038 R14: 00007f047ed45fa0 R15: 00007ffddd45f5d8 [ 504.651769][T14967] [ 504.884494][T14980] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9521'. [ 504.916570][T14988] loop9: detected capacity change from 0 to 512 [ 504.957842][T14988] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.005989][T14988] ext4 filesystem being mounted at /83/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.079042][T15012] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 505.122118][T14988] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #4: comm syz.9.9522: corrupted inode contents [ 505.186264][T14988] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #4: comm syz.9.9522: mark_inode_dirty error [ 505.224204][T14988] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #4: comm syz.9.9522: corrupted inode contents [ 505.258810][T14988] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #4: comm syz.9.9522: mark_inode_dirty error [ 505.272037][T14988] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.9522: Failed to acquire dquot type 1 [ 505.312471][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #4: comm syz.9.9522: corrupted inode contents [ 505.335752][T15039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 505.373067][T15040] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #4: comm syz.9.9522: mark_inode_dirty error [ 505.431641][T15039] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.432807][T15040] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #4: comm syz.9.9522: corrupted inode contents [ 505.489148][T15066] netlink: 68 bytes leftover after parsing attributes in process `syz.5.9536'. [ 505.501014][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.508162][T15040] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #4: comm syz.9.9522: mark_inode_dirty error [ 505.555622][T15040] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.9522: Failed to acquire dquot type 1 [ 505.578278][T15075] netlink: 'syz.0.9538': attribute type 14 has an invalid length. [ 505.586197][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9538'. [ 505.688814][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9541'. [ 505.700145][T15086] EXT4-fs (loop4): 1 orphan inode deleted [ 505.706823][ T3629] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:54: Failed to release dquot type 1 [ 505.716798][T15086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.731956][T15086] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.746236][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.756150][T15086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.769174][T15086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.804955][T15086] syzkaller1: entered promiscuous mode [ 505.810596][T15086] syzkaller1: entered allmulticast mode [ 506.044539][T15128] vhci_hcd vhci_hcd.4: default hub control req: 8016 v4303 i0000 l0 [ 506.057224][ T3574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.114857][T15137] EXT4-fs: inline encryption not supported [ 506.120854][T15137] ext4: Unknown parameter 'nouser_xattr' [ 506.150863][T15128] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 506.189962][T15145] syzkaller0: entered promiscuous mode [ 506.195533][T15145] syzkaller0: entered allmulticast mode [ 506.382127][T15206] syzkaller0: entered promiscuous mode [ 506.387740][T15206] syzkaller0: entered allmulticast mode [ 506.478146][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.506081][T15221] Symlink component flag not implemented [ 506.511827][T15221] Symlink component flag not implemented [ 506.517744][T15221] Symlink component flag not implemented (129) [ 506.523983][T15221] Symlink component flag not implemented (6) [ 506.596732][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9566'. [ 506.605944][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9566'. [ 506.614967][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9566'. [ 506.625090][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9566'. [ 506.634182][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9566'. [ 506.643228][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9566'. [ 506.680908][T15240] syzkaller0: entered promiscuous mode [ 506.686528][T15240] syzkaller0: entered allmulticast mode [ 506.696790][ T3582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.875256][T15259] xt_hashlimit: size too large, truncated to 1048576 [ 506.903878][T15261] set_capacity_and_notify: 6 callbacks suppressed [ 506.903894][T15261] loop4: detected capacity change from 0 to 512 [ 506.919484][T15261] EXT4-fs: quotafile must be on filesystem root [ 506.955205][T15264] syzkaller0: entered promiscuous mode [ 506.961532][T15264] syzkaller0: entered allmulticast mode [ 507.136095][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9574'. [ 507.302864][T15304] syzkaller0: entered promiscuous mode [ 507.308461][T15304] syzkaller0: entered allmulticast mode [ 507.363830][T15313] netlink: 'syz.5.9581': attribute type 10 has an invalid length. [ 507.391171][ T6950] kernel write not supported for file bpf-prog (pid: 6950 comm: kworker/0:16) [ 507.464562][T15325] loop5: detected capacity change from 0 to 2048 [ 507.513075][T15333] FAULT_INJECTION: forcing a failure. [ 507.513075][T15333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.526409][T15333] CPU: 0 UID: 0 PID: 15333 Comm: syz.0.9586 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 507.526451][T15333] Tainted: [W]=WARN [ 507.526461][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 507.526485][T15333] Call Trace: [ 507.526494][T15333] [ 507.526504][T15333] __dump_stack+0x1d/0x30 [ 507.526603][T15333] dump_stack_lvl+0x95/0xd0 [ 507.526626][T15333] dump_stack+0x15/0x1b [ 507.526649][T15333] should_fail_ex+0x263/0x280 [ 507.526674][T15333] should_fail+0xb/0x20 [ 507.526751][T15333] should_fail_usercopy+0x1a/0x20 [ 507.526783][T15333] _copy_from_user+0x1c/0xb0 [ 507.526849][T15333] sctp_getsockopt_maxseg+0x11c/0x4b0 [ 507.526907][T15333] ? selinux_socket_getsockopt+0x192/0x1c0 [ 507.526944][T15333] sctp_getsockopt+0x8bc/0xaa0 [ 507.526979][T15333] sock_common_getsockopt+0x60/0x70 [ 507.527018][T15333] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 507.527130][T15333] do_sock_getsockopt+0x1c4/0x210 [ 507.527156][T15333] __x64_sys_getsockopt+0x11d/0x1a0 [ 507.527182][T15333] x64_sys_call+0x2dc7/0x3000 [ 507.527228][T15333] do_syscall_64+0xc0/0x2a0 [ 507.527267][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.527362][T15333] RIP: 0033:0x7f9f0050acb9 [ 507.527404][T15333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.527429][T15333] RSP: 002b:00007f9efef67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 507.527456][T15333] RAX: ffffffffffffffda RBX: 00007f9f00785fa0 RCX: 00007f9f0050acb9 [ 507.527545][T15333] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 507.527563][T15333] RBP: 00007f9efef67090 R08: 0000200000000080 R09: 0000000000000000 [ 507.527648][T15333] R10: 0000200000003140 R11: 0000000000000246 R12: 0000000000000001 [ 507.527666][T15333] R13: 00007f9f00786038 R14: 00007f9f00785fa0 R15: 00007fffa284b828 [ 507.527689][T15333] [ 507.528340][T10962] loop5: p1 [ 507.736889][T15335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15335 comm=syz.5.9584 [ 507.758841][T15325] loop5: p1 [ 507.866732][T15362] xt_socket: unknown flags 0x4c [ 507.907692][T15366] netlink: 'syz.9.9592': attribute type 10 has an invalid length. [ 507.980016][T15369] -1: renamed from syzkaller0 [ 508.107266][T15395] loop1: detected capacity change from 0 to 256 [ 508.227282][T15392] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 508.236775][T15392] FAT-fs (loop1): Filesystem has been set read-only [ 508.281021][T15392] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 508.320828][T15392] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 508.610321][T15475] loop9: detected capacity change from 0 to 512 [ 508.617946][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.727665][T15475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.835585][T15475] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 508.956240][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 508.956330][ T29] audit: type=1326 audit(2000000239.460:21821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.015552][ T29] audit: type=1326 audit(2000000239.490:21822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.039263][ T29] audit: type=1326 audit(2000000239.490:21823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.062897][ T29] audit: type=1326 audit(2000000239.490:21824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.086578][ T29] audit: type=1326 audit(2000000239.500:21825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.110391][ T29] audit: type=1326 audit(2000000239.500:21826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.134179][ T29] audit: type=1326 audit(2000000239.500:21827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.157953][ T29] audit: type=1326 audit(2000000239.500:21828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.181679][ T29] audit: type=1326 audit(2000000239.500:21829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15497 comm="syz.0.9619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 509.268241][T15505] loop0: detected capacity change from 0 to 512 [ 509.282871][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.309933][T15505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.441112][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.498963][T15534] loop9: detected capacity change from 0 to 512 [ 509.578335][T15534] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.639177][T15562] loop5: detected capacity change from 0 to 128 [ 509.667213][T15534] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.741591][T15567] wireguard1: entered promiscuous mode [ 509.747286][T15567] wireguard1: entered allmulticast mode [ 509.827208][T11202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.861265][ T29] audit: type=1326 audit(2000000240.350:21830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15584 comm="syz.9.9633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7ffc0000 [ 509.896685][ T3629] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 509.916509][T15590] loop4: detected capacity change from 0 to 512 [ 509.938864][T15590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.977742][T15590] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.068730][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.199547][T15613] loop4: detected capacity change from 0 to 512 [ 510.227022][T15611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.238275][T15613] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 510.263558][T15611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.300640][T15611] bond0 (unregistering): Released all slaves [ 510.318298][T15613] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 510.333094][T15613] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9640: bg 0: block 248: padding at end of block bitmap is not set [ 510.361348][T15613] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.9640: Failed to acquire dquot type 1 [ 510.374058][T15613] EXT4-fs (loop4): 1 truncate cleaned up [ 510.386510][T15613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 510.435363][T15634] loop9: detected capacity change from 0 to 512 [ 510.453225][T15634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.469573][T15613] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz.4.9640: deleted inode referenced: 12 [ 510.495210][T15634] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.568550][T15649] __nla_validate_parse: 11 callbacks suppressed [ 510.568572][T15649] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9647'. [ 510.639406][T15660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.663548][T15665] syzkaller0: entered promiscuous mode [ 510.669314][T15665] syzkaller0: entered allmulticast mode [ 510.672975][T15660] ext4 filesystem being mounted at /428/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 510.699037][T15665] FAULT_INJECTION: forcing a failure. [ 510.699037][T15665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.712205][T15665] CPU: 1 UID: 0 PID: 15665 Comm: syz.5.9650 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 510.712322][T15665] Tainted: [W]=WARN [ 510.712332][T15665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 510.712350][T15665] Call Trace: [ 510.712358][T15665] [ 510.712394][T15665] __dump_stack+0x1d/0x30 [ 510.712425][T15665] dump_stack_lvl+0x95/0xd0 [ 510.712453][T15665] dump_stack+0x15/0x1b [ 510.712480][T15665] should_fail_ex+0x263/0x280 [ 510.712509][T15665] should_fail+0xb/0x20 [ 510.712570][T15665] should_fail_usercopy+0x1a/0x20 [ 510.712663][T15665] _copy_from_user+0x1c/0xb0 [ 510.712696][T15665] ___sys_sendmsg+0xc1/0x1e0 [ 510.712748][T15665] __x64_sys_sendmsg+0xd4/0x160 [ 510.712784][T15665] x64_sys_call+0x17ba/0x3000 [ 510.712814][T15665] do_syscall_64+0xc0/0x2a0 [ 510.712848][T15665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.712877][T15665] RIP: 0033:0x7f2637dfacb9 [ 510.712897][T15665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.712939][T15665] RSP: 002b:00007f2636857028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.712959][T15665] RAX: ffffffffffffffda RBX: 00007f2638075fa0 RCX: 00007f2637dfacb9 [ 510.713022][T15665] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000007 [ 510.713035][T15665] RBP: 00007f2636857090 R08: 0000000000000000 R09: 0000000000000000 [ 510.713052][T15665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.713068][T15665] R13: 00007f2638076038 R14: 00007f2638075fa0 R15: 00007ffd589df248 [ 510.713119][T15665] [ 510.948328][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.979797][T15684] bond_slave_0: entered promiscuous mode [ 510.985527][T15684] bond_slave_1: entered promiscuous mode [ 510.997124][T15684] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 511.010693][T15684] bond_slave_0: left promiscuous mode [ 511.016153][T15684] bond_slave_1: left promiscuous mode [ 511.188588][T15727] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.324415][T15746] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.9659: corrupted xattr block 33: invalid header [ 511.384501][T15746] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 511.404098][T15746] EXT4-fs error (device loop9): ext4_xattr_block_get:597: inode #15: comm syz.9.9659: corrupted xattr block 33: invalid header [ 511.472398][T15746] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 511.619601][T15786] SET target dimension over the limit! [ 511.645658][T15800] netlink: 'syz.9.9671': attribute type 3 has an invalid length. [ 511.816637][ T3643] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 511.990440][T15832] set_capacity_and_notify: 5 callbacks suppressed [ 511.990459][T15832] loop9: detected capacity change from 0 to 1024 [ 512.004056][T15832] EXT4-fs: Ignoring removed nomblk_io_submit option [ 512.012468][T15832] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 512.029533][T15832] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e054c018, mo2=0002] [ 512.044720][T15832] System zones: 0-1, 3-36 [ 512.102138][T15840] loop0: detected capacity change from 0 to 128 [ 512.369635][T15861] netlink: 268 bytes leftover after parsing attributes in process `syz.9.9681'. [ 512.458710][ T3571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 512.560742][T15779] loop1: detected capacity change from 0 to 1024 [ 512.632800][ T52] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 512.689826][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 478 with error 28 [ 512.703191][ T52] EXT4-fs (loop4): This should not happen!! Data will be lost [ 512.703191][ T52] [ 512.713235][ T52] EXT4-fs (loop4): Total free blocks count 0 [ 512.719637][ T52] EXT4-fs (loop4): Free/Dirty block details [ 512.726337][ T52] EXT4-fs (loop4): free_blocks=2415919504 [ 512.732204][ T52] EXT4-fs (loop4): dirty_blocks=480 [ 512.737513][ T52] EXT4-fs (loop4): Block reservation details [ 512.738791][T15887] cgroup: No subsys list or none specified [ 512.743516][ T52] EXT4-fs (loop4): i_reserved_data_blocks=30 [ 512.766095][T15885] netlink: 'syz.0.9686': attribute type 27 has an invalid length. [ 512.800931][T15885] erspan0: left promiscuous mode [ 512.844636][T15904] loop1: detected capacity change from 0 to 512 [ 512.853743][T15885] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.861067][T15885] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.872784][T15904] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 512.877096][T15885] batman_adv: batadv0: Interface deactivated: dummy0 [ 512.902393][T15904] ext4 filesystem being mounted at /519/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 512.925502][T15885] veth0_to_team: left promiscuous mode [ 512.935556][T15885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.969011][T15885] wireguard0: left promiscuous mode [ 512.974294][T15885] wireguard0: left allmulticast mode [ 512.981270][T15885] wireguard1: left promiscuous mode [ 512.986984][T15885] wireguard1: left allmulticast mode [ 513.009296][T15899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.018103][T15899] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.026522][T15899] batman_adv: batadv0: Interface activated: dummy0 [ 513.033088][T15899] batadv0: mtu less than device minimum [ 513.039338][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.050354][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.061387][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.072724][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.083671][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.094536][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.105635][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.116631][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.127634][T15899] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.153896][T15902] ip6erspan0: entered promiscuous mode [ 513.171053][T15909] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.183862][ T3589] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.202883][ T3589] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.224352][ T3589] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.241551][T15909] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.305044][T15942] xt_nat: multiple ranges no longer supported [ 513.324651][ T3589] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.366822][T15950] netlink: 'syz.4.9696': attribute type 1 has an invalid length. [ 513.377333][T15909] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.393786][T15952] loop9: detected capacity change from 0 to 128 [ 513.422690][T15964] 9p: Bad value for 'wfdno' [ 513.465635][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9698'. [ 513.503282][T15909] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.517427][T15999] can0: slcan on ptm0. [ 513.550604][T15955] can0 (unregistered): slcan off ptm0. [ 513.556092][T15935] loop1: detected capacity change from 0 to 8192 [ 513.564029][T16009] loop4: detected capacity change from 0 to 512 [ 513.574060][ T3629] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.605633][ T3629] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.615222][T16009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.626759][T15955] ipip0: entered promiscuous mode [ 513.632543][ T3629] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.650536][ T3629] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.662148][T16009] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 513.720238][T16009] FAULT_INJECTION: forcing a failure. [ 513.720238][T16009] name failslab, interval 1, probability 0, space 0, times 0 [ 513.733893][T16009] CPU: 1 UID: 0 PID: 16009 Comm: syz.4.9699 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 513.734001][T16009] Tainted: [W]=WARN [ 513.734023][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 513.734037][T16009] Call Trace: [ 513.734061][T16009] [ 513.734071][T16009] __dump_stack+0x1d/0x30 [ 513.734104][T16009] dump_stack_lvl+0x95/0xd0 [ 513.734134][T16009] dump_stack+0x15/0x1b [ 513.734161][T16009] should_fail_ex+0x263/0x280 [ 513.734196][T16009] should_failslab+0x8c/0xb0 [ 513.734279][T16009] kmem_cache_alloc_noprof+0x68/0x490 [ 513.734307][T16009] ? getname_kernel+0x3c/0x1f0 [ 513.734335][T16009] ? should_fail_ex+0xd9/0x280 [ 513.734392][T16009] getname_kernel+0x3c/0x1f0 [ 513.734425][T16009] kern_path+0x23/0x130 [ 513.734460][T16009] lookup_bdev+0x66/0x150 [ 513.734492][T16009] __se_sys_quotactl+0x1b7/0x670 [ 513.734586][T16009] ? fput+0x8f/0xc0 [ 513.734623][T16009] __x64_sys_quotactl+0x55/0x70 [ 513.734650][T16009] x64_sys_call+0x19a4/0x3000 [ 513.734684][T16009] do_syscall_64+0xc0/0x2a0 [ 513.734723][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.734778][T16009] RIP: 0033:0x7f4e2424acb9 [ 513.734798][T16009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.734824][T16009] RSP: 002b:00007f4e22ca7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 513.734851][T16009] RAX: ffffffffffffffda RBX: 00007f4e244c5fa0 RCX: 00007f4e2424acb9 [ 513.734939][T16009] RDX: 000000000000ee00 RSI: 0000200000000140 RDI: ffffffff80000302 [ 513.734959][T16009] RBP: 00007f4e22ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 513.734977][T16009] R10: 8cffffff00000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.734995][T16009] R13: 00007f4e244c6038 R14: 00007f4e244c5fa0 R15: 00007ffc14dfb948 [ 513.735099][T16009] [ 513.949375][T16034] netlink: 'syz.0.9700': attribute type 2 has an invalid length. [ 513.957334][T16034] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9700'. [ 513.996398][T16041] loop0: detected capacity change from 0 to 512 [ 514.047286][T16041] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9703: bg 0: block 393: padding at end of block bitmap is not set [ 514.083630][T16041] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 514.100399][T16041] EXT4-fs (loop0): 2 truncates cleaned up [ 514.272857][T16084] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9711'. [ 514.282047][T16084] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9711'. [ 514.306593][T16085] loop5: detected capacity change from 0 to 512 [ 514.314460][T16085] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 514.325296][T16085] System zones: 1-12 [ 514.335297][T16085] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.9711: Directory hole found for htree index block 0 [ 514.348107][T16085] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117 [ 514.358461][T16085] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.9711: Directory hole found for htree index block 0 [ 514.371137][T16085] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 514.498603][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9713'. [ 514.600858][T16099] netlink: 16 bytes leftover after parsing attributes in process `syz.9.9715'. [ 514.752313][T16080] loop1: detected capacity change from 0 to 1024 [ 514.782129][T16080] EXT4-fs: inline encryption not supported [ 514.853002][T16080] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 514.895811][T16080] EXT4-fs (loop1): Remounting filesystem read-only [ 515.047366][T16138] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9720'. [ 515.264398][T16106] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.274530][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 515.274595][ T29] audit: type=1326 audit(2000000245.760:22020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.304536][ T29] audit: type=1326 audit(2000000245.760:22021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.391811][T16106] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.403092][ T29] audit: type=1326 audit(2000000245.830:22022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.426849][ T29] audit: type=1326 audit(2000000245.830:22023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.450725][ T29] audit: type=1326 audit(2000000245.850:22024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.474247][ T29] audit: type=1326 audit(2000000245.850:22025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.497948][ T29] audit: type=1326 audit(2000000245.850:22026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.521561][ T29] audit: type=1326 audit(2000000245.850:22027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.545217][ T29] audit: type=1326 audit(2000000245.850:22028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0050acb9 code=0x7ffc0000 [ 515.568947][ T29] audit: type=1326 audit(2000000245.850:22029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16152 comm="syz.0.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f004cb58e code=0x7ffc0000 [ 515.713560][T16207] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9731'. [ 515.852111][T16236] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9733'. [ 515.874500][T16241] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9735'. [ 516.163023][T16203] bond0 (unregistering): Released all slaves [ 516.337944][T16357] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.420367][T16366] ext4 filesystem being mounted at /450/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 516.516937][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9751'. [ 516.613774][T16366] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.9748: corrupted xattr block 6: invalid header [ 516.671581][T16366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 516.731187][T16366] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.9748: corrupted xattr block 6: invalid header [ 516.749059][T16441] netlink: 156 bytes leftover after parsing attributes in process `syz.9.9758'. [ 516.811806][T16449] EXT4-fs: inline encryption not supported [ 516.839794][T16451] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 516.848169][T16451] System zones: 1-12 [ 516.852404][T16451] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.9760: Directory hole found for htree index block 0 [ 516.893218][T16451] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 516.906949][T16366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 516.916810][T16449] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 516.924906][T16449] EXT4-fs (loop4): orphan cleanup on readonly fs [ 516.933702][T16451] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.9760: Directory hole found for htree index block 0 [ 516.948422][T10961] loop1: p1 < > [ 516.959066][T16437] loop1: p1 < > [ 516.976571][T16451] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 516.979937][T16449] EXT4-fs (loop4): 1 orphan inode deleted [ 516.990801][ T52] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 1 [ 517.037269][T16366] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.9748: corrupted xattr block 6: invalid header [ 517.053067][T10961] udevd[10961]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 517.073730][T10961] udevd[10961]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 517.178198][T16366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 517.196109][T16496] netlink: 'syz.9.9763': attribute type 8 has an invalid length. [ 517.205945][T16498] FAULT_INJECTION: forcing a failure. [ 517.205945][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 517.218726][T16498] CPU: 0 UID: 0 PID: 16498 Comm: syz.1.9764 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.218760][T16498] Tainted: [W]=WARN [ 517.218767][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.218813][T16498] Call Trace: [ 517.218822][T16498] [ 517.218830][T16498] __dump_stack+0x1d/0x30 [ 517.218856][T16498] dump_stack_lvl+0x95/0xd0 [ 517.218881][T16498] dump_stack+0x15/0x1b [ 517.218908][T16498] should_fail_ex+0x263/0x280 [ 517.218974][T16498] should_failslab+0x8c/0xb0 [ 517.219004][T16498] __kmalloc_cache_node_noprof+0x69/0x4a0 [ 517.219079][T16498] ? __get_vm_area_node+0x106/0x1d0 [ 517.219111][T16498] __get_vm_area_node+0x106/0x1d0 [ 517.219136][T16498] __vmalloc_node_range_noprof+0x291/0x12b0 [ 517.219162][T16498] ? bpf_check+0xe6/0xc890 [ 517.219245][T16498] ? css_rstat_updated+0xbb/0x280 [ 517.219287][T16498] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 517.219316][T16498] ? __rcu_read_unlock+0x4e/0x70 [ 517.219342][T16498] ? lruvec_stat_mod_folio+0xd2/0x110 [ 517.219431][T16498] ? ___kmalloc_large_node+0x7f/0xe0 [ 517.219461][T16498] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 517.219494][T16498] ? bpf_check+0xe6/0xc890 [ 517.219572][T16498] vzalloc_noprof+0x82/0xb0 [ 517.219596][T16498] ? bpf_check+0xe6/0xc890 [ 517.219630][T16498] bpf_check+0xe6/0xc890 [ 517.219703][T16498] ? __memcg_kmem_charge_page+0xd0/0x170 [ 517.219734][T16498] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 517.219779][T16498] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 517.219891][T16498] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 517.219915][T16498] ? pcpu_block_update+0x232/0x3b0 [ 517.219945][T16498] ? _find_next_zero_bit+0x64/0xa0 [ 517.219981][T16498] ? pcpu_block_update+0x24e/0x3b0 [ 517.220078][T16498] ? pcpu_block_refresh_hint+0x157/0x170 [ 517.220138][T16498] ? _find_next_zero_bit+0x29/0xa0 [ 517.220177][T16498] ? pcpu_block_refresh_hint+0x157/0x170 [ 517.220217][T16498] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 517.220275][T16498] ? css_rstat_updated+0xbb/0x280 [ 517.220321][T16498] ? mod_memcg_state+0x182/0x260 [ 517.220351][T16498] ? __rcu_read_unlock+0x4e/0x70 [ 517.220377][T16498] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 517.220419][T16498] ? pcpu_alloc_noprof+0xd18/0x1210 [ 517.220449][T16498] ? should_fail_ex+0xd9/0x280 [ 517.220478][T16498] ? __kmalloc_noprof+0x2a3/0x580 [ 517.220503][T16498] ? security_bpf_prog_load+0x60/0x140 [ 517.220539][T16498] ? selinux_bpf_prog_load+0xac/0xd0 [ 517.220607][T16498] ? security_bpf_prog_load+0x9e/0x140 [ 517.220639][T16498] bpf_prog_load+0xf76/0x1140 [ 517.220669][T16498] ? security_bpf+0x2b/0x90 [ 517.220728][T16498] __sys_bpf+0x469/0x7b0 [ 517.220755][T16498] __x64_sys_bpf+0x41/0x50 [ 517.220787][T16498] x64_sys_call+0x28e1/0x3000 [ 517.220827][T16498] do_syscall_64+0xc0/0x2a0 [ 517.220909][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.220955][T16498] RIP: 0033:0x7f679cf0acb9 [ 517.220976][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.221073][T16498] RSP: 002b:00007f679b967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.221100][T16498] RAX: ffffffffffffffda RBX: 00007f679d185fa0 RCX: 00007f679cf0acb9 [ 517.221118][T16498] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 517.221136][T16498] RBP: 00007f679b967090 R08: 0000000000000000 R09: 0000000000000000 [ 517.221211][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.221227][T16498] R13: 00007f679d186038 R14: 00007f679d185fa0 R15: 00007ffe87802bb8 [ 517.221254][T16498] [ 517.221265][T16498] syz.1.9764: vmalloc error: size 480, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 517.265071][T16366] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.9748: corrupted xattr block 6: invalid header [ 517.266305][T16498] ,cpuset=/,mems_allowed=0 [ 517.266342][T16498] CPU: 0 UID: 0 PID: 16498 Comm: syz.1.9764 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 517.266502][T16498] Tainted: [W]=WARN [ 517.266536][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 517.266583][T16498] Call Trace: [ 517.266658][T16498] [ 517.266680][T16498] __dump_stack+0x1d/0x30 [ 517.266744][T16498] dump_stack_lvl+0x95/0xd0 [ 517.266804][T16498] dump_stack+0x15/0x1b [ 517.266871][T16498] warn_alloc+0x145/0x1c0 [ 517.266957][T16498] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 517.267081][T16498] ? css_rstat_updated+0xbb/0x280 [ 517.267180][T16498] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 517.267349][T16498] ? __rcu_read_unlock+0x4e/0x70 [ 517.267469][T16498] ? lruvec_stat_mod_folio+0xd2/0x110 [ 517.267533][T16498] ? ___kmalloc_large_node+0x7f/0xe0 [ 517.267692][T16498] ? __kmalloc_large_node_noprof+0x16/0xa0 [ 517.267729][T16498] ? bpf_check+0xe6/0xc890 [ 517.267821][T16498] vzalloc_noprof+0x82/0xb0 [ 517.267897][T16498] ? bpf_check+0xe6/0xc890 [ 517.268007][T16498] bpf_check+0xe6/0xc890 [ 517.268167][T16498] ? __memcg_kmem_charge_page+0xd0/0x170 [ 517.268254][T16498] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 517.268417][T16498] ? alloc_pages_bulk_noprof+0x4a1/0x520 [ 517.268552][T16498] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 517.268629][T16498] ? pcpu_block_update+0x232/0x3b0 [ 517.268722][T16498] ? _find_next_zero_bit+0x64/0xa0 [ 517.268848][T16498] ? pcpu_block_update+0x24e/0x3b0 [ 517.268946][T16498] ? pcpu_block_refresh_hint+0x157/0x170 [ 517.269077][T16498] ? _find_next_zero_bit+0x29/0xa0 [ 517.269201][T16498] ? pcpu_block_refresh_hint+0x157/0x170 [ 517.269416][T16498] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 517.269586][T16498] ? css_rstat_updated+0xbb/0x280 [ 517.269729][T16498] ? mod_memcg_state+0x182/0x260 [ 517.269861][T16498] ? __rcu_read_unlock+0x4e/0x70 [ 517.269968][T16498] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 517.270065][T16498] ? pcpu_alloc_noprof+0xd18/0x1210 [ 517.270141][T16498] ? should_fail_ex+0xd9/0x280 [ 517.270278][T16498] ? __kmalloc_noprof+0x2a3/0x580 [ 517.270350][T16498] ? security_bpf_prog_load+0x60/0x140 [ 517.270446][T16498] ? selinux_bpf_prog_load+0xac/0xd0 [ 517.270579][T16498] ? security_bpf_prog_load+0x9e/0x140 [ 517.270697][T16498] bpf_prog_load+0xf76/0x1140 [ 517.270866][T16498] ? security_bpf+0x2b/0x90 [ 517.270961][T16498] __sys_bpf+0x469/0x7b0 [ 517.271043][T16498] __x64_sys_bpf+0x41/0x50 [ 517.271105][T16498] x64_sys_call+0x28e1/0x3000 [ 517.271217][T16498] do_syscall_64+0xc0/0x2a0 [ 517.271322][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.271395][T16498] RIP: 0033:0x7f679cf0acb9 [ 517.271453][T16498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.271514][T16498] RSP: 002b:00007f679b967028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 517.271577][T16498] RAX: ffffffffffffffda RBX: 00007f679d185fa0 RCX: 00007f679cf0acb9 [ 517.271619][T16498] RDX: 0000000000000094 RSI: 0000200000000b00 RDI: 0000000000000005 [ 517.271669][T16498] RBP: 00007f679b967090 R08: 0000000000000000 R09: 0000000000000000 [ 517.271753][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.271830][T16498] R13: 00007f679d186038 R14: 00007f679d185fa0 R15: 00007ffe87802bb8 [ 517.271895][T16498] [ 517.271924][T16498] Mem-Info: [ 517.347276][T16366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 517.348208][T16498] active_anon:55668 inactive_anon:14 isolated_anon:0 [ 517.348208][T16498] active_file:26694 inactive_file:3934 isolated_file:0 [ 517.348208][T16498] unevictable:16406 dirty:171 writeback:0 [ 517.348208][T16498] slab_reclaimable:2803 slab_unreclaimable:19939 [ 517.348208][T16498] mapped:39917 shmem:36306 pagetables:2131 [ 517.348208][T16498] sec_pagetables:0 bounce:0 [ 517.348208][T16498] kernel_misc_reclaimable:0 [ 517.348208][T16498] free:1790699 free_pcp:18760 free_cma:0 [ 517.352660][T16366] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.9748: corrupted xattr block 6: invalid header [ 517.358011][T16498] Node 0 active_anon:222672kB inactive_anon:56kB active_file:106776kB inactive_file:15736kB unevictable:65624kB isolated(anon):0kB isolated(file):0kB mapped:159668kB dirty:684kB writeback:0kB shmem:145224kB kernel_stack:5504kB pagetables:8524kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.377659][T16366] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 517.381108][T16498] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.625132][T16366] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.9748: corrupted xattr block 6: invalid header [ 517.631810][T16498] lowmem_reserve[]: 0 2879 7858 7858 [ 517.631921][T16498] Node 0 DMA32 free:2945488kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949016kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 517.632036][T16498] lowmem_reserve[]: 0 0 4978 4978 [ 517.632070][T16498] Node 0 Normal free:4200924kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:225688kB inactive_anon:56kB active_file:106776kB inactive_file:15736kB unevictable:65624kB writepending:684kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:68380kB local_pcp:4508kB free_cma:0kB [ 517.632185][T16498] lowmem_reserve[]: 0 0 0 0 [ 517.632219][T16498] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 517.632494][T16498] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945488kB [ 518.194850][T16498] Node 0 Normal: 717*4kB (UME) 3009*8kB (UME) 376*16kB (UME) 446*32kB (UME) 530*64kB (UME) 368*128kB (UME) 277*256kB (UME) 209*512kB (UME) 171*1024kB (UM) 104*2048kB (UME) 856*4096kB (UM) = 4200444kB [ 518.214859][T16498] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 518.224422][T16498] 88716 total pagecache pages [ 518.229271][T16498] 31 pages in swap cache [ 518.233539][T16498] Free swap = 124792kB [ 518.237774][T16498] Total swap = 124996kB [ 518.241950][T16498] 2097051 pages RAM [ 518.245856][T16498] 0 pages HighMem/MovableOnly [ 518.250558][T16498] 81397 pages reserved [ 518.265757][T16501] bond0 (unregistering): Released all slaves [ 518.322228][T16587] set_capacity_and_notify: 7 callbacks suppressed [ 518.322245][T16587] loop1: detected capacity change from 0 to 512 [ 518.357836][T16587] EXT4-fs: Ignoring removed i_version option [ 518.375228][T16587] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 518.452286][T16617] loop1: detected capacity change from 0 to 128 [ 518.470647][T16626] netlink: 'syz.4.9769': attribute type 1 has an invalid length. [ 518.478549][T16626] netlink: 'syz.4.9769': attribute type 2 has an invalid length. [ 518.548812][T16631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=16631 comm=syz.9.9774 [ 518.562381][T16631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=16631 comm=syz.9.9774 [ 518.597869][T16631] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2051 sclass=netlink_route_socket pid=16631 comm=syz.9.9774 [ 518.684789][T16643] xt_hashlimit: size too large, truncated to 1048576 [ 518.743848][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9775'. [ 518.757940][T16648] loop0: detected capacity change from 0 to 512 [ 518.814493][T16648] EXT4-fs: inline encryption not supported [ 518.895875][T16648] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 518.905780][T16648] EXT4-fs (loop0): orphan cleanup on readonly fs [ 518.914664][T16648] EXT4-fs (loop0): 1 orphan inode deleted [ 518.921280][ T3574] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:23: Failed to release dquot type 1 [ 518.949414][T16670] loop1: detected capacity change from 0 to 256 [ 518.969823][T16672] netlink: 268 bytes leftover after parsing attributes in process `syz.9.9782'. [ 519.045165][T16669] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 519.054178][T16669] FAT-fs (loop1): Filesystem has been set read-only [ 519.077151][T16677] loop9: detected capacity change from 0 to 512 [ 519.093352][T16677] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #11: block 530: comm syz.9.9783: lblock 4 mapped to illegal pblock 530 (length 1) [ 519.145787][T16669] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 519.179498][T16677] ------------[ cut here ]------------ [ 519.185108][T16677] EA inode 11 i_nlink=2 [ 519.185138][T16677] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.9.9783/16677 [ 519.200397][T16677] Modules linked in: [ 519.204334][T16677] CPU: 0 UID: 0 PID: 16677 Comm: syz.9.9783 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 519.215818][T16677] Tainted: [W]=WARN [ 519.219673][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 519.229815][T16677] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 519.236585][T16677] Code: f4 cd 9b ff 4c 8d 2d 0d 87 3f 05 49 8d 7e 40 e8 f4 7f b7 ff 49 8b 6e 40 4c 89 e7 e8 28 7b b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 1f 4c c5 03 66 66 66 66 66 66 2e [ 519.256462][T16677] RSP: 0018:ffffc900028e7778 EFLAGS: 00010246 [ 519.262554][T16677] RAX: ffff88810439dd10 RBX: ffff888107e74ee0 RCX: ffffffff81bc76e8 [ 519.270623][T16677] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fbfde0 [ 519.278841][T16677] RBP: 000000000000000b R08: 0001888107e74e93 R09: 0000000000000000 [ 519.286922][T16677] R10: ffffc900028e76a8 R11: 0001c900028e76a8 R12: ffff888107e74e90 [ 519.295093][T16677] R13: ffffffff86fbfde0 R14: ffff888107e74e48 R15: 0000000000000001 [ 519.303166][T16677] FS: 00007f047d5276c0(0000) GS:ffff8882aeb7e000(0000) knlGS:0000000000000000 [ 519.312167][T16677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.318817][T16677] CR2: 00007f4e24ff56b8 CR3: 00000001477d8000 CR4: 00000000003506f0 [ 519.326880][T16677] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 519.334921][T16677] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 519.340663][T16688] loop4: detected capacity change from 0 to 1024 [ 519.343054][T16677] Call Trace: [ 519.352619][T16677] [ 519.355605][T16677] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 519.361635][T16677] ? errseq_check+0x2c/0x50 [ 519.366319][T16677] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 519.367870][T16688] EXT4-fs: Ignoring removed orlov option [ 519.371919][T16677] ? ext4_truncate+0x92b/0xad0 [ 519.382401][T16677] ext4_evict_inode+0xa1f/0xd40 [ 519.387354][T16677] ? __pfx_ext4_evict_inode+0x10/0x10 [ 519.392948][T16677] evict+0x2af/0x510 [ 519.396977][T16677] ? __dquot_initialize+0x146/0x7c0 [ 519.402235][T16677] iput+0x4b9/0x650 [ 519.406251][T16677] ext4_process_orphan+0x1a9/0x1c0 [ 519.411406][T16677] ext4_orphan_cleanup+0x6a8/0xa00 [ 519.416677][T16677] ext4_fill_super+0x3476/0x3800 [ 519.421917][T16677] ? set_blocksize+0x1a3/0x310 [ 519.426766][T16677] ? setup_bdev_super+0x30e/0x370 [ 519.431880][T16677] ? __pfx_ext4_fill_super+0x10/0x10 [ 519.437275][T16677] get_tree_bdev_flags+0x291/0x300 [ 519.442556][T16677] ? __pfx_ext4_fill_super+0x10/0x10 [ 519.447955][T16677] get_tree_bdev+0x1f/0x30 [ 519.452416][T16677] ext4_get_tree+0x1c/0x30 [ 519.457113][T16677] vfs_get_tree+0x57/0x1d0 [ 519.461660][T16677] do_new_mount+0x288/0x700 [ 519.466262][T16677] path_mount+0x4c0/0xb90 [ 519.470683][T16677] ? user_path_at+0xbf/0x130 [ 519.475377][T16677] __se_sys_mount+0x28c/0x2e0 [ 519.480208][T16677] __x64_sys_mount+0x67/0x80 [ 519.484860][T16677] x64_sys_call+0x2cca/0x3000 [ 519.489657][T16677] do_syscall_64+0xc0/0x2a0 [ 519.494256][T16677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.500456][T16677] RIP: 0033:0x7f047eacbf4a [ 519.504948][T16677] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.524826][T16677] RSP: 002b:00007f047d526e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 519.533338][T16677] RAX: ffffffffffffffda RBX: 00007f047d526ee0 RCX: 00007f047eacbf4a [ 519.541373][T16677] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f047d526ea0 [ 519.549463][T16677] RBP: 0000200000000180 R08: 00007f047d526ee0 R09: 0000000000800718 [ 519.557526][T16677] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 519.565578][T16677] R13: 00007f047d526ea0 R14: 0000000000000482 R15: 0000200000000200 [ 519.573614][T16677] [ 519.575753][T16669] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 519.576842][T16677] ---[ end trace 0000000000000000 ]--- [ 519.594271][T16677] EXT4-fs (loop9): 1 orphan inode deleted [ 519.801659][T16708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 519.832080][T16747] loop9: detected capacity change from 0 to 512 [ 519.880245][T16747] ext4: Unknown parameter 'nouser_xattr' [ 519.963890][T16758] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9790'. [ 520.117882][T16762] loop4: detected capacity change from 0 to 8192 [ 520.146765][T10961] loop4: p3 < > [ 520.150472][T16770] netlink: 'syz.5.9793': attribute type 12 has an invalid length. [ 520.158388][T16770] netlink: 'syz.5.9793': attribute type 29 has an invalid length. [ 520.166302][T16770] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9793'. [ 520.175464][T16770] netlink: 59 bytes leftover after parsing attributes in process `syz.5.9793'. [ 520.187815][T16762] loop4: p3 < > [ 520.310266][T10961] udevd[10961]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 520.360271][T10961] udevd[10961]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 520.376413][T16782] SELinux: policydb table sizes (2169,1792) do not match mine (8,7) [ 520.384780][T16782] SELinux: failed to load policy [ 520.389815][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 520.389830][ T29] audit: type=1400 audit(2000000250.880:22168): avc: denied { load_policy } for pid=16780 comm="syz.5.9795" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 520.418177][T16782] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 520.429655][T16782] SELinux: failed to load policy [ 520.458664][ T29] audit: type=1326 audit(2000000250.960:22169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.482529][ T29] audit: type=1326 audit(2000000250.960:22170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.506610][ T29] audit: type=1326 audit(2000000250.960:22171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.530485][ T29] audit: type=1326 audit(2000000250.960:22172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.554146][ T29] audit: type=1326 audit(2000000250.960:22173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.578133][ T29] audit: type=1326 audit(2000000250.960:22174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.601831][ T29] audit: type=1326 audit(2000000250.960:22175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.625486][ T29] audit: type=1326 audit(2000000250.960:22176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.649187][ T29] audit: type=1326 audit(2000000250.960:22177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16792 comm="syz.4.9797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2424acb9 code=0x7ffc0000 [ 520.832803][T16814] netlink: 'syz.5.9802': attribute type 21 has an invalid length. [ 520.840955][T16814] netlink: 'syz.5.9802': attribute type 4 has an invalid length. [ 520.899719][T16818] loop9: detected capacity change from 0 to 764 [ 521.040319][T16841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9806'. [ 521.049291][T16841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9806'. [ 521.094308][T16841] wireguard0: entered promiscuous mode [ 521.099934][T16841] wireguard0: entered allmulticast mode [ 521.284087][T16818] iso9660: Unknown parameter 'overridC۝Am' [ 521.459180][T16868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9811'. [ 521.528874][T16875] loop4: detected capacity change from 0 to 512 [ 521.654578][T16887] EXT4-fs mount: 36 callbacks suppressed [ 521.654670][T16887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.701197][T16887] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 521.760881][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9819'. [ 521.842878][T16920] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.862316][T16920] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.874770][T16920] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11) [ 521.881401][T16920] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 521.888973][T16920] vhci_hcd vhci_hcd.0: Device attached [ 521.904313][T16926] vhci_hcd: connection closed [ 521.904474][ T166] vhci_hcd vhci_hcd.5: stop threads [ 521.914516][ T166] vhci_hcd vhci_hcd.5: release socket [ 521.920044][ T166] vhci_hcd vhci_hcd.5: disconnect device [ 521.950528][T16931] syzkaller0: entered promiscuous mode [ 521.956291][T16931] syzkaller0: entered allmulticast mode [ 522.008927][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.166387][T16964] 9p: Bad value for 'wfdno' [ 522.240356][T16981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.268683][T16981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.314319][T16970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 522.323215][T16970] FAT-fs (loop1): Filesystem has been set read-only [ 522.356948][T16970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 522.403254][T16970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 522.441511][T17048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.457263][T17048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17048 comm=syz.4.9836 [ 522.493592][T17054] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 522.534017][ T8949] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.566268][T17054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 522.585738][T17054] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 522.680113][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.702673][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.867848][T17086] erspan0: entered promiscuous mode [ 522.894282][T17086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9839'. [ 523.139757][T17112] ip6erspan0: entered promiscuous mode [ 523.283042][T17065] netlink: 84 bytes leftover after parsing attributes in process `syz.5.9838'. [ 523.363402][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9846'. [ 523.372531][T17126] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9846'. [ 523.748745][T17147] set_capacity_and_notify: 5 callbacks suppressed [ 523.748758][T17147] loop0: detected capacity change from 0 to 512 [ 523.816481][T17147] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.9850: Parent and EA inode have the same ino 15 [ 523.868493][T17147] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.9850: Parent and EA inode have the same ino 15 [ 523.956382][T17147] EXT4-fs (loop0): 1 orphan inode deleted [ 523.962956][T17147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.148674][T17203] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17203 comm=syz.1.9858 [ 524.209946][T17147] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.9850: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 524.287796][T17218] loop4: detected capacity change from 0 to 512 [ 524.316824][T17218] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.380069][ T1724] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.389523][T17218] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 524.578625][T17248] loop1: detected capacity change from 0 to 1024 [ 524.596790][T17248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.641582][T17248] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.9868: inode #221: comm syz.1.9868: iget: illegal inode # [ 524.712167][T13795] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.735732][T17248] EXT4-fs (loop1): Remounting filesystem read-only [ 524.764817][T17248] EXT4-fs warning (device loop1): ext4_xattr_block_set:2200: inode #19: comm syz.1.9868: dec ref error=-30 [ 524.803874][T17287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=17287 comm=syz.4.9872 [ 524.825616][T17290] loop0: detected capacity change from 0 to 128 [ 524.863224][T17287] netlink: 'syz.4.9872': attribute type 1 has an invalid length. [ 524.871232][T17287] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9872'. [ 524.896120][T17287] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 524.904613][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9872'. [ 524.978976][T32126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.236332][T17356] loop1: detected capacity change from 0 to 8192 [ 525.404837][T17382] loop1: detected capacity change from 0 to 512 [ 525.515937][T17388] loop9: detected capacity change from 0 to 2048 [ 525.559477][T17382] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 525.588246][T17382] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 525.616211][T17382] System zones: 1-12 [ 525.620442][T17382] EXT4-fs (loop1): orphan cleanup on readonly fs [ 525.646611][T17382] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9884: bg 0: block 361: padding at end of block bitmap is not set [ 525.674113][T17399] net_ratelimit: 11 callbacks suppressed [ 525.674132][T17399] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 525.764477][T17382] EXT4-fs (loop1): Remounting filesystem read-only [ 525.771240][T17382] EXT4-fs (loop1): 1 truncate cleaned up [ 525.784767][T17382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 525.875698][T17405] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 525.888937][T17406] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.9884: error -117 reading directory block [ 525.968021][T17406] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.9884: error -117 reading directory block [ 526.073598][T17419] loop5: detected capacity change from 0 to 512 [ 526.097861][T32126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 526.122796][T17419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.142911][T17419] ext4 filesystem being mounted at /228/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.156692][T17419] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9892: corrupted inode contents [ 526.169201][T17419] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.9892: mark_inode_dirty error [ 526.169914][T17428] __nla_validate_parse: 10 callbacks suppressed [ 526.169965][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9893'. [ 526.201099][T17419] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9892: corrupted inode contents [ 526.217783][T17419] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.9892: mark_inode_dirty error [ 526.229642][T17419] __quota_error: 252 callbacks suppressed [ 526.229663][T17419] Quota error (device loop5): write_blk: dquota write failed [ 526.242965][T17419] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 526.253559][T17419] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 526.263568][T17419] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.9892: Failed to acquire dquot type 1 [ 526.286105][T17432] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9892: corrupted inode contents [ 526.303781][ T29] audit: type=1326 audit(2000000256.800:22430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.353150][ T29] audit: type=1326 audit(2000000256.830:22431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.377033][ T29] audit: type=1326 audit(2000000256.830:22432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.400800][ T29] audit: type=1326 audit(2000000256.830:22433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.424487][ T29] audit: type=1326 audit(2000000256.830:22434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.437273][T17432] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.9892: mark_inode_dirty error [ 526.448311][ T29] audit: type=1326 audit(2000000256.830:22435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.448351][ T29] audit: type=1326 audit(2000000256.830:22436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17387 comm="syz.9.9886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f047eacacb9 code=0x7fc00000 [ 526.460017][T17442] netlink: 'syz.1.9895': attribute type 13 has an invalid length. [ 526.508563][T17432] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9892: corrupted inode contents [ 526.563131][T17432] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.9892: mark_inode_dirty error [ 526.575191][T17432] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.9892: Failed to acquire dquot type 1 [ 526.659693][T17442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.670048][T17442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.736030][ T8949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.757295][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9897'. [ 526.775497][ T3624] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.783976][ T3624] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.877851][ T3624] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.886418][ T3624] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.951397][ T3624] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.959951][ T3624] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.976738][ T3624] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.985200][ T3624] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.995690][T17481] loop9: detected capacity change from 0 to 512 [ 527.002390][T17481] EXT4-fs: Ignoring removed i_version option [ 527.045556][T17481] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 527.104511][T17483] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9901'. [ 527.217705][T17535] loop1: detected capacity change from 0 to 512 [ 527.222634][T17501] netlink: 'syz.5.9905': attribute type 1 has an invalid length. [ 527.233454][T17501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9905'. [ 527.251568][T17501] netlink: 'syz.5.9905': attribute type 1 has an invalid length. [ 527.264665][T17535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.277882][T17535] ext4 filesystem being mounted at /559/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.290068][T17535] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.9907: corrupted inode contents [ 527.309678][T17535] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.9907: mark_inode_dirty error [ 527.325315][T17535] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.9907: corrupted inode contents [ 527.337492][T17535] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.9907: mark_inode_dirty error [ 527.351089][T17535] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.9907: Failed to acquire dquot type 1 [ 527.367413][T17535] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.9907: corrupted inode contents [ 527.387857][T17535] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #4: comm syz.1.9907: mark_inode_dirty error [ 527.401770][T17535] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #4: comm syz.1.9907: corrupted inode contents [ 527.415302][T17535] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #4: comm syz.1.9907: mark_inode_dirty error [ 527.426846][T17535] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.9907: Failed to acquire dquot type 1 [ 527.454664][T32126] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.487441][T17569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9911'. [ 527.642989][T17592] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4294967295)! [ 527.654056][T17592] EXT4-fs (loop1): group descriptors corrupted! [ 527.716999][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9914'. [ 527.725967][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9914'. [ 527.949120][T17637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.976305][T17637] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.990042][T17637] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9921: corrupted inode contents [ 528.003269][T17637] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.9921: mark_inode_dirty error [ 528.038405][T17637] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9921: corrupted inode contents [ 528.053205][ T3006] ================================================================== [ 528.061320][ T3006] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 528.068579][ T3006] [ 528.070929][ T3006] read-write to 0xffff88811ac4c480 of 4 bytes by task 10961 on cpu 0: [ 528.077231][T17637] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.9921: mark_inode_dirty error [ 528.079115][ T3006] dont_mount+0x2a/0x40 [ 528.094391][ T3006] vfs_unlink+0x2ae/0x440 [ 528.098741][ T3006] do_unlinkat+0x1e2/0x4b0 [ 528.103211][ T3006] __x64_sys_unlink+0x2e/0x40 [ 528.107917][ T3006] x64_sys_call+0x2f48/0x3000 [ 528.112636][ T3006] do_syscall_64+0xc0/0x2a0 [ 528.117090][T17637] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.9921: Failed to acquire dquot type 1 [ 528.117184][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.117216][ T3006] [ 528.117224][ T3006] read to 0xffff88811ac4c480 of 4 bytes by task 3006 on cpu 1: [ 528.144222][ T3006] step_into_slowpath+0x139/0x4c0 [ 528.149368][ T3006] path_lookupat+0x330/0x500 [ 528.154019][ T3006] filename_lookup+0x190/0x390 [ 528.158880][ T3006] do_readlinkat+0x7d/0x340 [ 528.163412][ T3006] __x64_sys_readlink+0x47/0x60 [ 528.168294][ T3006] x64_sys_call+0x2af1/0x3000 [ 528.173002][ T3006] do_syscall_64+0xc0/0x2a0 [ 528.177617][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.183537][ T3006] [ 528.185881][ T3006] value changed: 0x00300080 -> 0x00004080 [ 528.191611][ T3006] [ 528.193946][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 528.200122][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 528.210999][ T3006] Tainted: [W]=WARN [ 528.214816][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.224977][ T3006] ================================================================== [ 528.239464][T17637] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9921: corrupted inode contents [ 528.263920][T17637] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.9921: mark_inode_dirty error [ 528.275824][T17637] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.9921: corrupted inode contents [ 528.292810][T17637] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.9921: mark_inode_dirty error [ 528.304931][T17637] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.9921: Failed to acquire dquot type 1 [ 528.351083][ T8949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.018192][ T564] bridge0: port 3(batadv0) entered disabled state [ 531.025741][ T564] bridge_slave_0: left allmulticast mode [ 531.031463][ T564] bridge_slave_0: left promiscuous mode [ 531.037173][ T564] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.098470][ T564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.109318][ T564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.119633][ T564] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 531.129002][ T564] bond0 (unregistering): Released all slaves [ 531.136923][ T564] bond1 (unregistering): Released all slaves [ 531.187248][ T564] tipc: Left network mode [ 531.194918][ T564] hsr_slave_0: left promiscuous mode [ 531.200593][ T564] hsr_slave_1: left promiscuous mode [ 531.207329][ T564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.246634][ T564] team0 (unregistering): Port device team_slave_1 removed [ 531.257130][ T564] team0 (unregistering): Port device team_slave_0 removed [ 531.608394][ T564] IPVS: stop unused estimator thread 0...